After the display current-configuration command is run, the following configurations are displayed


acl number 3000
 rule 5 permit tcp destination-port eq www 


traffic classifier denywww operator or
 if-match acl 3000 


traffic behavior denywww
 deny     


traffic policy denywww
 share-mode
 classifier denywww behavior denywww 


As shown in the configuration, the deny action is defined in the traffic behavior, causing HTTP packets to be filtered out. As a result, the user cannot go online.


You can run the permit command in the traffic behavior view to allow HTTP packets to pass through. The user then can go online.

nice

thanks for share

nice note

nice

useful document, thanks