85
Configuring traffic filtering
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status.
Configuration procedure
To configure traffic filtering:
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Create a class and enter
class view.
traffic classifier
classifier-name
[
operator
{
and
|
or
} ]
N/A
3.
Configure match criteria.
if-match
[
not
]
match-criteria
N/A
4.
Return to system view.
quit
N/A
5.
Create a behavior and
enter behavior view.
traffic behavior
behavior-name
N/A
6.
Configure the traffic
filtering action.
filter
{
deny
|
permit
}
•
deny
—Drops packets.
•
permit
—Permits
packets to pass through.
7.
Return to system view.
quit
N/A
8.
Create a policy and enter
policy view.
qos policy
policy-name
N/A
9.
Associate the class with
the traffic behavior in the
QoS policy.
classifier
classifier-name
behavior
behavior-name
N/A
10.
Return to system view.
quit
N/A
11.
Apply the QoS policy.
•
Applying the QoS policy to an
interface or PVC
•
Applying the QoS policy to a VLAN
•
Applying the QoS policy to online
users
Choose one of the application
destinations as needed.
12.
Display the traffic filtering
configuration.
display traffic behavior
{
system-defined
|
user-defined
}
[
behavior-name
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Optional.
Available in any view.
