Extreme Networks EPICenter 6.0, Справочное руководство

Страница: 497 / 580

Edit Policy Access Domain/Policy Scope Window
EPICenter Reference Guide
497
For an IP or Security policy: There are two additional ways to create endpoints for an IP or Security
policy:
●
Select Add IP Addr to specify an IP address directly. (This button will not appear if you
are creating User-side Security, VLAN or Source Port endpoints.) A small pop-up window appears,
as shown in
Figure 260 .
Figure 260: Add an IP address as an endpoint for an IP policy
a Enter an IP address and subnet mask into the fields provided.
The subnet mask is used to set parts of the IP address to zero. A subnet mask of 32 indicates a
host (all 32 bits of the address are used). A subnet mask of 24 is typically used to indicate a
subnet address, and sets the last (right-most) address component (the least significant eight bits)
to zero, leaving the other 24 bits as is. You can enter any number of bits as the subnet mask.
b Click OK to add it to the Current Policy Endpoints list.
●
Select Add Wildcard to add the endpoint specification “Any” to the Current Policy
Endpoints list. This indicates that any IP address will be accepted as a match for this policy
endpoint. (This button does not appear if you are creating User-side Security, VLAN or Source Port
endpoints.)
NOTE
You cannot have both the wildcard endpoint specification and individual endpoint specifications in the Current
Policy Endpoints list, as individual endpoints are redundant with the “Any” specification. If you specify Add
Wildcard when there are other endpoints in the list, the Policy Manager will display a warning, and will remove
the other endpoints if you elect to continue.
Further, if you attempt to add an individual endpoint specification when the Current Policy Endpoint
specification is “Any,” the Policy Manager will display a warning, and remove the wildcard specification if you
elect to continue.
●
When you have finished adding resources to the Current Policy Endpoints list, click the OK button
at the bottom of the window. This closes the Edit window and displays the contents of the Current
Policy Endpoints list in the appropriate resource list in the Policy Traffic area.
Click Cancel to close the Edit window and abandon any changes you’ve made to the Current Policy
Endpoints list.
Edit Policy Access Domain/Policy Scope Window
The Edit Policy Access Domain (shown in Figure 258 ) and Edit Policy Scope windows (shown in
Figure 261 ), are very similar to the Edit Policy Endpoints Window .