H3C S7500 Series Command Manual(Release 3100 Series)-(V1.04)

HomeSupportSwitchesH3C S7500 Switch SeriesReference GuidesCommand ReferencesH3C S7500 Series Command Manual(Release 3100 Series)-(V1.04)
25-QoS Commands
Title Size Download
25-QoS Commands 224 KB

Chapter 1  QoS Commands

 

&  Note:

Type A line processing units (LPUs) include LS81FT48A, LS81FM24A, LS81FS24A, LS81GB8UA, LS81GT8UA, LS81FT48, LS81FM24, LS81FS24, LS81GB8U and LS81GT8U.

 

1.1  QoS Commands

1.1.1  display priority-trust

Syntax

display priority-trust

View

Any view

Parameters

None

Description

Use the display priority-trust command to display the priority type according to which the switch puts a packet into an output queue on a port.

Related command: priority-trust.

Examples

# Display the queue scheduling mode and the related parameters.

<H3C> display priority-trust

Priority trust mode: local-precedence

The information above shows that the switch puts a packet into an output queue on a port according to the local precedence of the packet.

1.1.2  display qos cos-local-precedence-map

Syntax

display qos cos-local-precedence-map

View

Any view

Parameters

None

Description

Use the display qos cos-local-precedence-map command to view the COS-to-local-precedence mapping table.

Examples

# Display the COS-to-local-precedence mapping table.

<H3C> display qos cos-local-precedence-map

cos-local-precedence-map:

             cos :   0     1     2     3     4     5     6     7

--------------------------------------------------------------------

local-precedence :   2     0     1     3     4     5     6     7

1.1.3  display qos-interface all

Syntax

display qos-interface [ interface-type interface-number ] all

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface all command to view all the QoS settings of the specific port or all the ports. If you do not provide the interface-type interface-number argument, this command will display the QoS settings of all the ports on the switch; if you provide the interface-type interface-number argument, this command will display QoS settings on the specified port.

Examples

# Display the QoS settings on all the ports.

<H3C> display qos-interface all

 

GigabitEthernet0/0/1:

 Queue scheduling mode: strict-priority

 COS configuration:

  Config (max queues): 8

  Schedule mode: strict

  Egress port queue statistics(in bytes):

    Priority    CosQ        Threshold   Count       Used(%):

    0           2           18432       0           0

    1           3           2560        0           0

    2           4           2560        0           0

    3           1           2560        0           0

    4           7           2560        0           0

    5           0           2560        0           0

    6           5           2560        0           0

    7           6           2560        0           0

  common queue statistics(in bytes):

                            49152       0           0

 

GigabitEthernet0/0/2:

 Queue scheduling mode: strict-priority

 COS configuration:

  ---- More ----

1.1.4  display qos-interface line-rate

Syntax

display qos-interface [ interface-type interface-number ] line-rate

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface line-rate command to view the rate limiting configuration (including the outbound port and the limit rate for the port) for the outbound direction of a port or all the ports on a switch. If you do not provide the interface-type interface-number argument, you will view the rate limiting configuration for the outbound direction of all the ports on a switch; if you provide this argument, you will view the rate limiting configuration for the outbound direction of the specified port.

Examples

# Display the rate limiting configuration of a specific port.

<H3C> display qos-interface line-rate

 GigabitEthernet1/0/2: line-rate

   Line rate: 3072 kbps

 E GigabitEthernet1/0/4: line-rate

   Line rate: 5120 kbps

Table 1-1 Description on the fields of the display qos-interface line-rate command

Field

Description

GigabitEthernet1/0/2: line-rate

   Line rate: 3072 kbps

Rate limiting configuration on GigabitEthernet1/0/2 is:

The maximum rate on GigabitEthernet1/0/2 is 3,072 kbps.

 

1.1.5  display qos-interface queue-scheduler

Syntax

display qos-interface [ interface-type interface-number ] queue-scheduler

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface queue-scheduler command to display the queue scheduling mode settings of the specified port or all ports. If the interface-type interface-number argument is not provided, you will view the queue scheduling mode settings of all the ports. If you provide the interface-type interface-number argument, you will view the queue scheduling mode settings of the specified port.

Examples

# Display the queue scheduling mode settings of GigabitEthernet 2/0/1.

<H3C> display qos-interface Gigabitethernet 2/0/1 queue-scheduler

GigabitEthernet2/0/1:

 Queue scheduling mode: weighted round robin

 weight of queue 1: 10

 weight of queue 2: 5

 weight of queue 3: 10

 weight of queue 4: 10

 weight of queue 5: 5

 weight of queue 6: 10

 weight of queue 7: 5

 weight of queue 8: 10

 COS configuration:

  Config (max queues): 8

  Schedule mode: weighted round-robin

  Weighting (in packets):

    COSQ 0 = 10 packets

    COSQ 1 = 5 packets

    COSQ 2 = 10 packets

    COSQ 3 = 10 packets

    COSQ 4 = 5 packets

    COSQ 5 = 10 packets

    COSQ 6 = 5 packets

    COSQ 7 = 10 packets

  Egress port queue statistics(in bytes):

    Priority    CosQ        Threshold   Count       Used(%):

    0           2           18432       0           0

    1           0           2560        0           0

    2           1           2560        0           0

    3           3           2560        0           0

    4           4           2560        0           0

    5           5           2560        0           0

    6           6           2560        0           0

    7           7           2560        0           0

  common queue statistics(in bytes):

                            49152       0           0

1.1.6  display qos-interface traffic-bandwidth

Syntax

display qos-interface [ interface-type interface-number ] traffic-bandwidth

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-bandwidth command to view the configuration information about the guaranteed bandwidth.

