H3C Technologies H3C SecBlade NetStream Cards User Manual
Page 186
171
[Device-classifier-1] quit
# Create a traffic behavior, and configure the action of mirroring traffic to port Ten-GigabitEthernet
4/0/1 for the traffic behavior.
[Device] traffic behavior 1
[Device-behavior-1] mirror-to interface ten-gigabitethernet 4/0/1
[Device-behavior-1] quit
# Create QoS policy 1, and associate behavior 1 with class 1 in the policy.
[Device] qos policy 1
[Device-qospolicy-1] classifier 1 behavior 1
[Device-qospolicy-1] quit
# Apply the QoS policy to incoming traffic on interface GigabitEthernet 3/0/1.
[Device] interface gigabitethernet 3/0/1
[Device-GigabitEthernet3/0/1] qos apply policy 1 inbound
[Device-GigabitEthernet3/0/1] quit
# Enable ACSEI server for the NS card to synchronize the clock on the Device.
[Device] acsei server enable
2.
Configure the SecBlade NS card.
# Enable IPv6.
[SecBlade] ipv6
# Configure Ten-GigabitEthernet 0/0 as a trunk port, and configure the port to allow packets from VLAN
10 and VLAN 20 to pass through.
[SecBlade] interface ten-gigabitethernet 0/0
[SecBlade-Ten-GigabitEthernet0/0] port link-type trunk
[SecBlade-Ten-GigabitEthernet0/0] port trunk permit vlan 10 20
[SecBlade-Ten-GigabitEthernet0/0] quit
# Create a blackhole-type inline forwarding entry 1.
[SecBlade] inline-interfaces 1 blackhole
# Assign Ten-GigabitEthernet 0/0 to the blackhole-type inline forwarding entry 1 for discarding the
packets when they are received and processed.
[SecBlade] interface Ten-GigabitEthernet0/0
[SecBlade-Ten-GigabitEthernet0/0] port inline-interfaces 1
# Enable IPv6 NetStream for incoming traffic on Ten-GigabitEthernet 0/0.
[SecBlade-Ten-GigabitEthernet0/0] ipv6 netstream inbound
# Enable ACSEI client on Ten-GigabitEthernet 0/0 to synchronize the clock on the Device.
[SecBlade-Ten-GigabitEthernet0/0] acsei-client enable
[SecBlade-GigabitEthernet0/0] quit
# Assign an IP address to interface GigabitEthernet 0/1.
[SecBlade] interface gigabitethernet 0/1
[SecBlade-GigabitEthernet0/1] ip address 12.110.2.1 255.255.255.0
[SecBlade-GigabitEthernet0/1] quit
# In system view, configure the destination address for the IPv6 NetStream traditional data export with
the IP address 12.110.2.2 and port 5000.
[SecBlade] ipv6 netstream export host 12.110.2.2 5000