HP 6125G HP 6125G & 6125G/XG Blade Switches ACL and QoS Configuration - Page 58

Configuring traffic filtering, Configuration procedure

Page 58 highlights

Configuring traffic filtering Traffic filtering filters traffic matching certain criteria. For example, you can filter packets sourced from a specific IP address according to network status. Configuration procedure To configure traffic filtering: Step Command Remarks 1. Enter system view. system-view N/A 2. Create a class and enter class view. traffic classifier tcl-name [ operator { and | or } ] N/A 3. Configure match criteria. if-match match-criteria N/A 4. Return to system view. 5. Create a behavior and enter behavior view. 6. Configure the traffic filtering action. 7. Return to system view. 8. Create a policy and enter policy view. 9. Associate the class with the traffic behavior in the QoS policy. 10. Return to system view. 11. Apply the QoS policy. 12. Display the traffic filtering configuration. quit traffic behavior behavior-name filter { deny | permit } quit qos policy policy-name classifier tcl-name behavior behavior-name quit • Applying the QoS policy to an interface • Applying the QoS policy to online users • Applying the QoS policy to a VLAN • Applying the QoS policy globally display traffic behavior user-defined [ behavior-name ] [ | { begin | exclude | include } regular-expression ] N/A N/A • deny-Drops packets. • permit-Permits packets to pass through. N/A N/A N/A N/A Choose one application destination as needed. Optional. Available in any view NOTE: With filter deny configured for a traffic behavior, the other actions (except class-based accounting and traffic mirroring) in the traffic behavior do not take effect. 52

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84

52
Configuring traffic filtering
Traffic filtering filters traffic matching certain criteria. For example, you can filter packets sourced from a
specific IP address according to network status.
Configuration procedure
To configure traffic filtering:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a class and enter
class view.
traffic classifier
tcl-name
[
operator
{
and
|
or
} ]
N/A
3.
Configure match criteria.
if-match
match-criteria
N/A
4.
Return to system view.
quit
N/A
5.
Create a behavior and
enter behavior view.
traffic behavior
behavior-name
N/A
6.
Configure the traffic
filtering action.
filter
{
deny
|
permit
}
deny
—Drops packets.
permit
—Permits packets to
pass through.
7.
Return to system view.
quit
N/A
8.
Create a policy and enter
policy view.
qos policy
policy-name
N/A
9.
Associate the class with the
traffic behavior in the QoS
policy.
classifier
tcl-name
behavior
behavior-name
N/A
10.
Return to system view.
quit
N/A
11.
Apply the QoS policy.
Applying the QoS policy to an
interface
Applying the QoS policy to online
users
Applying the QoS policy to a VLAN
Applying the QoS policy globally
Choose one application
destination as needed.
12.
Display the traffic filtering
configuration.
display traffic behavior user-defined
[
behavior-name
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Optional.
Available in any view
NOTE:
With
filter deny
configured for a traffic behavior, the other actions (except class-based accounting and
traffic mirroring) in the traffic behavior do not take effect.