Extreme Networks ExtremeWare XOS 11.1, Руководство пользователя

Страница: 261 / 496

CLEARFlow Rule Examples
ExtremeWare XOS 11.1 Concepts Guide
261
CLI
This action executes a CLI command. There is no authentication or checking the validity of each
command. If a command fails, the CLI will log a message in the EMS log.
To execute a CLI command, use the following syntax:
cli <cliCommand>
where
<cliCommand>
is a quoted string.
Keyword Substitution
To make the SNMP trap, syslog, and CLI actions more flexible, keyword substitutions are supported in
the syslog and SNMP trap message strings, as well as in the CLI command strings.
Table 41 lists the
keywords and their substitutions.
If a keyword is not supported, or a counter name is not found, a string of
“unknownKeyword[$keyword]” will be substituted
For the $vlanName and $port keyword, the keyword
all
will be substituted for those rules in the
wildcard ACL Some CLI commands do not support the
all
keyword, so caution must be used with CLI
commands that use this feature.
A maximum of 10 counter substitutions can be used per rule.
CLEARFlow Rule Examples
In the examples that follow, there are one to two ACL rule entries followed by a CLEARFlow rule entry.
The examples illustrate the four CLEARFlow rule types: count, delta, ratio, and delta-ratio.
Count Rule Type Example
In the following example, every 10 seconds the CLEARFlow agent will request the counter1 statistics
from the hardware. After it receives the counter value, it will evaluate the CLEARFlow rule. If the value
of counter1 is greater than 1000000 packets, the CLEARFlow agent will send a trap message to the
SNMP master, and change the ACL
acl_rule1 to block traffic ( acl_rule1 is modified to a deny rule).
Table 41: Keyword Substitutions
Keyword Substitution
$policyName Replace with the policy name.
$ruleName Replace with the CLEARFlow rule name.
$<counterName> Replace with counter value for the indicated counter name.
$ruleValue Replace with the current expression value.
$ruleThreshold Replace with the expression threshold value.
$ruleInterval Replace with the rule sampling/evaluation interval.
$vlanName Replace with the interface VLAN name.
$port Replace with the interface port number.