Extreme Networks Policy Manager Guía de usuario

Extreme Networks, Inc.3585 Monroe StreetSanta Clara, California 95051(888) 257-3000(408) 579-2800http://www.extremenetworks.comExtreme Networks Policy

OverviewExtreme Networks Policy Manager (EPM) 1.2 User Guide10About This ManualThis manual consists of six chapters, two appendixes and an index, arra

Extreme Networks Policy Manager (EPM) 1.2 User Guide112 Installing The Extreme Networks Policy ManagerIntroduction This chapter describes the followin

Installing The Extreme Networks Policy ManagerExtreme Networks Policy Manager (EPM) 1.2 User Guide12● The switch must be running ExtremeXOS™ 11.4 or l

EPM InstallationExtreme Networks Policy Manager (EPM) 1.2 User Guide13EPM InstallationThe EPM is installed from a network download and utilizes a user

Installing The Extreme Networks Policy ManagerExtreme Networks Policy Manager (EPM) 1.2 User Guide14The Wizard then extracts and installs the files, a

Extreme Networks Policy Manager (EPM) 1.2 User Guide153 Viewing Policies and RulesIntroduction This chapter provides a brief description of the differ

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide16The first time the EPM program is launched, the following message is d

Opening the EPMExtreme Networks Policy Manager (EPM) 1.2 User Guide172 After reading, Close the box. The following IP Address Notice is displayed. Thi

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide18Configuring the EPM for use on a SwitchBefore attempting to open a pol

Configuring the EPM for use on a SwitchExtreme Networks Policy Manager (EPM) 1.2 User Guide19● The file search directory is pointing towards the polic

Extreme Networks Policy Manager (EPM) 2AccessAdapt, Alpine, BlackDiamond, EPICenter, ESRP, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Ever

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide20Description of the Windows and MenusThe EPM DesktopThe program opens t

Description of the Windows and MenusExtreme Networks Policy Manager (EPM) 1.2 User Guide21Menu BarThe Menu Bar consists of six standard menus—File, Vi

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide22In the Rule Editing and Viewing Panel and the Rule Navigator window, a

Description of the Windows and MenusExtreme Networks Policy Manager (EPM) 1.2 User Guide23ToolbarThe Toolbar contains icons for the most common menu o

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide24● The Actions tab displays the actions log messages. All user action

Description of the Windows and MenusExtreme Networks Policy Manager (EPM) 1.2 User Guide25● The Rule Activity tab displays activity data for a polic

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide26Rule Editor WindowWhen a policy is opened from either the local files

Description of the Windows and MenusExtreme Networks Policy Manager (EPM) 1.2 User Guide27Tree Structure Panel The Tree Structure Panel displays the A

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide28Another feature of this panel is a dropdown menu that is displayed whe

Description of the Windows and MenusExtreme Networks Policy Manager (EPM) 1.2 User Guide29Rule Navigator WindowFrom the Rule Editor window, clicking t

3Extreme Networks Policy Manager (EPM) 1.2 User Guide3Table of ContentsPreface...

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide30Between the Access Control List rules panel and the CLEAR-Flow Rules p

Opening an Existing PolicyExtreme Networks Policy Manager (EPM) 1.2 User Guide31Opening a Policy File from a Switch1 Ensure that your TFTP server is o

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide32When there is no problem with the connection, a Policy Selection box o

Searching for Rules in a PolicyExtreme Networks Policy Manager (EPM) 1.2 User Guide33Searching for Rules in a Policy The EPM includes the functionalit

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide34Search by ParameterTo search for one or more rules that have specified

Searching for Rules in a PolicyExtreme Networks Policy Manager (EPM) 1.2 User Guide358 Continue modifying the search by adding More or Fewer criteria.

Viewing Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide36Working Among the Windows and PanelsWhen a particular policy or rule i

Extreme Networks Policy Manager (EPM) 1.2 User Guide374 Creating Policies and RulesIntroductionThe Extreme Networks Policy Manager (EPM) is used by fi

Creating Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide38b From the Class Name dropdown menu, choose an existing class or type

Saving a PolicyExtreme Networks Policy Manager (EPM) 1.2 User Guide39Use the following procedure to add a new rule in a given position in the listing.

Table of ContentsExtreme Networks Policy Manager (EPM) 1.2 User Guide4Chapter 4: Creating Policies and Rules...

Creating Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide40c Select an existing policy name from the dropdown menu. The name is

Importing and Exporting Rules into a PolicyExtreme Networks Policy Manager (EPM) 1.2 User Guide41Importing and Exporting Rules into a PolicyThe same r

Creating Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide425 Click Yes or No. The following Merge Results box is displayed. 6 Cl

Extreme Networks Policy Manager (EPM) 1.2 User Guide435 Modifying Policies and RulesIntroduction The Extreme Networks Policy Manager (EPM) provides th

Modifying Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide44Marking RulesThe rules in the currently open policy can be marked ei

Modifying RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide452 From the menu, choose Cut. The rule is deleted. Use the following procedure to

Modifying Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide46Changing Rule ParametersRule parameters can be changed either during

Modifying RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide47To assist in the selection of arguments for count, clicking the icon as shown abo

Modifying Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide48Managing Global and Policy VariablesGlobal and policy variables can

Organizing RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide49Organizing RulesRules can be organized to function within a policy in two ways.

