apply traffic-action sample (Flow-Route IPv6 VPN instance view)

Function

The apply traffic-action sample command configures sampling for matching packets in a static BGP Flow Specification route.

The undo apply traffic-action sample command restores the default configuration.

By default, sampling is not configured for matching packets in a static BGP Flow Specification route.

Format

apply traffic-action sample

undo apply traffic-action sample

Parameters

None

Views

Flow-Route IPv6 VPN instance view, Flow-Route VPN instance view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
flow-route	write

Usage Guidelines

Usage Scenario

After the apply traffic-action sample command is configured in a BGP (IPv6) Flow Specification route, sampling is implemented for matching packets. After that, sampled packets are detected to identify and filter out abnormal packets. This protects devices against attacks and enhance network security.

Prerequisites

A static BGP IPv6 Flow Specification route has been created using the flow-route command in the system view.

Example

# Configure sampling for matching packets in static BGP VPN Flow Specification route Rule 1.

<HUAWEI> system-view
[~HUAWEI] ip vpn-instance vpna
[~HUAWEI-vpn-instance-vpna] quit
[~HUAWEI] flow-route Rule1 vpn-instance vpna
[*HUAWEI-flow-route-vpna] if-match port equal 24
[*HUAWEI-flow-route-vpna] apply traffic-action sample

# Configure sampling for matching packets in static BGP IPv6 VPN Flow Specification route Rule 1.

<HUAWEI> system-view
[~HUAWEI] ip vpn-instance vpna
[~HUAWEI-vpn-instance-vpna] quit
[~HUAWEI] flow-route Rule1 ipv6 vpn-instance vpna
[*HUAWEI-flow-route-ipv6-vpna] if-match port equal 24
[*HUAWEI-flow-route-ipv6-vpna] apply traffic-action sample