如果要讓網路流量 Vlan 10 到 Vlan 20 會連通,但是Vlan 20 到Vlan 10不會通,HP5900可用以下vlan policy的方式,其他型號(CW5)沒測試過不確定
acl number 3100 name test
rule permit ip source 10.0.0.1 0 destination 20.0.0.1 0
acl number 3101 name test1
rule permit ip source 20.0.0.1 0 destination 10.0.0.1 0
traffic classifier test operator or
if-match acl name test
traffic behavior test
filter permit
traffic classifier test1 operator or
if-match acl name test1
traffic behavior test1
filter deny
qos policy test
classifier test behavior test
classifier test1 behavior test1
qos vlan-policy test vlan 10 inbound
qos vlan-policy test vlan 10 outbound
祝各位網路暢行無阻