The menu bar on the Main Window provides access to Policy Manager functions. Some sub-items on the menu are standard, and some depend on what left-panel item and right-panel tab you have selected. When you have something specific selected in the left or right panel (e.g., a device, service, VLAN), it may be more convenient to use the right-click menu for the selection, instead of the menu bar. For information on menu options available only from right-click menus, see Right-click Menu Options.
Click the graphic for more information.
File Menu
The File Menu provides file management options for Policy Manager.
- File > Lock Policy Domain
- Lets you lock the current Policy Domain for editing purposes. Policy Manager automatically locks the domain when you begin to edit the domain configuration. Other Policy Manager clients are notified that the domain is locked and they will not be able to save their own domain changes until the lock is released. For more information, see Controlling Client Interactions with Locks. This menu option serves the same function as the Lock button on the toolbar.
- File > Save Policy Domain
- Lets you save any changes you have made to the current Policy Domain. Only users with the capability to Enforce will be able to save the domain. This menu option serves the same function as the Save button on the toolbar.
- File > Read Policy Domain
- Lets you update the current Policy Domain with the latest saved domain data. This menu option serves the same function as the Read button on the toolbar.
- File > Export to File
- Lets you save policy data from the current Policy Domain to a .pmd file or .xml file with the file name and location of your choosing. This file stores all information about roles, services, and rules configured in the current Policy Domain. This allows you to save a Domain configuration prior to making changes so that you can restore the original Domain configuration if required (via File > Import> Import From File).
- File > Import > Import From Domain
- Opens the Import from Domain window where you can import policy configuration data from one Policy Domain into another domain. (This menu option is not available if only one domain exists, as there are no other domains from which to import data.)
- File > Import > Import From File
- Enables you to import policy data from a .pmd file into the current Policy Domain. Be aware that the import overwrites any existing data in the Policy Domain. Any devices in the .pmd file must already exist in the Console database or they won't be imported.
- File > Import > Policy Configuration From Device
- Enables you to import policy configurations (roles and rules) from a selected device or devices into your Policy Domain.
- File > Enforce Role Set
- Writes the role and/or any changes you have made to it (rules, services) to all the devices in your current domain. You have a chance to review the effects of enforcing on the Enforce Preview window, if it is enabled. This menu option serves the same function as the Enforce (Global) button on the toolbar. See Enforcingfor more information.
- File > Enforce Preview
- Opens the Enforce Preview window, where you can view the effects of enforcing prior to the actual enforcement.
- File > Verify Role Set
- Compares the roles in your current domain to the roles currently enforced on all the devices in the current domain. This is useful for ensuring that the roles in your domain have been enforced, or, if you use more than one domain, ensuring that the roles in the domain you are currently using matches what is on the devices. This menu option serves the same function as the Verify (Global) button on the toolbar. See Verifying for more information.
- File > Database > Initialize Database Components
- Provides a way for you to initialize only the Policy Manager components in the NetSight Database.
- File > Delete
- Deletes the current selection in the left panel. This menu option serves the same function as the Delete button on the toolbar.
- File > Print
- Opens a platform-dependent print setup window for printing the contents of the currently displayed selection in the right panel in text format. This menu option serves the same function as the Print button on the toolbar.
- File > Exit
- Exits the Policy Manager application. If there is unsaved or unenforced data, you will be asked if you wish to update the database and/or enforce before exiting. This menu option serves the same function as the Exit button on the toolbar.
Edit Menu
The Edit Menu options change depending on what is currently displayed in the left and right panels.
- Edit > Copy
- Copies an item selected in the left panel or right panel. This menu option serves the same function as the Copy button on the toolbar.
- Edit > Paste
- Pastes what has been copied into the specified location. This menu option serves the same function as the Paste button on the toolbar.
- Edit > Add
- Adds or applies what has been copied to the currently selected item. This menu option serves the same function as the Add button on the toolbar.
- Edit > Clear Disabled Ports (Rule Hits)
- Clears any ports that have been disabled due to a "rule hit" and re-enables them. For more information, see the Rule Usage tab.
- Edit > Rename
- Lets you edit the name of the currently selected item. Some of the elements that come pre-packaged with Policy Manager cannot be renamed (e.g., Pre-Defined Port Groups).
- Edit > Pre-Defined Well-Known IDs
- Opens the Pre-Defined Well-Known IDs window, where you can add to the pre-defined list of well-known identifiers (IDs) used when creating Policy Manager rules.
