i
Contents
Configuring ACLs ···························································································· 1
Overview ···························································································································································· 1
Applications on the switch ·························································································································· 1
ACL categories ··········································································································································· 1
Numbering and naming ACLs ···················································································································· 1
Match order ················································································································································ 2
Rule numbering ·········································································································································· 2
Fragment filtering with ACLs ······················································································································ 3
Configuration task list ········································································································································· 3
Configuring a basic ACL ···································································································································· 3
Configuring an IPv4 basic ACL ·················································································································· 4
Configuring an IPv6 basic ACL ·················································································································· 4
Configuring an advanced ACL ··························································································································· 5
Configuring an IPv4 advanced ACL ··········································································································· 5
Configuring an IPv6 advanced ACL ··········································································································· 6
Configuring an Ethernet frame header ACL ······································································································· 7
Copying an ACL ················································································································································· 8
Configuring packet filtering with ACLs ··············································································································· 8
Applying an ACL to an interface for packet filtering ··················································································· 9
Configuring the applicable scope of packet filtering on a VLAN interface ·················································· 9
Setting the interval for generating and outputting packet filtering logs······················································· 9
Setting the packet filtering default action ································································································· 10
Displaying and maintaining ACLs ···················································································································· 10
ACL configuration example ······························································································································ 10
Network requirements ······························································································································ 10
Configuration procedure ··························································································································· 11
Verifying the configuration ························································································································ 11
QoS overview ································································································ 13
QoS service models ········································································································································· 13
Best-effort service model ························································································································· 13
IntServ model ··········································································································································· 13
DiffServ model ·········································································································································· 13
QoS techniques overview ································································································································ 13
Deploying QoS in a network ···························································································································· 14
Configuring a QoS policy ·············································································· 15
Non-MQC approach ········································································································································· 15
MQC approach ················································································································································· 15
Configuration procedure diagram ···················································································································· 15
Defining a traffic class ······································································································································ 16
Configuration guidelines ··························································································································· 16
Configuration procedure ··························································································································· 16
Defining a traffic behavior ································································································································ 17
Defining a QoS policy ······································································································································ 18
Applying the QoS policy ··································································································································· 18
Applying the QoS policy to an interface ··································································································· 18
Applying the QoS policy to a VLAN ·········································································································· 19
Applying the QoS policy globally ·············································································································· 19
Applying the QoS policy to a control plane ······························································································ 19
Applying the QoS policy to a user profile ································································································· 20
Displaying and maintaining QoS policies ········································································································· 21
Configuring priority mapping ········································································· 22
Overview ·························································································································································· 22
Introduction to priorities ···························································································································· 22
Priority maps ············································································································································ 22