05-ACL and QoS Command Reference

HomeSupportWirelessH3C WX3000E Series Wireless SwitchesReference GuidesCommand ReferencesH3C WX3000E Series Wireless Switches Switching Engine Command References(R3507P26)-6W10205-ACL and QoS Command Reference
02-QoS Commands
Title Size Download
02-QoS Commands 232.92 KB

The term "switch" or "device" in this chapter refers to the switching engine on a WX3000E wired-wireless switch.

The WX3000E series comprises WX3024E and WX3010E wired-wireless switches.

The port numbers in this chapter are for illustration only.

Class configuration commands

display traffic classifier

Syntax

display traffic classifier user-defined [ tcl-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

user-defined: Displays user-defined classes.

tcl-name: Class name, a string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display traffic classifier command to display class information.

If no class name is specified, the command displays information about all user-defined classes.

Examples

# Display information about all user-defined classes.

<Sysname> display traffic classifier user-defined

User Defined Classifier Information:

 Classifier: USER1

  Operator: AND

  Rule(s) : if-match ip-precedence 5

 

 Classifier: database

  Operator: AND

  Rule(s) : if-match acl 3131

Table 1 Output description

Field

Description

Classifier

Class name and its match criteria

Operator

The match operator you set for the class. If the operator is AND, the class matches the packets that match all its match criteria. If the operator is OR, the class matches the packets that match any of its match criteria.

Rule(s)

Match criteria

 

if-match

Syntax

if-match match-criteria

undo if-match match-criteria

undo if-match acl [ ipv6 ] { acl-number | name acl-name } [ update acl [ ipv6 ] { acl-number | name acl-name } ]

View

Class view

Default level

2: System level

Parameters

match-criteria: Specifies a match criterion. Table 2 shows the available criteria.

acl [ ipv6 ] { acl-number | name acl-name }: Specifies an ACL already referenced in the class by the ACL name or ACL number.

update acl [ ipv6 ] { acl-number | name acl-name }: Specifies a new ACL by its number or name to replace the ACL already referenced by the class.

Table 2 The value range for the match-criteria argument

Keyword and argument combination

Description

acl [ ipv6 ] { acl-number | name acl-name }

Matches an ACL.

The acl-number argument ranges from 2000 to 5999 for an IPv4 ACL, and 2000 to 3999 or 10000 to 42767 for an IPv6 ACL.

The acl-name argument is a case-insensitive string of 1 to 32 characters, which must start with an English letter from a to z or A to Z, and to avoid confusion, cannot be all.

any

Matches all packets.

dscp dscp-list

Matches DSCP values.

The dscp-list argument is a list of up to eight DSCP values. A DSCP value ranges from 0 to 63.

destination-mac mac-address

Matches a destination MAC address.

customer-dot1p 8021p-list

Matches the 802.1p priority of the customer network.

The 8021p-list argument is a list of up to eight 802.1p priority values. An 802.1p priority ranges from 0 to 7.

service-dot1p 8021p-list

Matches the 802.1p priority of the service provider network.

The 8021p-list argument is a list of up to eight 802.1p priority values. An 802.1p priority ranges from 0 to 7.

ip-precedence ip-precedence-list

Matches IP precedence.

The ip-precedence-list argument is a list of up to eight IP precedence values. An IP precedence ranges from 0 to 7.

protocol protocol-name

Matches a protocol.

The protocol-name argument can be IP or IPv6

source-mac mac-address

Matches a source MAC address.

customer-vlan-id { vlan-id-list | vlan-id1 to vlan-id2 }

Matches the VLAN IDs of customer networks.

The vlan-id-list argument is a list of up to eight VLAN IDs. The vlan-id1 to vlan-id2 specifies a VLAN ID range, where the vlan-id1 must be smaller than the vlan-id2. A VLAN ID ranges from 1 to 4094.

service-vlan-id { vlan-id-list | vlan-id1 to vlan-id2 }

Matches the VLAN IDs of ISP networks.

The vlan-id-list is a list of up to eight VLAN IDs. The vlan-id1 to vlan-id2 specifies a VLAN ID range, where the vlan-id1 must be smaller than the vlan-id2. A VLAN ID ranges from 1 to 4094.

 

 

NOTE:

If a class that uses the AND operator has multiple if-match acl, if-match acl ipv6, if-match customer-vlan-id or if-match service-vlan-id clauses, a packet that matches any of the clauses matches the class.

 

 

NOTE:

To successfully apply a traffic class that uses the AND operator, define only one if-match clause for any of the following match criteria and input only one value for any of the following list arguments, for example, the 8021p-list argument:

·       customer-dot1p 8021p-list

·       destination-mac mac-address

·       dscp dscp-list

·       ip-precedence ip-precedence-list

·       service-dot1p 8021p-list

·       source-mac mac-address

 

 

NOTE:

In a class that uses the operator AND, follow these guidelines when configuring match criteria:

·       You cannot configure if-match dscp and if-match ip-precedence at the same time.

·       If the class if configured with if-match dscp or if-match ip-precedence, you can configure if-match protocol ip but not if-match protocol ipv6.

 

Description

Use the if-match command to define a match criterion.

Use the undo if-match command to delete a match criterion.

Use the if-match not command to define a criterion for matching traffic not conforming to the specified criterion.

Use the undo if-match not command to delete a criterion for matching traffic not conforming to the specified criterion.

When defining match criteria, use the usage guidelines described in these subsections:

Defining an ACL-based match criterion

Defining a criterion to match a destination MAC address

Defining a criterion to match a source MAC address

Defining a criterion to match DSCP values

Defining a criterion to match 802.1p priority in customer or service provider VLAN tags

Defining a criterion to match IP precedence values

Defining a criterion to match customer network VLAN IDs or service provider network VLAN IDs

Defining an ACL-based match criterion

If the ACL referenced in the if-match command does not exist, the class cannot be applied to hardware.

For a class, you can reference an ACL twice by its name and number respectively with the if-match command.

Defining a criterion to match a destination MAC address

You can configure multiple destination MAC address match criteria for a class.

A destination MAC address match criterion is significant only to Ethernet interfaces.

Defining a criterion to match a source MAC address

You can configure multiple source MAC address match criteria for a class.

A criterion to match a source MAC address is significant only to Ethernet interfaces.

Defining a criterion to match DSCP values

·           You can configure multiple DSCP match criteria for a class. All defined DSCP values are automatically sorted in ascending order.

·           You can configure up to eight DSCP values in one command line. If multiple identical DSCP values are specified, the system considers them as one. If a packet matches one of the defined DSCP values, it matches the if-match clause.

·           To delete a criterion that matches DSCP values, the specified DSCP values must be identical with those defined in the rule (the sequence may be different).

Defining a criterion to match 802.1p priority in customer or service provider VLAN tags

·           You can configure multiple 802.1p priority match criteria for a class. All the defined 802.1p values are automatically arranged in ascending order.

·           You can configure up to eight 802.1p priority values in one command line. If the same 802.1p priority value is specified multiple times, the system considers them as one. If a packet matches one of the defined 802.1p priority values, it matches the if-match clause.

·           To delete a criterion that matches 802.1p priority values, the specified 802.1p priority values in the command must be identical with those defined in the criterion (the sequence may be different).

Defining a criterion to match IP precedence values

·           You can configure multiple IP precedence match criteria for a class. The defined IP precedence values are automatically arranged in ascending order.

·           You can configure up to eight IP precedence values in one command line. If the same IP precedence is specified multiple times, the system considers them as one. If a packet matches one of the defined IP precedence values, it matches the if-match clause.

·           To delete a criterion that matches IP precedence values, the specified IP precedence values in the command must be identical with those defined in the criterion (the sequence may be different).

Defining a criterion to match customer network VLAN IDs or service provider network VLAN IDs

·           You can configure multiple VLAN ID match criteria for a class. The defined VLAN IDs are automatically arranged in ascending order.

·           You can configure multiple VLAN IDs in one command line. If the same VLAN ID is specified multiple times, the system considers them as one. If a packet matches one of the defined VLAN IDs, it matches the if-match clause.

·           To delete a criterion that matches VLAN IDs, the specified VLAN IDs in the command must be identical with those defined in the criterion (the sequence may be different).

Examples

# Define a match criterion for class class1 to match the packets with the destination MAC address 0050-ba27-bed3.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match destination-mac 0050-ba27-bed3

# Define a match criterion for class class2 to match the packets with the source MAC address 0050-ba27-bed2.

<Sysname> system-view

[Sysname] traffic classifier class2

[Sysname-classifier-class2] if-match source-mac 0050-ba27-bed2

# Define a match criterion for class class1 to match the packets with the customer network 802.1p priority value 3.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match customer-dot1p 3

# Define a match criterion for class class1 to match the packets with the service provider network 802.1p priority value 5.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match service-dot1p 5

# Define a match criterion for class class1 to match ACL 3101.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match acl 3101

# Define a match criterion for class class1 to match the ACL named flow.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match acl name flow

# Define a match criterion for class class1 to match IPv6 ACL 3101.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match ipv6 acl 3101

# Define a match criterion for class class1 to match the IPv6 ACL named flow.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match ipv6 acl name flow

# Define a match criterion for class class1 to match all packets.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match any

# Define a match criterion for class class1 to match the packets with a DSCP value of 1, 6 or 9.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match dscp 1 6 9

# Define a match criterion for class class1 to match the packets with the SVLAN ID 2, 7, or 10.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match service-vlan-id 2 7 10

# Define a match criterion for class class1 to match the packets with an IP precedence value of 1 or 6.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match ip-precedence 1 6

# Define a match criterion for class class1 to match IP packets.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match protocol ip

# Define a match criterion for class class1 to match the packets with a customer network VLAN ID of 1, 6, or 9.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match customer-vlan-id 1 6 9

# Change the match criterion of class class1 from ACL 2008 to ACL 2009.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] undo if-match acl 2008 update 2009

traffic classifier

Syntax

traffic classifier tcl-name [ operator { and | or } ]

undo traffic classifier tcl-name

View

System view

Default level

2: System level

Parameters

tcl-name: Specifies a class name, a string of 1 to 31 characters.

operator: Sets the operator to logic AND or OR for the class.

and: Specifies the logic AND operator. The class matches the packets that match all its criteria.

or: Specifies the logic OR operator. The class matches the packets that match any of its criteria.

Description

Use the traffic classifier command to create a class and enter class view.

Use the undo traffic classifier command to delete a class.

