H3C S5500-SI Series, Руководство по эксплуатации

Страница: 517 / 1217

6-2
To do… Use the command… Remarks
Display the traffic filtering
configuration display traffic behavior
user-defined
[ behavior-name ]
Optional
Available in any view
With filter deny configured for a traffic behavior, the other actions (except class-based accounting) in
the traffic behavior do not take effect.
Traffic Filtering Configuration Example
Traffic Filtering Configuration Example
Network requirements
As shown in Figure 6-1 , Host is connected to GigabitEthernet 1/0/1 of Device.
Configure traffic filtering to filter the packets whose source port is 21 received on GigabitEthernet 1/0/1.
Figure 6-1 Network diagram for traffic filtering configuration
Configuration procedure
# Create advanced ACL 3000, and configure a rule to match packets whose source port number is 21.
<DeviceA> system-view
[DeviceA] acl number 3000
[DeviceA-acl-basic-3000] rule 0 permit tcp source-port eq 21
[DeviceA-acl-basic-3000] quit
# Create a class named classifier_1 , and reference ACL 3000 in the class.
[DeviceA] traffic classifier classifier_1
[DeviceA-classifier-classifier_1] if-match acl 3000
[DeviceA-classifier-classifier_1] quit
# Create a behavior named behavior_1 , and configure the traffic filtering action for the behavior.
[DeviceA] traffic behavior behavior_1
[DeviceA-behavior-behavior_1] filter deny
[DeviceA-behavior-behavior_1] quit
# Create a policy named policy , and associate class classifier_1 with behavior behavior_1 in the
policy.
[DeviceA] qos policy policy
[DeviceA-qospolicy-policy] classifier classifier_1 behavior behavior_1
[DeviceA-qospolicy-policy] quit