# Configure rule 3001 to match the traffic from the server to other devices on the intranet. Configure the default route so that intranet traffic is transmitted to the public network through interface 3 by default and interface 2 is used as the backup outbound interface.display traffic policy statistics interface gigabitethernet 0/1/0 inbound Info: The statistics is shared because the policy is shared. interface gigabitethernet 0/2/0 traffic-policy p1 inbound traffic-policy p1 outbound commit quitĪfter completing the configurations, run the ping 2.2.2.2 command on Device A to ping Device B, and run the display traffic policy statistics command on Device C to view statistics about traffic exchanged between Device A and Device B. interface gigabitethernet 0/1/0 traffic-policy p1 inbound traffic-policy p1 outbound commit quit traffic policy p1 classifier c1 behavior b1 share-mode statistic enable commit quit traffic classifier c1 if-match acl 3333 commit quit system-view sysname DeviceC commit acl number 3333 rule 5 permit ip source 1.1.1.1 0 destination 2.2.2.2 0 rule 10 permit ip source 2.2.2.2 0 destination 1.1.1.1 0 commit quit
Run the display interface ] command to view traffic information of the specified interface. Traffic-policy flow-limit outbound //Apply the traffic policy to the interface. Specify an interface according to your actual situation. In this example, the inbound interface is Eth-Trunk 1. Interface Eth-trunk 1 //Enter the view of the inbound interface of high-bandwidth traffic. Traffic-policy flow-limit //Configure a traffic policy named flow-limit.Ĭlassifier flow-limit behavior flow-limit //Associate the traffic classifier with the traffic behavior in the traffic policy. Set these values according to your actual situation. In this example, the values of CIR and PIR are 10 kbit/s. Traffic behavior flow-limit //Configure a traffic behavior named flow-limit.Ĭar cir 10 pir 10 green pass yellow discard red discard //Limit the traffic rate. If-match acl name flow-limit //Specify the ACL named flow-limit. Traffic classifier flow-limit operator or //Configure a traffic classifier named flow-limit. Rule 5 permit ip source 10.1.1.1 0 destination 10.2.1.1 0 //Match traffic with the source IP address of 10.2.1.1 and the destination IP address of 10.1.1.1 Configure an advanced ACL on PE1 to match high-bandwidth traffic.Īcl name flow-limit advance //Configure an advanced ACL named flow-limit to match high-bandwidth traffic.
0 kommentar(er)