If no match operator is specified, the default AND operator applies.

Related commands: qos policy, qos apply policy, and classifier behavior.

Examples

# Create a class class1.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1]

Traffic behavior configuration commands

display traffic behavior

Syntax

display traffic behavior user-defined [ behavior-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

user-defined: Displays user-defined traffic behaviors.

behavior-name: Behavior name, a string of 1 to 31 characters. If no traffic behavior is specified, this command displays information about the user-defined behaviors.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display traffic behavior command to display traffic behavior information.

Examples

# Display user-defined traffic behaviors.

<Sysname> display traffic behavior user-defined

User Defined Behavior Information:

  Behavior: test

    Filter enable: permit

    Primap pre-defined table: dscp-dp

  Behavior: USER1

    Marking:

      Remark IP Precedence 3

    Nesting:

      Nest Top-Most Vlan-ID  1000

  Behavior: USER2

    Redirect enable:

        Redirect type: interface

        Redirect destination: GigabitEthernet1/0/1

Table 3 Output description

Field

Description

User Defined Behavior Information

User-defined behavior information

Behavior

Name of a behavior

Marking

Information about traffic marking

Remark

Type of precedence marked for traffic, which can be DSCP, IP precedence, MPLS EXP, FR DE, dot1p (COS), ATM CLP, qos local ID, local precedence, drop precedence, customer VLAN ID, service VLAN ID, forwarding class, or Bfi ID. For more information about these precedence types, see “Traffic behavior configuration commands.”

Filter enable

Traffic filtering option: permit or deny

Primap pre-defined table

The pre-defined priority mapping table in use. For more information about pre-defined priority mapping tables, see the chapter “Priority mapping configuration commands.”

Nesting

Information about tagging packets with a VLAN tag

Nest Top-Most Vlan-ID

Tag packets with a service VLAN tag. Alternatively, this field can be Top-Most dot1p COS, customer Vlan-ID, or customer dot1p COS. For more information about these options, see the Layer 2—LAN Switching Command Reference.

Redirect enable

Traffic redirecting configuration information

Redirect type

Traffic redirecting type, which can be redirecting traffic to a VLAN, the CPU, an interface, the next-hop, or a service-loop group

Redirect destination

Destination for traffic redirecting, which can be a VLAN ID, an interface name, the IP address of the next hop, the CPU, or a service loopback group name

 

filter

Syntax

filter { deny | permit }

undo filter

View

Traffic behavior view

Default level

2: System level

Parameters

deny: Drops packets.

permit: Permits packet to pass through.

Description

Use the filter command to configure a traffic filtering action in a traffic behavior.

Use the undo filter command to delete the traffic filtering action.

Examples

# Configure the traffic filtering action as deny in traffic behavior database.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] filter deny

primap pre-defined

Syntax

primap pre-defined { dscp-dot1p | dscp-dp | dscp-dscp | dscp-lp }

undo primap pre-defined { dscp-dot1p | dscp-dp | dscp-dscp | dscp-lp }

View

Traffic behavior view

Default level

2: System level

Parameters

pre-defined: Pre-defined priority mapping table.

dot1p-dot1p: 802.1p-to-802.1p mapping table.

dot1p-dp: 802.1p-to-drop mapping table.

dot1p-dscp: 802.1p-to-DSCP mapping table.

dot1p-lp: 802.1p-to-local mapping table.

Description

Use the primap pre-defined command to configure the action of mapping source precedence to target precedence through the specified priority mapping table in a traffic behavior.

Use the undo primap pre-defined command to delete the action.

Related commands: display qos map-table.

Examples

# Specify a DSCP-to-drop mapping table in traffic behavior behavior1.

<Sysname> system-view

[Sysname] traffic behavior behavior1

[Sysname-behavior-behavior1] primap pre-defined dscp-dp

redirect

Syntax

redirect interface interface-type interface-number

undo redirect interface interface-type interface-number

View

Traffic behavior view

Default level

2: System level

Parameters

interface: Redirects traffic to an interface.

interface-type interface-number: Specifies an interface by its type and number.

Description

Use the redirect command to configure a traffic redirecting action in the traffic behavior.

Use the undo redirect command to delete the traffic redirecting action.

Examples

# Configure redirecting traffic to GigabitEthernet 1/0/1 in traffic behavior database.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] redirect interface gigabitethernet1/0/1

remark dot1p

Syntax

remarkdot1p 8021p

undo remark dot1p

View

Traffic behavior view

Default level

2: System level

Parameters

8021p: 802.1p priority to be marked for packets, which ranges from 0 to 7.

Description

Use the remark dot1p command to configure an 802.1p priority marking action or configure the inner-to-outer tag priority copying action.

Use the undo remark dot1p command to delete the action.

Related commands: qos policy, traffic behavior, and classifier behavior.

Examples

# Configure traffic behavior database to mark matching traffic with 802.1p 2.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark dot1p 2

remark dscp

Syntax

remark dscp dscp-value

undo remark dscp

View

Traffic behavior view

Default level

2: System level

Parameters

dscp-value: DSCP value, which can be a number from 0 to 63 or any keyword in Table 4.