- Edit > Access Control Configuration
- Opens the Access Control Configuration window where you can configure parameters for the VLANs defined in your network. You can also configure Policy VLAN Islands if you select the Policy VLAN Islands Enabled option in the Edit menu.
- Edit > Class of Service Configuration
- Opens the Class of Service Configuration window where you can configure the Classes of Service defined in your network.
- Edit > Network Resources Configuration
- Opens the Network Resource Configuration window where you can configure the network resources and network resource topologies for your network.
- Edit > GVRP > Ignore GVRP
- To ignore GVRP status on the devices in the current domain, select this menu option and enforce. This means that Policy Manager will ignore the GVRP configuration on a device during an Enforce operation, allowing you to configure some network devices with GVRP enabled and others with GVRP disabled (using MIB Tools or local management), according to their configuration requirements. Be aware that for devices with GVRP set to disabled, ignoring GVRP configuration during an Enforce may affect connectivity on ports with VLANs that rely on Dynamic Egress.
- Edit > GVRP > Enable GVRP
- To enable GVRP on the devices in the current domain, select this menu option and enforce. If the current domain configuration contains rules that use VLAN containment, Dynamic Egress and GVRP must be enabled on the devices in the domain, or the VLANs must be properly pre-configured on the devices outside of Policy Manager.
- Edit > GVRP > Disable GVRP
- If you do not want GVRP enabled on the devices in the current domain, select this menu option and enforce. Be aware that disabling GVRP may affect connectivity through ports with VLANs that rely on Dynamic Egress.
- Edit > Passive Domain Mode
- Check this box to enable Passive Domain Mode for the current domain.
- Edit > Policy VLAN Islands Enabled
- Check this box to enable Policy VLAN Islands for the current domain.
- Edit > Port Level Role Mappings Enabled
- Check this box to enable any port-level Tagged Packet VLAN to role mappings or port-level MAC to role mappings that have been configured and enforced for the current domain. If the box is not checked, all port-level mappings are ignored.
- Edit > Do Not Use Global Services
- Check this box to hide the display of Global Services in the left-panel Services tab for this domain. If you use Global Services in some domains but not in others, this option allows you to hide global services in the domains where they are not used so that they won't be inadvertently used or modified.
- Edit > Delete
- Deletes the current selection in the left panel. This menu option serves the same function as the Delete button on the toolbar.
View Menu
Lets you make changes to the appearance of the Policy Manager main window and the information contained in the right panel. The View Menu options depend on what is currently selected in the left panel.
- View > Status Bar
- Lets you hide or display the Status Bar by selecting or deselecting the check box.
- View > Sort
- Opens the Sort window, which lets you sort the information in the right panel in ascending or descending order by column. For instructions, see Sorting.
- View > Filter
- Opens the Filter window, which allows you to select specific information to display in the right panel. For instructions, see Filtering.
- View > Refresh
- Updates the contents of the right panel. This can be useful for rereading device information after downloading new firmware or for refreshing port authentication information. This menu option serves the same function as the Refresh button on the toolbar.
- View > Policy Classification Rules
- Opens the Policy Classification Rules window, where you can view all of the Policy Manager rules that exist in the currently active domain, along with information about each rule.
- View > CoS Usage
- Opens the Classes of Service Usage window, where you can view information about current class of service usage on a port.
- View > Event Log
- Opens the Event Log window, where you can view error and informational messages about Policy Manager system operation. This menu option serves the same function as the Event Log button on the toolbar.
- View > Policy Rule Hit
- Policy Rule Hit Reporting provides a historical look at rule usage over time for domains. When rule accounting is enabled on a device, the Policy Rule Hit data is collected through syslog messages sent from the device to the NetSight server and stored in the NetSight database. This information is displayed in the various Policy Rule Hit Reports accessed from this menu option.
- View > Domain Tab Configuration
- Opens the Domain Tab Configuration window where you can override the default tab configuration and specify a custom tab configuration for the current domain that is open.
Tools Menu
Lets you perform administrative tasks on roles, services, devices, and VLANs. The Tools Menu options vary depending on what is currently selected in the left panel or right panel. The options are listed alphabetically, so their placement on the actual menu may differ from the listing here.
- Tools > Add/Remove Ports
- Opens the Add/Remove Ports window, where you can add and remove ports to and from role-based rate limit port groups and transmit queue port groups.
