华为交换机配置准入设备需要的QOS流策略

接上篇本次设备换成了华为交换机，配置思路相同，命令有微小的差别
#设置镜像观察口1 这个口接准入镜像口
observe-port 1 interface GigabitEthernet0/0/23
#捕捉准入设备感兴趣流
acl number 3000
rule 5 permit tcp tcp-flag syn
rule 10 permit tcp tcp-flag ack syn
rule 15 permit tcp destination-port eq www
rule 20 permit tcp destination-port eq 443
rule 25 permit tcp destination-port eq 8080
rule 30 permit tcp destination-port eq 8081
rule 35 permit tcp destination-port eq 8443
rule 40 permit tcp destination-port eq 8088
rule 45 permit udp destination-port range bootps bootpc
rule 50 permit icmp icmp-type echo-reply
rule 55 permit udp destination-port eq dns
#捕捉准入设备感兴趣流
acl number 4000
rule 5 permit l2-protocol arp
#流分类匹配上述感兴趣流
traffic classifier name operator and
if-match acl 3000
if-match acl 4000
#动作为针对这些流量镜像到观察口1
traffic behavior name
permit
mirroring to observe-port 1
#创建流策略，关联上述流量和动作
traffic policy name
classifier name behavior name
#这个口姐准入的镜像口
interface GigabitEthernet0/0/23
#在业务口调用该流策略
interface GigabitEthernet0/0/24
traffic-policy name inbound