H3C Technologies H3C SR8800 User Manual
Page 24
15
# Create a periodic time range spanning 8:00 to 18:00 in working days.
[Device] time-range trname 8:00 to 18:00 working-day
2.
Configure an ACL to control accesses to the salary server:
# Create and enter the view of advanced IPv4 ACL 3000.
[Device] acl number 3000
# Create a rule to control access of the President’s Office to the salary server.
[Device-acl-adv-3000] rule 1 permit ip source 129.111.1.2 0.0.0.0 destination
129.110.1.2 0.0.0.0
[Device-acl-adv-3000] quit
# Create and enter the view of advanced IPv4 ACL 3100.
[Device] acl number 3100
# Create a rule to control accesses of other departments to the salary server.
[Device-acl-adv-3100] rule 2 permit ip source any destination 129.110.1.2 0.0.0.0
time-range trname
[Device-acl-adv-3100] quit
3.
Apply the ACL:
# Configure traffic classification.
[Device] traffic classifier c1
[Device-classifier-c1] if-match acl 3000
[Device-classifier-c1] quit
[Device] traffic classifier c2
[Device-classifier-c2] if-match acl 3100
[Device-classifier-c2] quit
4.
Configure traffic behavior:
# Configure traffic behavior.
[Device] traffic behavior b1
[Device-behavior-b1] filter permit
[Device-behavior-b1] quit
[Device] traffic behavior b2
[Device-behavior-b2] filter deny
[Device-behavior-b2] quit
5.
Associate classification rules and actions:
# Configure a QoS policy.
[Device] qos policy p1
[Device-qospolicy-p1] classifier c1 behavior b1
[Device-qospolicy-p1] classifier c2 behavior b2
[Device-qospolicy-p1] quit
6.
Apply the QoS policy:
# Apply the QoS policy to the outbound direction of interface GigabitEthernet 2/1/1.
[Device] interface GigabitEthernet 2/1/1
[Device-GigabitEthernet2/1/1] qos apply policy p1 outbound