Legal and notice information ·········································································································································i

Configuring ACLs ························································································································································· 5

Overview ············································································································································································ 5

ACL categories ························································································································································· 5

Numbering and naming ACLs ································································································································ 5

Match order ······························································································································································ 5

Rule numbering ························································································································································· 6

Fragments filtering with ACLs ·································································································································· 7

Configuration task list ······················································································································································· 7

Configuring a basic ACL ·················································································································································· 7

Configuring an IPv4 basic ACL ······························································································································ 8

Configuring an IPv6 basic ACL ······························································································································ 8

Configuring an advanced ACL ········································································································································ 9

Configuring an IPv4 advanced ACL······················································································································· 9

Configuring an IPv6 advanced ACL···················································································································· 10

Configuring an Ethernet frame header ACL ················································································································ 11

Copying an ACL ···························································································································································· 12

Configuring packet filtering with ACLs ························································································································ 12

Applying an ACL to an interface for packet filtering························································································· 12

Applying an ACL to an interzone instance for packet filtering ········································································ 13

Setting the interval for generating and outputting packet filtering logs ··························································· 13

Setting the packet filtering default action ··········································································································· 13

Displaying and maintaining ACLs ································································································································ 14

ACL configuration example ·········································································································································· 15

Network requirements ··········································································································································· 15

Configuration procedure ······································································································································ 15

Verifying the configuration ··································································································································· 16

QoS overview ····························································································································································· 17

QoS service models ······················································································································································· 17

Best-effort service model ······································································································································· 17

IntServ model ························································································································································· 17

DiffServ model ······················································································································································· 17

QoS techniques overview ············································································································································· 17

Deploying QoS in a network ······························································································································· 18

QoS processing flow in a device ························································································································ 19

Configuring a QoS policy ········································································································································· 20

Non-MQC approach ····················································································································································· 20

MQC approach ····························································································································································· 20

Configuration procedure diagram ······························································································································· 20

Defining a traffic class ··················································································································································· 21

Defining a traffic behavior ············································································································································ 21

Defining a QoS policy ··················································································································································· 22

Configuring a parent policy ································································································································· 22

Configuring a child policy ···································································································································· 22

Applying the QoS policy ··············································································································································· 23

Applying the QoS policy to an interface or PVC ······························································································· 23