Table 4 DSCP keywords and values

Keyword

DSCP value (binary)

DSCP value (decimal)

default

000000

0

af11

001010

10

af12

001100

12

af13

001110

14

af21

010010

18

af22

010100

20

af23

010110

22

af31

011010

26

af32

011100

28

af33

011110

30

af41

100010

34

af42

100100

36

af43

100110

38

cs1

001000

8

cs2

010000

16

cs3

011000

24

cs4

100000

32

cs5

101000

40

cs6

110000

48

cs7

111000

56

ef

101110

46

 

Description

Use the remark dscp command to configure a DSCP marking action.

Use the undo remark dscp command to delete the action.

Related commands: qos policy, traffic behavior, and classifier behavior.

Examples

# Configure traffic behavior database to mark matching traffic with DSCP 6.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark dscp 6

remark ip-precedence

Syntax

remark ip-precedence ip-precedence-value

undo remark ip-precedence

View

Traffic behavior view

Default level

2: System level

Parameters

ip-precedence-value: IP precedence value to be marked for packets, which ranges from 0 to 7.

Description

Use the remark ip-precedence command to configure an IP precedence marking action.

Use the undo remark ip-precedence command to delete the action.

Related commands: qos policy, traffic behavior, and classifier behavior.

Examples

# Set the IP precedence to 6 for packets.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark ip-precedence 6

remark local-precedence

Syntax

remark local-precedence local-precedence

undo remark local-precedence

View

Traffic behavior view

Default level

2: System level

Parameters

local-precedence: Sets the local precedence to be marked for packets, which ranges from 0 to 7.

Description

Use the remark local-precedence command to configure a local precedence marking action.

Use the undo remark local-precedence command to delete the action.

Related commands: qos policy, traffic behavior, and classifier behavior.

Examples

# Configure traffic behavior database to mark matching traffic with local precedence 2.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark local-precedence 2

remark service-vlan-id

Syntax

remark service-vlan-id vlan-id

undo remark service-vlan-id

View

Traffic behavior view

Default level

2: System level

Parameters

vlan-id: Service provider VLAN (SVLAN) to be marked for packets, which ranges from 1 to 4094.

Description

Use the remark service-vlan-id command to configure the action of setting the SVLAN ID for packets.

Use the undo remark service-vlan-id command to delete the action.

Examples

# Configure the action of marking packet with SVLAN ID 2.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark service-vlan-id 2

traffic behavior

Syntax

traffic behavior behavior-name

undo traffic behavior behavior-name

View

System view

Default level

2: System level

Parameters

behavior-name: Sets a behavior name, a string of 1 to 31 characters. The specified behavior-name must not be a system-defined traffic behavior name like ef, af, be, and be-flow-based.

Description

Use the traffic behavior command to create a traffic behavior and enter traffic behavior view.

Use the undo traffic behavior command to delete a traffic behavior.

Related commands: qos policy, qos apply policy, and classifier behavior.

Examples

# Create a traffic behavior named behavior1.

<Sysname> system-view

[Sysname] traffic behavior behavior1

[Sysname-behavior-behavior1]

QoS policy configuration and application commands

classifier behavior

Syntax

classifier tcl-name behavior behavior-name

undo classifier tcl-name

View

Policy view

Default level

2: System level

Parameters

tcl-name: Class name, a string of 1 to 31 characters.

behavior-name: Behavior name, a string of 1 to 31 characters.

Description

Use the classifier behavior command to associate a behavior with a class in a QoS policy.

Use the undo classifier command to remove a class from the policy. You cannot remove a default class.

You can perform a set of QoS actions on a traffic class by associating a traffic behavior with the traffic class.

You can configure multiple class-behavior associations in a QoS policy, and each class can associate with only one traffic behavior.

If the specified class or traffic behavior does not exist, the system creates a null class or traffic behavior.

Related commands: qos policy.

Examples

# Associate traffic class database with traffic behavior test in QoS policy user1.

<Sysname> system-view

[Sysname] qos policy user1

[Sysname-qospolicy-user1] classifier database behavior test

[Sysname-qospolicy-user1]

display qos policy

Syntax

display qos policy  user-defined  [ policy-name [ classifier tcl-name ] ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

user-defined: Displays user-defined QoS policies.

policy-name: QoS policy name, a string of 1 to 31 characters. If no policy is specified, this command displays configuration information of all the policies.

tcl-name: Class name, a string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos policy command to display system-defined or user-defined QoS policy configuration information.

Examples

# Display the configuration information of user-defined QoS policies.

<Sysname> display qos policy user-defined

User Defined QoS Policy Information:

Policy: test

Classifier: USER1

    Marking:

      Remark IP Precedence 3

Table 5 Output description

Field

Description

Policy

Policy name

Classifier

Class name

A policy can contain multiple classes, and each class is associated with a traffic behavior. A class can be configured with multiple match criteria. For more information, see the traffic classifier command in “Class configuration commands.”

Behavior

Behavior associated with the class. A behavior is associated with a class. It can be configured with multiple actions. For more information, see the traffic behavior command in “Traffic behavior configuration commands.”

 

display qos policy global

Syntax

display qos policy global [ slot slot-number ] [ inbound ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

inbound: Displays information about the inbound global QoS policy. An inbound global QoS policy applies to the inbound direction of all ports.

slot slot-number: Displays information about the global QoS policies on the card specified by the slot number. The slot-number argument is 1 and specifies the slot number of a card.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos policy global command to display information about global QoS policies.

