Traffic Filtering Configuration; Traffic Filtering Overview; Configuring Traffic Filtering - H3C S5120-EI Series Configuration Manual

7

Traffic Filtering Configuration

When configuring traffic filtering, go to these sections for information you are interested in:

Traffic Filtering Overview

Configuring Traffic Filtering

Traffic Filtering Configuration Example
Traffic Filtering Overview
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status. By
using ACL rules configured with a time range for traffic classification, you can implement time-based
traffic filtering.
Alternatively, you can implement traffic filtering on a port by directly applying an ACL on the port. For
the configuration procedure, see ACL Configuration in the ACL and QoS Configuration Guide.
Configuring Traffic Filtering
Follow these steps to configure traffic filtering:
To do...
Enter system view
Create a class and enter class
view
Configure the match criteria
Exit class view
Create a behavior and enter
behavior view
Configure the traffic filtering
action
Use the command...
system-view
traffic classifier tcl-name [ operator
{ and | or } ]
if-match match-criteria
quit
traffic behavior behavior-name
filter { deny | permit }
7-1
Remarks
—
—
—
—
—
Required
deny: Drops packets.
permit: Permits packets to
pass through.