H3C Technologies H3C SecBlade NetStream Cards User Manual
Page 179
164
[Device-vlan20] quit
# Create VLAN-interface, and assign an IP address to the VLAN-interface.
[Device] interface Vlan-interface 10
[Device-Vlan-interface10] ip address 10.1.1.1 255.255.0.0
[Device-Vlan-interface10] quit
[Device] interface Vlan-interface 20
[Device-Vlan-interface20] ip address 20.1.1.1 255.255.0.0
[Device-Vlan-interface20] quit
# Configure Ten-GigabitEthernet 4/0/1 as a trunk port, and configure the port to allow packets from
VLAN 10 and VLAN 20 to pass through.
[Device] interface ten-gigabitethernet4/0/1
[Device-Ten-GigabitEthernet4/0/1] port link-type trunk
[Device-Ten-GigabitEthernet4/0/1] port trunk permit vlan 10 20
[Device-Ten-GigabitEthernet4/0/1] quit
# Configure basic ACL 2000.
[Device] acl number 2000
[Device-acl-basic-2000] rule 0 permit source 10.1.0.0 0.0.255.255
[Device-acl-basic-2000] quit
# Configure class 1.
[Device] traffic classifier 1
[Device-classifier-1] if-match acl 2000
[Device-classifier-1] quit
# Create a traffic behavior, and configure the action of mirroring traffic to port Ten-GigabitEthernet
4/0/1 for the traffic behavior.
[Device] traffic behavior 1
[Device-behavior-1] mirror-to interface ten-gigabitethernet 4/0/1
[Device-behavior-1] quit
# Create QoS policy 1, and associate behavior 1 with class 1 in the policy.
[Device] qos policy 1
[Device-qospolicy-1] classifier 1 behavior 1
[Device-qospolicy-1] quit
# Apply the QoS policy to incoming traffic on interface GigabitEthernet 3/0/1.
[Device] interface gigabitethernet 3/0/1
[Device-GigabitEthernet3/0/1] qos apply policy 1 inbound
[Device-GigabitEthernet3/0/1] quit
# Enable ACSEI server for the NS card to synchronize the clock on the Device.
[Device] acsei server enable
2.
Configure the SecBlade NS card.
# Configure Ten-GigabitEthernet 0/0 as a trunk port, and configure the port to allow packets from
VLAN 10 and VLAN 20 to pass through.
<SecBlade> system-view
[SecBlade] interface ten-gigabitethernet 0/0
[SecBlade-Ten-GigabitEthernet0/0] port link-type trunk
[SecBlade-Ten-GigabitEthernet0/0] port trunk permit vlan 10 20
[SecBlade-Ten-GigabitEthernet0/0] quit