Related command: traffic-bandwidth.

Examples

# Display the guaranteed bandwidth settings.

<H3C> display qos-interface traffic-bandwidth

Ethernet2/0/1: traffic-bandwidth

 Outbound:

   Matches: Acl 2000 rule 0  running

     Minimum guaranteed bandwidth: 64 Kbps

     Maximum available bandwidth: 128 Kbps

     Bandwidth weight: 20

1.1.7  display qos-interface traffic-limit

Syntax

display qos-interface [ interface-type interface-number ] traffic-limit

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-limit command to view the traffic limit settings of a port or all the ports on a switch, including the applied ACLs for traffic limit, committed average rate (CAR), and the corresponding actions.

Related command: traffic-limit.

Examples

# Display the traffic limit settings.

<H3C> display qos-interface traffic-limit

GigabitEthernet2/0/1: traffic-limit

 Inbound:

   Matches: Acl 3000 rule 1  running

     Target rate: 20480 Kbps

     Exceed action: remark-dscp 4

1.1.8  display qos-interface traffic-priority

Syntax

display qos-interface [ interface-type interface-number ] traffic-priority

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-priority command to view the priority marking settings. The displayed information includes the ACL applied to the traffic involved in priority marking, priority type and priority value.

Related command: traffic-priority.

Examples

# Display the priority marking settings.

<H3C> display qos-interface traffic-priority

Ethernet2/0/1: traffic-priority

 Outbound:

   Matches: Acl 2000 rule 0  running

     Priority action: dscp be

1.1.9  display qos-interface traffic-red

Syntax

display qos-interface [ interface-type interface-number ] traffic-red

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-red command to view the configuration information of the random early detection (RED) operation.

Related command: traffic-red.

Examples

# Display the configuration information of the RED operation.

<H3C> display qos-interface traffic-red

Ethernet2/0/1: traffic-red

 Outbound:

   Matches: Acl 2000 rule 0  running

     Queue length of start random discarding: 16 Kbyte

     Queue length of stop random discarding: 32 Kbyte

     Max probability of discarding: 20

1.1.10  display qos-interface traffic-redirect

Syntax

display qos-interface [ interface-type interface-number ] traffic-redirect

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-redirect command to view the configuration of traffic redirect. The displayed information includes the ACL applied to the traffic to be redirected, and the port to which the traffic is to be redirected.

Related command: traffic-redirect.

Examples

# Display the configuration of traffic redirect.

<H3C> display qos-interface traffic-redirect

GigabitEthernet2/0/1: traffic-redirect

 Inbound:

   Matches: Acl 2002 rule 0  running

     Redirected to: interface GigabitEthernet1/0/8

1.1.11  display qos-interface traffic-remark-vlanid

Syntax

display qos-interface [ interface-type interface-number ] traffic-remark-vlanid

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-remark-vlanid command to display the configuration of the traffic-based selective QinQ feature. The displayed information includes the ACL rule used for traffic identifying and the ID of the outer VLAN tag.

Related command: traffic-remark-vlanid.

Examples

# Display the configuration of the traffic-based selective QinQ feature.

<H3C> display qos-interface traffic-remark-vlanid

 

Ethernet2/0/1: traffic-remark-vlanid

 Inbound:

   Matches: Acl 3000 rule 3  running

     RemarkVlanId action: remark-vlan 25

1.1.12  display qos-interface traffic-statistic

Syntax

display qos-interface [ interface-type interface-number ] traffic-statistic

View

Any view

Parameters

interface-type interface-number: Port index.

Description

Use the display qos-interface traffic-statistic command to display the traffic statistics information. The displayed information includes the ACL applied to the traffic to be counted and the number of packets.

Related command: traffic-statistic.

Examples

# Display the traffic statistics information.

<H3C> display qos-interface traffic-statistic

Ethernet2/0/1: traffic-statistic

 Inbound:

   Matches: Acl 2000 rule 0  running

     105 packets

1.1.13  inboundcar

Syntax

inboundcar { enable | disable }

View

System view

Parameters

enable: Enables the inbound CAR feature.

disable: Disables the inbound CAR feature.

Description

Use the inboundcar enable command to enable the inbound CAR feature.

Use the inboundcar disable command to disable the inbound CAR feature.

By default, the inbound CAR feature is disabled.

 

&  Note:

This command is only applicable to A-type LPUs and can take effect only after you restart the switch.

