5900 ACL Sample

如果要讓網路流量 Vlan 10 到 Vlan 20 會連通，但是Vlan 20 到Vlan 10不會通，HP5900可用以下vlan policy的方式，其他型號(CW5)沒測試過不確定

acl number 3100 name test

rule permit ip source 10.0.0.1 0 destination 20.0.0.1 0

acl number 3101 name test1

rule permit ip source 20.0.0.1 0 destination 10.0.0.1 0

traffic classifier test operator or

if-match acl name test

traffic behavior test

filter permit

traffic classifier test1 operator or

if-match acl name test1

traffic behavior test1

filter deny

qos policy test

classifier test behavior test

classifier test1 behavior test1

qos vlan-policy test vlan 10 inbound

qos vlan-policy test vlan 10 outbound

祝各位網路暢行無阻