Configuration Procedure; Verifying The Configuration - HP MSR2000 Configuration Manual

Configuration procedure

# Create an application group named group1, and enter application group view.
<Router> system-view
[Router] app-group group1
# Add HTTP to the application group.
[Router-app-group-group1] include application http
[Router-app-group-group1] quit
# Map HTTP to TCP and port 8080.
[Router] port-mapping application http port 8080 protocol tcp
# Create a traffic class named classifier_1, and match group1 to the class.
[Router] traffic classifier classifier_1
[Router-classifier-classifier_1] if-match app-group group1
[Router-classifier-classifier_1] quit
# Create a traffic behavior named bdeny, and configure the action as deny.
[Router] traffic behavior bdeny
[Router-behavior-bdeny] filter deny
[Router-behavior-bdeny] quit
# Create QoS policy 1, associate classifier_1 with traffic behavior bdeny to create a class-behavior
association in the QoS policy.
[Router] qos policy 1
[Router-qospolicy-1] classifier classifier_1 behavior bdeny
[Router-qospolicy-1] quit
# Enable application statistics in the inbound direction of Ethernet 1/1, and apply the QoS policy to the
port.
[Router] interface ethernet 1/1
[Router-Ethernet1/1] application statistics enable inbound
[Router-Ethernet1/1] qos apply policy 1 inbound
[Router-Ethernet1/1] quit

Verifying the configuration

The host cannot establish an HTTP connection with the public network. Use the following command to
verify that Ethernet 1/1 does not receive any HTTP packet:
[Router] display application statistics interface ethernet 1/1 direction inbound name http
Interface : Ethernet1/1
Application
http
In/Out Packets
IN 20
Bytes
420
259
PPS BPS
10 10