 

When the inbound CAR feature is enabled, the same ACL rule applied to different ports is treated as different rules, thus seizing multiple entries. If you enable the CAR feature for the traffic matching the same rule on multiple ports, the switch provides guaranteed bandwidth to the traffic matching the CAR rule on each port.

When the inbound CAR feature is disabled, the same ACL rule applied to different ports is treated as the same one, thus seizing one entry only. If you enable the CAR feature for the traffic matching the same rule on multiple ports, the switch provides guaranteed bandwidth to the traffic matching the CAR rule on these ports.

For example, if you want to set the CAR bandwidth of 2 M for the traffic matching ACL rule 0 on the switch, use the traffic-limit command to enable the CAR feature on two ports.

l           If the inbound CAR feature is enabled, the two ports provides guaranteed bandwidth of 2 M for the traffic matching ACL rule 0 on each port.

l           If the inbound CAR feature is disabled, the two ports provide the total guaranteed bandwidth of 2M for the traffic matching ACL rule 0 on the two ports.

Examples

# Enable the inbound CAR feature on the switch.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] inboundcar enable

1.1.14  line-rate

Syntax

line-rate [ kbps ] target-rate

undo line-rate

View

QoS view

Parameters

kbps: Specifies the limit rate to be measured (in kbps).

target-rate: Total limit rate of all the packets sent by the port. If the kbps keyword is specified, the rate is measured in kbps, in the range of 64 to 1,024,000 with the granularity being 64. If the number you input is in the range of N*64 to (N+1)*64 (N is a natural number), the switch will set the value to (N+1)*64 kbps automatically. If the kbps keyword is not specified, the rate is in the range of 1 to 1,000 in mbps.

Description

Use the line-rate command to limit the rate of the packets on the port.

Use the undo line-rate command to remove the rate limit configuration on the port.

 

&  Note:

Only type-A LPUs support the rate limit configuration.

 

Examples

# Limit the rate of packets on GigabitEthernet 2/0/1 to 10 Mbps.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet2/0/1

[H3C-GigabitEthernet2/0/1] qos

[H3C-qosb-GigabitEthernet2/0/1] line-rate 10

1.1.15  priority

Syntax

priority priority-level

undo priority

View

Ethernet port view

Parameters

priority-level: Priority value of the port, ranging from 0 to 7.

Description

Use the priority command to configure the priority of the Ethernet port.

Use the undo priority command to restore the default priority of the Ethernet port.

By default, the priority of a port is 0.

If the switch receives a VLAN-tagged frame, the switch will tag the frame with the default VLAN tag of the port receiving the frame. In this case the switch assigns the port priority of the port receiving the frame to the 802.1p priority of the VLAN tag in the frame.

The switch does not perform the operation above if it receives a VLAN-tagged frame.

Examples

# Set the local precedence of Ethernet 2/0/1 to 7.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] priority 7

1.1.16  priority trust

Syntax

priority-trust { dscp | ip-precedence | cos | local-precedence }

View

System view

Parameters

dscp: Puts a packet into the corresponding output queue on a port according to the DSCP precedence of the packet.

ip-precedence: Puts a packet into the corresponding output queue on a port according to the IP precedence of the packet.

cos: Puts a packet into the corresponding output queue on a port according to the CoS precedence of the packet.

local-precedence: Puts a packet into the corresponding output queue on a port according to the local precedence of the packet.

Description

Use the priority trust command to specify the priority type according to which the switch puts a packet into the output queue on a port.

By default, the switch puts a packet into the output queue on a port according to the local precedence of the packet.

A port supports eight output queues with different precedence levels. The packets in an output queue with a higher precedence will be delivered preferentially. The switch puts a packet into an output queue on a port according to the precedence of the packet.

l           DSCP precedence ranges from 0 to 63. The packets with precedence value from 0 to 7 are put into queue 0, and those with precedence value from 8 to 15 are put into queue 1, and so on.

l           IP precedence ranges from 0 to 7, the packets with precedence value 0 are put into queue 0, and those with precedence value 1 are put into queue 1, and so on.

l           CoS precedence ranges from 0 to 7, the packets with precedence value 0 are put into queue 2, the packets with precedence value 1 are put into queue 0, and the packets with precedence value 2 are put into queue 1. As for the left precedence values, the queue number is equal to the precedence value. For example, the packets whose precedence value is 3 are put into queue 3.

l           Local precedence ranges from 0 to 7. The packets with precedence value 0 are put into queue 0, and so on.

 

&  Note:

For LPUs that are not of A-type, if you specify the trusted priority for adding packets to output queues by using the priority-trust dscp or priority-trust ip-precedence command, the switch will convert the DSCP precedence or IP precedence of the received packets to the corresponding CoS precedence according to the DSCP-CoS precedence mapping table or IP-CoS precedence mapping table and then add the packets to the corresponding queues by CoS priority. In this case, the precedence is converted as follows.

l      DSCP precedence 0 through 7 are mapped to CoS precedence 2; 8 through 15 to CoS precedence 0; 16 through 23 to CoS precedence 1; 24 through 31 to CoS precedence 3; 32 through 39 to CoS precedence 4; 40 through 47 to CoS precedence 5, 48 through 55 to CoS precedence 6; 56 through 63 to CoS precedence 7.

l      IP precedence 0 is mapped to CoS precedence 2; IP precedence 1 to CoS precedence 0; IP precedence 2 to CoS precedence 1; IP precedence 3 to CoS precedence 3. The values of other IP precedence values are the same as those of the corresponding CoS precedence.

