No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Typical Configuration Examples

SD-WAN V100R018C00

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Forbidding Access to YouTube During Working Hours

Forbidding Access to YouTube During Working Hours

Related Products

Agile Controller-Campus: V300R003C00

AR: V300R003C00

Networking Requirements

Figure 1-26 shows the SD-WAN networking of an enterprise. Employees need to be denied access to YouTube during working hours from 09:00 to 17:00.

Figure 1-26 Enterprise networking

Solution Design

Configure an ACL policy on the overlay network to meet the enterprise requirements: Configure a traffic classifier template to identify the YouTube service, configure the effective time template to specify the working time, and associate the ACL policy with the site that forbids employees to access the YouTube service.

Data Plan

Table 1-71 Application group

Item

Value

Name

App_Group_Youtube

Description

-

Predefined Applications

SA signature database

SA_H30071000 (6000+)

Add Predefined Applications

YouTube_Downloader

Youtube

Table 1-72 Traffic classifier template information

Item

Value

Traffic classifier name

test_traffic_YouTube

Source IP

-

Destination IP

-

DSCP

-

Type

L7

Application

App_Group_Youtube

Table 1-73 Effective time template information

Item

Value

Template name

WorkingTime

Time type

Weekly

Every Week

Monday to Friday

Start time

09:00:00

End time

17:00:00

Table 1-74 ACL policy information

Item

Value

Policy name

test_traffic_ACL

Traffic classifier template

test_traffic_YouTube

Policy priority

1

Interface

LAN

Traffic filter

Deny

Traffic direction

Inbound

Effective time template

WorkingTime

Select Site

Hub1, Hub2, Site2, Site3, Site4

Procedure

  1. Log in to the Agile Controller-Campus as a tenant administrator.
  2. Finish creating sites.
  1. Configure an application group.

    1. Choose Configuration > Application Management.
    2. Click Application Group. On the Application Group page that is displayed, click Create.
    3. Enter information about the application group. In the DPI area, click Add Predefined Applications and select an application.
    4. Click OK on the Application Group page.

  2. Configure a traffic classifier template.

    1. Choose Configuration > Traffic Policy.
    2. Click Traffic Classifier Template. Click Create to create a traffic classifier template.
    3. Configure a traffic classification rule.

  3. Configure an effective time template.

    1. Choose Configuration > Traffic Policy.
    2. Click Validity Period Template, and click Create.
    3. Configure the effective time.

  1. Configure an ACL policy on the overlay network.

    1. Choose Configuration > Traffic Policy.
    2. On the Overlay page, select the VPN to which the sites to be configured belong.
    3. Click ACL. In the dialog box that is displayed, click Create to configure an ACL policy.

    4. On the ACL tab page, click in the Operation column of the policy. In the Attach Sites dialog box that is displayed, select a site to be bound to the policy. Click and then click OK.

    5. Select the policy to be submitted, click Commit, and select Commit Selected.
    6. In the Commit dialog box that is displayed, set Effective time to Immediately and click OK.

  2. Check the ACL policy configuration.

    1. Choose Maintenance > Provisioning Result.
    2. Click Generate Configuration to view the configuration result. The status is Succeeded.

    3. Click Deploy to Device. In the list on the left, click the configured ACL policy to view the configuration deployment result. The status is Succeeded.

Translation
Download
Updated: 2019-03-04

Document ID: EDOC1100036696

Views: 18206

Downloads: 116

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next