Configuring ACL-based Redirection
Pre-configuration Tasks
Configure link layer attributes of interfaces to ensure that the interfaces work properly.
Configure an ACL.
Context
ACL-based redirection allows the device to redirect packets matching an ACL to the CPU or a specified interface.
If the traffic-redirect (system view), traffic-redirect (VLAN view), and traffic-redirect (interface view) commands are configured simultaneously, the ACL-based simplified traffic policies that are applied to the interface, VLAN, and system take effect in descending order of priority.
- Redirecting packets that match traffic classification rules to the CPU consumes CPU resources. When a traffic policy containing redirection to the CPU is applied, the device redirects packets matching traffic classification rules to the CPU, affecting the CPU. Exercise caution when applying the traffic policy containing redirection to the CPU.
- If an ACL-based simplified traffic policy needs to be applied to multiple VLANs and interfaces or multiple rules for matching packets from different source IP addresses need to be bound to the same ACL-based simplified traffic policy, you are advised to add these VLANs, source IP addresses, and interfaces to the same QoS group and apply the ACL-based simplified traffic policy to the QoS group.
Procedure
- Configure redirection in the system.
- Configure redirection in a VLAN.
- Configure redirection on an interface.
- Configure redirection in a QoS group.
Verifying the Configuration
Run the display traffic-policy applied-record traffic-redirect [ global [ slot slot-id ] | interface interface-type interface-number | vlan vlan-id | qos group group-id ] [ inbound ] command to check the application record of a specified traffic policy.
Follow-up Procedure
For the CE12800, if a low-priority traffic policy takes effect before you apply a high-priority traffic policy, ACL rules may be slow to take effect. Consequently, service processing will be delayed. You can run the traffic-policy fast-mode command in the system view to enable fast delivery of ACLss. This ensures that ACL rules take effect rapidly and services can be processed in real time.