7-31
Cisco SCE 8000 10GBE Software Configuration Guide
OL-30621-02
Chapter 7 Configuring Line Interfaces
Configuring Traffic Rules and Counters
Example 2
This example creates the following traffic rule:
•
Name = rule2
•
IP addresses: subscriber side = all IP addresses, network side = all IP addresses EXCEPT the subnet
10.10.10.0/24
•
Protocol = TCP
•
Ports: subscriber-side = 100-200, network-side = all
•
Tunnel id = all
•
Direction = downstream
•
Traffic counter = counter2
•
Action = Block
•
The actions performed will be counting and blocking
The first command enables tunnel id mode.
SCE(config if)#traffic-rule tunnel-id-mode
SCE(config if)# traffic-rule name rule2 IP-addresses subscriber-side all network-side
all-but 10.10.10.0/24 protocol tcp ports subscriber-side 100:200 network-side all
tunnel-id all direction downstream traffic-counter name counter2 action block
Example 3
This example creates the following traffic rule:
•
Name = rule3
•
IP addresses: all
•
Protocol = IS-IS
•
Direction = upstream
•
Traffic counter = none
•
Action = ignore (required since traffic-counter = none)
•
The only action performed will be
Ignore
.
SCE(config if)# traffic-rule name rule3 IP-addresses all protocol IS-IS direction upstream
traffic-counter none action ignore
Example 4
The following example illustrates how to configure a traffic rule that will be used as a recording rule
using the flow-capture option. All flows that match this rule will be recorded when the flow capture
process is in operation.
1.
Name = FlowCaptureRule
2.
IP addresses: subscriber side = all IP addresses, network side = all IP addresses
3.
Direction = both
4.
Protocol = 250
5.
Traffic counter name = counter2