H3C S3100 Series Operation Manual page 602

Table 1-25 Redirect packets that are of a VLAN and match specific ACL rules
Operation
Enter system view
Configure traffic redirecting
Table 1-26 Redirect packets that are of a port group and match specific ACL rules
Operation
Enter system view
Enter port group view
Configure traffic redirecting
Table 1-27 Redirect packets passing a port and matching specific ACL rules
Operation
Enter system view
Enter Ethernet port view
Configure traffic redirecting
The traffic redirecting function configured on a VLAN is only applicable to packets tagged with
802.1Q header.
Packets redirected to the CPU are not forwarded.
If the traffic is redirected to a Combo port in down state, the system automatically redirects the
traffic to the port corresponding to the Combo port in up state. Refer to the Port Basic Configuration
module of this manual for information about Combo ports.
Configuration example
Ethernet 1/0/1 belongs to VLAN 2 and is connected to the 10.1.1.0/24 network segment.
Redirect all the packets from the 10.1.1.0/24 network segment to Ethernet 1/0/7.
1) Method I
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] traffic-redirect inbound ip-group 2000 interface Ethernet1/0/7
Command
system-view
traffic-redirect vlan vlan-id inbound
acl-rule { cpu | interface interface-type
interface-number }
Command
system-view
port-group group-id
traffic-redirect inbound acl-rule { cpu |
interface interface-type interface-number }
Command
system-view
interface interface-type interface-number
traffic-redirect inbound acl-rule { cpu |
interface interface-type interface-number }
1-23
Description
—
Required
Description
—
—
Required
Description
—
—
Required