i
Contents
Configuring ACLs ························································································································································· 1
Overview············································································································································································1
Applications on the switch ······································································································································1
ACL categories ·························································································································································1
Numbering and naming ACLs ································································································································1
Match order ······························································································································································2
Rule numbering ·························································································································································3
Fragments filtering with ACLs
··································································································································3
Configuration task list ·······················································································································································3
Configuring a basic ACL
··················································································································································4
Configuring an IPv4 basic ACL ······························································································································4
Configuring an IPv6 basic ACL ······························································································································4
Configuring an advanced ACL········································································································································5
Configuring an IPv4 advanced ACL·······················································································································5
Configuring an IPv6 advanced ACL·······················································································································6
Configuring an Ethernet frame header ACL ···················································································································8
Copying an ACL ·······························································································································································9
Configuring packet filtering with ACLs ························································································································ 10
Applying an ACL to an interface for packet filtering························································································· 10
Setting the interval for generating and outputting packet filtering logs··························································· 10
Setting the packet filtering default action ··········································································································· 10
Displaying and maintaining ACLs ································································································································ 10
ACL configuration example ·········································································································································· 11
Network requirements··········································································································································· 11
Configuration procedure ······································································································································ 12
Verifying the configuration ··································································································································· 12
QoS overview····························································································································································· 14
QoS service models ······················································································································································· 14
Best-effort service model ······································································································································· 14
IntServ model ························································································································································· 14
DiffServ model ······················································································································································· 14
QoS techniques overview ············································································································································· 15
Deploying QoS in a network ······························································································································· 15
Configuring a QoS policy ········································································································································· 16
Non-MQC approach ····················································································································································· 16
MQC approach ····························································································································································· 16
Configuration procedure diagram ······························································································································· 16
Defining a traffic class ··················································································································································· 17
Configuration guidelines ······································································································································ 17
Configuration procedure ······································································································································ 17
Defining a traffic behavior ············································································································································ 19
Defining a QoS policy
··················································································································································· 19
Applying the QoS policy··············································································································································· 20
Applying the QoS policy to an interface ············································································································ 20
Applying the QoS policy to a VLAN ··················································································································· 21
Applying the QoS policy globally ······················································································································· 21
Applying the QoS policy to the control plane···································································································· 21
Displaying and maintaining QoS policies ·················································································································· 22