H3C S5100-SI Operation Manual page 440

Configuration procedure
# Create a time range trname covering the period from 8:00 to 18:00 during working days.
<Switch> system-view
[Switch] time-range trname 8:00 to 18:00 working-day
1) Configure a policy for the traffic of the marketing department
# Create basic ACL 2000 to permit the traffic of the hosts in the marketing department
during the specified time range.
[Switch] acl number 2000
[Switch-acl-basic-2000]
trname
[Switch-acl-basic-2000] quit
# Configure to mirror traffic matching ACL 2000 to GigabitEthernet 1/0/3.
[Switch] interface GigabitEthernet 1/0/1
[Switch-GigabitEthernet1/0/1]
monitor-interface
[Switch-GigabitEthernet1/0/1] quit
[Switch] interface GigabitEthernet 1/0/3
[Switch-GigabitEthernet1/0/3] monitor-port
[Switch-GigabitEthernet1/0/3] quit
2) Configure a policy for the traffic of the R&D department
# Create basic ACL 2001 to permit the traffic of the hosts in the R&D department during the
specified time range.
[Switch] acl number 2001
[Switch-acl-basic-2001]
trname
[Switch-acl-basic-2001] quit
# Configure to redirect traffic matching ACL 2001 to GigabitEthernet 1/0/3.
[Switch] interface GigabitEthernet 1/0/2
[Switch-GigabitEthernet1/0/2] traffic-redirect inbound ip-group 2001 interface
GigabitEthernet 1/0/3
rule permit source
mirrored-to
rule permit source
1-51
192.168.1.0 0.0.0.127
inbound ip-group
192.168.2.0 0.0.0.127
time-range
2000
time-range