SJ-20150114102049-008-ZXR10 5900E Series (V3.00.11) Configuration Guide (QoS)
SJ-20150114102049-008-ZXR10 5900E Series (V3.00.11) Configuration Guide (QoS)
SJ-20150114102049-008-ZXR10 5900E Series (V3.00.11) Configuration Guide (QoS)
Version: 3.00.11
ZTE CORPORATION
No. 55, Hi-tech Road South, ShenZhen, P.R.China
Postcode: 518057
Tel: +86-755-26771900
Fax: +86-755-26770801
URL: http://support.zte.com.cn
E-mail: [email protected]
LEGAL INFORMATION
Copyright © 2014 ZTE CORPORATION.
The contents of this document are protected by copyright laws and international treaties. Any reproduction or
distribution of this document or any portion of this document, in any form by any means, without the prior written
consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by
contractual confidentiality obligations.
All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE
CORPORATION or of their respective owners.
This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions
are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose,
title or non-infringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the
use of or reliance on the information contained herein.
ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications
covering the subject matter of this document. Except as expressly provided in any written license between ZTE
CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter
herein.
ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice.
Users may visit the ZTE technical support website http://support.zte.com.cn to inquire for related information.
The ultimate right to interpret this product resides in ZTE CORPORATION.
Revision History
Figures............................................................................................................. I
Glossary ........................................................................................................ III
II
Intended Audience
This manual is intended for:
Chapter 1, Port QoS Provides the overview and principles of Port QoS configuration, related
Configuration configuration and maintenance commands, and configuration examples.
Chapter 2, Flow QoS Provides the overview and principles of Flow QoS configuration, related
Configuration configuration and maintenance commands, and configuration examples.
Conventions
This manual uses the following typographical conventions:
Italics Variables in commands. It may also refer to other related manuals and documents.
Bold Menus, menu options, function names, input fields, option button names, check boxes,
drop-down lists, dialog box names, window names, parameters, and commands.
Constant Text that you type, program codes, filenames, directory names, and function names.
width
[] Optional parameters.
{} Mandatory parameters.
II
1-1
à The traffic limit based on the port does not cause any extra delay.
The traffic limit based on the port uses the MMU register. If it is not supported by the
ACL rule, extra packets to this port will be dropped in the default drop mode. That is
to say, the current packets will be dropped if no token bucket is obtained.
After the rate is limited, the packet will be colored in srTCM BLIND mode. The EBS
is equal to the CBS, so there are only red and green packets, and no yellow packets.
If a token is obtained from the token bucket, the packet will be green. If no token is
obtained from the token bucket, the packet will be red. The red packets are dropped
by default, and the green packets are allowed.
l Traffic shaping
The traffic shaping function limits the rate of packets sent from the port. In this case,
packets can be sent out at an average speed. The traffic shaping function is mainly
used to match the rate of packets with the rate of downstream devices to avoid packet
congestion and packet loss.
The difference between traffic shaping and traffic limit is as follows: The traffic shaping
function buffers a packet that exceeds the committed rate, and then sends the packet
at an average speed. However, the traffic limit function discards the packet because
the packet exceeds the committed rate. The traffic shaping function causes the delay,
but the traffic limit function does not cause any delay.
The traffic shaping function is also implemented through the MMU register.
l Queue scheduling
Each physical port of the ZXR10 5900E supports eight output queues (queue 0-7)
which are called CoS queues. The switch performs the output operation on the
ingress in accordance with the Cos queue corresponding to 802.1p of packets.
When network congestion occurs, multiple packets may occupy the resources. This
problem is solved through the queue scheduling function.
The ZXR10 5900E supports three types of queue scheduling, including Strict Priority
(SP), Weighted Round Robin (WRR), and Deficit Weighted Round Robin (DWRR).
Eight output queues of this port use different scheduling modes.
à Strict Priority (SP)
In this mode, the packet in each queue is strictly scheduled in accordance with the
priority. The packets in the queue with the highest priority will be scheduled first.
When the packets with the highest priority in the queue are scheduled completely,
the packets in the queue with a second highest priority will be scheduled then,
and so on.
The strict priority scheduling ensures that packets of key services are processed
first. In addition, the QoS of key services are guaranteed. However, the queue
with a lower priority may never be processed.
1-2
This mode ensures that each queue has a chance to be scheduled. The weight
of each queue is different, so the time of each queue to be scheduled is different.
The weight refers to the proportion of resources obtained by each queue. The
packets in a queue with a higher priority take precedence over that in a queue
with a lower priority.
à Deficit Weighted Round Robin (DWRR)
This mode also ensures that each queue has a chance to be scheduled. The
weight of each queue is also different from another queue. The difference
between DWRR and WRR is: The weight configured in DWRR indicates the
scheduled bytes of eight queues during each scheduling (unit: kbyte), and the
weight configured in WRR indicates the number of scheduled packets of each
queue during each scheduling. So, the size of DWRR packets has less influence
on the bandwidth.
l Default priority
When packet congestion occurs, the switch will discard packets selectively. In
general, this selective rule refers to the drop priority. Each packet to the port from the
egress will be colored in accordance with its carried 802.1p label (packet priority).
