i
Contents
Configuring ACL ·························································································································································· 1
ACL overview ···································································································································································· 1
ACL categories ························································································································································· 1
ACL numbering and naming ··································································································································· 1
Match order ······························································································································································ 2
Rule comments and rule range remarks ················································································································· 3
ACL rule numbering ················································································································································· 3
ACL configuration task list ················································································································································ 3
Configuring a time range ················································································································································· 4
Configuring the ACL operating mode ····························································································································· 4
Configuring a basic ACL ·················································································································································· 5
Configuring an IPv4 basic ACL ······························································································································ 5
Configuring an IPv6 basic ACL ······························································································································ 6
Configuring an advanced ACL ········································································································································ 7
Configuring an IPv4 advanced ACL······················································································································· 7
Configuring an IPv6 advanced ACL······················································································································· 8
Configuring an Ethernet frame header ACL ················································································································ 10
Configuring a user-defined ACL ··································································································································· 11
Copying an ACL ···························································································································································· 12
Copying an IPv4 ACL ··········································································································································· 12
Copying an IPv6 ACL ··········································································································································· 12
Configuring packet filtering with ACLs ························································································································ 12
Applying an IPv4 ACL for packet filtering ·········································································································· 13
Applying an IPv6 ACL for packet filtering ·········································································································· 15
Displaying and maintaining ACLs ································································································································ 16
ACL configuration examples ········································································································································· 17
IPv4 ACL configuration example ························································································································· 17
IPv6 ACL configuration example ························································································································· 18
IPv4 packet filtering configuration example ······································································································· 19
QoS overview ····························································································································································· 21
Introduction to QoS ························································································································································ 21
QoS service models ······················································································································································· 21
Best-effort service model ······································································································································· 21
IntServ model ························································································································································· 21
DiffServ model ······················································································································································· 21
QoS techniques overview ············································································································································· 22
Deploying QoS in a network ······························································································································· 22
QoS processing flow in a device ························································································································ 22
QoS configuration approaches································································································································· 24
QoS configuration approach overview ······················································································································· 24
MQC approach ····················································································································································· 24
Non-MQC approach ············································································································································ 24
Configuring a QoS policy ············································································································································· 24
Defining a class ····················································································································································· 25
Defining a traffic behavior ··································································································································· 25
Defining a policy ··················································································································································· 26
Applying the QoS policy ······································································································································ 26
Displaying and maintaining QoS policies ·········································································································· 29
