Huawei Quidway S2700 Series Configuration Manual page 185

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
[Quidway] interface ethernet 0/0/2
[Quidway-Ethernet0/0/2] traffic-policy p_market inbound
[Quidway-Ethernet0/0/2] quit
# Apply the traffic policy p_rd to Ethernet 0/0/3.
[Quidway] interface ethernet 0/0/3
[Quidway-Ethernet0/0/3] traffic-policy p_rd inbound
[Quidway-Ethernet0/0/3] quit
Step 8 Verify the configuration.
# Check the configuration of ACL rules.
<Quidway> display acl all
Total nonempty ACL number is 2
Advanced ACL 3002, 1 rule
Acl's step is 5
rule 5 deny ip source 10.164.2.0 0.0.0.255 destination 10.164.9.9 0 time-range
satime (Inactive)
Advanced ACL 3003, 1 rule
Acl's step is 5
rule 5 deny ip source 10.164.3.0 0.0.0.255 destination 10.164.9.9 0 time-range
satime (Inactive)
# Check the configuration of the traffic classifier.
<Quidway> display traffic classifier user-defined
User Defined Classifier Information:
# Check the configuration of the traffic policy.
<Quidway>
User Defined Traffic Policy Information:
Policy: p_market
Policy: p_rd
----End
Configuration Files
#
sysname Quidway
#
vlan batch 10 20 30 40 100
#
time-range satime 08:00 to 17:30 working-day
#
acl number 3002
rule 5 deny ip source 10.164.2.0 0.0.0.255 destination 10.164.9.9 0 time-range
Issue 01 (2011-07-15)
Classifier: c_market
Operator: AND
Rule(s) : if-match acl 3002
Classifier: c_rd
Operator: AND
Rule(s) : if-match acl 3003
display traffic policy user-defined
Classifier: c_market
Operator: AND
Behavior: b_market
Deny
Classifier: c_rd
Operator: AND
Behavior: b_rd
Deny
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 ACL Configuration
174