Huawei Quidway S9300 Configuration Manual page 175

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
l
Procedure
Step 1 Configure an ACL.
# Configure the required frame header-based ACL.
[Quidway] acl 4000
[Quidway-acl-ethernetframe-4000] rule deny source-mac 00e0-f201-0101 ffff-ffff-
ffff dest-mac 0260-e207-0002 ffff-ffff-ffff
[Quidway-acl-ethernetframe-4000] quit
Step 2 Configure the traffic classifier that is based on the ACL.
# Configure the traffic classifier tc1 to classify packets that match ACL 4000.
[Quidway] traffic classifier tc1
[Quidway-classifier-tc1] if-match acl 4000
[Quidway-classifier-tc1] quit
Step 3 Configure the traffic behavior.
# Configure the traffic behavior tb1 to reject packets.
[Quidway] traffic behavior tb1
[Quidway-behavior-tb1] deny
[Quidway-behavior-tb1] quit
Step 4 Configure the traffic policy.
# Configure the traffic policy tp1 and associate tc1 and tb1 with the traffic policy.
[Quidway] traffic policy tp1
[Quidway-trafficpolicy-tp1] classifier tc1 behavior tb1
[Quidway-trafficpolicy-tp1] quit
Step 5 Apply the traffic policy.
# Apply the traffic policy tp1 to GE 2/0/1.
[Quidway] interface gigabitethernet 2/0/1
[Quidway-GigabitEthernet2/0/1] traffic-policy tp1 inbound
[Quidway-GigabitEthernet2/0/1] quit
Step 6 Verify the configuration.
# Check the configuration of ACL rules.
<Quidway> display acl 4000
Ethernet frame ACL 4000, 1 rule
Acl's step is 5
rule 5 deny source-mac 00e0-f201-0101 ffff-ffff-ffff dest-mac 0260-e207-0002 ff
ff-ffff-ffff(0 times matched)
# Check the configuration of the traffic classifier.
<Quidway> display traffic classifier user-defined
# Check the configuration of the traffic policy.
Issue 01 (2009-07-28)
Name of the traffic policy, and traffic classifier and traffic behavior associated with the
traffic policy
Interface that a traffic policy is applied to
User Defined Classifier Information:
Classifier: tc1
Precedence: 15
Operator: OR
Rule(s) : if-match acl 4000
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 ACL Configuration
8-21