H3C Technologies H3C S3600 Series Switches User Manual
Page 762
1-32
# Create a time range trname covering the period from 8:00 to 18:00 during working days.
[Switch] time-range trname 8:00 to 18:00 working-day
2) Configure a policy for the traffic of the marketing department
# Create basic ACL 2000 to permit the traffic of the hosts in the marketing department during the
specified time range.
[Switch] acl number 2000
[Switch-acl-basic-2000] rule permit source 192.168.1.0 0.0.0.127 time-range trname
[Switch-acl-basic-2000] quit
# Configure to mirror traffic matching ACL 2000 to Ethernet 1/0/3.
[Switch] interface ethernet 1/0/1
[Switch-Ethernet1/0/1] mirrored-to inbound ip-group 2000 monitor-interface
[Switch-Ethernet1/0/1] quit
[Switch] interface ethernet 1/0/3
[Switch-Ethernet1/0/3] monitor-port
[Switch-Ethernet1/0/3] quit
3) Configure a policy for the traffic of the R&D department
# Create basic ACL 2001 to permit the traffic of the hosts in the R&D department during the specified
time range.
[Switch] acl number 2001
[Switch-acl-basic-2001] rule permit source 192.168.2.0 0.0.0.127 time-range trname
[Switch-acl-basic-2001] quit
# Configure to redirect traffic matching ACL 2001 to Ethernet 1/0/3.
[Switch] interface ethernet 1/0/2
[Switch-Ethernet1/0/2] traffic-redirect inbound ip-group 2001 interface Ethernet 1/0/3