Packets with different priorities will be colored green (low), yellow (middle), or red
(high) in accordance with a certain mapping relationship. Packets are dropped in
accordance with the color when queue congestion occurs. The color can also be
used by other drop policies.
The mapping table between the 802.1P user priority and the local drop priority of a
switch must be set.
When a switch receives a packet, it determines the CoS value of the packet. For a
TAG packet, the CoS value refers to the 802.1P user priority in the packet. For a
non-TAG packet, the switch determines the local priority of a packet in accordance
with the default local priority of the receiving port, and then determines the CoS value
of the packet in accordance with the relationship between the local priority and the
CoS value. After that, the mapping table determines the drop priority of the packet in
accordance with the CoS value. The default value is 0.
The drop priority is configured on the ingress interface.
l Local priority
The local priority here is different from the common "internal priority" used in the ACL
rule. The local priority here is a mapping relationship between the 802.1p packet and
eight CoS queues of the egress. That is to say, 802.1p packets with different priorities
(level 0-7) will be sent to different CoS queues for scheduling.
The local priority mapping is configured on the ingress.
The local mapping relationship is valid only for the local switching chip. It becomes
invalid when the ingress used for the mapping configuration and the egress used for
the scheduling are not in the same board or the same switching chip.
l Tail Drop
1-3
The tail drop policy is used for the egress of a queue. The packet is dropped in
accordance with its color. Three parameters need to be set, including CIR, CBS, and
EBS.
à When the queue length exceeds the total threshold, all packets will be dropped.
à When the queue length exceeds the drop threshold for yellow packets, yellow
packets will be dropped at a set rate.
à When the queue length exceeds the drop threshold for red packets, all red
packets will be dropped.
l DSCP Mapping
When a packet enters an interface, the new DSCP value, the packet priority, and the
drop priority of the packet can be set in accordance with the DSCP index. When the
DSCP mapping function of this port is enabled, the DSCP value is not changed, the
packet priority is set to DSCP/8, and the drop priority is set to 0 by default.
l Bandwidth Restriction
The buffer resources of a queue are limited, so multiple packets may occupy the
resources when network congestion occurs. When the minimum bandwidth and the
maximum bandwidth are configured, the bandwidth obtained by each queue is not
less than the minimum bandwidth and not more than the maximum bandwidth when
multiple packets seize resources. This ensures that each queue has a chance to
obtain the bandwidth.
l Weighted Random Early Detection
Traditional tail drop schemes may cause a lot of TCP messages being dropped and
lead to global TCP synchronization. But Weighted Random Early Detection, a method
generally used to avoid congestion, combines the IP priority and random early
detection policy and provides different services for different types of services. Groups
having higher priorities are processed first and packets are dropped randomly. This
avoids multiple TCP links from reducing the transmission speed at the same time.
Command Function
1-4
Command Function
Parameter Description
Command Function
Parameter Description
{ wrr | dwrr } Select one from two queue scheduling modes, by default, sp.
Command Function
1-5
Parameter Description
Parameter Description
<0-2> Drop priority of messages with pri=0. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=1. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=2. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=3. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=4. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=5. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=6. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
<0-2> Drop priority of messages with pri=7. 0 indicates a low priority, 1 indicates
a middle priority, and 2 indicates a high priority.
Parameter Description
1-6
Parameter Description
Parameter Description
Parameter Description
<0-4> Session ID. One session can send the tail drop parameters
of multiple queues.
1-7
Parameter Description
Parameter Description
Parameter Description
Parameter Description
Command Function
1-8
Parameter Description
WRED
Set the WRED by using the following commands on the ZXR10 5900E:
Command Function
Parameter Description
1-9
Parameter Description
weight <0-15> Weight of the current queue mapping to the average queue
through low-pass filter, range: 0–15.
cap-average Replace the average queue length with the current queue
length to calculate the drop probability.
Command Function
ZXR10#show running-config pm-qos | include trust-dscp Displays the dscp mapping function of an
interface.
ZXR10#show running-config pm-qos | include priority Displays the default priority of an interface.
ZXR10#show running-config pm-qos | include Displays the traffic limit configuration on the
traffic-limit ingress of an interface.
ZXR10#show running-config pm-qos | include Displays the traffic shaping and queue
traffic-shape bandwidth restriction configuration on the
egress of an interface.
ZXR10#show running-config pm-qos | include Displays the local priority mapping table.
cos-local-map
ZXR10#show running-config pm-qos | include Displays the local priority mapping function
trust-cos-lp-map of an interface.
1-10
Command Function
ZXR10#show running-config pm-qos | include Displays the drop priority mapping table.
cos-drop-map
ZXR10#show running-config pm-qos | include Displays the drop priority mapping function of
trust-cos-dp-map an interface.
ZXR10#show running-config pm-qos | include tail-drop Displays the tail drop configuration of an
interface.
