3com 8807 Reference Guide

C

HAPTER

 19: VLAN-ACL C

ONFIGURATION

 C

OMMANDS

change while the system is running. In general, you are not recommended to 
specify this parameter manually.

cpu: Redirects packets to the CPU.

next-hop ip-addr1 [ ip-addr2 ]: Redirects packets to the specified IP address. You 
can define two IP addresses at a stoke. The system redirects packets to the first IP 
address if the fist IP address has higher priority. However, if the first one is 
unreachable, the system automatically redirects packets to the second IP address.

invalid { forward | drop }: Sets the method of processing packets (forward or 
drop) when the IP address of the next hop is invlaid. The packet will be dropped by 
default.

Use the traffic-redirect command to activate an ACL and configure traffic 
redirection for the matching data flow in VLAN (only available to permit ACL 
rules).

Use the undo traffic-redirect command to remove traffic redirection setting.

You can redirect packets to the CPU or a specified IP address.

n 

■

Traffic redirection setting is only available for the permit rules in the ACL.

■

The packet redirected to the CPU cannot be forwarded normally.

■

You can achieve policy route by selecting the next-hop keyword in this 
command.

# Redirect to the CPU the packets of VLAN2 that match the permit rules in ACL 
3000.

<SW8800> system-view

 

System View: return to User View with Ctrl+Z.

 

[SW8800] vlan 2

 

[3Com-vlan2] traffic-redirect inbound ip-group 3000 cpu 

traffic-statistic inbound ip-group { acl-number | acl-name } [ rule rule [ 
system-index index ] ] [ tc-index index ]

undo traffic-statistic inbound ip-group { acl-number | acl-name } [ rule rule ]

VLAN view

inbound: Makes statistics of traffics of data packets received by a port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and 
advanced ACLs. acl-number: Sequence number of ACL, ranging from 2000 to