H3C S7500 Series Ethernet Switches Release 3135 DHCP Configuration Examples

QACL Configuration Examples
H3C S7500 Series Ethernet Switches Release 3135 Chapter 2 QACL Configuration Examples
2-7
II. Network diagram
Internet
Switch
Data detect
server
GE2/0/6
GE2/0/5
PC 4
192.168.4.1/24
PC 5
192.168.4.2/24
GE2/0/4
Marketing department
VLAN 4
Figure 2-4 Network diagram for traffic redirecting and traffic mirroring configuration
III. Configuration procedure
# Define the time range from 8:00 to 18:00 in working days.
<H3C> system-view
[H3C] time-range tr1 8:00 to 18:00 working-day
# Create advanced ACL 3000 to sort out the HTTP packets from PC 4 and PC 5.
[H3C] acl number 3000
[H3C-acl-adv-3000] rule 0 permit tcp source 192.168.4.1 0 destination-port eq
80 time-range tr1
[H3C-acl-adv-3000] rule 1 permit tcp source 192.168.4.2 0 destination-port eq
80 time-range tr1
[H3C-acl-adv-3000] quit
# Configure traffic redirecting on GigabitEthernet 2/04 to redirect the Internet-accessing
traffic from PC 4 to the data monitoring device.
[H3C] interface GigabitEthernet 2/0/4
[H3C-GigabitEthernet2/0/4] qos
[H3C-qosb-GigabitEthernet2/0/4] traffic-redirect inbound ip-group 3000 rule
0 interface GigabitEthernet 2/0/6
[H3C-qosb-GigabitEthernet2/0/4] quit
[H3C-GigabitEthernet2/0/4] quit