Applying a Traffic Policy
Pre-configuration Tasks
Before applying a traffic policy, complete the following task:
Procedure
Apply a traffic policy to an interface.
Run system-view
The system view is displayed.
Run interface interface-type interface-number[.subinterface-number ]
The interface view is displayed.
- Apply a traffic policy to the interface. You can apply one or three types of traffic policies to one direction of the interface.
Run traffic-policy policy-name { inbound | outbound }
A common traffic policy is applied to the outbound or inbound direction of the interface.
By default, no common traffic policy is applied to an interface.
Run traffic-policy policy-name { inbound | outbound } preprocess
A preprocessing traffic policy is applied to the outbound or inbound direction of the interface.
By default, no preprocessing traffic policy is applied to an interface.
Run traffic-policy policy-name { inbound | outbound } firstprocess
A preferential processing traffic policy is applied to the outbound or inbound direction of the interface.
By default, no preferential processing traffic policy is applied to an interface.
The preprocess and firstprocess parameters can be configured only for Layer 3 interfaces.
- Apply a traffic policy to an interzone.
Run system-view
The system view is displayed.
- Run firewall interzone zone-name1 zone-name2
An interzone is created and the interzone view is displayed.
By default, no interzone is created.
To create an interzone, you must specify two existing security zones.
Run traffic-policy policy-name
A traffic policy is bound to the interzone.
By default, no traffic policy is bound to an interzone.
- Apply a traffic policy to a bridge domain (BD).
Run system-view
The system view is displayed.
Run bridge-domain bd-id
A BD is created and the BD view is displayed.
By default, no BD is created.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the BD.
By default, no traffic policy is applied to a BD.
- Apply a traffic policy in the system view.
Run system-view
The system view is displayed.
Run traffic-policy policy-name global bind interface { interface-type interface-number } &<1-16>
A global traffic policy is applied to the interface and bound to an interface.
By default, no global traffic policy is applied to the device or bound to an interface.
