R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

281
2. Create a class and enter class
view.
traffic classifier tcl-name [ operator
{ and | or } ]
By default, the operator of a class
is AND.
The operator of a class can be
AND or OR.
• AND—A packet is assigned to
a class only when the packet
matches all the criteria in the
class.
• OR—A packet is assigned to a
class if it matches any of the
criteria in the class.
3. Configure match criteria.
if-match match-criteria N/A
Defining a traffic behavior
A traffic behavior is a set of QoS actions (such as traffic filtering, shaping, policing, and priority marking)
to take on a class of traffic. To define a traffic behavior, first create it and then configure QoS actions,
such as priority marking and traffic redirecting, in traffic behavior view.
To define a traffic behavior:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a traffic behavior and
enter traffic behavior view.
traffic behavior behavior-name N/A
3. Configure actions in the traffic
behavior.
See the subsequent chapters, depending on the purpose of the traffic
behavior.
Defining a policy
You associate a behavior with a class in a QoS policy to perform the actions defined in the behavior for
the class of packets.
To associate a class with a behavior in a policy:
Ste
p
Command
1. Enter system view.
system-view
2. Create a policy and enter policy view.
qos policy policy-name
3. Associate a class with a behavior in the policy.
classifier tcl-name behavior behavior-name
NOTE:
• On some devices, if the ACL contains deny rules, the if-match clause is ignored and the matching
process continues.
• On some devices, the ACL is used for classification only and the permit/deny action in ACL rules is
ignored. Actions taken on matching packets are defined in traffic behaviors.
Applying the QoS policy to an interface
A policy can be applied to multiple interfaces, but only one policy can be applied in one direction
(inbound or outbound) of an interface.