Parameter Description
l The following is a sample output from the show running-config pm-qos | include confo
rm-dscp command:
ZXR10(config-pm-qos)#show running-config pm-qos | include conform-dscp
conform-dscp 11 23 6 1
ZXR10(config-pm-qos)#
11 Source dscp.
23 New dscp.
6 New pri.
1 Drop priority.
l The following is a sample output from the show running-config pm-qos | include trust
-dscp command:
ZXR10(config-pm-qos)#show running-config pm-qos | include trust-dscp
trust-dscp gei-0/1/1/1 enable
ZXR10(config-pm-qos)#
l The following is a sample output from the show running-config pm-qos | include priority
command:
ZXR10(config-pm-qos)#show running-config pm-qos | include priority
priority gei-0/1/1/2 7
ZXR10(config-pm-qos)#
1-11
7 Default priority.
l The following is a sample output from the show running-config pm-qos | include queue
-mode command:
ZXR10(config-pm-qos)#show running-config pm-qos | include queue-mode
queue-mode gei-0/1/1/1 wrr 1 10
queue-mode gei-0/1/1/1 wrr 2 15
ZXR10(config-pm-qos)#
10 Queue weight.
l The following is a sample output from the show running-config pm-qos | include traffi
c-limit command:
ZXR10(config-pm-qos)#show running-config pm-qos | include traffic-limi
traffic-limit gei-0/1/1/1 rate-limit 200000 bucket-size 100
ZXR10(config-pm-qos)#
200000 Rate limit. The rate limit of the chip and that configured in
the command have a little deflection.
100 Bucket size. The bucket size of the chip and that
configured in the command have a little deflection.
l The following is a sample output from the show running-config pm-qos | include traffi
c-shape command:
ZXR10(config-pm-qos)#show running-config pm-qos | include traffic-shap
traffic-shape gei-0/1/1/1 data-rate 200000 burst-size 100
traffic-shape gei-0/1/1/1 queue 1 min-gua-datarate 500 max-datarate-limit 600
ZXR10(config-pm-qos)#
1-12
data-rate 200000 Data rate. The data rate of the chip and that configured in
the command have a little deflection.
burst-size 100 Bucket size. The bucket size of the chip and that
configured in the command have a little deflection.
l The following is a sample output from the show running-config pm-qos | include cos-lo
cal-map command:
ZXR10(config-pm-qos)#show running-config pm-qos | include cos-local-ma
cos-local-map 0 1 2 3 4 5 6 7
ZXR10(config-pm-qos)#
01234567 The local priority of queue cos0 to cos7, that is the queue
number.
l The following is a sample output from the show running-config pm-qos | include trust-
cos-lp-map command:
ZXR10(config-pm-qos)#show running-config pm-qos | include trust-cos-lp
trust-cos-lp-map gei-0/1/1/1 enable
ZXR10(config-pm-qos)#
l The following is a sample output from the show running-config pm-qos | include cos-d
rop-map command:
ZXR10(config-pm-qos)#show running-config pm-qos | include cos-drop-map
cos-drop-map 0 1 1 0 2 0 1 1
ZXR10(config-pm-qos)#
1-13
l The following is a sample output from the show running-config pm-qos | include cos-d
p-map command:
ZXR10(config-pm-qos)#show running-config pm-qos | include cos-dp-map
trust-cos-dp-map gei-0/1/1/1 enable
ZXR10(config-pm-qos)#
l The following is a sample output from the show running-config pm-qos | include tail-d
rop command:
ZXR10(config-pm-qos)#show running-config pm-qos | include tail-drop
tail-drop 0 queue-id 1 200 100 100
drop-mode gei-0/1/1/1 tail-drop 0
ZXR10(config-pm-qos)#
0 session number.
Note:
There is a big difference between the real parameter of a tail drop chip and the command
line parameter. The deflection arithmetic of different chips is different. For details, refer to
the manual about board chips or consult the developers.
1-14
proxy. However, the bandwidths of Network A and B must be limited and traffic statistics
are required.
Configuration
1. Suppose the interface directly connecting the VOD and switch is gei-0/1/1/24, the
traffic through the interface must be limited or shaped in both out and in directions.
2. Suppose the interface directly connecting the VOD and switch is gei-0/1/1/4. To
improve the priority of VOD messages, DSCP mapping is needed on the interface.
And the DSCP of VOD messages must be increased (suppose the original DSCP of
VOD messages is 20) to reduce the drop priority.
