Traffic Filtering Configuration; Traffic Filtering Overview; Configuring Traffic Filtering - H3C S5120-SI Series Configuration Manual

6

Traffic Filtering Configuration

When configuring traffic filtering, go to these sections for information you are interested in:

Traffic Filtering Overview

Configuring Traffic Filtering

Traffic Filtering Configuration Example
Traffic Filtering Overview
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status. By
using ACL rules configured with a time range for traffic classification, you can implement time-based
traffic filtering.
Alternatively, you can implement traffic filtering on a port by directly applying an ACL on the port. For the
configuration procedure, refer to ACL Configuration.
Configuring Traffic Filtering
Follow these steps to configure traffic filtering:
To do...
Enter system view
Create a class and enter
class view
Configure the match criteria
Exit class view
Create a behavior and enter
behavior view
Configure the traffic filtering
action
Exit behavior view
Create a policy and enter
policy view
Use the command...
system-view
traffic classifier tcl-name [ operator
{ and | or } ]
if-match match-criteria
quit
traffic behavior behavior-name
filter { deny | permit }
quit
qos policy policy-name
6-1
Remarks
—
—
—
—
—
Required
deny: Drops packets.
permit: Permits packets
to pass through.
—
—