H3C S9500 Series Operation Manual page 1081

Routing switches

Hide thumbs Also See for S9500 Series:

Table of Contents

Operation Manual – QoS

H3C S9500 Series Routing Switches

# Create ACL 2000 and enter the corresponding view.

[H3C] acl number 2000

# Define traffic classification rules for packets and allow packets to pass during the

specified time period.

[H3C-acl-basic-2000] rule 0 permit source any time-range test

[H3C-acl-basic-2000] quit

Configure packet redirection in VLAN 2.

# Set the next hop IP addresses of all the packets forwarded on the ports in VLAN 2 to

[H3C] vlan 2

[H3C-vlan2] traffic-redirect inbound ip-group 2000 rule 0 next-hop 3.0.0.1

Display configuration.

# Display whether VLAN-ACL is configured on all ports in VLAN 2 (ports

GigabitEthernet7/1/1 and GigabitEthernet7/1/2).

[H3C-vlan2] display vlan-acl-member-ports vlan 2

Vlan-acl member port(s):

GigabitEthernet7/1/1

5.3.2 VLAN-ACL Traffic Policing Configuration Example

I. Network requirements

PC A, with IP address 10.10.10.10/24, is connected to Ethernet 3/1/1 of the switch; and

PC B, with IP address 10.10.10.20/24, is connected to GigabitEthernet 7/1/1 of the

switch. Both Ethernet 3/1/1 and GigabitEthernet 7/1/1 belong to VLAN 10.

Configure traffic policing for ICMP packets received on Ethernet 3/1/1 and

GigabitEthernet 7/1/1 with the following parameters: CIR 2000, CBS 200000, EBS

300000, and dropping the exceeding packets.

II. Network Diagram

Figure 5-2 Network diagram for traffic policing configuration

Chapter 5 VLAN-ACL Configuration

GigabitEthernet7/1/2

Chapters

Table of Contents