65配置
acl number 3000
rule 0 per tcp destination 1.1.1.1 0 destination-port eq www
rule 1 deny tcp destination-port eq www
#
interface GigabitEthernet3/0/18
qos
packet-filter inbound ip-group 3000
85配置
acl number 3000
rule 0 per tcp destination 1.1.1.1 0 destination-port eq www
rule 1 deny tcp destination-port eq www
#
interface GigabitEthernet3/0/18
packet-filter inbound ip-group 3000
9300配置
acl number 3002
rule 1 permit tcp destination 124.164.249.82 0 destination-port eq www
rule 2 permit tcp destination 124.164.234.18 0 destination-port eq www
rule 30 deny tcp destination-port eq www
#
traffic classifier 80 operator or precedence 15
if-match acl 3002
#
traffic behavior 80
#
traffic policy 80
classifier 80 behavior 80
#
interface GigabitEthernet1/0/0
traffic-policy 80 inbound
#
78配置
acl number 3002
rule 1 permit tcp destination 124.164.249.82 0 destination-port eq www
rule 2 permit tcp destination 124.164.234.18 0 destination-port eq www
rule 30 deny tcp destination-port eq www
#
traffic classifier 80 operator or precedence 15
if-match acl 3002
#
traffic behavior 80
#
qos policy 80
classifier 80 behavior 80
#
interface GigabitEthernet1/0/0
qos apply policy 80 inbound
#
NE80、NE40配置
acl number 11000
rule tcp destination 124.164.249.82 0.0.0.0 destination-port eq www
acl number 11001
rule tcp destination 124.164.249.83 0.0.0.0 destination-port eq www
acl number 11002
rule tcp destination 124.164.249.84 0.0.0.0 destination-port eq www
acl number 19999
rule tcp destination-port eq www
#
traffic classifier 80-1
if-match acl 11000
traffic classifier 80-2
if-match acl 11001
traffic classifier 80-3
if-match acl 11002
traffic classifier deny
if-match acl 19999
#
traffic behavior 80
permit
traffic behavior deny
deny
#
traffic policy 80
classifier 80-1 behavior 80 precedence 0
classifier 80-2 behavior 80 precedence 5
classifier 80-3 behavior 80 precedence 10
classifier deny behavior deny precedence 90
#
interface GigabitEthernet1/0/0
traffic-policy 80 inbound
#
8016配置
#
rule-map intervlan 80-2 tcp any 124.164.249.82 0 eq 80
rule-map intervlan 80-2 tcp any 124.164.249.83 0 eq 80
rule-map intervlan 80-2 tcp any 124.164.249.84 0 eq 80
rule-map intervlan deny tcp any any eq 80
#
eacl 80 80-1 permit
eacl 80 80-2 permit
eacl 80 80-3 permit
eacl 80 deny deny
#
interface Ethernet9/0/7
access-group switch eacl 80 vlan all
#
