54Configuring traffic filteringTraffic filtering filters traffic matching certain criteria. For example, you can filter packets sourced from aspecific IP address according to network status.Configuration procedureTo configure traffic filtering:Step Command Remarks1. Enter system view. system-view N/A2. Create a class and enterclass view.traffic classifier tcl-name [ operator { and| or } ] N/A3. Configure match criteria. if-match match-criteria N/A4. Return to system view. quit N/A5. Create a behavior andenter behavior view. traffic behavior behavior-name N/A6. Configure the trafficfiltering action. filter { deny | permit }• deny—Drops packets.• permit—Permits packets topass through.7. Return to system view. quit N/A8. Create a policy and enterpolicy view. qos policy policy-name N/A9. Associate the class with thetraffic behavior in the QoSpolicy.classifier tcl-name behaviorbehavior-name N/A10. Return to system view. quit N/A11. Apply the QoS policy.• Applying the QoS policy to aninterface• Applying the QoS policy to onlineusers• Applying the QoS policy to a VLAN• Applying the QoS policy globally• Applying the QoS policy to the controlplaneChoose one applicationdestination as needed.12. Display the traffic filteringconfiguration.display traffic behavior user-defined[ behavior-name ] [ | { begin | exclude |include } regular-expression ]Optional.Available in any viewNOTE:With filter deny configured for a traffic behavior, the other actions (except class-based accounting andtraffic mirroring) in the traffic behavior do not take effect.
