Qtech QSW-2910-28T-AC [106/212] Configuration example of qacl

+7(495) 797-3311 www.qtech.ru

Москва, Новозаводская ул., 18, стр. 1

106

 Display QOS statistic information of all interface

show qos-interface statistic

 Display priority configuration

show qos-info traffic-priority

 Display redirection configuration

show qos-info traffic-redirect

 Display flow statistic configuration

show qos-info traffic-statistic

 Display configuration of copying to CPU.

show qos-info traffic-copy-to-cpu

Details of this command refers to corresponded command.

7.4 Configuration example of QACL

7.4.1 Use QACL to realize user isolation

1. Brief introduction of isolation

Use user isolation to bind some interface and some IP address. Only the packet with the

source IP address being this one can be transmitted, or it will be dropped. This can fix

specified user to some interface to realize user management.

There are two types of mode: one is transmitting all ARP packet, the other is not transmitting

all ARP packet. In transmitting all ARP mode, after enabling user isolation, all ARP packet can

be transmitted. In not transmitting all ARP mode, after enabling user isolation, only after

configuring user binding rules (such as ip +port+mac), corresponded ARP packet can be

transmitted.

Followings are the configuring examples of two user isolation. Example 1 can use QACL to

realize user isolation of all ARP packet; example 2 uses QACL to realize user isolation of not

transmitting ARP packet.

2. Example 1

Example 1 uses QACL to realize user isolation of transmitting all ARP packet. This example

can realize following function:

(1) Enable user isolation (prevent all packet and permit ARP packet with VLAN id being

4016);

(2) Configure Ethernet interface 1 to be uplink interface (permit all packet from uplink

interface

(3) Configure binding rules of three users: