H3C Technologies H3C MSR 50 - Manual (Page 18)

11
Figure 2 Network diagram
Configuration procedure
1. Configure Device:
# Enable the ACFP server and ACSEI server.
<Device> system-view
[Device] acfp server enable
[Device] acsei server enable
2. Use a MIB browser to configure a collaboration policy to redirect traffic arriving at interface
Ethernet 1/2 to the ACFP client:
a. Set the value of the node hh3cAcfpClientRowStatus to 4 to create an ACFP client with the index
1, and set the value of the node hh3cAcfpClientMode to 1 to enable working mode redirect for
the client.
b. Set the node hh3cAcfpPolicyRowStatus to 4 to create an ACFP policy and assign index 1.1 to
the policy, where the first "1" represents the index of the ACFP client you just created. Search
the ifTable node for the indexes of interfaces Ethernet 1/2 and Ethernet 1/3, and set the value
of the node hh3cAcfpPolicyInIfIndex to the index of Ethernet 1/2 and set the value of the node
hh3cAcfpPolicyDestIfIndex to the index of Ethernet 1/3 to specify the interfaces as the inbound
interface and outbound interface of the policy respectively.
c. Set the value of the node hh3cAcfpRuleRowStatus to 4 to create an ACFP rule, and assign
index 1.1.1 to the rule, where the first "1" is the client index and the second "1" is the policy
index. Set the value of the node hh3cAcfpRuleAction to 3 to specify the redirect action.
3. Use the MIB browser to configure a collaboration policy to permit packets from 192.168.1.1/24
and drop packets from 192.168.1.2/24:
a. Set the node hh3cAcfpPolicyRowStatus to 4 to create an ACFP policy and assign index 1.2 to
the policy, and set the value of the node hh3cAcfpPolicyInIfIndex to the index of Ethernet 1/2
to specify the interface as the inbound interface of the policy.
b. Set the value of the node hh3cAcfpRuleRowStatus to 4 to create an ACFP rule, and assign
index 1.2.1 to the rule. Set the value of the node hh3cAcfpRuleAction to 1 to specify the permit
action. Set the value of the node hh3cAcfpRuleSrcIP to 0.0.0.255 and set the value of the node
hh3cAcfpRuleSrcIPMask to 0.0.0.255 to match packets from 192.168.1.1/24.
c. Set the value of the node hh3cAcfpRuleRowStatus to 4 to create an ACFP rule, and assign
index 1.2.2 to the rule. Set the value of the node hh3cAcfpRuleAction to 2 to specify the deny
Eth1/3
Eth1/2 Eth1/1
Device
ACFP client
ACFP server
Host A
192.168.1.1/24
Host B
192.168.1.2/24
Host C
192.168.2.1/24
Host D
192.168.2.2/24