Examples

# Display information about the inbound global QoS policy.

<Sysname> display qos policy global inbound

  Direction: Inbound

  Policy: 1

   Classifier: 1

     Operator: AND

     Rule(s) : -none-

     Behavior: 1

      Marking:

        Remark dot1p COS 1

      Marking:

        Remark Service VLAN ID 2

      Redirect enable:

        Redirect type: interface

        Redirect destination: GigabitEthernet1/0/1

   Classifier: 54 (Failed)

     Operator: AND

     Rule(s) : -none-

     Behavior: 8

      -none-         

Table 6 Output description

Field

Description

Direction

Indicates that the QoS policy is applied in the inbound direction or outbound direction

Policy

Policy name and its contents

Classifier

Class name and its contents. If the switch has failed to apply the class-behavior association globally, the field displays “(Failed)” behind the class name.

The failure of applying one class-behavior association does not affect the application of other associations in the QoS policy.

Operator

Logical relationship between match criteria

Rule(s)

Match criteria

Behavior

Name of the traffic behavior, and the actions in the traffic behavior

 

display qos policy interface

Syntax

display qos policy interface [ { interface-type interface-number } ] [ inbound ] [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

interface-type interface-number: Specifies an interface by its type and number to display information about the QoS policy or policies applied to it.

inbound: Displays information about the QoS policy applied in the inbound direction of the specified interface.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos policy interface command to display information about the QoS policy or policies applied to an interface or all interfaces.

If a VT interface is specified, this command displays information about the QoS policy or policies applied to each VA interface inheriting the VT interface, but does not display QoS information about the VT interface.

Examples

# Display information about the QoS policy or policies applied to GigabitEthernet1/0/1.

<Sysname> display qos policy interface gigabitethernet 1/0/1

Interface: GigabitEthernet1/0/1

  Direction: Inbound

  Policy: 1

   Classifier: 1

     Operator: OR

     Rule(s) : -none-

     Behavior: 1

      Marking:

        Remark dot1p COS 1

      Marking:

        Remark Service VLAN ID 2

      Redirect enable:

        Redirect type: interface

        Redirect destination: GigabitEthernet1/0/2

   Classifier: 54 (Failed)

     Operator: AND

     Rule(s) : -none-

     Behavior: 8

      -none-                      

Table 7 Output description

Field

Description

Interface

Interface type and interface number

Direction

The direction in which the policy is applied to the interface

Policy

Name of the policy applied to the interface

Classifier

Class name and configuration information. If the switch has failed to apply the class-behavior association to the port, the field displays “(Failed)” behind the class name.

Operator

Logical relationship between match criteria in the class

Rule(s)

Match criteria in the class

Behavior

Behavior name and configuration information

 

display qos vlan-policy

Syntax

display qos vlan-policy { name policy-name | vlan [ vlan-id ] } [ slot slot-number ] [ inbound ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

name policy-name: Displays information about the VLAN QoS policy specified by its name, a string of 1 to 31 characters.

vlan vlan-id: Displays information about the QoS policy or policies applied to the VLAN specified by its ID.

inbound: Displays information about the QoS policy applied to the inbound direction of the specified VLAN.

slot slot-number: Displays the VLAN QoS policy information of the card specified by the slot number. The slot-number argument is 1 and specifies the slot number of a card.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos vlan-policy command to display VLAN QoS policy information.

Examples

# Display how QoS policy test is applied to VLANs.

<Sysname> display qos vlan-policy name test

  Policy test

    Vlan 200: inbound

Table 8 Output description

Field

Description

Policy

Name of the QoS policy

Vlan

ID of the VLAN where the VLAN policy is applied

inbound

The QoS policy is applied in the inbound direction of the VLAN.

 

# Display information about the QoS policy applied to VLAN 2.

<Sysname> display qos vlan-policy vlan 2

Vlan 2

  Direction: Inbound

  Policy: 1

   Classifier: 1

     Operator: OR

     Rule(s) : -none-

     Behavior: 1

      Marking:

        Remark dot1p COS 1

      Marking:

        Remark Service VLAN ID 2

      Redirect enable:

        Redirect type: interface

        Redirect destination: GigabitEthernet1/0/2

   Classifier: 54

     Operator: AND

     Rule(s) : -none-

     Behavior: 8

      -none-       

 

Table 9 Output description

Field

Description

Vlan

ID of the VLAN where the QoS policy is applied

Direction

The direction in which the QoS policy is applied for the VLAN. Only the inbound direction is supported.

Classifier

Class name and its contents. If the switch has failed to apply the class-behavior association globally, the field displays “(Failed)” behind the class name.

The failure of applying one class-behavior association does not affect the application of other associations in the QoS policy.

Operator

Logical relationship between match criteria

Rule(s)

Match criteria

Behavior

Name of the behavior, and its actions

 

qos apply policy (interface view, port group view)

Syntax

qos apply policy policy-name inbound

undo qos apply policy [ policy-name ] inbound

View

Interface view, port group view

Default level

2: System level

Parameters

inbound: Inbound direction.

policy-name: Specifies a policy name, a string of 1 to 31 characters.

Description

Use the qos apply policy command to apply a QoS policy.

Use the undo qos apply policy command to remove the QoS policy.

In interface view, the setting takes effect on the current interface only. In port group view, the setting takes effect on all ports in the port group.

