H3C H3C S5100-SI, Operation Manual, Page: 440 / 830

1-51
Configuration procedure
# Create a time range trname covering the period from 8:00 to 18:00 during working days.
<Switch> system-view
[Switch] time-range trname 8:00 to 18:00 working-day
1) Configure a policy for the traffic of the marketing department
# Create basic ACL 2000 to permit the traffic of the hosts in the marketing department
during the specified time range.
[Switch] acl number 2000
[Switch-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.127 time-range
trname
[Switch-acl-basic-2000] quit
# Configure to mirror traffic matching ACL 2000 to GigabitEthernet 1/0/3.
[Switch] interface GigabitEthernet 1/0/1
[Switch-GigabitEthernet1/0/1] mirrored-to inbound ip-group 200 0
monitor-interface
[Switch-GigabitEthernet1/0/1] quit
[Switch] interface GigabitEthernet 1/0/3
[Switch-GigabitEthernet1/0/3] monitor-port
[Switch-GigabitEthernet1/0/3] quit
2) Configure a policy for the traffic of the R&D department
# Create basic ACL 2001 to permit the traffic of the hosts in the R&D department during the
specified time range.
[Switch] acl number 2001
[Switch-acl-basic-2001] rule permit source 192.168.2.0 0.0.0.127 time-range
trname
[Switch-acl-basic-2001] quit
# Configure to redirect traffic matching ACL 2001 to GigabitEthernet 1/0/3.
[Switch] interface GigabitEthernet 1/0/2
[Switch-GigabitEthernet1/0/2] traffic-redirect inbound ip-group 2001 interface
GigabitEthernet 1/0/3