Step
12.
(Optional.) Display the
traffic filtering
configuration.
Configuration example
Network requirements
As shown in
packets with port 21 as the source port.
Figure 17 Network diagram
Configuration procedure
# Create advanced ACL 3000, and configure a rule to match packets whose source port number is 21.
<Switch> system-view
[Switch] acl number 3000
[Switch-acl-adv-3000] rule 0 permit tcp source-port eq 21
[Switch-acl-adv-3000] quit
# Create a traffic class named classifier_1, and use ACL 3000 as the match criterion in the traffic class.
[Switch] traffic classifier classifier_1
[Switch-classifier-classifier_1] if-match acl 3000
[Switch-classifier-classifier_1] quit
# Create a traffic behavior named behavior_1, and configure the traffic filtering action to drop packets.
[Switch] traffic behavior behavior_1
[Switch-behavior-behavior_1] filter deny
[Switch-behavior-behavior_1] quit
# Create a QoS policy named policy, and associate traffic class classifier_1 with traffic behavior
behavior_1 in the QoS policy.
[Switch] qos policy policy
[Switch-qospolicy-policy] classifier classifier_1 behavior behavior_1
[Switch-qospolicy-policy] quit
# Apply the QoS policy named policy to the incoming traffic of Ten-GigabitEthernet 1/0/1.
[Switch] interface ten-gigabitethernet 1/0/1
[Switch-Ten-GigabitEthernet1/0/1] qos apply policy policy inbound
Command
display traffic behavior user-defined
[ behavior-name ]
Figure
17, configure traffic filtering on Ten-GigabitEthernet 1/0/1 to deny the incoming
63
Remarks
Available in any view.