Netemu 虚拟化先锋 's Archiver

simon 发表于 2007-8-27 14:47

北电8600策略配置-filter

[table=98%][tr][td]以下是完整的策略配置,供大家参考!


ip traffic-filter create source src-ip 192.168.0.0/255.255.0.0 dst-ip 0.0.0.0/0.0.0.0 id 14

ip traffic-filter filter 14 action mode drop

ip traffic-filter filter 14 name 192.168-0.0

ip traffic-filter create source src-ip 192.180.0.0/255.255.0.0 dst-ip 192.168.0.0/255.255.255.0 id 15

ip traffic-filter filter 15 action mode forward

ip traffic-filter filter 15 name 192.168-192.180

ip traffic-filter create source src-ip 192.171.0.0/255.255.0.0 dst-ip 192.168.2.0/255.255.255.0 id 2

ip traffic-filter filter 2 action mode forward

ip traffic-filter filter 2 name 2-171

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.3.0/255.255.255.0 id 3

ip traffic-filter filter 3 action mode forward

ip traffic-filter filter 3 name 3-170

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.4.0/255.255.255.0 id 1

ip traffic-filter filter 1 action mode forward

ip traffic-filter filter 1 name 4-170

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.5.0/255.255.255.0 id 4

ip traffic-filter filter 4 action mode forward

ip traffic-filter filter 4 name 5-170

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.6.0/255.255.255.0 id 5

ip traffic-filter filter 5 action mode forward

ip traffic-filter filter 5 name 6-170

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.7.0/255.255.255.0 id 6

ip traffic-filter filter 6 action mode forward

ip traffic-filter filter 6 name 7-170

ip traffic-filter create source src-ip 192.171.0.0/255.255.0.0 dst-ip 192.168.7.0/255.255.255.0 id 7

ip traffic-filter filter 7 action mode forward

ip traffic-filter filter 7 name 7-171

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.8.0/255.255.255.0 id 8

ip traffic-filter filter 8 action mode forward

ip traffic-filter filter 8 name 8-170

ip traffic-filter create source src-ip 192.175.0.0/255.255.0.0 dst-ip 192.168.8.0/255.255.255.0 id 9

ip traffic-filter filter 9 action mode forward

ip traffic-filter filter 9 name 8-175

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.9.0/255.255.255.0 id 10

ip traffic-filter filter 10 action mode forward

ip traffic-filter filter 10 name 9-170

ip traffic-filter create source src-ip 192.172.0.0/255.255.0.0 dst-ip 192.168.9.0/255.255.255.0 id 11

ip traffic-filter filter 11 action mode forward

ip traffic-filter filter 11 name 9-172

ip traffic-filter create source src-ip 192.170.0.0/255.255.0.0 dst-ip 192.168.10.0/255.255.255.0 id 12

ip traffic-filter filter 12 action mode forward

ip traffic-filter filter 12 name 10-170

ip traffic-filter create source src-ip 192.177.0.0/255.255.0.0 dst-ip 192.168.10.0/255.255.255.0 id 13

ip traffic-filter filter 13 action mode forward

ip traffic-filter filter 13 name 10-177

ip traffic-filter create source src-ip 192.175.0.0/255.255.0.0 dst-ip 192.168.12.0/255.255.255.0 id 171

ethernet 3/1 auto-negotiate disable

ethernet 3/1 ip traffic-filter create

ethernet 3/1 ip traffic-filter add set 300

ethernet 3/1 ip traffic-filter default-action forward

ethernet 3/1 ip traffic-filter enable
[/td][/tr][/table]

xzg0503 发表于 2008-9-1 17:05

如何设置1624上VLAN访问控制

默认三层设备VLAN之间可以互通,但是要求目前某个VLAN和别的VLAN不通。怎么办?FLITER怎么做?

abcd494 发表于 2008-12-1 10:17

支持!帮顶

[url=http://www.zt286.cn/]免费杀毒软件下载[/url][url=http://www.zzztt.com.cn/]金山毒霸2009[/url][url=http://www.cmarues.cn/]wps[/url][url=http://www.lankous.cn/]酷我音乐盒[/url][url=http://www.weizi.org.cn/]免费金山毒霸下载[/url]~!!!!!!~~

页: [1]

Powered by Discuz! Archiver 7.0.0  © 2001-2009 Comsenz Inc.