- Tools > Add to Role(s)
- With a service or service group selected, opens the Add to Role window where you can select the roles to which you want to add the services.
- Tools > Assign Devices to Domain
- Opens the Assign Devices to Domain window where you can assign devices that are in the NetSight database to the current Policy Domain.
- Tools > Authorization/Device Access
- Opens the Authorization/Device Access window where you can define users and groups and configure their access to features available in NetSight applications.
- Tools > Classification Rule Wizard
- Starts the Rule Wizard, a series of windows that leads you through all the steps required to create a new traffic classification rule. For instructions, see Using the Rule Wizard.
- Tools > Clear Frozen
- With a device selected, unfreezes all the ports on the selected device. With one or more ports selected, unfreezes the port(s). See How to Freeze/Unfreeze a Port for more information.
- Tools > Create Classification Rule
- Creates a "New Rule" item in the left panel's Services tab, which you can then change to the desired rule name. Use this option if you want to create a traffic classification rule without using the Rule Wizard. For instructions, see Using the Rule Tabs.
- Tools > Create Class of Service
- Opens the Create Class of Service window, where you can define a new class of service. See How to Create a Class of Service for more information.
- Tools > Create Policy VLAN Island
- Expands the Policy VLAN Islands folder in the left-panel VLANs tab, and creates a "New Island" item, which you can then change to the desired VLAN island name. At the same time, the right panel displays the Details View for the new VLAN island. While you can use this option to create an VLAN island, it is recommended you use the Policy VLAN Islands Configuration Wizard to lead you through the creation and configuration of VLAN islands.
- Tools > Create Port Group
- Expands the User-Defined Port Groups folder in the left panel's Port Groups tab, and creates a "New Port Group" item, which you can then change to the desired port group name. For instructions, see How to Create a Port Group.
- Tools > Create Role
- Creates a "New Role" item in the left panel's Role tab, which you can then change to the desired role name. Use this function when you want to create a role without using the Role Wizard. For instructions, see Using the Role Tabs.
- Tools > Create Service
- Creates a "New Service" item in the left panel's Services tab, which you can then change to the desired service name. Use this option if you want to create a service without using the Service Wizard. For instructions, see Using the Service Tabs.
- Tools > Create Service Group
- Expands the Service Groups folder in the left panel's Services tab, and creates a "New Service Group" item, which you can then change to the desired service group name. For instructions, see Creating a Service Group.
- Tools > Create VLAN
- Opens the Create VLAN window. For instructions, see How to Create a VLAN.
- Tools > Device Configuration Wizard
- Starts the Device Configuration Wizard, a series of windows that lets you define an authentication configuration and a RADIUS configuration, then apply it to the devices of your choosing. For instructions, see Using the Device Configuration Wizard.
- Tools > Disable Rule(s)
- This menu option disables a single-selected rule, multi-selected rules in the right panel, or all the rules for a selected service (Manual services only).
- Tools > Enable Rule(s)
- This menu option enables a single-selected rule, multi-selected rules in the right panel, or all the rules for a selected service (Manual services only).
- Tools > Export Service(s) to File
- Lets you save one or more service or service groups to a services.pmd file (Policy Manager Database file).
- Tools > MIB Tools
- Opens MIB Tools that allows you to navigate the supported MIBs, examine MIB objects and perform SNMP sets to change their value.
- Tools > Move to Global Services
- Lets you move one or more local services to the Global Service folder.
- Tools > Move to Local Services
- Lets you move one or more global services to the Local Service folder.
- Tools > Options
- Opens the Options window where you can set suite-wide options and Policy Manager options.
- Tools > Policy VLAN Islands Configuration Wizard
- Starts the Policy VLAN Islands Configuration Wizard, a series of windows that helps you create and configure Policy VLAN Islands, as well as select the devices that will comprise each island.
- Tools > Port Configuration Wizard
- Starts the Port Configuration Wizard, a series of windows that leads you through all the steps required to configure a port, including setting the authentication status, login settings, and default role. For instructions, see Using the Port Configuration Wizard.
- Tools > Properties
- Opens the Port Properties window where you can view general information about the selected port, and also view and change various port configuration settings.
- Tools > Reload VLAN
- Rereads the VLAN settings on your devices and refreshes the list of VLANs in the left-panel VLANs tab.
- Tools > Remove Device(s) from Group
- Removes the device currently selected in the left-panel Network Elements tab from the user-defined device group.
