Wednesday, March 14, 2012

Qos with acl in hp


Create the ACL with the Desired rules that needs to be implemented for specific port /vlan and restrict  permit the access.

acl number 3002
 rule 1 deny icmp source 10.96.78.33 0 destination 10.96.55.1 0
 rule 2 deny tcp source 10.96.78.33 0 destination 10.96.55.1 0 destination-port eq www


once the ACL is created to apply we need to use the QOS command to apply the settings onto the ports /vlans.

Need to create the classifier and apply the rule into it.


traffic classifier dropvlan operator and
 if-match acl 3002



create the behavior and apply the rule into it.

traffic behavior dropvlan
 filter deny


Create the QOS policy and apply the rule into it.


qos policy dropvlan
 classifier dropvlan behavior dropvlan

Enforce the QOS on the port./for vlan

interface GigabitEthernet3/0/27
 port access vlan 833
 qos apply policy dropvlan inbound

For Vlan :- qos vlan-policy dropvlan vlan 22 inbound

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...