Configuration example – H3C Technologies H3C S3100 Series Switches User Manual
Page 602
1-23
Table 1-25 Redirect packets that are of a VLAN and match specific ACL rules
Operation
Command
Description
Enter system view
system-view
—
Configure traffic redirecting
traffic-redirect vlan vlan-id inbound
acl-rule { cpu | interface interface-type
interface-number }
Required
Table 1-26 Redirect packets that are of a port group and match specific ACL rules
Operation
Command
Description
Enter system view
system-view
—
Enter port group view
port-group group-id
—
Configure traffic redirecting
traffic-redirect inbound acl-rule { cpu |
interface interface-type interface-number }
Required
Table 1-27 Redirect packets passing a port and matching specific ACL rules
Operation
Command
Description
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type interface-number
—
Configure traffic redirecting
traffic-redirect inbound acl-rule { cpu |
interface interface-type interface-number }
Required
z
The traffic redirecting function configured on a VLAN is only applicable to packets tagged with
802.1Q header.
z
Packets redirected to the CPU are not forwarded.
z
If the traffic is redirected to a Combo port in down state, the system automatically redirects the
traffic to the port corresponding to the Combo port in up state. Refer to the Port Basic Configuration
module of this manual for information about Combo ports.
Configuration example
z
Ethernet 1/0/1 belongs to VLAN 2 and is connected to the 10.1.1.0/24 network segment.
z
Redirect all the packets from the 10.1.1.0/24 network segment to Ethernet 1/0/7.
1) Method
I
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Sysname-acl-basic-2000] quit
[Sysname] interface Ethernet1/0/1
[Sysname-Ethernet1/0/1] traffic-redirect inbound ip-group 2000 interface Ethernet1/0/7