Examples

# Apply policy USER1 in the inbound direction of GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos apply policy USER1 inbound

qos apply policy (user-profile view)

Syntax

qos apply policy policy-name inbound

undo qos apply policy [ policy-name ] inbound

View

User profile view

Default level

2: System level

Parameters

inbound: Applies the QoS policy to the traffic sent by the online users.

policy-name: Policy name, a string of 1 to 31 characters.

Description

Use the qos apply policy command to apply a QoS policy to a user profile.

Use the undo qos apply policy command to remove the QoS policy.

If a user profile is activated, the QoS policy, except the ACLs referenced in the QoS policy, applied to it cannot be configured or removed. When the users of the user profile are online, the referenced ACLs cannot be modified either.

The QoS policy applied to a user profile takes effect when the user-profile is activated and the users are online.

Only the remark and filter actions are supported in the QoS policies applied in user profile view.

A null policy cannot be applied in user profile view.

Examples

# Apply policy test to the traffic received by the users online. (Assume that that the QoS policy has been configured.)

<Sysname> system-view

[Sysname] user-profile user

[Sysname-user-profile-user] qos apply policy test inbound

qos apply policy global

Syntax

qos apply policy policy-name global inbound

undo qos apply policy [ policy-name ] global inbound

View

System view

Default level

2: System level

Parameters

policy-name: Policy name, a string of 1 to 31 characters.

inbound: Applies the QoS policy to the incoming packets on all ports.

Description

Use the qos apply policy global command to apply a QoS policy globally. A global QoS policy takes effect on all inbound or outbound traffic depending on the direction in which the policy is applied.

Use the undo qos apply policy global command to remove the QoS policy.

Examples

# Apply the QoS policy user1 in the inbound direction globally.

<Sysname> system-view

[Sysname] qos apply policy user1 global inbound

qos policy

Syntax

qos policy policy-name

undo qos policy policy-name

View

System view

Default level

2: System level

Parameters

policy-name: Policy name, a string of 1 to 31 characters.

Description

Use the qos policy command to create a policy and enter policy view.

Use the undo qos policy command to delete a policy.

To use the undo qos policy command to delete a policy that has been applied to a certain object, you must first remove it from the object.

Related commands: classifier behavior and qos apply policy.

Examples

# Define QoS policy user1.

<Sysname> system-view

[Sysname] qos policy user1

[Sysname-qospolicy-user1]

qos vlan-policy

Syntax

qos vlan-policy policy-name vlan vlan-id-list inbound

undo qos vlan-policy [ policy-name ] vlan vlan-id-list inbound

View

System view

Default level

2: System level

Parameters

policy-name: QoS policy name, a string of 1 to 31 characters.

vlan-id-list: Specifies a list of up to eight VLAN IDs. A VLAN ID ranges from 1 to 4094. You can input individual discontinuous VLAN IDs and VLAN ID ranges in the form of start-vlan-id to end-vlan-id where the start VLAN ID must be smaller than the end VLAN ID. Each item in the VLAN list is separated by a space.

inbound: Applies the QoS policy to the incoming packets in the specified VLAN(s).

Description

Use the qos vlan-policy command to apply a QoS policy to VLANs.

Use the undo qos vlan-policy command to remove the QoS policy applied to VLANs.

Examples

# Apply the QoS policy test to the inbound direction of VLAN 200, VLAN 300, VLAN 400, and VLAN 500.

<Sysname> system-view

[Sysname] qos vlan-policy test vlan 200 300 400 500 inbound

reset qos policy global

Syntax

reset qos policy global[ inbound ]

View

User view

Default level

1: Monitor level

Parameters

inbound: Specifies the inbound direction.

Description

Use the reset qos policy global command to clear the statistics of a global QoS policy.

If no direction is specified, the statistics of the global QoS policies in both directions are cleared.

Examples

# Clear the statistics of the global QoS policy in the inbound direction.

<Sysname> reset qos policy global inbound

reset qos vlan-policy

Syntax

reset qos vlan-policy [ vlan vlan-id ] [ inbound ]

View

User view

Default level

1: Monitor level

Parameters

vlan-id: VLAN ID, which ranges from 1 to 4094.

inbound: Clears the statistics of the QoS policy applied in the inbound direction of the specified VLAN.

Description

Use the reset qos vlan-policy command to clear the statistics of the QoS policy applied in a certain direction of a VLAN.

If no direction is specified, the statistics of the QoS policies in both directions of the VLAN are cleared.

Examples

# Clear the statistics of QoS policies applied to VLAN 2.

<Sysname> reset qos vlan-policy vlan 2

 


The term "switch" or "device" in this chapter refers to the switching engine on a WX3000E wired-wireless switch.

The WX3000E series comprises WX3024E and WX3010E wired-wireless switches.

The port numbers in this chapter are for illustration only.

Priority mapping table configuration commands

display qos map-table

Syntax

display qos map-table [ dot1p-dot1p | dot1p-dscp | dot1p-lp | dscp-dot1p | dscp-dscp | dscp-lp ]

View

Any view

Default level

1: Monitor level

Parameters

dot1p-dot1p: 802.1p-to-802.1p mapping table.

dot1p-dscp: 802.1p-to-DSCP mapping table.

dot1p-lp: 802.1p-to-local mapping table.

dscp-dot1p: DSCP-to-802.1p mapping table.

dscp-dscp: DSCP-to-DSCP mapping table.

dscp-lp: DSCP-to-local mapping table.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos map-table command to display the configuration of a priority mapping table.

