Configuring Eacl-Incoming Acl - H3C S9500 Series Operating Manual

Operation Manual – QoS
H3C S9500 Series Routing Switches

6.2.4 Configuring EACL-Incoming ACL

Follow these steps to configure EACL-Incoming EACL:
Enter system view
Configure a time range
Enter ACL view
Define a rule
Exit ACL view
Enter VLAN view
Configure filtering of
inbound packets
Configure inbound
traffic policing
Mark inbound packet
priority
Configure inbound
packet redirection
Configure inbound
traffic accounting
Exit VLAN list view
Enter Ethernet port
view
To do...
system-view
time-range time-name { start-time to
end-time days-of-the-week [ from start-time
start-date ] [ to end-time end-date ] | from
start-time start-date [ to end-time end-date ]
| to end-time end-date }
acl { number acl-number | name acl-name
[ advanced | basic ] } [ match-order
{ config | auto } ]
rule
quit
vlan vlan-id
packet-filter inbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] slot slot-id
traffic-limit outbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] [ tc-index index ]
traffic-index traffic-index { conform
{ remark-cos | remark-policed-service } |
exceed { forward | drop } } * slot slot-id
traffic-priority inbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] { auto |
remark-policed-service { trust-dscp |
dscp dscp-value | untrusted dscp
dscp-value cos cos-value
local-precedence local-precedence
drop-priority drop-level } } slot slot-id
traffic-redirect inbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] { cpu | next-hop
ip-addr1 [ ip-addr2 ] [ invalid { forward |
drop } ] } slot slot-id
traffic-statistic inbound ip-group
{ acl-number | acl-name } [ rule rule
[ system-index index ] ] [ tc-index index ]
slot slot-id
quit
interface interface-type interface-number
Use the command...
6-6
Chapter 6 EACL Configuration
Remarks
—
Optional
Required
Required
—
—
Optional
Optional
Optional
Optional
Optional
—
—