HP 5500 Ei 5500 Si Switch Series Configuration Guide

 58 
Configuring traffic filtering 
Traffic filtering filters traffic matching certain criteria. For example, you can filter packets sourced from a 
specific IP address according to network status. 
Configuration procedure 
To configure traffic filtering:  
Step Command Remarks 
1.   Enter system view. 
system-view N/A 
2.  Create a class and enter 
class view.  traffic classifier
 tcl-name  [ operator  { and  
|  or  } ]   N/A 
3.
  Configure match criteria. 
if-match match-criteria   N/A 
4.  Return to...

 59 
Traffic filtering configuration example 
Network requirements 
As shown in Figure 18, Ho st is connected to GigabitEthernet 1/0/1 of Device. 
Configure traffic filtering to filter the packets with  source port being 21, and received on GigabitEthernet 
1/0/1. 
Figure 18  Network diagram 
 
 
Configuration procedure 
# Create advanced ACL 3000, and configure a rule to match packets whose source port number is 21. 
 system-view 
[DeviceA] acl number 3000 
[DeviceA-acl-adv-3000] rule 0 permit tcp...

 60 
Configuring priority marking 
P rio ri t y  m a rk i n g  s e t s  t h e  p rio ri t y  fi e l d s  o r  f l a g  bi t s  o f packets to modify the priority of traffic. For example, 
you can use priority marking to set IP precedence or DSCP for a class of IP traffic to change its 
transmission priority in the network. 
Priority marking can be used together with priority mapping. For more information about priority 
mapping, see  Configuring priority mapping . 
Color-based priority marking 
Coloring...

 61 
 
Configuration procedure 
To  c o n fig u re  p rio ri t y  m a rk i n g :   
Step Command Remarks 
1.  Enter system view. 
system-view N/A 
2.  Create a class and enter 
class view.  traffic classifier
 tcl-name  [ operator  { and  | 
or  } ]   N/A 
3.
  Configure match criteria. 
if-match match-criteria   N/A 
4.  Return to system view. 
quit  N/A 
5.  Create a behavior and 
enter behavior view.  traffic behavior 
behavior-name N/A 
6.  Set the DSCP value for 
packets.  remark
 [ green  | red  |...

 62 
Table 5 Support for priority marking actions in the inbound and outbound directions 
Action inbound
 outbound 
802.1p priority marking  Yes Yes 
Drop precedence marking  Yes No 
DSCP marking  Yes Yes 
IP precedence marking  Yes Yes 
Local precedence marking  Yes No 
 
Local precedence re-marking configuration 
example 
Network requirements 
As shown in Figure 19, the company’s enterprise network interconnects hosts with servers through Device. 
The network is described as follows: 
•   Host A and...

 63 
 system-view 
[Device] acl number 3000 
[Device-acl-adv-3000] rule permit ip destination 192.168.0.1 0 
[Device-acl-adv-3000] quit 
# Create advanced ACL 3001, and configure a rule to match packets with destination IP address 
192.168.0.2. 
[Device] acl number 3001 
[Device-acl-adv-3001] rule permit ip destination 192.168.0.2 0 
[Device-acl-adv-3001] quit 
# Create advanced ACL 3002, and configure a rule to match packets with destination IP address 
192.168.0.3. 
[Device] acl number 3002...

 64 
[Device-qospolicy-policy_server] classifier classifier_mserver behavior \
behavior_mserver 
[Device-qospolicy-policy_server] classifier classifier_fserver behavior \
behavior_fserver 
[Device-qospolicy-policy_server] quit 
# Apply the policy named policy_server to the incoming traffic of GigabitEthernet 1/0/1. 
[Device] interface gigabitethernet 1/0/1 
[Device-GigabitEthernet1/0/1] qos apply policy policy_server inbound 
[Device-GigabitEthernet1/0/1] quit 
  

 65 
Configuring traffic redirecting 
Traffic redirecting is the action of redirecting the packets matching the specific match criteria to a certain 
location for processing. 
The following redirect  actions are supported: 
•   Redirecting traffic to the CPU —redirects packets that require processing by the CPU to the CPU. 
•   Redirecting traffic to an interface —redirects packets that require processing by an interface to the 
interface. Note that this action applies to only  Layer 2 packets, and the...

 66 
Step Command Remarks 
6.  Configure a traffic redirecting 
action.  redirect 
{ cpu  | interface  interface-type 
interface-number |  next-hop  { ipv4-add1  
[ ipv4-add2 ] |  ipv6-add1 [ interface-type 
interface-number  ] [ ipv6-add2  [ interface-type 
interface-number  ] ] } [ fail-action { discard | 
forward  } ] }  The 5500 SI switch 
does not support the 
next-hop
 or 
fail-action  keyword. 
 
7.  Return to system view. 
quit  N/A 
8.  Create a policy and enter 
policy view.  qos policy...

 67 
Figure 20 Network diagram 
 
 
Configuration procedure 
# Create basic ACL 2000, and configure a rule to match packets with source IP address 2.1.1.1. 
 system-view 
[DeviceA] acl number 2000 
[DeviceA-acl-basic-2000] rule permit source 2.1.1.1 0 
[DeviceA-acl-basic-2000] quit 
# Create basic ACL 2001, and configure a rule to match packets with source IP address 2.1.1.2. 
[DeviceA] acl number 2001 
[DeviceA-acl-basic-2001] rule permit source 2.1.1.2 0 
[DeviceA-acl-basic-2001] quit 
# Create a class...