6-16 Traffic Filtering ConfigurationWhen configuring traffic filtering, go to these sections for information you are interested in:z Traffic Filtering Overviewz Configuring Traffic Filteringz Traffic Filtering Configuration ExampleTraffic Filtering OverviewYou can filter in or filter out a class of traffic by associating the class with a traffic filtering action. Forexample, you can filter packets sourced from a specific IP address according to network status. Byusing ACL rules configured with a time range for traffic classification, you can implement time-basedtraffic filtering.Configuring Traffic FilteringFollow these steps to configure traffic filtering:To do… Use the command… RemarksEnter system view system-view —Create a class and enterclass viewtraffic classifier tcl-name [ operator{ and | or } ] —Configure the match criteria if-match match-criteria —Exit class view quit —Create a behavior and enterbehavior view traffic behavior behavior-name —Configure the traffic filteringaction filter { deny | permit }Requiredz deny: Drops packets.z permit: Permits packetsto pass through.Exit behavior view quit —Create a policy and enterpolicy view qos policy policy-name —Associate the class with thetraffic behavior in the QoSpolicyclassifier tcl-name behaviorbehavior-name —Exit policy view quit —To an interface Applying the QoS policy to aninterface —To online users Applying the QoS policy to onlineusers —Apply theQoSpolicyTo a VLAN Applying the QoS policy to a VLAN —