 

You can choose the corresponding packet precedence as the basis for putting a packet into an output queue on a port as required.

Examples

# Configure the switch to put a packet into an output queue according to the DSCP precedence of the packet.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] priority-trust dscp

1.1.17  qos

Syntax

qos

View

Ethernet port view

Parameters

None

Description

Use the qos command to enter QoS view and perform the corresponding QoS configurations.

 

&  Note:

Different LPUs of S7500 series switches support different QoS features. You can use “?” to query the supported QoS configurations after entering different QoS views.

 

Examples

# Enter QoS view of a non-type-A LPU and query the QoS configuration supported by the LPU.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet2/0/1

[H3C-GigabitEthernet2/0/1] qos

[H3C-qosb-GigabitEthernet2/0/1] ?

Qosb view commands:

  display                Display current system information

  line-rate              Limit the rate of the outbound packets of the

                         interface

  mirrored-to            Mirror the packets

  msdp-tracert           MSDP traceroute to source RP

  packet-filter          Filter packets based on acl

  ping                   Send echo messages

  queue-scheduler        Specify queue scheduling mode and parameters

  quit                   Exit from current command view

  reset                  Reset operation

  return                 Exit to User View

  tracert                Trace route function

  traffic-limit          Limit the rate of the packets

  traffic-priority       Specify new priority of the packets

  traffic-redirect       Redirect the packets

  traffic-remark-vlanid  Remark vlan ID of the packets

  traffic-statistic      Count the packets

  undo                   Cancel current setting

# Enter QoS view of a type-A LPU and query the QoS configuration supported by the LPU.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1]?

Qoss view commands:

  display                Display current system information

  msdp-tracert           MSDP traceroute to source RP

  packet-filter          Filter packets based on acl

  ping                   Send echo messages

  quit                   Exit from current command view

  reset                  Reset operation

  return                 Exit to User View

  tracert                Trace route function

  traffic-bandwidth      Guarantee the bandwidth of the packets

  traffic-limit          Limit the rate of the packets

  traffic-priority       Specify new priority of the packets

  traffic-red            Random early detect the packets

  traffic-remark-vlanid  Remark vlan ID of the packets

  traffic-statistic      Count the packets

  undo                   Cancel current setting

1.1.18  qos cos-local-precedence-map

Syntax

qos cos-local-precedence-map cos0-map-local-prec cos1-map-local-prec cos2-map-local-prec cos3-map-local-prec cos4-map-local-prec cos5-map-local-prec cos6-map-local-prec cos7-map-local-prec

undo qos cos-local-precedence-map

View

System view

Parameters

cos0-map-local-prec: Local precedence value to which CoS 0 is to be mapped, in the range of 0 to 7.

cos1-map-local-prec: Local precedence value to which CoS 1 is to be mapped, in the range of 0 to 7.

cos2-map-local-prec: Local precedence value to which CoS 2 is to be mapped, in the range of 0 to 7.

cos3-map-local-prec: Local precedence value to which CoS 3 is to be mapped, in the range of 0 to 7.

cos4-map-local-prec: Local precedence value to which CoS 4 is to be mapped, in the range of 0 to 7.

cos5-map-local-prec: Local precedence value to which CoS 5 is to be mapped, in the range of 0 to 7.

cos6-map-local-prec: Local precedence value to which CoS 6 is to be mapped, in the range of 0 to 7.

cos7-map-local-prec: Local precedence value to which CoS 7 is to be mapped, in the range of 0 to 7.

Description

Use the qos cos-local-precedence-map command to configure the “CoS-to-local-precedence” mapping table.

Use the undo qos cos-local-precedence-map command to restore the default values.

Table 1-2 lists the content of the default CoS-to-local-precedence mapping table.

Table 1-2 The default CoS-to-local-precedence mapping table

CoS value

Local precedence

0

2

1

0

2

1

3

3

4

4

5

5

6

6

7

7

 

Examples

# Configure the CoS-to-local-precedence mapping table.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] qos cos-local-precedence-map 0 1 2 3 4 5 6 7

Table 1-3 is the configured CoS-to-local-precedence mapping table.

Table 1-3 CoS-to-local-precedence mapping table

CoS value

Local precedence

0

0

1

1

2

2

3

3

4

4

5

5

6

6

7

7

 

1.1.19  queue-scheduler

Syntax

queue-scheduler { rr | strict-priority | wrr queue1-weight queue2-weight queue3-weight queue4-weight queue5-weight queue6-weight queue7-weight queue8-weight }

undo queue-scheduler

View

QoS view

Parameters

rr: Adopts the round robin (RR) queue scheduling algorithm.

strict-priority: Adopts the strict priority (SP) queue scheduling algorithm.

wrr queue1-weight queue2-weight queue3-weight queue4-weight queue5-weight queue6-weight queue7-weight queue8-weight: Adopts the weighted round robin (WRR) queue scheduling algorithm, with the weight value in the range of 0 to 15.

Description

Use the queue-scheduler command to configure the queue scheduling algorithm and related parameters.

Use the undo queue-scheduler command to restore the default queue scheduling algorithm.

By default, the SP queue scheduling algorithm is adopted.

Related command: display qos-interface queue-scheduler.

 

&  Note:

Only non-type-A LPUs support the queue scheduling algorithm configuration.

 

Examples

# Adopt the WRR queue scheduling algorithm, and the weight value of each queue is 10, 5, 10, 10, 5, 10, 5, and 10.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet2/0/1

[H3C-GigabitEthernet2/0/1] qos

[H3C-qosb-GigabitEthernet2/0/1] queue-scheduler wrr 10 5 10 10 5 10 5 10

1.1.20  reset traffic-statistic

Syntax

I. For type-A LPUs:

reset traffic-statistic { inbound | outbound } acl-rule [ system-index ]

II. For non-type-A LPUs:

reset traffic-statistic inbound acl-rule [ system-index ]

 

&  Note:

LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.

 

View

QoS view

Parameters

acl-rule: Applied ACL which can be the combination of various ACL rules. For the ways of type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6. For the ways of non-type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-5 and Table 1-6.

Table 1-4 Type-A LPUs’ ways of applying combined ACLs

ACL combination

Form of the acl-rule argument

Apply all the rules in an IP ACL separately

ip-group { acl-number | acl-name }

Apply a rule in an IP ACL separately

ip-group { acl-number | acl-name } rule rule-id

Apply all the rules in a Link ACL separately

link-group { acl-number | acl-name }

Apply a rule in a Link ACL separately

link-group { acl-number | acl-name } rule rule-id

 

Table 1-5 Non-type-A LPUs’ ways of applying combined ACLs

ACL combination

Form of the acl-rule argument

Apply all the rules in an IP ACL separately

ip-group { acl-number | acl-name }

Apply a rule in an IP ACL separately

ip-group { acl-number | acl-name } rule rule-id

Apply all the rules in a Link ACL separately

link-group { acl-number | acl-name }

Apply a rule in a Link ACL separately

link-group { acl-number | acl-name } rule rule-id

Apply all the rules in an user-defined ACL separately

user-group { acl-number | acl-name }

Apply a rule in an user-defined ACL separately

user-group { acl-number | acl-name } rule rule-id

Apply a rule in an IP ACL and a rule in a Link ACL at the same time

ip-group { acl-number | acl-name } rule rule-id link-group { acl-number | acl-name } rule rule-id

 

Table 1-6 Description on the parameters in the ACL combination

Parameter

Description

ip-group { acl-number | acl-name }

Basic or advanced ACL

acl-number: ACL number in the range of 2,000 to 3,999.

acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive.

link-group { acl-number | acl-name }

Layer 2 ACL

acl-number: ACL number in the range of 4,000 to 4,999.

acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive.

user-group { acl-number | acl-name }

User-defined ACL

acl-number: ACL number in the range of 5,000 to 5,999.

acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive.

rule-id

ACL rule ID, in the range of 0 to 127. If the rule-id argument is not specified, the rule keyword refers to all the rules in the ACL.

 

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

Description

Use the reset traffic-statistic command to clear the statistics of all or the specified traffic.

Table 1-7 The reset acl counter  command vs the reset traffic-statistic command

Command

Function

reset acl counter

Clear the ACL statistics.

This command is applicable to ACLs used for filtering and classifying the traffic processed by software.

ACLs are referenced by software in the following cases:

l      Referenced by routing policies

l      Referenced when login users are controlled

In these cases, the ACL number is in the range of 2,000 to 3,999.

Refer to the ACL module in this manual for the introduction to the reset acl counter command.

reset traffic-statistic

Clear the traffic statistics.

This command is applicable to ACLs applied to the hardware of the switch for filtering and classifying traffic during data forwarding. Generally, this command is used to clear the statistics information obtained through the traffic-statistic command.

 

Examples

# Clear the statistics about traffic matching ACL 2000.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1] reset traffic-statistic inbound ip-group 2000

1.1.21  traffic-bandwidth

Syntax

traffic-bandwidth outbound acl-rule [ system-index ] min-guaranteed-bandwidth max-guaranteed-bandwidth weight

undo traffic-bandwidth outbound acl-rule

View

QoS view

Parameters

outbound: Guarantees the bandwidth for the packets sent by the port.

acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4.

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4294967295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

min-guaranteed-bandwidth: Minimum guaranteed bandwidth in kbps, in the range of 0 to 8,388,608. It must be a multiple of 64.

max-guaranteed-bandwidth: Maximum guaranteed bandwidth in kbps, in the range of 0 to 8,388,608. It must be the multiple(s) of 64.

weight: Bandwidth weight in the range of 1 to 100, in percentage. It is used in the situations when bandwidth guarantees are enabled for multiple flows respectively on the current port. For example, bandwidth guarantees are enabled for two flows on a port with 10 M of bandwidth. The minimum guaranteed bandwidth for each flow is 2 M, the maximum guaranteed bandwidth is 8 M, and the bandwidth weights are 40% and 80% respectively. After the port guarantees the minimum bandwidth for both flows (that is, 4 M), the remaining bandwidth (6M) cannot support the maximum bandwidth of both flows (16M). If the bandwidth occupied by the two flows exceeds the minimum guaranteed bandwidth, then the remaining bandwidth (6 M) will be allocated to each flow according to the bandwidth weights (40% : 80%).

 

&  Note:

Assume there are N flows on a port, the bandwidth of the port is Bp, the minimum guaranteed bandwidth of the ith flow is Bimin, the maximum guaranteed bandwidth of the ith flow is Bimax, and the weight is Wi. If the bandwidth occupied by all the flows is greater than their minimum guaranteed bandwidth, and the sum of maximum guaranteed bandwidth is greater than port bandwidth Bp, the bandwidth allocated to the ith flow is Bi= Bimin+(Bp-)*Wi/.

 

Description

Use the traffic-bandwidth command to activate the ACL for traffic identifying and provide guaranteed bandwidth for the corresponding traffic. This command is applicable to only the permit rules in ACLs).

Use the undo traffic-bandwidth command to remove this feature.

This configuration provides the minimum guaranteed bandwidth and maximum available bandwidth for the specific traffic. Note that the maximum available bandwidth must be no smaller than the minimum guaranteed bandwidth.

Related command: display qos-interface traffic-bandwidth.

 

&  Note:

l      Only type-A LPUs support this command.

l      Only the permit rule can be referenced in this command and applied to hardware.

 

Examples

# Guarantee the bandwidth of the packets that match the permit rule in ACL 2000: The minimum guaranteed bandwidth is 64 k, the maximum available bandwidth is 128 k, and bandwidth weight is 50.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1] traffic-bandwidth outbound ip-group 2000 64 128 50

1.1.22  traffic-limit

Syntax

I. For type-A LPUs:

traffic-limit { inbound | outbound } acl-rule [ system-index ] target-rate

undo traffic-limit { inbound | outbound } acl-rule

II. For non-type-A LPUs:

traffic-limit inbound acl-rule [ system-index ] [ kbps ] target-rate  [ exceed action ]

undo traffic-limit inbound acl-rule

 

&  Note:

LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.

 

View

QoS view

Parameters

inbound: Performs traffic policing on the packets received by the port.

outbound: Performs traffic policing on the packets sent by the port.

acl-rule: Applied ACL which can be the combination of various ACL rules. For the ways of type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6. For the ways of non-type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-5 and Table 1-6.

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

kbps: Specifies the limit rate to be measured in kbps. If the kbps keyword is specified, the rate is measured in kbps, in the range of 64 to 1,024,000 with the granularity being 64. If the number you input is in the range of N*64 to (N+1)*64 (N is a natural number), the switch will set the value to (N+1)*64 kbps automatically.

target-rate: Total rate to limit all the packets sent on a port. For type-A LPUs, the target-rate argument is in the range of 64 to 8,388,608 in kbps with the granularity being 64. If the kbps keyword is not provided, the target-rate argument is expressed in mbps in the range of 1 to 1,000.

exceed action: Optional. The action is taken when the traffic exceeds the threshold. Only type-A LPUs support this keyword. The action argument can be:

l           drop: Drops the packets.

l           remark-dscp value: Sets a new DSCP value.

Description

Use the traffic-limit command to activate an ACL for traffic identifying and perform traffic policing.

Use the undo traffic-limit command to remove traffic policing.

This command performs traffic limit on the packets matching the permit rule in an ACL only.

 

&  Note:

Only the permit rule can be referenced in this command and applied to hardware.

 

Examples

# Perform traffic limit on the packets matching the permit rule in ACL 2000 on Ethernet 2/0/1 of a type-A LPU. The maximum rate is 128 kbps.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1] traffic-limit inbound ip-group 2000 128

# Perform traffic limit on the packets matching the permit rule in ACL 2000 on GigabitEthernet 2/0/1 of a non-type-A LPU. The maximum rate is 128 kbps.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet2/0/1

[H3C-GigabitEthernet2/0/1] qos

[H3C-qosb-GigabitEthernet2/0/1] traffic-limit inbound ip-group 2000 kbps 128

1.1.23  traffic-priority

Syntax

I. For type-A LPUs:

traffic-priority { inbound | outbound } acl-rule [ system-index ] { { dscp dscp-value | ip-precedence pre-value } | local-precedence pre-value }*

undo traffic-priority { inbound | outbound } acl-rule

II. For non-type-A LPUs:

traffic-priority inbound acl-rule [ system-index ] { { dscp dscp-value | ip-precedence pre-value } | { cos cos | local-precedence pre-value } }*

undo traffic-priority inbound acl-rule

 

&  Note:

LPUs that are not a type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.

 

View

QoS view

Parameters

inbound: Performs priority marking for the packets received by the port.

outbound: Performs priority marking for the packets sent by the port.

acl-rule: Applied ACL which can be the combination of various ACL rules. For the ways of type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6. For the ways of non-type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-5 and Table 1-6.

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4294967295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

dscp dscp-value: Sets DSCP precedence, ranging from 0 to 63. You can also enter the keywords in Table 1-8.

Table 1-8 Description on DSCP precedence values

Keyword

DSCP value (decimal)

DSCP value (binary)

ef

46

101110

af11

10

001010

af12

12

001100

af13

14

001110

af21

18

010010

af22

20

010100

af23

22

010110

af31

26

011010

af32

28

011100

af33

30

011110

af41

34

100010

af42

36

100100

af43

38

100110

cs1

8

001000

cs2

16

010000

cs3

24

011000

cs4

32

100000

cs5

40

101000

cs6

48

110000

cs7

56

111000

be (default)

0

000000

 

ip-precedence pre-value: Sets IP precedence. The pre-value argument ranges from 0 to 7. You can also enter the keywords in Table 1-9.

Table 1-9 Description on IP precedence values

Keyword

IP Precedence (decimal)

IP Precedence (binary)

routine

0

000

priority

1

001

immediate

2

010

flash

3

011

flash-override

4

100

critical

5

101

internet

6

110

network

7

111

 

cos cos: Sets 802.1p priority. The pre-value argument ranges from 0 to 7. You can also enter the keywords in Table 1-10.

Table 1-10 Description on 802.1p priority values

Keyword

802.1p priority (decimal)

802.1p priority value (binary)

best-effort

0

000

background

1

001

spare

2

010

excellent-effort

3

011

controlled-load

4

100

video

5

101

voice

6

110

network-management

7

111

 

&  Note:

If you have redirected the packets to CPU, it is not recommended to set the 802.1p priority to 7, and vice versa.

 

local-precedence pre-value: Sets local precedence. The pre-value argument ranges from 0 to 7.

Description

Use the traffic-priority command to enable ACLs for priority marking.

Use the undo traffic-priority command to remove the priority marking feature.

Related command: display qos-interface traffic-priority.

 

&  Note:

Only the permit rule can be referenced in this command and applied to hardware.

 

Examples

# Mark the local precedence of the packets matching the permit rule in ACL 2000 as 0.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1] traffic-priority outbound ip-group 2000 local-precedence 0

1.1.24  traffic-red

Syntax

traffic-red outbound acl-rule [ system-index ] qstart qstop probability

undo traffic-red outbound acl-rule

View

QoS view

Parameters

outbound: Performs the RED operation on the sent packets.

acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6.

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4294967295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

qstart: Queue length where the system starts to drop packets at random, in the range of 0 to 262,128 in kbyte. The packets in the queue whose length is less than the qstart argument will not be dropped. The value must be the multiples of 16 KB.

qstop: Queue length where the system stops dropping packets at random, in the range of 0 to 262,128 in kbyte. All the packets in the queue whose length is greater than the qstop argument will be dropped. The value must be the multiples of 16 KB.

probability: Drop probability when the qstop argument is reached, in the range of 0% to 100%.

Description

Use the traffic-red command to enable the RED operation and set RED relevant parameters.

Use the undo traffic-red command to remove the RED configuration.

Note that the qstop argument in this command must be no smaller than the qstart argument.

Related command: display qos-interface traffic-red.

 

&  Note:

l      Only type-A LPUs support this command.

l      Only the permit rule can be referenced in this command and applied to hardware.

 

Examples

# Perform the RED operation on the packets matching the permit rule in ACL 2000. RED parameters can be set as follows: the qstart argument is 64 KB, the qstop argument is 128 KB, and the probability argument is 20%.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1] traffic-red outbound ip-group 2000 64 128 20

1.1.25  traffic-redirect

Syntax

traffic-redirect inbound acl-rule [ system-index ] { cpu | interface interface-type interface-number }

undo traffic-redirect inbound acl-rule

View

QoS view

Parameters

inbound: Performs traffic redirect on the packets received by the port.

acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6.

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

cpu: Redirects the traffic to the CPU.

interface { interface-type interface-number }: Redirects the packets to the specified Ethernet port. The interface-type argument refers to the port type, and the interface-number argument refers to the port number.

Description

Use the traffic-redirect command to enable the ACL to identify and redirect the traffic. This command is applicable to the permit rules in an ACL only.

Use the undo traffic-redirect command to disable the traffic redirect feature.

Related command: display qos-global traffic-redirect.

 

&  Note:

l      Only type-A LPUs support this command.

l      In a traffic redirect configuration, the source port and the destination port must be on the same LPU.

l      Only the permit rule can be referenced in this command and applied to hardware.

