H3C Technologies H3C S10500 Series Switches - Manual (Page 63)

55
Traffic filtering configuration
Traffic filtering overview
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status.
Configuring traffic filtering
Follow these steps to configure traffic filtering:
To do… Use the command… Remarks
Enter system view system-view —
Create a class and enter class
view traffic classifier tcl-name [ operator { and
| or } ]
—
Configure match criteria if-match match-criteria —
Return to system view quit —
Create a behavior and enter
behavior view
traffic behavior behavior-name —
Configure the traffic filtering
action
filter { deny | permit }
Required
• deny: Drops packets.
• permit: Permits packets to
pass through.
Return to system view quit —
Create a policy and enter
policy view
qos policy policy-name —
Associate the class with the
traffic behavior in the QoS
policy
classifier tcl-name behavior
behavior-name
—
Return to system view quit —
To an interface Applying the QoS policy to an interface —
To online users Applying the QoS policy to online users —
To a VLAN Applying the QoS policy to a VLAN —
Globally Applying the QoS policy globally —
Apply the
QoS
policy
To the control
plane Applying the QoS policy to the control
plane
—
Display the traffic filtering
configuration
display traffic behavior user-defined
[ behavior-name ] [ | { begin | exclude |
include } regular-expression ]
Optional
Available in any view