3. Increase the local priority of VOD messages on gei-0/1/1/2.
4. Perform strict priority scheduling on gei-0/1/1/2.
Configuration Commands
Configuration on the switch:
ZXR10(config)#pm-qos
ZXR10(config-pm-qos)#traffic-limit gei-0/1/1/24 rate-limit 2000 bucket-size 300
ZXR10(config-pm-qos)#traffic-shape gei-0/1/1/24 data-rate 2000 burst-size 300
ZXR10(config-pm-qos)#conform-dscp 20 63 7 0
ZXR10(config-pm-qos)#trust-dscp gei-0/1/1/4 enable
ZXR10(config-pm-qos)#cos-local-map 0 1 1 2 2 3 5 7
ZXR10(config-pm-qos)#trust-cos-lp-map gei-0/1/1/2
1-15
Configuration verification
Use the following command to check the QoS configuration and validity on a port:
ZXR10(config-pm-qos)#show running-config pm-qos
! <QOS>
pm-qos
traffic-limit gei-0/1/1/24 rate-limit 2000 bucket-size 300
traffic-shape gei-0/1/1/24 data-rate 2000 burst-size 300
conform-dscp 20 63 7 0
trust-dscp gei-0/1/1/4 enable
cos-local-map 0 1 1 2 2 3 5 7
trust-cos-lp-map gei-0/1/1/2
! </QOS>
1-16
Flow Classification
Traffic refers to packets passing through switch. Flow classification is the process of
distinguishing one kind of traffic from another by examining the fields in the packet.
Flow classification of QoS is based on ACL and the ACL rule must be permitted. The user
can classify packets according to some filter options of the ACL which are as follows:
l Source IP address, destination IP address, source MAC address, destination MAC
address, IP protocol type and TCP source port number
l TCP destination port number, UDP source port number, UDP destination port number,
ICMP type, ICMP code, DSCP, ToS, precedence, source VLAN ID, Layer 2 Ethernet
protocol type and 802.1p priority value
Traffic Supervision
The traffic supervision function is used to restrict the traffic bandwidth of one service. If the
bandwidth exceeds the committed rate, the traffic of other services will be affected. For
the traffic that exceeds the committed rate, perform the following operations:
2-1
l Traffic limit
The ZXR10 89 switch supports both Single Rate Three Color Marker (SrTCM)
(RFC2697) arithmetic and the Two Rate Three Color Marker (TrTCM) (RFC2698)
arithmetic. Both arithmetic support the Color-Blind and Color-Aware modes.
The Meter works in two modes. In the Color-Blind mode, it is assumed that the packet
is colourless. In the Color-Aware mode, it is assumed that the packet is colourful.
Packets passing through a switch will be coloured in according with a certain rule
(the information of the packets). The Maker colours the IP packets in the DS domain
according to the Meter result.
The following describes the arithmetic of these three marks.
1. SrTCM
The SrTCM arithmetic is used for the Diffserv traffic conditioner. The SrTCM
arithmetic measures the information stream, and marks the packet according to
the three parameters, including Committed Information Rate (CIR), Committed
Burst Size (CBS), and Excess Burst Size (EBS). These three parameters
correspond to three colours, green, yellow, and red. If a token is obtained
from the EBS token bucket instead of the CBS token bucket, the packet will be
coloured yellow. If the token is still not obtained from the EBS token bucket, the
packet will be coloured red. The red packet will be discarded by default.
2. TrTCM
The TrTCM arithmetic is used for the Diffserv traffic conditioner. The Diffserv
arithmetic measures the IP information stream, and marks the packet according
to four parameters, including Peak Information Rate (PIR), Committed Information
Rate (CIR), CBS, and PBS. If the rate of the packet exceeds the PIR, the packet
will be coloured red. If the rate of the packet exceeds the CIR, it will be coloured
yellow. If the rate the packet does not exceed the CIR, it will be coloured green.
3. ModifyTrTCM
The ModifyTrTCM arithmetic is used for the Diffserv traffic conditioner. The
ModifyTrTCM arithmetic measures the IP information stream, and marks the
packet according to four parameters, including CIR, EIR, CBS, and EBS. If the
packet can obtain a token from the CBS token bucket, it will be coloured yellow.
If it does not obtain a token from the CBS token bucket, it will obtain the token
2-2
from the EBS token bucket. If a token is obtained from the EBS token bucket,
the packet will be coloured yellow. Otherwise, it will be coloured red. The red
packet will be discarded by default.
l Hierarchical meter
Hierarchical meter function improves the usage of the bandwidth on the ingress.
When there is abundant bandwidth, some flow can borrow the bandwidth from
other flows. In additional, this function restricts the total bandwidth of multiple
flows. The hierarchical meter can set the traffic limit for both MICRO METER and
MACRO MTER. The MACRO MTER supports two modes, including band-borrow
and band-limit. The function is as follows:
1. Band Borrow
Figure 2-2 shows the bandwidth borrow mode.
It is assumed that the total bandwidth (Macroflow) is 100M, and the bandwidth of
flows 1-4 (Microflow) is 20M, 30M, 40M, and 10M.
2-3
It is assumed that the total bandwidth (Macroflow) is 80M, and the bandwidth of
flows 1-4 (Microflow) is 20M, 30M, 40M, and 10M.
If the bandwidth of Microflow_1 is 50M, the bandwidth of Microflow_2 is 30M, the
bandwidth of Microflow_4 is 20M, and the bandwidth of Microflow_3 is 0M, the
traffic that passes the Microflow_1 should not more than 20M, and the traffic that
passes the Microflow_4 should not be more than 10M because the bandwidth
borrow is not allowed. It is only needs to ensure that the total bandwidth should
not be more than 80M.
