H3C Technologies H3C SecBlade IPS Cards - Manual (Page 190)

18-11
Item Remarks
External Zone IP
Addresses
External Zone
Excluded IP Addresses
Configure the policy to take effect on only the set IP addresses, excluding the set
excluded IP addresses in the external zone.
The excluded IP addresses, if specified, must be contained in the IP addresses of the
external zone.
If the external zone IP addresses are not configured, the policy takes effect on all IP
addresses in the external zone.
Return to Bandwidth management configuration task list .
Bandwidth Management Configuration Example
Network requirements
As shown in Figure 18-12 :
z The internal network segment of a company is 192.168.10.0/24. Configure a bandwidth
management policy on IPS to perform the following actions for the services of the traffic received
and sent by all users (except the host with IP address 192.168.10.50) of the company as follows:
z Perform the Block action for the Gnutella service.
z Perform the Rate Limit action for the BitTorrent service.
Figure 18-12 Network diagram for bandwidth management configuration
Configuration procedure
# Configure rules for the default bandwidth management policy Service Control Policy, and apply the
policy to segment 0.
1) Select Bandwidth Management > Bandwidth Policies from the navigation tree, and click the
icon corresponding to Service Control Policy.