Configuring EPGs and Specifying GBPs

Context

On a network, servers can be added to EPGs as needed and GBPs are specified for the packets that match EPGs. Doing this controls traffic between servers.

Procedure

1. Configure an EPG.

   1. Run system-view

      The system view is displayed.

   2. Run traffic-segment segment-id segment-id [ segment-name segment-name ]

      An EPG is created and the EPG view is displayed.

      By default, no EPG exists.

   3. (Optional) Run description

      The description of an EPG is configured.

      By default, the description of an EPG is not configured.

   4. Run segment-member ip ip-address { mask | mask-length } [ vpn-instance vpn-instance-name ]

      A specified IP address is added to an EPG.

      By default, no IP address is contained in an EPG.

   5. Run quit

      Return to the system view.

   6. Run commit

      The configuration is committed.

2. Specify a GBP.

   1. Run segment classifier classifier-name

      A segment classifier is created and the segment classifier view is displayed, or the existing segment classifier view is displayed.

      By default, no segment classifier is created in the system.

   2. Run rule permit { source-segment segment-id | destination-segment segment-id } ^* [ protocol { protocol-value1 | { protocol-value2 | tcp | udp } [ source-port { eq port | gt port | lt port | range port-start port-end } | destination-port { eq port | gt port | lt port | range port-start port-end } ] ^* } ]

      An ACL rule is configured in the segment classifier view.

      By default, no ACL rule is configured in the segment classifier view.

   3. Run quit

      Return to the system view.

   4. Run segment behavior behavior-name

      A segment behavior is created and the segment behavior view is displayed, or the existing segment behavior view is displayed.

      By default, no segment behavior is created in the system.

   5. (Optional) Run statistics enable

      The traffic statistics collection function is enabled in the segment behavior view.

      By default, the traffic statistics collection function is disabled in the segment behavior view.

   6. Run quit

      Return to the system view.

   7. Run segment policy policy-name

      A segment policy is created and applied and the segment policy view is displayed, or the existing segment policy view is displayed.

      By default, no segment policy is created or applied in the system.

   8. Run classifier classifier-name behavior behavior-name [ precedence precedence-value ]

      A segment behavior is bound to a segment classifier in the segment policy.

   9. Run quit

      Return to the system view.

   10. Run commit

       The configuration is committed.