The hierarchical meter only supports one CIR and CBS. That is to say, when a
packet passes through the egress supervision, the packet will be coloured green
if it can obtain a token from the token bucket. Otherwise, it will be coloured red.
The red packet will be discarded by default.
Policy Routing
Redirecting is used to make the decision again about the forwarding of packets with certain
features according to traffic classification. Redirection changes transmission direction of
packets and export messages to the specific port, CPU or next-hop IP address.
On the aspect of packet forwarding control, policy-based routing has more powerful control
capacity than traditional routing because it can select a forwarding path according to the
matched field in the ACL. Policy routing can implement traffic engineering to a certain
extent, thus making traffic of different service quality or different service data (such as
voice and FTP) to go to different paths. The user has higher and higher requirements for
network performance, therefore it is necessary to select different packet forwarding paths
based on the differences of services or user categories.
2-4
Priority Mark
Priority marking is used to reassign a set of service parameters to specific traffic described
in the ACL to perform the following operations:
l Change the CoS queue of the packet and change the 802.1p value.
l Change the CoS queue of the packet and do not change the 802.1p value.
l Change the DSCP value of the packet.
l Change the discard priority of the packet.
Traffic Mirroring
Traffic mirroring is used to copy a service flow matching the ACL rule to the CPU or specific
port to analyze and monitor packets during network fault diagnosis.
Traffic Statistics
Traffic statistics is used to sum up packets of the specific service flow. This is to understand
the actual condition of the network and reasonably allocate network resources. The main
content of traffic statistics contains the number of packets received from the incoming
direction of the port.
2-5
Parameter Description
{ipv4-access-list| ipv4-mix| The type and name for the bound ACL rule.
ipv6-access-list| link-acl|ipv6-mix}<
WORD>
rule-id < 1-2147483644> The number of the ACL rule where this traffic limit takes effect.
cir < 0-100000000> cbs < 0-16000> Committed Information Rate and Committed Burst Size.
eir < 0-32000000> ebs < 0-16000> Committed Information Rate and Excess Burst Size. When
these two parameters are configured, it means that the
ModifyTrTCM arithmetic is used. This mode only takes effect
on several line cards, including H2, H3, H5, and S5.
ebs < 0-16000> Excess Burst Size. When this parameter is configured, it
means that the SrTCM arithmetic is used.
pir < 0-100000000> pbs < 0-16000> Peak Information Rate and Peak Burst Size. When these
two parameters are configured, it means that the TrTCM
arithmetic is used.
mode {blind}|{aware} blind refers to the color-blind mode. aware refers to the
color-aware mode.
[remark-red-dp]{high}|{low}|{medium} Modifies the drop priority for the red packet. Range: High,
middle, and low.
[remark-red-dscp]<0-63> Modifies the DSCP priority for the red packet. Range: 0-63.
[remark-yellow-dp]{high}|{low}|{medi Modifies the drop priority for the yellow packet. Range: High,
um} middle, and low.
[remark-yellow-dscp]<0-63> Modifies the DSCP priority for the yellow packet. Range:
0-63.
2-6
Parameter Description
cir < 0-100000000> cbs < 0-16000> Committed Information Rate and Committed Burst Size.
Parameter Description
{ipv4-access-list| ipv4-mix| The type and name for the bound ACL rule.
ipv6-access-list| link-acl|ipv6-mix}<
WORD>
rule-id < 1-2147483644> The number of the ACL rule where the traffic limit
configuration takes effect.
cir < 0-100000000> cbs < 0-16000> Committed Information Rate and Committed Burst Size.
[remark-red-dp]{high}|{low}|{medium} Modifies the drop priority for red packets. Range: High,
middle, and low.
[remark-red-dscp]<0-63> Modifies the DSCP priority for red packets. Range: 0-63.
2-7
Tip:
1. The hierarchical meter only supports red color and green color.
2. The hierarchical meter command only takes effect on the ingress.
3. The hierarchical meter does not take effect on the ACL that is bounded to the vlan or
Smartgroup.
Parameter Description
{ipv4-access-list| ipv4-mix| The type and name for the bound ACL rule.
ipv6-access-list| link-acl|ipv6-mix}<
WORD>
rule-id < 1-2147483644> The number of the ACL rule where the redirection
configuration takes effect.
{next-hop [vrf <vrf-name>]< A.B.C.D> Specifies the next-hop for the redirection, and supports the
ECMP.
{next-hop-ipv6 [vrf <vrf-name Specifies the next-hop-ipvp for the redirection, and supports
>]<X:X::X:X>} the ECMP.
2-8
Tip:
1. The out-vlanID command in the priority label configuration is conflicted with next-hop
or next-hop-ipv6 in the redirection commands. When two commands are configured
at the same time, the packet is only redirected to next-hop or next-hop-ipv6. In this
case, the remark out-vlanID command becomes invalid.
2. The redirection command only takes effect on the ingress.
Parameter Description
{ipv4-access-list| ipv4-mix| The type and name for the bound ACL rule.
ipv6-access-list| link-acl|ipv6-mix}<
WORD>
rule-id < 1-2147483644> The number of the ACL rule where the configuration takes
effect.
2-9
Tip:
1. The out-vlanID command in the priority label configuration is conflicted with next-hop
or next-hop-ipv6 in the redirection commands. When two commands are configured
at the same time, the packet is only redirected to next-hop or next-hop-ipv6. In this
case, the remark out-vlanID command becomes invalid.
2. The egress only supports the remark for the cos and the dscp fields, so the remark for
other fields does not take effect.
Parameter Description
{ipv4-access-list| ipv4-mix| The type and name of the bound ACL rule.
ipv6-access-list| link-acl}< WORD>
rule-id < 1-2147483644> The number of the ACL rule where the configuration takes
effect.
2-10
Tip:
The traffic mirroring supports four destination ports at most, and these four destination
ports are shared by the port mirroring.
Parameter Description
{ipv4-access-list| ipv4-mix| The type and name of the bound ACL rule.
ipv6-access-list| link-acl|ipv6-mix}<
WORD>
rule-id < 1-2147483644> The number of the ACL rule where the configuration takes
effect.
2-11
Command Function
Parameter Description
PKT/BYTE The statistics value of the line card in this slot. PKT/BYTE is
determined by the traffic statistics configuration command.
2-12
Configuration Flow
1. Configure an ACL for traffic classification. According to the current requirement, the
traffic classification must be done on the basis of the destination IP address, so the
IPv4-access-list is required. To perform statistics on the traffic of two departments, an
ACL rule must be configured.
2. To ensure the QoS of the VOD, configure a priority and allocate a higher priority to the
VOD.
3. Configure the traffic limit, and restrict the bandwidth of the traffic that accesses the
192.168.3.100 agent.
4. Configure traffic statistics, and perform statistics on the traffic that accesses the
192.168.3.100 agent.
Configuration Commands
Configuration on the switch:
/*Configuring ACL rule*/
ZXR10(config)#ipv4-access-list managerA
ZXR10(config-ipv4-acl)#rule 10 permit tcp any 192.168.4.70 0.0.0.0
ZXR10(config-ipv4-acl)#rule 20 permit ip any 192.168.3.100 0.0.0.0
ZXR10(config-ipv4-acl)#rule permit any
ZXR10(config-ipv4-acl)#exit
2-13
Configuration Verification
Use the following commands to verify that QoS configuration is correct and valid:
2-14
2-15
Configuration Flow
1. Configure an ACL rule for traffic classification. According to the current requirement,
the traffic classification is done on the basis of the destination IP address, so the
ipv4-access-list is used. The TCP packet sent from the server AAA matches the source
IP address 192.168.210.2 and the TCP protocol number. For the IP packet sent from
the PC-A and PC-B device to the PC-C device, the destination IP address is 200.0.0.1.
The PC-A device pings the packet of the server AAA. This packet is an icmp packet
with the destination IP address being 192.168.210.1, and the source IP address being
192.168.101.1.
2. Configure the QoS command that will be redirected to the CPU, and send the TCP
packet sent from the server AAA to the cpu.
3. Configure the policy route, and redirect the packet with the destination IP address
being 200.0.0.1 to the specified next hop.
2-16
4. Redirect the packet and specify an egress. After the PC-A device pings the server
AAA, redirect the packets to the PC-B device. To ensure that the packet can be sent
from vlan2, set a priority label and modify the out-vlanid value of the packet.
