H3C WX3500H series, Руководство по настройке пользователя

Страница: 39 / 57

31
Configuring traffic filtering
You can filter in or filter out traffic of a class by associating the class with a traffic filtering action. For
example, you can filter packets sourced from an IP address according to network status.
Configuration procedure
To configure traffic filtering:
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Create a traffic class and
enter traffic class view.
traffic classifier classifier-name
[
operator
{
and
|
or
} ]
By default, no traffic class
exists.
3.
Configure match criteria.
if-match
[
not
]
match-criteria
By default, no match criterion
is configured.
4.
Return to system view.
quit
N/A
5.
Create a traffic behavior
and enter traffic behavior
view.
traffic behavior behavior-name
By default, no traffic behavior
exists.
6.
Configure the traffic
filtering action.
filter
{
deny
|
permit
}
By default, no traffic filtering
action is configured.
7.
Return to system view.
quit
N/A
8.
Create a QoS policy and
enter QoS policy view.
qos policy policy-name
By default, no QoS policy
exists.
9.
Associate the traffic class
with the traffic behavior in
the QoS policy.
classifier classifier-name behavior
behavior-name
By default, a traffic class is not
associated with a traffic
behavior.
10.
Return to system view.
quit
N/A
11.
Apply the QoS policy to
an interface.
Applying the QoS policy to an interface
By default, no QoS policy is
applied to an interface.
12.
(Optional.) Display the
traffic filtering
configuration.
display traffic behavior
{
system-defined
|
user-defined
}
[
behavior-name
] [
slot slot-number
]
Available in any view.
Configuration example
Network requirements
As shown in Figure 7 , configure traffic filtering on GigabitEthernet 1/0/1 to deny the incoming packets
with a source port number other than 21.