R3303-HP HSR6800 Routers Network Management and Monitoring Configuration Guide

129

Figure 48 Network diagram

Configuration procedure

1. Monitor the traffic sent by the technical department to access the Internet:

# Create ACL 3000 to allow packets from the technical department (on subnet 192.168.2.0/24)

to access the Internet.

<RouterA> system-view

[RouterA] acl number 3000

[RouterA-acl-adv-3000] rule permit tcp source 192.168.2.0 0.0.0.255 destination-port

eq www

[RouterA-acl-adv-3000] quit

# Create traffic class tech_c, and then configure the match criterion as ACL 3000.

[RouterA] traffic classifier tech_c

[RouterA-classifier-tech_c] if-match acl 3000

[RouterA-classifier-tech_c] quit

# Create traffic behavior tech_b, and then configure the action of mirroring traffic to port

GigabitEthernet 2/0/3.

[RouterA] traffic behavior tech_b

[RouterA-behavior-tech_b] mirror-to interface gigabitethernet 2/0/3

[RouterA-behavior-tech_b] quit

# Create QoS policy tech_p, and then associate traffic class tech_c with traffic behavior tech_b in

the QoS policy.

[RouterA] qos policy tech_p

[RouterA-qospolicy-tech_p] classifier tech_c behavior tech_b

[RouterA-qospolicy-tech_p] quit

# Apply QoS policy tech_p to the outgoing packets of GigabitEthernet 2/0/1.

[RouterA] interface gigabitethernet 2/0/1

[RouterA-GigabitEthernet2/0/1] qos apply policy tech_p outbound

[RouterA-GigabitEthernet2/0/1] quit

2. Monitor the traffic that the technical department sends to the marketing department: