11-ACL and QoS Configuration Examples

HomeSupportConfigure & DeployConfiguration ExamplesH3C Fixed Port Campus Switches Configuration Examples-11xx[R1213Pxx][R9126Pxx][R1330Pxx]-6W10211-ACL and QoS Configuration Examples
09-TCB Configuration Examples
Title Size Download
09-TCB Configuration Examples 78.66 KB

Introduction

The Transient Capture Buffer (TCB) feature monitors packet drop events on a set of memory management unit (MMU) resources. When a packet is dropped on a queue, the system collects drop time, drop reason, packet metadata, and other information and reports them to an NMS through gRPC.

This document provides examples for configuring TCB.

Prerequisites

The configuration examples in this document were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

This document assumes that you have basic knowledge of TCB and gRPC.

Example: Configuring TCB

Network configuration

As shown in Figure 1, Device A acts as a gRPC client.

Configure TCB and gRPC in dial-out mode on Device A to monitor packet drops and report packet drop information to the collector through gRPC.

Figure 1 Network diagram

 

Analysis

·     Configure TCB on Twenty-FiveGigE 1/0/3 of Device A to monitor packet drops.

·     Configure gRPC on the device to send packet drop information to the gRPC server.

Applicable hardware and software versions

The following matrix shows the hardware and software versions to which this configuration example is applicable:

 

Hardware

Software version

S6550X-HI switch series

Release 1330P07 and later

S6880 switch series

Release 1330P07 and later

S9820-8M switch

Release 1330P07 and later

S5580X-HI switch series

Release 1330P07 and later

S5580X-EI switch series

Release 1330P07 and later

S5580S-EI switch series

Release 1330P07 and later

 

Restrictions and guidelines

You can configure TCB in system view or interface view, but not in both views at the same time. For example, if you have configured TCB in system view, to configure TCB in interface view, you must first delete the TCB configuration in system view.

The TCB configuration in system view takes effect on all TCB-capable interfaces. The TCB configuration in interface view takes effect only on the specified interface.

Only one interface on the device can be configured with TCB when you configure TCB in interface view.

The device sends all packet drop information captured by TCB to the gRPC server, but the gRPC server can only parse packet drop information for IPv4 TCP packets and IPv4 UDP packets.

The display buffer transient-capture packet-drop command can display a maximum of three packet drop items. This command cannot display the VLAN information of outbound packets that are forwarded between IRF member devices.

Procedures

Assigning IP addresses and configuring routing

Assign an IP address and subnet mask to each interface as shown in Figure 1, and configure routing. (Details not shown.)

Configuring Device A

Configuring TCB

# Create an IPv4 advanced ACL numbered 3000, and configure a rule to match packets with source IP address 192.168.0.1 and another rule to match packets with source IP address 192.168.1.1.

<DeviceA> system-view

[DeviceA] acl advanced 3000

[DeviceA-acl-ipv4-adv-3000] rule permit ip source 192.168.0.1 0

[DeviceA-acl-ipv4-adv-3000] rule permit ip source 192.168.1.1 0

[DeviceA-acl-ipv4-adv-3000] quit

# Configure TCB in the outbound direction of Twenty-FiveGigE 1/0/3.

[DeviceA] interface twenty-fivegige 1/0/3

[DeviceA-Twenty-FiveGigE1/0/3] buffer transient-capture egress queue 0 enable acl 3000 start-threshold 10000 stop-threshold 5000 frozen-number 1000 frozen-timer 500 pre-sample-rate 10 post-sample-rate 10 poll-frequency 600

[DeviceA-Twenty-FiveGigE1/0/3] quit

Configuring gRPC

# Enable the gRPC service.

[DeviceA] grpc enable

# Create a sensor group named test, and add sensor paths tcb/tcbpacketinfoevent and tcb/tcbrawpacketinfoevent.

[DeviceA] telemetry

[DeviceA-telemetry] sensor-group test

[DeviceA-telemetry-sensor-group-test] sensor path tcb/tcbpacketinfoevent

[DeviceA-telemetry-sensor-group-test] sensor path tcb/tcbrawpacketinfoevent

[DeviceA-telemetry-sensor-group-test] quit

# Create a destination group named collector1. Specify a collector that uses IPv4 address 192.168.2.1 and port number 50050.

[DeviceA-telemetry] destination-group collector1

[DeviceA-telemetry-destination-group-collector1] ipv4-address 192.168.2.1 port 10001

[DeviceA-telemetry-destination-group-collector1] quit

# Configure a subscription named A to bind sensor group test with destination group collector1. Set the sampling interval to 10 seconds.

[DeviceA-telemetry] subscription A

[DeviceA-telemetry-subscription-A] sensor-group test

[DeviceA-telemetry-subscription-A] destination-group collector1

[DeviceA-telemetry-subscription-A] quit

[DeviceA-telemetry] quit

Verifying the configuration

Send traffic from Server 1 and Server 2 to Server 3 at wire speed, and packet dropping occurs in the outbound direction of Twenty-FiveGigE 1/0/3 on Device A. The collector can receive packet drop information sent from the device. You can also view the packet drop information captured by TCB on the device.

# Display packet drop information about IPv4 packets captured by TCB for slot 1 on Device A.

<DeviceA> display buffer transient-capture packet-drop slot 1 ipv4

                                                                                

--------------------------------------------------------------------------------

No.  Time  SMAC  DMAC  VLAN  SIP  DIP  SPort  DPort  Queue  IfName  Reason     

--------------------------------------------------------------------------------

Total Drop Packets in Ring Buffer of XPE 0:799

0  248  0010-9400-0005  0010-9400-0002  100  192.168.0.1  192.168.3.1 60  60  2  TW-FGE1/0/3  2

Configuration files

#

interface Twenty-FiveGigE1/0/3

 port link-mode route

 buffer transient-capture egress queue 0 enable acl 3000 start-threshold 10000 s

top-threshold 5000 frozen-number 1000 frozen-timer 500 pre-sample-rate 10 post-s

ample-rate 10 poll-frequency 600

 ip address 192.168.4.1 255.255.255.0

#

 grpc enable

#

telemetry

sensor-group test

  sensor path tcb/tcbpacketinfoevent

  sensor path tcb/tcbrawpacketinfoevent

 destination-group collector1

  ipv4-address 192.168.2.1 port 10001

 subscription A

  sensor-group test

  destination-group collector1

#

Related documentation

·     H3C xxxx Switch ACL and QoS Command Reference-Release xxxx

·     H3C xxxx Switch ACL and QoS Configuration Guide-Release xxxx

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us