Enforce Preview
Window

Use the Enforce Preview window to view the information that will be written to your devices, before you actually enforce. This feature is particularly useful if you have devices that only support certain aspects of policy management. For example, some devices support only the policy features of policy management; some devices support the policy features and classification rules, but do not support VLAN forwarding for certain classification rules; and some devices fully support all policy management features, including policy, classification rules, and VLAN forwarding for all classification rules.

The Enforce Preview window appears whenever you click the Enforce button, or select the File > Enforce Role Set menu option, or double-click the enforce icon on the status bar, so that you always get a chance to review the effects of enforcing prior to actually performing the enforce. You can control whether or not this view automatically appears with the Show this view on Enforce checkbox, or in Optional Views in the Options window.

You can also access this window from the File > Enforce Preview menu option, and from the Enforce Preview button on the confirmation message that appears when a verify has taken place.

What you see in the window depends on whether you would be enforcing to all devices or to a subset of devices. The title bar indicates the devices to which the enforce will apply. After viewing the information in this window, you can either click Cancel to back out and make fixes, or Enforce to go ahead with the enforce. (The Enforce button does not appear in this window when you use the File > Enforce Preview menu option to launch the window.)

You can view device support for specific roles, services, and rules on their Device Support tabs.

"Show" Radio Buttons
What you see in the right panel of the Enforce Preview window depends on which radio button you have selected at the top of the window.

All

Select this radio button to display what will and what will not be written to the devices when you enforce.

Errors and Warnings Only

Select this radio button to show only what will not be written to the devices when you enforce.

Left Panel
The left panel of the Enforce Preview window displays folders for different device types. Expand the folders to see your network devices and device groups organized according to device type. The   icon alerts you that there are certain things that will not be written to this device type that you might want to investigate prior to enforcing (e.g. rules that are not supported on a device).

Select a specific device type to display the information that will be written to those devices when you enforce.

Show this view on Enforce

When this checkbox is checked, the Enforce Preview window will appear any time you enforce, before the actual enforcement takes place. You can also turn this option on and off via Optional Views in the Options window.

Right Panel
The upper portion of the right panel provides information about whether certain policy management features are supported and/or enabled for the device type selected in the left panel.

• GVRP - Shows whether GVRP is Enabled, Disabled, or Not Supported. You can enable or disable GVRP via the Edit menu.
• Dynamic Egress - Shows whether Dynamic Egress is Supported or Not Supported.

There are four tabs that provides specific information about the Roles, Classification Rules, VLANs, and Classes of Service that will be enforced. The information displayed depends on the device type you've selected in the left panel, and whether you have the Show All or the Show Errors and Warnings Only radio button selected.

Roles Tab

Incomplete - Lists any roles with unsupported classification rules. These roles will be written to the devices, but without the unsupported rules.
Complete - Lists any roles which do not include unsupported classification rules. These roles will be written to the devices as defined.

	NOTE:	Select a Role to display only those classification rules and VLANs associated with the selected role.

Classification Rules Tab

Excluded - Lists any unsupported classification rules that have been applied to a role. These rules will not be included when the associated roles are written to the devices.
Included - Lists any supported classification rules that have been applied to a role. These rules will be included when the associated roles are written to the devices.

	NOTE:	On Matrix N-Series Platinum devices, range classification rules are achieved through applying subnet masks to values. As such, in order to achieve a user-specified range, the device may need multiple rules with subnets applied to encompass that range. So, although the user created only one rule with a range, this list may show multiple instances of that rule with the name of the rule followed by the portion of the over-all range it applies to.

VLAN Tab

Excluded - Lists any VLANs associated with unsupported classification rules, or VLANs that are not supported by the device. These VLANs will not be written to the devices.
Included - Lists any VLANs associated with supported classification rules and VLANs associated with roles. These will be written to the devices.

Classes of Service Tab

Class of Service Mode - Lists the Class of Service mode that will be written to the devices.
Included Classes of Service - Lists the classes of service that will be written to the devices:

• Class of Service - the name of the class of service.
• 802.1p Priority - the priority associated with the class of service.
• ToS Value - the IP type of service value associated with this class of service, if any. See IP Type of Service for more information.
• Transmit Queue Reference - the transmit queue index associated with the class of service.
• IRL Reference - the role-based rate limit index associated with the class of service.

For more information, see Getting Started with Class of Service and How to Create a Class of Service.

Device Support
Refer to the Release Notes for complete information on device support for Policy Manager features, and VLAN and Priority classification rules. Here is a brief summary for each device type.

Matrix C1
These devices support policy features and certain classification rules. VLAN containment is only supported for some of those classification rules.

Matrix C2
These devices support policy features and most classification rules. VLAN containment is supported for the Ethertype rule on some versions.

Matrix E1
These devices support policy features and most classification rules, but do not support VLAN containment for most classification rules.

Matrix E5
These devices support policy features, but not classification rules. They do not support VLANS with a VID greater than 2048.

Matrix E6/E7
These devices support policy features, most classification rules, and VLAN containment for most classification rules.

Matrix N3/N5/N7/NSA Platinum
These devices support policy features, all classification rules, and VLAN containment for all classification rules.

Matrix N3/N5/N7 Gold
These devices support policy features, most classification rules, and VLAN containment for most classification rules.

RoamAbout R2
These devices support policy features and a limited set of classification rules, but do not support traffic prioritization or VLAN containment rules.

Buttons

Enforce

Enforces the roles, classification rules and VLANs in the current data file to the devices, based on the level of support available on the devices as indicated in the Enforce Preview window. This button does not appear in this window when you use the File > Enforce Preview menu option to launch the window.

Related Information

• Enforcing

• Device Support Tab (Role)
• Device Support Tab (Rule)
• Device Support Tab (Service)