AC板卡 QOS封堵6633端口，不生效

traffic classifier liutong-1 operator or

 if-match acl 3000 

#

traffic classifier lutong-3 operator or 

 if-match acl 3001 

#

 traffic behavior liutong-2 

 filter permit 

#

 traffic behavior liutong-4 

 filter deny

 # 

qos policy 1 

 classifier liutong-1 behavior liutong-2 

 classifier lutong-3 behavior liutong-4 #

acl number 3001 

 rule 1 deny tcp destination 61.132.70.195 0 destination-port eq 6633

 #

acl number 3000 

 rule 0 permit tcp source 10.114.0.0 0.0.3.255 destination 61.132.70.195 0 destination-port eq 6633

 rule 1 permit tcp source 10.114.4.0 0.0.3.255 destination 61.132.70.195 0 destination-port eq 6633

#

interface Bridge-Aggregation1 

 port link-type trunk 

 undo port trunk permit vlan 1 

 port trunk permit vlan 2 to 4094 

 qos apply policy 1 inbound 

 dhcp snooping trust 

只能使用QOS封堵，VLAN接口下的包过滤，会影响到用户的业务转发

聚合口下调用QOS策略