Traffic Filtering Configuration; Traffic Filtering Overview; Configuring Traffic Filtering - H3C S5120-EI Series Operation Manual

6

Traffic Filtering Configuration

When configuring traffic filtering, go to these sections for information you are interested in:

Traffic Filtering Overview

Configuring Traffic Filtering

Traffic Filtering Configuration Example
Traffic Filtering Overview
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status. By
using ACL rules configured with a time range for traffic classification, you can implement time-based
traffic filtering.
Alternatively, you can implement traffic filtering on a port by directly applying an ACL on the port. For the
configuration procedure, refer to ACL Configuration in the Security Volume.
Configuring Traffic Filtering
Follow these steps to configure traffic filtering:
To do...
Enter system view
Create a class and enter
class view
Configure the match criteria
Exit class view
Create a behavior and enter
behavior view
Configure the traffic filtering
action
Exit behavior view
Create a policy and enter
policy view
Use the command...
system-view
traffic classifier tcl-name [ operator
{ and | or } ]
if-match match-criteria
quit
traffic behavior behavior-name
filter { deny | permit }
quit
qos policy policy-name
6-1
Remarks
—
—
—
—
—
Required
deny: Drops packets.
permit: Permits packets
to pass through.
—
—