Reset Search
 

 

Article

What Are the OnePolicy Rule Precedences?

« Go Back

Information

 
TitleWhat Are the OnePolicy Rule Precedences?
Question
What Are the OnePolicy Rule Precedences for EXOS Switches?
Environment
  • Summit
  • X450-G2
  • X460-G2
  • X670-G2
  • X770
  • EXOS version 16.1
  • NetSight Policy Manager
  • Extreme Identifi Wireless controller
  • XMC
  • Extreme Management Center
Answer
Policy rule precedences are fixed (i.e. not configurable) in ExtremeXOS 16.1 and are as follows:
 
Classification RulePrecedence
MAC Address Source1
MAC Address Destination2
Application3
IPX Network Source4
IPX Network Destination5
IPX Socket Source6
IPX Socket Destination7
IPX Class of Service8
IPX Packet Type9
IPv6 Address Source10
IPv6 Address Destination11
IPv6 Flow Label12
IP Address Source13
IP Address Destination14
IP Fragment15
IP UDP Port Source16
IP UDP Port Destination17
IP TCP Port Source18
IP TCP Port Destination19
ICMP20
ICMPv621
IP Type of Service22
IP Protocol Type23
Ethertype24
DSAP/SSAP25
VLAN ID26
Priority27
Note that for rules of the same precedence level, source has a higher precedence.  The same applies to more granular rules; the more granularity, the higher the precedence, e.g. an IP address Destination socket rule (1.1.1.1:80/48) has a higher precedence than an IP address rule (1.1.1.1/32).  An IP Destination rule has a 32 bit mask.  An IP Socket Destination has a 48 bit mask making it more granular so will take precedence over the simple IP Destination rule.
Additional notes
 

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255