Configuring traffic filtering, Configuration procedure – H3C Technologies H3C WX3000E Series Wireless Switches User Manual
Page 54
45
Configuring traffic filtering
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status.
Configuration procedure
To configure traffic filtering:
Step Command
Remarks
1.
Enter system view.
system-view N/A
2.
Create a class and enter
class view.
traffic classifier tcl-name [ operator { and |
or } ]
N/A
3.
Configure match criteria.
if-match match-criteria
N/A
4.
Return to system view.
quit
N/A
5.
Create a behavior and
enter behavior view.
traffic behavior behavior-name N/A
6.
Configure the traffic
filtering action.
filter { deny | permit }
•
deny: Drops packets.
•
permit: Permits packets
to pass through.
7.
Return to system view.
quit
N/A
8.
Create a policy and enter
policy view.
qos policy policy-name
N/A
9.
Associate the class with the
traffic behavior in the QoS
policy.
classifier tcl-name behavior behavior-name
N/A
10.
Return to system view.
quit
N/A
11.
Apply the QoS policy.
•
Applying the QoS policy to an interface
•
Applying the QoS policy to online users
N/A
12.
Display the traffic filtering
configuration.
display traffic behavior user-defined
[ behavior-name ] [ | { begin | exclude |
include } regular-expression ]
Optional.
Available in any view
NOTE:
With filter deny configured for a traffic behavior, the other actions in the traffic behavior do not take
effect.