Huawei Quidway S9300 Configuration Manual page 281

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
# Define the traffic behavior and disable the URPF function in the traffic behavior view.
[Quidway] traffic behavior tb1
[Quidway-behavior-tb1] ip uprf disable
[Quidway-behavior-tb1] quit
Step 4 Configure the traffic policy.
# Define the traffic policy and associate the traffic classifier and traffic behavior with the traffic
policy.
[Quidway] traffic policy tp1
[Quidway-trafficpolicy-tp1] classifier tc1 behavior tb1
[Quidway-trafficpolicy-tp1] quit
# Apply the traffic policy to GE 1/0/1.
[Quidway] interface gigabitethernet 1/0/1
[Quidway-GigabitEthernet1/0/1] traffic-policy tp1 inbound
[Quidway-GigabitEthernet1/0/1] quit
Step 5 Verify the configuration.
# Check the configuration of the ACL rules.
<Quidway> display acl 2000
Basic ACL 2000, 1 rule
Acl's step is 5
rule 5 permit source 10.0.0.0 0.0.0.255 (0 times matched)
# Check the configuration of the traffic classifier.
<Quidway> display traffic classifier user-defined
User Defined Classifier Information:
# Check the configuration of the traffic policy.
<Quidway>
User Defined Traffic Policy Information:
Policy: tp1
----End
Configuration Files
#
sysname Quidway
#
urpf slot 1
urpf slot 2
#
acl number 2000
rule 5 permit source 10.0.0.0 0.0.0.255
#
traffic classifier tc1 operator or precedence 20
if-match acl 2000
#
Issue 06 (2010–01–08)
Classifier: tc1
Precedence: 20
Operator: OR
Rule(s) : if-match acl 2000
display traffic policy user-defined tp1
Classifier: default-class
Behavior: be
-none-
Classifier: tc1
Behavior: tb1
urpf switch: off
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
11 ACL Configuration
11-15