Setting Up Traffic Policies
  • 31 Aug 2022
  • 4 Minutes to read
  • Contributors
  • Dark
    Light
  • PDF

Setting Up Traffic Policies

  • Dark
    Light
  • PDF

Article Summary

Viewing a Summary of the Policy Configurations

Use this page to view how the Skylight sensor: control's traffic policies have been configured.


To view a summary of the policy configurations

  1. Access the page Traffic ▶ Policies.
    A listing of all policies associated with this instance of the Skylight sensor: control is displayed.

  2. (Optional) To limit the view to only specific policies, enter a value on which to filter, then click Search. You can filter by the Device, Name, State, Action, Filter Name, Type or Port.

  3. (Optional) Click the Name of a policy to view its configuration details.

When a remote device is selected in the right corner, the policies are sorted in priority order. For more information on specific parameters, refer to the following table.

Policy (Traffic ▶ Policies)

ParameterDescription
DeviceName of the device.
NameName of the traffic policy.
StateThe policy may be enabled or disabled. Disabled policies are ignored when the rules are applied to incoming data.
ActionAction that the policy applies to data that it matches.
ClassificationName of the VCA's classification.
VCAName of the VCA assigned to the policy.
Filter NameName of the filter assigned to the policy.
TypeThe filter type (L2, IPv6, or IPv4) used to classify traffic.
PortName of the port of the traffic policies.
PriorityRules are prioritized using the Priority field, with the rule configured with the highest priority applied first.

Note: Highest Priority is 1, lowest is 255. When 0 is used, a priority value is assigned by the system that is lower than any existing policies. The priority must be unique among all policies for the same device.

Assigning VCA to a Traffic Policy

Once you have selected the Use VCA radio button and set up the VCA, you are ready to assign it to a traffic policy so they can become a service.

Assigning Filters to a Traffic Policy

Once you have selected the Use Filter radio button set up the filters, you are ready to assign it to a traffic policy so they can become a service.
image.png


To set up a traffic policy

  1. Access the page Traffic ▶ Policies.
    The Traffic Policies Configuration page opens.

  2. Click a policy configuration.
    The Selected Policy Configuration page opens.

  3. Select the VCA or filter to classify traffic and the required action, then click Apply.

For more information on specific parameters, refer to the following tables.

Policy Configuration (Traffic ▶ Policies)

ParameterDescription
Enable PolicySelect this box to activate the policy.
NameName of the Policy Configuration
PriorityRules are prioritized using the Priority field, with the rule configured with the highest priority applied first.

Use VCA

ParameterDescription
VCA NameSelect VCA from drop-down menu
DirectionAtoZ or ZtoA
ClassificationSelect classification from drop-down menu

Use Filter

ParameterDescription
PortName of the port of the traffic policies.
Filter TypeThe filter type (L2 filter, IPv4 filter, IPv6 filter) used to classify traffic.
FilterThe name of the filter. You must select a filter name from the dropdown list.

Tip: The catch-all filter enables you to monitor all traffic on a port.

ActionMake a selection from the drop-down list to select the action to apply to traffic that matches the filter's criteria:
  • Drop Traffic: The traffic matching the filter is dropped.
  • Permit Traffic: The traffic matching the filter is counted in the statistics then forwarded.

EVC Mapping

ParameterDescription
EncapsulationYou can only select an Encapsulation method when the Filter Action is set to Permit Traffic. Select one of the following encapsulation methods:
  • None: This is the default value. Mapping options are disabled while this is selected.
  • Push: Add a VLAN tag
  • Pop: Remove the outer VLAN tag, if any
See below for more information regarding each of these methods.

Note: The details of this option will vary, depending on the available PCP actions.

EthertypeThe Ethertype of the VLANs to be added (if any).

Possible values:

  • C-VLAN: 0x8100
  • S-VLAN: 0x88A8
  • T-VLAN: 0x9100
VLAN IDVLAN ID of the VLANs to be added (if any).

Possible values range between 0 and 4095.

CFI/DEI

PCP

If Push is selected as the EVC encapsulation option, indicate the CFI/DEI and/or the PCP.
  • CFI/DEI: Acceptable values are 0 or 1
  • PCP: Acceptable values range between 0 and 7

EVC Encapsulation Options

Use the encapsulation options to perform EVC mapping actions.

None:
Leave this default option selected when no VLAN ID manipulation is required for the selected traffic filter.

Push:
Use this option to push (add) a VLAN tag onto an untagged frame or push an outer tag (Q-in-Q) onto a tagged frame.

Pop:
Use this option to remove the outer VLAN tag.

© 2024 Accedian Networks Inc. All rights reserved. Accedian®, Accedian Networks®,  the Accedian logo™, Skylight™, Skylight Interceptor™ and per-packet intel™, are trademarks or registered trademarks of Accedian Networks Inc. To view a list of Accedian trademarks visit: http://accedian.com/legal/trademarks/. 


Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.