Configuration procedure

To configure traffic filtering:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Create a class and enter class view.

traffic classifier classifier-name [ operator { and | or } ]

N/A

3. Configure match criteria.

if-match [ not ] match-criteria

N/A

4. Return to system view.

quit

N/A

5. Create a behavior and enter behavior view.

traffic behavior behavior-name

N/A

6. Configure the traffic filtering action.

filter { deny | permit }

  • deny—Drops packets.

  • permit—Permits packets to pass through.

7. Return to system view.

quit

N/A

8. Create a policy and enter policy view.

qos policy policy-name

N/A

9. Associate the class with the traffic behavior in the QoS policy.

classifier classifier-name behavior behavior-name

N/A

10. Return to system view.

quit

N/A

11. Apply the QoS policy.

Choose one of the application destinations as needed.

12. Display the traffic filtering configuration.

display traffic behavior { system-defined | user-defined } [ behavior-name ] [ | { begin | exclude | include } regular-expression ]

Optional.

Available in any view.

If a traffic behavior has the filter deny action, all the other actions do not take effect.