Chapter 2

Configuring Advanced Policies

29

Binding a Policy to a Policy Label

As with policy banks that are bound to the built-in bind points, each entry in a policy label is a policy that is bound to the policy label. As with policies that are bound globally or to a vserver, each policy that is bound to the policy label can also invoke a policy bank or a policy label that is evaluated after the current entry has been processed. The following table summarizes the entries in a policy label.

Entries in a Policy Bank

Attribute

Description

 

 

Name

The name of a policy, or, to invoke another policy bank without

 

evaluating a policy, the “dummy” policy name NOPOLICY.

 

You can specify NOPOLICY more than once in a policy bank, but you

 

can specify a named policy only once.

 

 

Priority

An integer. This setting can work with the Goto expression.

 

 

Goto Expression

Determines the next policy to evaluate in this bank. You can provide

 

one of the following values:

 

NEXT: Go to the policy with the next higher priority.

 

END: Stop evaluation.

 

USE_INVOCATION_RESULT: Applicable if this entry invokes

 

another policy bank. If the final Goto in the invoked bank has a

 

value of END, evaluation stops. If the final Goto is anything other

 

than END, the current policy bank performs a NEXT.

 

Positive number: The priority number of the next policy to be

 

evaluated.

 

Numeric expression: An expression that produces the priority

 

number of the next policy to be evaluated.

 

The Goto can only proceed forward in a policy bank.

 

If you omit the Goto expression, it is the same as specifying END.

 

 

Invocation Type

Designates a policy bank type. The value can be one of the following:

 

• Request Vserver: Invokes request-time policies that are associated

 

with a virtual server.

 

• Response Vserver: Invokes response-time policies that are

 

associated with a virtual server.

 

• Policy label: Invokes another policy bank, as identified by the

 

policy label for the bank.

Invocation

The name of a virtual server or a policy label, depending on the value

Name

that you specified for the Invocation Type.

 

 

Configuring a Policy Label or Virtual Server Policy Bank

After you have created policies, and created policy banks by binding the policies, you can perform additional configuration of polices within a label or policy bank. For example, before you configure invocation of an external policy bank, you might want to wait until you have configured that policy bank.

Page 43
Image 43
Citrix Systems 9.2 manual Configuring a Policy Label or Virtual Server Policy Bank, Binding a Policy to a Policy Label