6-16 Traffic Filtering ConfigurationWhen configuring traffic filtering, go to these sections for information you are interested in:z Traffic Filtering Overviewz Configuring Traffic Filteringz Traffic Filtering Configuration ExampleTraffic Filtering OverviewYou can filter in or filter out a class of traffic by associating the class with a traffic filtering action. Forexample, you can filter packets sourced from a specific IP address according to network status. Byusing ACL rules configured with a time range for traffic classification, you can implement time-basedtraffic filtering.Alternatively, you can implement traffic filtering on a port by directly applying an ACL on the port. For theconfiguration procedure, refer to ACL Configuration in the Security Volume.Configuring Traffic FilteringFollow these steps to configure traffic filtering:To do… Use the command… RemarksEnter system view system-view —Create a class and enterclass viewtraffic classifier tcl-name [ operator{ and | or } ] —Configure the match criteria if-match match-criteria —Exit class view quit —Create a behavior and enterbehavior view traffic behavior behavior-name —Configure the traffic filteringaction filter { deny | permit }Requiredz deny: Drops packets.z permit: Permits packetsto pass through.Exit behavior view quit —Create a policy and enterpolicy view qos policy policy-name —
