R2511-HP MSR Router Series ACL and QoS Configuration Guide(V5)

77
Configuring traffic filtering
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status.
Configuration procedure
To configure traffic filtering:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a class and enter
class view.
traffic classifier classifier-name [ operator
{ and | or } ]
N/A
3. Configure match criteria.
if-match [ not ] match-criteria N/A
4. Return to system view.
quit N/A
5. Create a behavior and
enter behavior view.
traffic behavior behavior-name N/A
6. Configure the traffic
filtering action.
filter { deny | permit }
• deny—Drops packets.
• permit—Permits packets to
pass through.
7. Return to system view.
quit N/A
8. Create a policy and enter
policy view.
qos policy policy-name N/A
9. Associate the class with the
traffic behavior in the QoS
policy.
classifier classifier-name behavior
behavior-name
N/A
10. Return to system view.
quit N/A
11. Apply the QoS policy.
• Applying the QoS policy to an
interface or PVC
• Applying the QoS policy to online
users
Choose one of the application
destinations as needed.
12. Display the traffic filtering
configuration.
display traffic behavior { system-defined
| user-defined } [ behavior-name ] [ |
{ begin | exclude | include }
regular-expression ]
Optional.
Available in any view.
If a traffic behavior has the filter deny action, all the other actions do not take effect.