Configuration Procedure; Precautions - H3C LS-5100-16P-SI-OVS-H3 Configuration

QACL
H3C Low-End Ethernet Switches Configuration Examples

2.5.3 Configuration Procedure

# Configure a workday period.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] time-range a001 8:30 to 18:00 working-day
# Define ACL 3030: Classify the packets accessing the Internet through HTTP during
workday period.
[H3C] acl number 3030
[H3C-acl-adv-3030] rule 0 permit tcp destination 10.0.0.1 0 destination-port
eq 80 time-range a001
[H3C-acl-adv-3030] quit
# Configure the port Ethernet1/0/20 as the mirroring destination port.
[H3C] interface Ethernet 1/0/20
[H3C-Ethernet1/0/20] monitor-port
[H3C-Ethernet1/0/20] quit
# Configure traffic mirroring on the ports Ethernet1/0/1 and Ethernet1/0/2: Perform
traffic identification through ACL 3010, and mirror the matching packets to the
destination port Ethernet1/0/20.
[H3C] interface Ethernet 1/0/1
[H3C-Ethernet1/0/1]
monitor-interface
[H3C-Ethernet1/0/1] quit
[H3C] interface Ethernet 1/0/2
[H3C-Ethernet1/0/2]
monitor-interface
Note: The mirrored-to command works only with the permit rules in ACLs.

2.6 Precautions

Note the following points during the configurations:
1) When ACL rules are applied to a port, the match order of multiple rules in an ACL
depends on the hardware of the switch. For the S3600 Series Ethernet Switches,
the match order is "first applied, last matched". Even if you configure a match order
while defining an ACL, the configured one will not work.
2) Each port supports eight outbound queues. The priority of Queues 7 to 0 goes
down one by one. When the SP+WRR queue scheduling algorithm is applied on a
port, the switch will first schedule the queue with the weight of 0. If no packets are
sent from the queue, the switch will perform the WRR scheduling for the remaining
queues. When the SP+WFQ queue scheduling algorithm is applied on a port, the
switch will first schedule the queue with the bandwidth of 0. If no packets are sent
Chapter 2 Examples of QACL Configuration
mirrored-to inbound
mirrored-to inbound
2-8
ip-group 3010
ip-group 3010
rule 0
rule 0