Table of ContentsExtreme Networks Policy Manager (EPM) 1.2 User Guide5Extreme Networks Policy Manager (EPM) 1.2 User Guide5Match Condition Selection P

Modifying Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide50Managing Policy Activity After a policy is saved to the switch. it d

Managing Policy ActivityExtreme Networks Policy Manager (EPM) 1.2 User Guide514 Continue the process, selecting additional ports (egress or ingress) a

Modifying Policies and RulesExtreme Networks Policy Manager (EPM) 1.2 User Guide52Disabling a RuleRules are normally enabled with the policy. However,

Extreme Networks Policy Manager (EPM) 1.2 User Guide536 Running Extreme Networks Policy Manager ExamplesIntroductionThis chapter describes some of the

Running Extreme Networks Policy Manager ExamplesExtreme Networks Policy Manager (EPM) 1.2 User Guide54Save to a Switch 1 Before saving a policy to a s

Example 1—Example_TCP_Threshold.polExtreme Networks Policy Manager (EPM) 1.2 User Guide555 When the policy is saved, several changes occur:● A notice

Running Extreme Networks Policy Manager ExamplesExtreme Networks Policy Manager (EPM) 1.2 User Guide563 Transfer port 16 from the Available list to th

Example 1—Example_TCP_Threshold.polExtreme Networks Policy Manager (EPM) 1.2 User Guide578 Click the Show All command button again to show only the cu

Running Extreme Networks Policy Manager ExamplesExtreme Networks Policy Manager (EPM) 1.2 User Guide585 Replace "100" with "200" t

Example 2—Example_TCP_UDP_Balance.polExtreme Networks Policy Manager (EPM) 1.2 User Guide595 Click the Rules by class tab to see the relationship betw

Table of ContentsExtreme Networks Policy Manager (EPM) 1.2 User Guide6

Running Extreme Networks Policy Manager ExamplesExtreme Networks Policy Manager (EPM) 1.2 User Guide60In this example, the user is looking for a ACL r

Example 2—Example_TCP_UDP_Balance.polExtreme Networks Policy Manager (EPM) 1.2 User Guide61Incorporate into a PolicyWhen the single rule that was foun

Running Extreme Networks Policy Manager ExamplesExtreme Networks Policy Manager (EPM) 1.2 User Guide62

Extreme Networks Policy Manager (EPM) 1.2 User Guide 63A Help MessagesIntroductionThis appendix includes Help messages and other reference material t

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 64sys_IcmplnErrors counterreferencesys_IcmplnDestUnreachs counterreferencesys_Icmpln

Synonyms used for Rule ConstantsExtreme Networks Policy Manager (EPM) 1.2 User Guide 65Synonyms used for Rule Constants Name Description Value Typeqp1

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 66bgp Service Ports 179 numberrange-portbiff Service Ports 512 numberrange-portbootp

Synonyms used for Rule ConstantsExtreme Networks Policy Manager (EPM) 1.2 User Guide 67smtp Service Ports 25 numberrange-portsnmp Service Ports 161 nu

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 68Type Selection PanelThis panel allows the user to select the rule type. You may ch

Match Condition Selection PanelExtreme Networks Policy Manager (EPM) 1.2 User Guide 69Match Condition Selection PanelThis panel allows you to select f

Extreme Networks Policy Manager (EPM) 1.2 User Guide7PrefaceThis preface introduces this user guide, describes guide conventions, and lists other usef

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 70Action Modifier Selection Panel This panel allows you to select from a list of act

Action Modifier Selection PanelExtreme Networks Policy Manager (EPM) 1.2 User Guide 71sys_IpForwDatagrams - The number of input IP packets for which t

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 72sys_IcmpInDestUnreachs - The number of ICMP Destination Unreachable messages recei

Action Modifier Selection PanelExtreme Networks Policy Manager (EPM) 1.2 User Guide 73sys_IcmpInBadCode - The number of incoming ICMP packets with a b

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 74svid:Modifies the S-VID value. In the field, the value must be a positive integer

True Action Selection PanelExtreme Networks Policy Manager (EPM) 1.2 User Guide 75True Action Selection PanelThis panel allows you to select from a li

Help MessagesExtreme Networks Policy Manager (EPM) 1.2 User Guide 76count A CLEAR-Flow count expression compares a counter with the threshold value. B

Extreme Networks Policy Manager (EPM) 1.2 User Guide77B TroubleshootingIntroductionThis appendix includes suggestions for dealing with problems that m

TroubleshootingExtreme Networks Policy Manager (EPM) 1.2 User Guide78Local Client Runtime Problems When the EPM becomes unresponsive or does not launc

Extreme Networks Policy Manager (EPM) 1.2 User Guide79IndexSymbols#, definition, 27AAccess Control List (ACL) Rules panel, 29Access Control Lists see

PrefaceExtreme Networks Policy Manager (EPM) 1.2 User Guide8.Related PublicationsOther manuals that you will find useful are:● ExtremeXOS Concepts Gui

IndexExtreme Networks Policy Manager (EPM) 1.2 User Guide80Nname, definition, 27NAT IP address, setting, 18Oopening a policy, 30opening the EPM, 15org

IndexExtreme Networks Policy Manager (EPM) 1.2 User Guide81Synonyms used for Rule Constantsreference list, 65TTCNT, definition, 27text conventions, 7T

IndexExtreme Networks Policy Manager (EPM) 1.2 User Guide82

Extreme Networks Policy Manager (EPM) 1.2 User Guide91 OverviewIntroduction This chapter describes the following sections: ● Description of the Extrem