Configuration Commands
Configuration on the S1:
/*Configuring VLAN interface*/
ZXR10(config)#switchvlan-configuration
ZXR10(config-swvlan)#interface gei-0/1/1/1
ZXR10(config-swvlan-intf)#switchport mode access
ZXR10(config-swvlan-intf)#switchport access vlan 1
ZXR10(config-swvlan-intf)#exit
ZXR10(config-swvlan)#interface gei-0/1/1/4
ZXR10(config-swvlan-intf)#switchport mode access
ZXR10(config-swvlan-intf)#switchport access vlan 5
ZXR10(config-swvlan-intf)#exit
ZXR10(config-swvlan)#interface gei-0/1/1/2
ZXR10(config-swvlan-intf)#switchport mode access
ZXR10(config-swvlan-intf)#switchport access vlan 2
ZXR10(config-swvlan-intf)#exit
ZXR10(config-swvlan)#interface gei-0/1/1/10
ZXR10(config-swvlan-intf)#switchport mode trunk
ZXR10(config-swvlan-intf)#switchport trunk vlan 10
ZXR10(config-swvlan-intf)#exit
ZXR10(config-swvlan)#interface gei-0/1/1/3
ZXR10(config-swvlan-intf)#switchport mode trunk
ZXR10(config-swvlan-intf)#switchport trunk vlan 4
ZXR10(config-swvlan-intf)#exit
ZXR10(config-swvlan)#exit
ZXR10(config)#interface vlan1
ZXR10(config-if)#ip address 192.168.101.2 255.255.255.0
ZXR10(config-if)#exit
ZXR10(config)#interface vlan5
ZXR10(config-if)#ip address 192.168.210.2 255.255.255.0
ZXR10(config-if)#exit
ZXR10(config)#interface vlan2
ZXR10(config-if)#ip address 192.168.102.2 255.255.255.0
2-17
ZXR10(config-if)#exit
ZXR10(config)#interface vlan10
ZXR10(config-if)#ip address 192.168.110.2 255.255.255.0
ZXR10(config-if)#exit
ZXR10(config)#interface vlan4
ZXR10(config-if)#ip address 192.168.103.2 255.255.255.0
ZXR10(config-if)#exit
2-18
ZXR10(config-swvlan)#interface gei-0/1/1/20
ZXR10(config-swvlan-intf)#switchport mode access
ZXR10(config-swvlan-intf)#switchport access vlan 14
ZXR10(config-swvlan-intf)#exit
ZXR10(config-swvlan)#exit
ZXR10(config)#interface vlan10
ZXR10(config-if)#ip address 192.168.110.1 255.255.255.0
ZXR10(config-if)#exit
ZXR10(config)#interface vlan4
ZXR10(config-if)#ip address 192.168.103.1 255.255.255.0
ZXR10(config-if)#exit
2-19
ZXR10(config)#interface vlan14
ZXR10(config-if)#ip address 200.0.0.2 255.255.255.0
ZXR10(config-if)#exit
Configuration Verification
Check QoS configuration results.
/*Checking the ACL configuration.*/
ZXR10(config)#show ipv4-access-lists name redirectAAA
ipv4-access-list redirectAAA
2/2 (showed/total)
10 permit tcp 192.168.210.2 0.0.0.0 any
20 permit ip any any
ZXR10(config)#show ipv4-access-lists name redirect_1_2
ipv4-access-list redirect_1_2
2/2 (showed/total)
10 permit ip any 200.0.0.0 0.0.0.255
20 permit ip any any
ZXR10(config)#show ipv4-access-lists name redirect_1_1
ipv4-access-list redirect_1_1
3/3 (showed/total)
10 permit icmp 192.168.101.1 0.0.0.0 192.168. 210.1 0.0.0.0
20 permit ip any 200.0.0.0 0.0.0.255
30 permit ip any any
/*Checking the binding relationship of the ACL.*/
ZXR10(config)#show ipv4-access-groups
Interface name|vlan Direction ACL name
------------------------------------------------------
gei-0/1/1/4 Ingress redirectAAA
gei-0/1/1/2 Ingress redirect_1_2
gei-0/1/1/1 Ingress redirect_1_1
/*Checking the QoS configuration.*/
ZXR10(config-pm-qos)#show running-config pm-qos
! <QOS>
pm-qos
priority-mark ipv4-access-list redirect_1_1 rule-id 10 out-vlanID 2
redirect in ipv4-access-list redirectAAA rule-id 10 cpu
redirect in ipv4-access-list redirect_1_2 rule-id 10 next-hop 200.0.0.2
redirect in ipv4-access-list redirect_1_1 rule-id 10 gei_0/1/1/2
redirect in ipv4-access-list redirect_1_1 rule-id 20 next-hop 200.0.0.2
! </QOS>
/*Checking the route table.*/
ZXR10(config)#show ip forwarding route
IPv4 Routing Table:
status codes: *valid, >best
2-20
2-21
Configuration Flow
1. Configure an ACL for the traffic classification. According to the current requirement,
use the ipv4-access-list to restrict all IP packets.
2. Set the bandwidth of department A to 40M.
3. Set the bandwidth of department B to 30M.
4. Set the bandwidth of department C to 430M.
Configuration Commands
Configuration on the S1:
/*Configuring ACL rule*/
ZXR10(config)#ipv4-access-list meterA
ZXR10(config-ipv4-acl)#rule 10 permit ip any any
ZXR10(config-ipv4-acl)#exit
ZXR10(config)#ipv4-access-list meterB
ZXR10(config-ipv4-acl)#rule 10 permit ip any any
ZXR10(config-ipv4-acl)#exit
ZXR10(config)#ipv4-access-list meterC
ZXR10(config-ipv4-acl)#rule 10 permit ip any any
ZXR10(config-ipv4-acl)#exit
/*Binding interface*/
ZXR10(config)#ipv4-access-group interface gei-0/1/1/1 ingress meterA
ZXR10(config)#ipv4-access-group interface gei-0/1/1/2 ingress meterB
ZXR10(config)#ipv4-access-group interface gei-0/1/1/10 ingress meterC
Configuration Verification
Check QoS configuration results.
