Configuring ACL6-based Redirection
Pre-configuration Tasks
Configure link layer attributes of interfaces to ensure that the interfaces work properly.
Configure an ACL6.
Context
ACL6-based redirection allows the device to redirect packets matching an ACL6 to the CPU or a specified interface.
If the traffic-redirect (system view), traffic-redirect (VLAN view), and traffic-redirect (interface view) commands are configured simultaneously, the ACL6-based simplified traffic policies that are applied to the interface, VLAN, and system take effect in descending order of priority.
- Redirecting packets that match traffic classification rules to the CPU consumes CPU resources. Exercise caution when configuring a traffic policy that contains redirection to the CPU.
- If an ACL-based simplified traffic policy needs to be applied to multiple VLANs and interfaces or multiple rules for matching packets from different source IP addresses need to be bound to the same ACL-based simplified traffic policy, you are advised to add these VLANs, source IP addresses, and interfaces to the same QoS group and apply the ACL-based simplified traffic policy to the QoS group.
Procedure
- Configure redirection in the system.
- Configure redirection in a VLAN.
- Configure redirection on an interface.
- Configure redirection in a QoS group.
Verifying the Configuration
Run the display traffic-policy applied-record traffic-redirect [ global [ slot slot-id ] | interface interface-type interface-number | vlan vlan-id | qos group group-id ] [ inbound ] command to check the application record of a specified traffic policy.
Follow-up Procedure
For the CE12800, if a low-priority traffic policy takes effect before you apply a high-priority traffic policy, ACL6 rules may be slow to take effect. Consequently, service processing will be delayed. You can run the traffic-policy fast-mode command in the system view to enable fast delivery of ACL6s. This ensures that ACL6 rules take effect rapidly and services can be processed in real time.