traffic-filter (AP wired port profile view) (upgrade-compatible command)

Function

The traffic-filter command configures ACL-based IPv4 packet filtering on an AP's wired interface.

The undo traffic-filter command cancels ACL-based IPv4 packet filtering configuration on an AP's wired interface.

By default, ACL-based IPv4 packet filtering is not configured on an AP's wired interface.

Format

traffic-filter { inbound | outbound } acl { acl-number | name acl-name }

undo traffic-filter { inbound | outbound }

Parameters

Parameter	Description	Value
inbound	Configures ACL-based IPv4 packet filtering in the inbound direction.	-
outbound	Configures ACL-based IPv4 packet filtering in the outbound direction.	-
acl	Filters IPv4 packets based on a specified ACL.	-
acl-number	Specifies an ACL number.	The ACL must exist. The value is an integer that ranges from 3000 to 3031.
name acl-name	Filters IPv4 packets based on a named ACL. acl-name indicates the ACL name.	The ACL name must exist. The value range is the same as that of the acl-number parameter.

Views

AP wired port profile view

Default Level

3: Management level

Usage Guidelines

Usage scenario

The rules for an AP's wired interface to filter IPv4 packets based on ACLs are as follows:

If the action in the ACL rule is deny, the device discards IPv4 packets matching the rule.
If the action in the ACL rule is permit, the device allows IPv4 packets matching the rule to pass through.
If no rule is matched, IPv4 packets are allowed to pass through.

Prerequisites

An ACL rule has been created by running the acl [ number ] acl-number [ match-order { auto | config } ] or acl name acl-name acl-number [ match-order { auto | config } ] command.

Precautions

The traffic-filter command can reference an ACL with no rule configured. You can configure a rule for the ACL after running this command.

You can configure IPv4 packet filtering based on only one ACL in one direction. If a referenced ACL needs to be replaced, configure a new ACL to overwrite the original one.