H3C S7500E Series Configuration Manual

Also see for H3C S7500E Series: Installation manual Operation manual Command manual Installation manual Configuration guide

H3C S7500E Series Configuration Manual Manual pdf 27 page image

1-17# Configure traffic behavior b_ market to deny matching packets.[Switch] traffic behavior b_market[Switch-behavior-b_market] filter deny[Switch-behavior-b_market] quit# Configure QoS policy p_rd to use traffic behavior b_rd for class c_rd.[Switch] qos policy p_rd[Switch-qospolicy-p_rd] classifier c_rd behavior b_rd[Switch-qospolicy-p_rd] quit# Configure QoS policy p_market to use traffic behavior b_market for class c_market.[Switch] qos policy p_market[Switch-qospolicy-p_market] classifier c_market behavior b_market[Switch-qospolicy-p_market] quit# Apply QoS policy p_rd to interface GigabitEthernet 2/0/2.[Switch] interface GigabitEthernet 2/0/2[Switch-GigabitEthernet2/0/2] qos apply policy p_rd inbound[Switch-GigabitEthernet2/0/2] quit# Apply QoS policy p_market to interface GigabitEthernet 2/0/3.[Switch] interface GigabitEthernet 2/0/3[Switch-GigabitEthernet2/0/3] qos apply policy p_market inboundIPv6 ACL Configuration ExampleNetwork RequirementsAs shown in Figure 1-2, a company interconnects its departments through the switch.Configure an ACL to deny access of the R&D department to external networks.Network DiagramFigure 1-2 Network diagram for IPv6 ACL configurationConfiguration Procedure# Create an IPv6 ACL 2000. system-view[Switch] acl ipv6 number 2000[Switch-acl6-basic-2000] rule deny source 4050::9000/120[Switch-acl6-basic-2000] quit# Configure class c_rd for packets matching IPv6 ACL 2000.[Switch] traffic classifier c_rd[Switch-classifier-c_rd] if-match acl ipv6 2000[Switch-classifier-c_rd] quit# Configure traffic behavior b_rd to deny matching packets.