 

Examples

# Redirect the packets matching the permit rule in ACL 2000 to GigabitEthernet 2/0/2.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface GigabitEthernet2/0/1

[H3C-GigabitEthernet2/0/1] qos

[H3C-qosb-GigabitEthernet2/0/1] traffic-redirect inbound ip-group 2000 interface gigabitethernet2/0/2

1.1.26  traffic-remark-vlanid

Syntax

traffic-remark-vlanid inbound acl-rule [ system-index ] remark-vlan vlan-id

undo traffic-remark-vlanid inbound acl-rule

 

&  Note:

LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.

 

View

QoS view

Parameters

inbound: Tags the packets received by the port with outer VLAN tags.

acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-11 and Table 1-12.

Table 1-11 Ways of applying combined ACL rules

ACL combination

Form of the acl-rule argument

Apply all the rules in an IP ACL separately

ip-group { acl-number | acl-name }

Apply a rule in an IP ACL separately

ip-group { acl-number | acl-name } rule rule-id

Apply all the rules in a Link ACL separately

link-group { acl-number | acl-name }

Apply a rule in a Link ACL separately

link-group { acl-number | acl-name } rule rule-id

Apply a rule in an IP ACL and a rule in a Link ACL at the same time

ip-group { acl-number | acl-name } rule rule-id link-group { acl-number | acl-name } rule rule-id

 

Table 1-12 Description on the parameters in the ACL combination

Parameter

Description

ip-group { acl-number | acl-name }

Basic or advanced ACL

acl-number: ACL number in the range of 2,000 to 3,999.

acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive.

link-group { acl-number | acl-name }

Layer 2 ACL

acl-number: ACL number in the range of 4,000 to 4,999.

acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive.

user-group { acl-number | acl-name }

User-defined ACL

acl-number: ACL number in the range of 5,000 to 5,999.

acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive.

rule-id

ACL rule ID, in the range of 0 to 127. If the rule-id argument is not specified, the rule keyword refers to all the rules in the ACL.

 

vlan-id: ID of the outer VLAN tag which is tagged to the packet, in the range of 1 to 4094.

Description

Use the traffic-remark-vlanid command to enable the ACL for traffic identifying and tag the packet matching the ACL with the outer VLAN tag to implement the traffic-based selective QinQ feature.

Use the undo traffic-remark-vlanid command to disable the configuration.

This command is applicable to only the permit rules in the ACL.

Refer to the selective QinQ module in this manual for the detailed information about the selective QinQ feature.

 

  Caution:

l      A-type LPUs, LS82GT20, and LS82GP20 do not support traffic-based selective QinQ.

l      Execute the vlan-vpn enable command in the corresponding port view before executing the traffic-remark-vlanid command.

l      The QinQ feature cannot be enabled on a port with Voice VLAN function enabled.

 

Examples

# Tag the packets matching the permit rule in ACL 2000 with an outer VLAN tag on Ethernet 2/0/1, thus implementing the traffic-based selective QinQ feature.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] vlan 25

[H3C-vlan25] quit

[H3C] acl number 2000

[H3C-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255

[H3C-acl-basic-2000] quit

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] port link-type hybrid

[H3C-Ethernet2/0/1] port hybrid vlan 25 untagged

[H3C-Ethernet2/0/1] vlan-vpn enable

[H3C-Ethernet2/0/1] qos

[H3C-qosb-Ethernet2/0/1] traffic-remark-vlanid inbound ip-group 2000 remark-vlan 25

1.1.27  traffic-statistic

Syntax

I. For type-A LPUs:

traffic-statistic { inbound | outbound } acl-rule [ system-index ]

undo traffic-statistic { inbound | outbound } acl-rule

II. For non-type-A LPUs:

traffic-statistic inbound acl-rule [ system-index ]

undo traffic-statistic inbound acl-rule

 

&  Note:

LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.

 

View

QoS view

Parameters

inbound: Performs traffic statistic on the packets received by the port.

outbound: Performs traffic statistic on the packets sent by the port.

acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6.

system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:

l           If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;

l           If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;

l           If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.

When the specified ACL rule is not effective, the system will adopt the index value input by you.

Description

Use the traffic-statistic command to activate the ACL for traffic identifying and count the traffic. This command is applicable to only the permit rules in the ACL.

Use the undo traffic-statistic command to cancel the traffic statistics.

The statistics information of the traffic-statistic command includes the times of ACL matches on the hardware. You can use display qos-interface traffic-statistic command to display the statistics information.

Related command: display qos-interface traffic-statistic.

 

&  Note:

Only the permit rule can be referenced in this command and applied to hardware.

 

Examples

# Perform traffic statistics on the packets matching the permit rule in ACL 2000.

<H3C> system-view

System View: return to User View with Ctrl+Z.

[H3C] interface Ethernet2/0/1

[H3C-Ethernet2/0/1] qos

[H3C-qoss-Ethernet2/0/1] traffic-statistic inbound ip-group 2000

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网