If no priority mapping table is specified, this command displays the configuration information of all priority mapping tables.

Related commands: qos map-table.

Examples

# Display the configuration of the 802.1p-to-local mapping table.

<Sysname> display qos map-table dot1p-lp

MAP-TABLE NAME: dot1p-lp   TYPE: pre-define

IMPORT  :  EXPORT

   0    :    2

   1    :    0

   2    :    1

   3    :    3

   4    :    4

   5    :    5

   6    :    6

   7    :    7

Table 10 Output description

Field

Description

MAP-TABLE NAME

Name of the priority mapping table

TYPE

Type of the priority mapping table

EXPORT

Output values of the priority mapping table

 

import

Syntax

import import-value-list export export-value

undo import { import-value-list | all }

View

Priority mapping table view

Default level

2: System level

Parameters

import-value-list: List of input values.

export-value: Output value.

all: Deletes all the mappings in the priority mapping table.

Description

Use the import command to configure a mapping from one or multiple input values to an output value.

Use the undo import command to restore the specified or all mappings to the default mappings.

Related commands: display qos map-table.

Examples

# Configure the 802.1p-to-drop mapping table to map 802.1p priority values 4 and 5 to drop precedence 1.

<Sysname> system-view

[Sysname] qos map-table dot1p-lp

[Sysname-maptbl-dot1p-dp] import 4 5 export 1

qos map-table

Syntax

qos map-table { dot1p-dot1p | dot1p-dscp | dot1p-lp | dscp-dot1p | dscp-dscp | dscp-lp }

View

System view

Default level

2: System level

Parameters

dot1p-dot1p: 802.1p-to-802.1p mapping table.

dot1p-dscp: 802.1p-to-DSCP mapping table.

dot1p-lp: 802.1p-to-local mapping table.

dscp-dot1p: DSCP-to-802.1p mapping table.

dscp-dscp: DSCP-to-DSCP mapping table.

dscp-lp: DSCP-to-local mapping table.

Description

Use the qos map-table command to enter the specified priority mapping table view.

Related commands: display qos map-table.

Examples

# Enter the 802.1p-to-drop mapping table view.

<Sysname> system-view

[Sysname] qos map-table dot1p-lp

[Sysname-maptbl-in-dot1p-lp]

Port priority configuration commands

qos priority

Syntax

qos priority priority-value

undo qos priority

View

Interface view, port group view

Default level

2: System level

Parameters

priority-value: Port priority value. the port priority ranges from 0 to 7..

Description

Use the qos priority command to change the port priority of an interface.

Use the undo qos priority command to restore the default.

You can use the display qos trust interface command to view the port priority of an interface.

By default, the port priority of an interface is 0.

Examples

# Set the port priority of interface GigabitEthernet 1/0/1 to 2.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos priority 2

Per-port priority trust mode configuration commands

display qos trust interface

Syntax

display qos trust interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

interface-type interface-number: Specifies an interface by its type and number.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos trust interface command to display priority trust mode and port priority information on an interface.

If no interface is specified, the command displays priority trust mode and port priority information for all interfaces.

Examples

# Display the priority trust mode and port priority settings of GigabitEthernet 1/0/1.

<Sysname> display qos trust interface gigabitethernet 1/0/1

Interface: GigabitEthernet1/0/1

 Port priority trust information

  Port priority:0

  Port priority trust type: untrust   

Table 11 Output description

Field

Description

Interface

Interface type and interface number.

Port priority

The port priority set for the interface.

Port priority trust type

Priority trust mode:

·       dscp—Uses the DSCP value of incoming packets for priority mapping.

·       dot1p—Uses the 802.1p priority of incoming packets for priority mapping.

·       untrust—Uses the port priority of an interface for priority mapping.

 

qos trust

Syntax

qos trust { dot1p | dscp }

undo qos trust

View

Interface view, port group view

Default level

2: System level

Parameters

dot1p: Uses the 802.1p priority in incoming packets for priority mapping.

dscp: Uses the DSCP value in incoming packets for priority mapping.

Description

Use the qos trust command to configure an interface to use a particular priority field carried in packets for priority mapping.

Use the undo qos trust command to restore the default priority trust mode.

By default, the switch uses the port priority of an incoming interface for priority mapping.

In interface view, the setting takes effect on the current interface only. In port group view, the setting takes effect on all ports in the port group.

Examples

# Set the trusted packet priority type to 802.1p priority on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos trust dot1p

 


The term "switch" or "device" in this chapter refers to the switching engine on a WX3000E wired-wireless switch.

The WX3000E series comprises WX3024E and WX3010E wired-wireless switches.

The port numbers in this chapter are for illustration only.

display qos lr interface

Syntax

display qos lr interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

interface-type interface-number: Specifies an interface by its type and number.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos lr interface command to view the line rate configuration information and operational statistics on a specified interface or all the interfaces.

If no interface is specified, this command displays the line rate configuration information and operational statistics on all the interfaces.