- Tools > Remove Port(s) from Group
- Removes the port currently selected in the left-panel Port Groups tab from the user-defined port group.
- Tools > Remove Service(s) from Group
- Removes the services currently selected in the left-panel Services tab from the service group.
- Tools > Role Wizard
- Starts the Role Wizard, a series of windows that leads you through all the steps required to create a role. For instructions, see Creating a Role Using the Role Wizard.
- Tools > Save Service(s) As
- Enables you to save the selected service(s) to a Policy Manager
data (
.pmd) file. Special characters such as / \ : ? " < > | are not allowed in the file name. The service name is not case-sensitive; therefore, Policy Manager sees X.pmd and x.pmd as the same service name.
- Tools > Server Information
- Opens the Server Information window where you can view and configure certain NetSight Server functions, including management of client connections, locks, and licenses.
- Tools > Service Wizard
- Starts the Service Wizard, a series of windows that leads you through all the steps required to create a service. For instructions, see Using the Service Wizard.
- Tools > Set Default Role
- Opens the Roles Selection View, where you can assign a default role to a selected device or device group in the left-panel Network Elements tab. For instructions, see Assigning Default Roles to Ports.
- Tools > Set Frozen
- With a device selected, freezes all the ports on the selected device. With one or more ports selected, freezes the port(s). See How to Freeze/Unfreeze a Port for more information.
- Tools > Terminate Session(s)
- Terminates the user's session on the selected port(s). If multiple ports are selected, only authenticated sessions whose Terminate Cause is "Not Applicable" are affected. You cannot terminate sessions on frozen ports. See Terminating a Sessionfor more information.
Domain Menu
Lets you create, rename, and delete Policy Domains, and assign devices to the current domain. The bottom part of the menu displays all of your domains and lets you switch between multiple domains.
- Domain > Assign Devices to Domain
- Opens the Assign Devices to Domain window where you can assign devices that are in the NetSight database to the current Policy Domain.
- Domain > Find Domain By IP Address
- Opens the Find Domain By IP Address window that lets you quickly locate the domain where a specific device is assigned. This window is useful when you need to locate a device among multiple domains. Enter an IP address and click Find. The window displays the domain where the device is located and allows you to open the domain, if desired. If a device is not assigned to a domain, "Unassigned" is displayed.
- Domain > Create Mixed-Stack C2/C3/B2/B3 Domain
- Opens a window where you can manage mixed stacks of C2/C3 and B2/B3 devices by creating a new domain specifically for those mixed stack devices, using the data in the currently active domain.
- Domain > Show All Rules for All Domains
- Opens the Policy Classification Rules window, where you can view all of the Policy Manager rules that exist in all your domains, along with information about each rule.
- Domain > Generate Policy Report
- Use this menu option to automatically generate a summary report of the current domain's
policy configuration in PDF format. The report is saved
to the following directory:
Documents and Settings\<user home directory>\Application Data\NetSight\System\PolicyMgr. Each report contains a description of the domain, plus a detailed summary of each of the domain's roles and services, and the rules contained in each service. In addition, the report provides information on the devices assigned to the domain, the domain's Network Resources, Class of Service information (including transmit queues and rate limiting information), and VLAN information.
Applications Menu
Lets you launch other installed NetSight applications from Policy Manager.
Help Menu
Lets you access the components of the Policy Manager online information system.
- Help > About This Window
- Displays detailed information about the currently selected right-panel tab or window. This menu option serves the same function as the Help button on the toolbar.
- Help > NetSight Tips and Tutorials
- Opens your system's Web browser and takes you to the NetSight Tips and Tutorials where you can access Flash tutorials on the NetSight suite of products.
- Help > Check for Updates
- Allows you to update Policy Manager with the latest version of release notes, new data templates to update the demo.pmd file, and additions to the pre-defined list of well-known identifiers (IDs). For more information, see Setting Web Update Options.
- Help > Getting Started
- Displays the Getting Started help topic that provides an overview of Policy Manager features and functionality. It also includes a summary of the basic steps you must perform to create and configure policies with Policy Manager.
- Help > About NetSight Policy Manager
- Displays the NetSight Policy Manager version and copyright information.
Right-click Menu Options
The following menu options are only available from right-click menus. They are listed in alphabetical order.
- SSH
- Launches the Secure Shell (SSH) server and, after entering an appropriate username, opens a shell window, which provides the means to communicate with the selected device using a secure command-line based mechanism.
For information on related windows:
