R3303-HP HSR6800 Routers Network Management and Monitoring Configuration Guide

130
# Configure a time range named work to cover the time from 8: 00 to 18: 00 in working days.
[RouterA] time-range work 8:0 to 18:0 working-day
# Create ACL 3001 to allow packets sent from the technical department (on subnet
192.168.2.0/24) to the marketing department (on subnet 192.168.1.0/24).
[RouterA] acl number 3001
[RouterA-acl-adv-3001] rule permit ip source 192.168.2.0 0.0.0.255 destination
192.168.1.0 0.0.0.255 time-range work
[RouterA-acl-adv-3001] quit
# Create traffic class mkt_c, and then configure the match criterion as ACL 3001.
[RouterA] traffic classifier mkt_c
[RouterA-classifier-mkt_c] if-match acl 3001
[RouterA-classifier-mkt_c] quit
# Create traffic behavior mkt_b, and then configure the action of mirroring traffic to port
GigabitEthernet 2/0/3.
[RouterA] traffic behavior mkt_b
[RouterA-behavior-mkt_b] mirror-to interface gigabitethernet 2/0/3
[RouterA-behavior-mkt_b] quit
# Create QoS policy mkt_p, and then associate traffic class mkt_c with traffic behavior mkt_b in
the QoS policy.
[RouterA] qos policy mkt_p
[RouterA-qospolicy-mkt_p] classifier mkt_c behavior mkt_b
[RouterA-qospolicy-mkt_p] quit
# Apply QoS policy mkt_p to the outgoing packets of GigabitEthernet 2/0/2.
[RouterA] interface gigabitethernet 2/0/2
[RouterA-GigabitEthernet2/0/2] qos apply policy mkt_p outbound
Verifying the configuration
After completing the configurations, through the server, you can monitor all traffic sent by the technical
department to access the Internet and all IP traffic that the technical department sends to the marketing
department during working hours.