I can see that each classification rule can be assigned to 3 profiles. I've never used this before since for my needs 'profile1' has always been enough, but we seem to have the option to configure 3 profiles for each rule.
What I'm trying to learn is a scenario/example of when assigning a classification rule to more than 1 profile is useful.
Something like:
unp classification mac-oui dc:08:56 profile1 'something' profile2 'something-else'
I've looked into the network configuration guide but I didnt see any explanation for this. Anyone can share a use case scenario for this?
UNP Classification Profile1/2/3
Re: UNP Classification Profile1/2/3
Hi,
in most the cases you only need profile1.
Two profiles in the same rule (profile 1 and profile2) is used if you have at the same switch unp ports type bridge and type access (f.e. for SPB services). The same rule at a unp bridge port forward the client to the profile that is vlan mapped. And at the access port to a profile that is service mapped.
The profile3 is historical. As Accessguardian has started with Release 8.1 there where three port types (edge, bridge, access). But edge and bridge where very similar (both vlan mapped). So alcatel decided later to use only two port types (and only to unp profile types).
That is the reason for having profile1 to 3. Very seldom you will need two of them - but never all 3 in one command.
BR Silvio
in most the cases you only need profile1.
Two profiles in the same rule (profile 1 and profile2) is used if you have at the same switch unp ports type bridge and type access (f.e. for SPB services). The same rule at a unp bridge port forward the client to the profile that is vlan mapped. And at the access port to a profile that is service mapped.
The profile3 is historical. As Accessguardian has started with Release 8.1 there where three port types (edge, bridge, access). But edge and bridge where very similar (both vlan mapped). So alcatel decided later to use only two port types (and only to unp profile types).
That is the reason for having profile1 to 3. Very seldom you will need two of them - but never all 3 in one command.
BR Silvio
Re: UNP Classification Profile1/2/3
Many thanks! I understand it now. You're awesome!
Re: UNP Classification Profile1/2/3
And a follow-up question (not 100% related, I know), can you provide an example of a scenario where we need to use direction in instead of the default direction both in the profile?
unp port-template 'my-profile' direction both default-profile 'something' classification
unp port-template 'my-profile' direction both default-profile 'something' classification
Re: UNP Classification Profile1/2/3
This is used if you have silent devices (like printers) at 802.1x ports. With "in" only the in-direction is blocked. So outgoing traffic is possible to wake the device for reautentication.
BR Silvio
BR Silvio