/*Checking the ACL configuration.*/
ZXR10(config)#show ipv4-access-lists name meterA
2-22
ipv4-access-list meterA
1/1 (showed/total)
10 permit ip any any
ZXR10(config)#show ipv4-access-lists name meterB
ipv4-access-list meterB
1/1 (showed/total)
10 permit ip any any
ZXR10(config)#show ipv4-access-lists name meterC
ipv4-access-list meterC
1/1 (showed/total)
10 permit ip any any
/*Checking the binding relationship of the ACL.*/
ZXR10(config)#show ipv4-access-groups
Interface name|vlan Direction ACL name
-----------------------------------------------------
gei-0/1/1/1 Ingress meterA
gei-0/1/1/2 Ingress meterB
gei-0/1/1/10 Ingress meterC
/*Checking the Qos configuration.*/
ZXR10(config-pm-qos)#show running-config pm-qos
!<QOS>
pm-qos
traffic-macro-flow S1 cir 100000 cbs 1000 mode band-borrow
traffic-micro-flow ipv4-access-list meterA rule-id 10 cir
40000 cbs 1000 macro-flow S1
traffic-micro-flow ipv4-access-list meterB rule-id 10 cir
30000 cbs 1000 macro-flow S1
traffic-micro-flow ipv4-access-list meterC rule-id 10 cir
30000 cbs 1000 macro-flow S1
!</QOS>
2-23
Configuration Flow
1. Configure an ACL for traffic classification. According to the current requirement,
the traffic classification is done on the basis of the destination IP address, so the
ipv4-access-list is used. Both the source IP address and the destination IP address
can be configured.
2. Apply the ACL rule to the ingress gei-0/1/1/1 and the egress gei-0/1/1/10 on S1.
3. Configure traffic mirroring, and mirror the packet to the gei-0/1/1/2 port.
Configuration Commands
Configuration on the S1:
/*Configuring ACL rule*/
ZXR10(config)#ipv4-access-list mirror1
ZXR10(config-ipv4-acl)#rule 10 permit icmp 192.168.101.1 0.0.0.0
192.168.210.1 0.0.0.0
ZXR10(config-ipv4-acl)#rule 20 permit ip any any
ZXR10(config-ipv4-acl)#exit
Configuration Verification
Checking QoS configuration results.
2-24
Configuration Flow
1. Configure an ACL for traffic classification. Use the ipv4-mixed-access-list to match
the traffic of network A that accesses the Internet, and match the traffic sent from
192.168.3.100 to network B.
2. Bind the ACL rule to the ingress of gei-0/1/1/3, and to the egress of gei-0/1/1/21.
3. Configure the traffic limit.
2-25
Configuration Command
Run the following commands on S1:
/*Configuring the ACL rule.*/
ZXR10(config)#ipv4-mixed-access-list limit_A
ZXR10(config-ipv4-mixed-acl)#rule 1 permit link-protocol 2048 any any
outer-vlan 10 ip any any
ZXR10(config-ipv4-mixed-acl)#rule 2 permit any any ip any any
ZXR10(config-ipv4-mixed-acl)#exit
/*Binding the interface of department A*/
ZXR10(config)#ipv4-mixed-access-group interface gei-0/1/1/3 ingress limit_A
/*Configuring the traffic limit.*/
ZXR10(config-pm-qos)#traffic-limit-acl ipv4-mix limit_A rule-id 1 cir
100000 cbs 200 ebs 3000 mode blind
ZXR10(config-pm-qos)#exit
ZXR10(config)#
/*Configuring the ACL rule.*/
ZXR10(config)#ipv4-mixed-access-list limit_B
ZXR10(config-ipv4-mixed-acl)#rule 1 permit link-protocol 2048 any any
outer-vlan 20 ip any any
ZXR10(config-ipv4-mixed-acl)#rule 2 permit any any ip any any
ZXR10(config-ipv4-mixed-acl)#exit
/*Binding the interface of department B.*/
ZXR10(config)#ipv4-mixed-access-group interface gei-0/1/1/21 egress limit_B
/*Configuring the priority label.*/
ZXR10(config)#pm-qos
ZXR10(config-pm-qos)#traffic-limit-acl ipv4-mix limit_B rule-id 1 cir
100000 cbs 200 ebs 3000 mode blind
ZXR10(config-pm-qos)#exit
ZXR10(config)#
Configuration Verification
Check QoS configuration results.
/*Checking the ACL configuration.*/
ZXR10(config)#show ipv4-mixed-access-list name limit_A
ipv4-mixed-access-list limit_A
2/2 (showed/total)
rule 1 permit link-protocol 2048 any any outer-vlan 10 ip any any
rule 2 permit any any ip any any
ZXR10(config)#show ipv4-mixed-access-list name limit_B
ipv4-mixed-access-list limit_B
2/2 (showed/total)
rule 1 permit link-protocol 2048 any any outer-vlan 20 ip any any
rule 2 permit any any ip any any
2-26
2-27
2-28
II
PIR
- Peak Information Rate
QoS
- Quality of Service
SP
- Strict Priority
ToS
- Type of Service
WRED
- Weighted Random Early Detection
WRR
- Weighted Round Robin
III