H3C Technologies H3C MSR 50 - Manual (Page 194)

181
[DeviceA] time-range work 8:0 to 18:0 working-day
# Create ACL 3001 to allow packets sent from the technical department (on subnet
192.168.2.0/24) to the marketing department (on subnet 192.168.1.0/24).
[DeviceA] acl number 3001
[DeviceA-acl-adv-3001] rule permit ip source 192.168.2.0 0.0.0.255 destination
192.168.1.0 0.0.0.255 time-range work
[DeviceA-acl-adv-3001] quit
# Create traffic class mkt_c, and then configure the match criterion as ACL 3001.
[DeviceA] traffic classifier mkt_c
[DeviceA-classifier-mkt_c] if-match acl 3001
[DeviceA-classifier-mkt_c] quit
# Create traffic behavior mkt_b, and then configure the action of mirroring traffic to port Ethernet
1/3.
[DeviceA] traffic behavior mkt_b
[DeviceA-behavior-mkt_b] mirror-to interface ethernet 1/3
[DeviceA-behavior-mkt_b] quit
# Create QoS policy mkt_p, and then associate traffic class mkt_c with traffic behavior mkt_b in
the QoS policy.
[DeviceA] qos policy mkt_p
[DeviceA-qospolicy-mkt_p] classifier mkt_c behavior mkt_b
[DeviceA-qospolicy-mkt_p] quit
# Apply QoS policy mkt_p to the outgoing packets of Ethernet 1/2.
[DeviceA] interface ethernet 1/2
[DeviceA-Ethernet1/2] qos apply policy mkt_p outbound
Verifying the configuration
# Verify that you can monitor the following traffic through the server:
• All traffic sent by the technical department to access the Internet.
• All IP traffic that the technical department sends to the marketing department during working hours.