Examples

# Display the line rate configuration information and operational statistics on all the interfaces.

<Sysname> display qos lr interface

Interface: GigabitEthernet1/0/1

Direction: Outbound

 CIR 101280 (kbps),  CBS 1875 (byte),  EBS 0 (byte)

 Passed : Interface: GigabitEthernet1/0/0 (Packets/Bytes)2

 Delayed: 0/0 (Packets/Bytes)

 Active Shaping:  NO

Direction: Inbound

 CIR 106400 (kbps),  CBS 1875 (byte),  EBS 0 (byte))  

Table 12 Output description

Field

Description

Interface

Interface type and interface number

Direction

The direction in which the line rate configuration is applied: inbound or outbound

CIR

Committed information rate (CIR) in kbps

 

qos lr

Syntax

qos lr { inbound | outbound } cir committed-information-rate

undo qos lr { inbound | outbound }

View

Interface view, port group view

Default level

2: System level

Parameters

inbound: Limits the rate of incoming packets on the interface.

outbound: Limits the rate of outgoing packets on the interface.

cir committed-information-rate: Committed information rate (CIR) in kbps, which ranges from 64 to 1000000 and must be a multiple of 64.

Description

Use the qos lr command to limit the rate of incoming packets or outgoing packets on the interface.

Use the undo qos lr command to remove the rate limit.

Settings in interface view take effect on the current interface. Settings in port group view take effect on all ports in the port group.

Examples

# Limit the rate of outgoing packets on GigabitEthernet 1/0/1, with CIR 20 kbps.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos lr outbound cir 20

 


The term "switch" or "device" in this chapter refers to the switching engine on a WX3000E wired-wireless switch.

The WX3000E series comprises WX3024E and WX3010E wired-wireless switches.

The port numbers in this chapter are for illustration only.

display qos wrr interface

Syntax

display qos wrr interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

interface-type interface-number: Specifies an interface by its type and number.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see the Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, which is a case sensitive string of 1 to 256 characters.

Description

Use the display qos wrr interface command to display the weighted round robin (WRR) queuing configuration on an interface.

If no interface is specified, this command displays the WRR queuing configuration of all the interfaces.

Related commands: qos wrr.

Examples

# Display the WRR queuing configuration of GigabitEthernet 1/0/1.

<Sysname> display qos wrr interface gigabitethernet 1/0/1

Interface: GigabitEthernet1/0/1

Output queue:   Weighted round robin queue

Queue ID    Group   Weight

---------------------------------------------

7                sp       N/A

   1         1        10

   2         sp       N/A

   3         2        30

Table 13 Output description

Field

Description

Interface

Interface type and interface number

Output queue

Pattern of the current output queue

Queue ID

ID of a queue

Group

Number of the group a queue is assigned to. By default, all queues belong to group 1.

Weight

Queue weight based on which queues are scheduled. N/A indicates that the queue uses the SP queue scheduling algorithm.

 

qos wrr

Syntax

qos wrr queue-id group { group-id weight queue-weight | sp }

undo qos wrr [ queue-id group { group-id weight | sp } ]

View

Interface view, port group view

Default level

2: System level

Parameters

wrr queue-id: Queue ID, which ranges from 0 to 7.

group-id: WRR scheduling group ID, which can be 1 or 2.

weight queue-weight: Scheduling weight of a queue, which ranges from 1 to 100.

sp: Assigns a queue to the SP scheduling group.

Description

Use the qos wrr command to configure WRR or SP+WRR queuing on an interface.

Use the undo qos wrr command to restore the default.

By default, the SP queuing is used.

The switching engine on a WX3000E wired-wireless switch provides four output queues per port. You can assign some queues to the SP scheduling group and the others to WRR scheduling groups and implement SP+WRR queuing.

Examples

# Configure SP+WRR queuing on port GigabitEthernet 1/0/1 as follows:

·           Assign queue 0 to the SP scheduling group.

·           Assign queue 1 to WRR scheduling group 1, and configure its weight as 20.

·           Assign queues 2 and 3 to WRR scheduling group 2, and configure their weights as 10 and 50, respectively.

<Sysname> system-view

[Sysname] interface GigabitEthernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos wrr 0 group sp

[Sysname-GigabitEthernet1/0/1] qos wrr 1 group 1 weight 20

[Sysname-GigabitEthernet1/0/1] qos wrr 2 group 2 weight 10

[Sysname-GigabitEthernet1/0/1] qos wrr 3 group 2 weight 50

 


The term "switch" or "device" in this chapter refers to the switching engine on a WX3000E wired-wireless switch.

The WX3000E series comprises WX3024E and WX3010E wired-wireless switches.

The port numbers in this chapter are for illustration only.

burst-mode enable

Syntax

burst-mode enable

undo burst-mode enable

View

System view

Parameters

None

Description

Use the burst-mode enable command to enable the burst function.

Use the undo burst-mode enable command to disable the burst function.

By default, the burst function is disabled.

The burst function improves packet buffering and forwarding performance in the following scenarios:

·           Dense broadcast or multicast traffic and massive burst traffic are present.

·           High-speed traffic is forwarded over a low-speed link or traffic received from multiple interfaces at the same speed is forwarded through an interface at the same speed.

By enabling the burst function on your device, you can improve the processing performance of the device operating in these scenarios and reduce packet loss rate.

Examples

# Enable the burst function.

<Sysname> system-view

[Sysname] burst-mode enable

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网