Device Support Tab (Role)
Use the role Device Support tab to view the classification rule information that would be written to your device(s), should you decide to enforce the selected role. The information is displayed according to device type, and is particularly useful if you have devices that only support certain aspects of policy management.
To access this tab, select a role in the left panel Roles tab, then select the Device Support tab in the right panel.
Click the graphic for more information.
Devices Area
This section displays folders for different device types. Expand the folders to see your network devices and device groups organized according to device type. If the domain does not include any devices of a specific device type, that device type folder is displayed in gray. For those device types that are included in the domain, the device type folders are displayed in black when the rule(s) are fully supported, and red when they are not fully supported. In addition, the icon alerts you that there are certain rules that will not be written to this device type if you enforce, that you might want to investigate.
Select a specific device type to display the classification rules that will and/or will not be written to those devices when you enforce the selected role.
Classification Rules Area
Based on the device type selected, this section displays the classifications rules that will be included or excluded when you enforce the selected role.
TIP: | Double-clicking a rule in this table opens the rule's General tab, where you can easily edit a
rule's parameters. This is particularly useful for editing unsupported rules.
|
---|
- Excluded
- Lists any unsupported classification rules. These rules will not be included when you enforce the selected role.
-
NOTE: Disabled rules are always listed as Excluded.
- Included
- Lists any supported classification rules. These rules will be included when you enforce the selected role.
-
NOTE: On S-Series and N-Series Platinum devices, range classification rules are achieved through applying subnet masks to values. As such, in order to achieve a user-specified range, the device may need multiple rules with subnets applied to encompass that range. So, although the user created only one rule with a range, this list may show multiple instances of that rule with the name of the rule followed by the portion of the over-all range it applies to.
Excluded Table/Included Table
TIP: | Double-clicking a rule in this table opens the rule's General tab, where you can easily edit a
rule's parameters. This is particularly useful for editing unsupported rules.
|
---|
- Precedence
- The rule's precedence, with 1 being the highest precedence and 15 being the lowest. Rule precedence is based on classification type. When a role has multiple classification rules assigned to a port, rule precedence must be determined. For more information on precedence, see Classification Rules Precedence. This column is only displayed in the Included table.
- Traffic Description Type
- Displays the rule's classification type. See Classification Types and their Parameters for information.
- Traffic Description Value
- Displays the values/parameters selected for the rule's classification type. See Classification Types and their Parameters for parameter information.
- Precedence Help Button
- Opens a Help topic on Classification Rules Precedence.
Unmatched Frames
This section displays the role's default Class of Service (CoS) and Access Control that will be applied to traffic received on the device that does not match any of the classification rules. These default actions can be viewed and edited in the role's General tab.
For information on related concepts:
For information on related windows: