/system/classes/{Class.name},{Class.type}/cfg_entries

Reference Resource: Class
Name of a Classifier Class (Class).

Reference Resource: Class
Type of a Class.

Comment to associate with the specified class entry. This column value can be empty.

Destination IP matching attribute: If no IP address is specified, the Class entry will not match on destination IP address. The following IPv4 and IPv6 address formats are accepted. IPv4 format (A.B.C.D/W.X.Y.Z) IPv6 format (A:B::C:D/W:X::Y:Z) If an invalid format is used via REST, it will be accepted. Verify configurations are valid by checking for error log messages and configuration warnings in CLI. An empty column value indicates that this qualifier will not be used to match packets. Destination IP match is not supported when class type is gbp*

Destination MAC matching attribute: AAAA.BBBB.CCCC/XXXX.YYYY.ZZZZ If an invalid format is used via REST, it will be accepted. Verify configurations are valid by checking for error log messages and configuration warnings in CLI. An empty column value indicates that this qualifier will not be used to match packets. Destination MAC match is not supported when class type is gbp*

Destination role matching attribute. An empty column value indicates that this qualifier will not be used to match packets.

Origin of the class-entry, i.e., how the class-entry is provisioned. dynamic: class entry is provisioned dynamically via DUR from Clearpass server or via a NAS-Filter-Rule attribute from a RADIUS server. synthesized: class entry has been dynamically synthesized by the system. static: class entry is provisioned by the administrator via CLI or REST.

Source IP matching attribute: If no IP address is specified, the Class entry will not match on source IP address. The following IPv4 and IPv6 address formats are accepted. IPv4 format (A.B.C.D/W.X.Y.Z) IPv6 format (A:B::C:D/W:X::Y:Z) If an invalid format is used via REST, it will be accepted. Verify configurations are valid by checking for error log messages and configuration warnings in CLI. An empty column value indicates that this qualifier will not be used to match packets. Source IP match is not supported when class type is gbp*

Source MAC matching attribute: AAAA.BBBB.CCCC/XXXX.YYYY.ZZZZ If an invalid format is used via REST, it will be accepted. Verify configurations are valid by checking for error log messages and configuration warnings in CLI. An empty column value indicates that this qualifier will not be used to match packets. Source MAC match is not supported when class type is gbp*

Source role matching attribute. An empty column value indicates that this qualifier will not be used to match packets.

Type of a class entry: 'match': corresponding policy actions will be performed on the matching packets. 'ignore': matching packets will be processed as if no policy was applied. An empty column value indicates that this qualifier will not be used to match packets.