112
Figure 39 Network diagram
Configuration procedure
1. Monitor the traffic sent by the technology department to access the Internet.
# Create ACL 3000 to allow packets from the technology department (on subnet 192.168.2.0/24) to
access the Internet.
<DeviceA> system-view
[DeviceA] acl number 3000
[DeviceA-acl-adv-3000] rule permit tcp source 192.168.2.0 0.0.0.255 destination-port eq
www
[DeviceA-acl-adv-3000] quit
# Create traffic class tech_c, and configure the match criterion as ACL 3000.
[DeviceA] traffic classifier tech_c
[DeviceA-classifier-tech_c] if-match acl 3000
[DeviceA-classifier-tech_c] quit
# Create traffic behavior tech_b, and configure the action of mirroring traffic to port Ethernet 1/0/3.
[DeviceA] traffic behavior tech_b
[DeviceA-behavior-tech_b] mirror-to interface Ethernet 1/0/3
[DeviceA-behavior-tech_b] quit
# Create QoS policy tech_p, and associate traffic class tech_c with traffic behavior tech_b in the QoS
policy.
[DeviceA] qos policy tech_p
[DeviceA-qospolicy-tech_p] classifier tech_c behavior tech_b
[DeviceA-qospolicy-tech_p] quit
# Apply QoS policy tech_p to the outgoing packets of Ethernet 1/0/1.
[DeviceA] interface Ethernet 1/0/1
[DeviceA-Ethernet1/0/1] qos apply policy tech_p outbound
[DeviceA-Ethernet1/0/1] quit
2. Monitor the traffic that the technology department sends to the marketing department.
# Configure a time range named work to cover the time from 8: 00 to 18: 00 in working days.
[DeviceA] time-range work 8:0 to 18:0 working-day
To Next Page
Loading...
