H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 54)

45
Configuring traffic filtering
You can filter in or filter out a class of traffic by associating the class with a traffic filtering action. For
example, you can filter packets sourced from a specific IP address according to network status.
Configuration procedure
To configure traffic filtering:
Step Command Remarks
1. Enter system view. system-view N/A
2. Create a class and enter
class view. traffic classifier tcl-name [ operator { and |
or } ]
N/A
3. Configure match criteria. if-match match-criteria N/A
4. Return to system view. quit N/A
5. Create a behavior and
enter behavior view.
traffic behavior behavior-name N/A
6. Configure the traffic
filtering action.
filter { deny | permit }
• deny: Drops packets.
• permit: Permits packets
to pass through.
7. Return to system view. quit N/A
8. Create a policy and enter
policy view.
qos policy policy-name N/A
9. Associate the class with the
traffic behavior in the QoS
policy. classifier tcl-name behavior behavior-name N/A
10. Return to system view. quit N/A
11. Apply the QoS policy.
• Applying the QoS policy to an interface
• Applying the QoS policy to online users
N/A
12. Display the traffic filtering
configuration.
display traffic behavior user-defined
[ behavior-name ] [ | { begin | exclude |
include } regular-expression ]
Optional.
Available in any view
NOTE:
With filter deny configured for a traffic behavior, the other actions in the traffic behavior do not take
effect.