3com 8807 Guia De Referência
270
C
HAPTER
17: Q
O
S C
OMMANDS
allowed to pass, and l3-vpn means that MPLS l3-vpn packets are allowed to pass.
destination-vlan must be the VLAN where the destination port belongs to.
destination-vlan must be the VLAN where the destination port belongs to.
next-hop ip-addr1 [ ip-addr2 ]: Redirects packets to the specified IP address. You
can define two IP addresses at a stoke, but the first one is with higher priority. That
is, the system redirects packets to the second IP address only if the first one is
unreachable.
can define two IP addresses at a stoke, but the first one is with higher priority. That
is, the system redirects packets to the second IP address only if the first one is
unreachable.
invalid { forward | drop }: Sets the method of processing packets (forward or
drop) when the IP address of the next hop is invalid. The packet will be dropped by
default.
drop) when the IP address of the next hop is invalid. The packet will be dropped by
default.
slot slotid: Redirects packets to the specified service processor card.
vlanid: Specifies the VLAN of the packets to be redirected.
designated-vlan vlanid: VLAN where a designated port resides.
join-vlan: if this key word is specified, and if redirection is enabled, the system will
add the port into the destination-vlan automatically; if redirection is disabled, the
system will remove the port from VLAN, if the last join-vlan enabled redirection in
VLAN is deleted. This field should be specified in the redirection applications
related to MPLS (such as VPLS, L3VPN and interchangeably plugged cards). Only
the Ethernet and GigabitEthernet port views support join-vlan currently.
add the port into the destination-vlan automatically; if redirection is disabled, the
system will remove the port from VLAN, if the last join-vlan enabled redirection in
VLAN is deleted. This field should be specified in the redirection applications
related to MPLS (such as VPLS, L3VPN and interchangeably plugged cards). Only
the Ethernet and GigabitEthernet port views support join-vlan currently.
Description
Use the traffic-redirect command to activate an ACL and configure traffic
redirection. Use the undo traffic-redirect command to remove traffic redirection
setting.
redirection. Use the undo traffic-redirect command to remove traffic redirection
setting.
You can redirect packets to the CPU, a specified Ethernet port, a specified IP
address or a specified slot.
address or a specified slot.
n
■
Traffic redirection setting is only available for the permitted rules in the ACL.
■
The packet redirected to the CPU cannot be forwarded normally.
■
You can achieve policy route by selecting the next-hop keyword in this
command.
command.
■
Multicast packets are not allowed to be redirected to the service processor
cards.
cards.
Related command: display qos-interface traffic-redirect. Refer to the
"VLAN&QinQ" section in the manual for the information on the traffic-redirect {
nested-vlan | modified-vlan } command.
"VLAN&QinQ" section in the manual for the information on the traffic-redirect {
nested-vlan | modified-vlan } command.
Example
# Configure traffic redirection on the interface cards for packets that match the
permit rules in ACL 4000: packets are redirected to the port Ethernet5/1/1.the
destination-vlan ID is 4094, L3 VPN packet is permitted..
permit rules in ACL 4000: packets are redirected to the port Ethernet5/1/1.the
destination-vlan ID is 4094, L3 VPN packet is permitted..
<SW8800> system-view
System View: return to User View with Ctrl+Z.
[SW8800]interface e thernet5/1/2