15-ACL and QoS Command Reference

HomeSupportReference GuidesCommand ReferencesH3C SecPath Firewall Series Command Reference(V7)-6W60115-ACL and QoS Command Reference
02-QoS commands
Title Size Download
02-QoS commands 290.02 KB

QoS policy commands

Traffic class commands

display traffic classifier

Use display traffic classifier to display traffic classes.

Syntax

display traffic classifier user-defined [ classifier-name ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

user-defined: Specifies user-defined traffic classes.

classifier-name: Specifies a traffic class by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a traffic class, this command displays all traffic classes.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the traffic classes for the master device.

Examples

# Display all user-defined traffic classes.

<Sysname> display traffic classifier user-defined

 

  User-defined classifier information:

 

   Classifier: 1 (ID 100)

     Operator: AND

     Rule(s) :

      If-match acl 2000

 

   Classifier: 2 (ID 101)

     Operator: AND

     Rule(s) :

      If-match protocol ipv6

 

   Classifier: 3 (ID 102)

     Operator: AND

     Rule(s) :

      -none-

Table 1 Command output

Field

Description

Classifier

Traffic class name and its match criteria.

Operator

Match operator you set for the traffic class. If the operator is AND, the traffic class matches the packets that match all its match criteria. If the operator is OR, the traffic class matches the packets that match any of its match criteria.

Rule(s)

Match criteria.

 

if-match

Use if-match to define a match criterion.

Use undo if-match to delete a match criterion.

Syntax

if-match [ not ] match-criteria

undo if-match [ not ] match-criteria

Default

No match criterion is configured.

Views

Traffic class view

Predefined user roles

network-admin

context-admin

Parameters

not: Matches packets that do not conform to the specified criterion.

match-criteria: Specifies a match criterion. Table 2 shows the available match criteria.

Table 2 Available match criteria

Option

Description

acl [ ipv6 ] { acl-number | name acl-name }

Matches an ACL.

The value range for the acl-number argument is as follows:

·     2000 to 3999 for IPv4 ACLs.

·     2000 to 3999 for IPv6 ACLs.

The acl-name argument is a case-insensitive string of 1 to 63 characters, which must start with an English letter. To avoid confusion, make sure the argument is not all.

If no VPN instance is specified in an ACL rule, the ACL rule takes effect on both non-VPN packets and VPN packets.

app-group group-name

Matches an application group.

The group-name argument specifies an application group by its name. The application group must have been created. A nonexistent application group cannot match packets. For more information about creating application groups, see APR in Security Configuration Guide.

application app-name

Matches an application.

The app-name argument specifies a user-created application by its name.

any

Matches all packets.

classifier classifier-name

Matches a class.

The classifier-name argument specifies a class by its name.

control-plane protocol protocol-name&<1-8>

Matches a control plane protocol.

The protocol-name argument can only be arp.

customer-dot1p dot1p-value&<1-8>

Matches 802.1p priority values in inner VLAN tags of double-tagged packets.

The dot1p-value&<1-8> argument specifies a space-separated list of up to eight 802.1p priority values. The value range for the dot1p-value argument is 0 to 7.

destination-mac mac-address

Matches a destination MAC address.

This option takes effect only on Ethernet interfaces.

dscp dscp-value&<1-8>

Matches DSCP values.

The dscp-value&<1-8> argument specifies a space-separated list of up to eight DSCP values. The value range for the dscp-value argument is 0 to 63 or keywords shown in Table 4.

inbound-interface interface-type interface-number

Matches an input interface specified by its type and number.

If this option is configured in a traffic class with logic AND operator, the traffic class is no longer in effect after the card or subcard where the input interface resides is removed. After the removed card or subcard is reinserted, the traffic class takes effect again. If you do not reinsert the card or subcard and add other match criteria to the traffic class, the traffic class does not take effect again.

ip-precedence ip-precedence-value&<1-8>

Matches IP precedence values.

The ip-precedence-value&<1-8> argument specifies a space-separated list of up to eight IP precedence values. The value range for the ip-precedence-value argument is 0 to 7.

mpls-exp exp-value&<1-8>

Matches MPLS EXP values.

The exp-value&<1-8> argument specifies a space-separated list of up to eight EXP values. The value range for the exp-value argument is 0 to 7.

MPLS packets do not support IP-related match criteria.

packet-length { min min-value | max max-value } *

Matches the packet length.

The min-value argument specifies the minimum packet length in bytes. The max-value argument specifies the maximum packet length in bytes. The maximum packet length must be greater than or equal to the minimum packet length.

protocol protocol-name

Matches a protocol.

The protocol-name argument can be The protocol-name argument can be ip or ipv6.

qos-local-id local-id-value

Matches a local QoS ID in the range of 1 to 4095.

rtp payload-type { type-value&<0-16> | audio | video } *

Matches RTP payload types.

The type-value&<0-16> argument specifies a space-separated list of up to 16 RTP payload type values. The value range for the type-value argument is 0 to 127. The audio keyword matches an RTP payload type value in the range of 0 to 23 or 33. The video keyword matches an RTP payload type value in the range of 24 to 34. Support for this option depends on the device model.

rtp start-port start-port-number end-port end-port-number

Matches RTP protocol ports.

The value ranges for the start-port-number and end-port-number arguments are both 2000 to 65535. This criterion matches RTP packets with an even UDP destination port number in the specified RTP port number range.

source-mac mac-address

Matches a source MAC address.

This option takes effect only on Ethernet interfaces.

 

Usage guidelines

In a traffic class with the logical OR operator, you can configure multiple if match commands for any of the available match criteria.

When you configure a match criterion that can have multiple values in one if-match command, follow these restrictions and guidelines:

·     You can specify up to eight values for any of the following match criteria in one if-match command:

·     If a packet matches one of the specified values, it matches the if-match command.

·     To delete a criterion that has multiple values, the specified values in the undo if-match command must be the same as those specified in the if-match command. The order of the values can be different.

When you configure ACL-based match criteria, follow these restrictions and guidelines:

·     The ACL must already exist.

·     If the ACL contains deny rules, the if-match command is ignored and the matching process continues.

You can use both AND and OR operators to define the match relationships between the criteria for a class. For example, you can define relationships among three match criteria in traffic class classA as follows:

traffic classifier classB operator and

if-match criterion 1

if-match criterion 2

traffic classifier classA operator or

if-match criterion 3

if-match classifier classB

Examples

# Define a match criterion for traffic class class1 to match the packets with a destination MAC address of 0050-ba27-bed3.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match destination-mac 0050-ba27-bed3

# Define a match criterion for traffic class class2 to match the packets with a source MAC address of 0050-ba27-bed2.

<Sysname> system-view

[Sysname] traffic classifier class2

[Sysname-classifier-class2] if-match source-mac 0050-ba27-bed2

# Define a match criterion for traffic class class1 to match the double-tagged packets with 802.1p priority 3 in the inner VLAN tag.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match customer-dot1p 3

# Define a match criterion for traffic class class1 to match advanced ACL 3101.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match acl 3101

# Define a match criterion for traffic class class1 to match the ACL named flow.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match acl name flow

# Define a match criterion for traffic class class1 to match advanced IPv6 ACL 3101.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match acl ipv6 3101

# Define a match criterion for traffic class class1 to match the IPv6 ACL named flow.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match acl ipv6 name flow

# Define a match criterion for traffic class class1 to match all packets.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match any

# Define a match criterion for traffic class class1 to match the packets with a DSCP value of 1, 6, or 9.

<Sysname> system-view

[Sysname] traffic classifier class1 operator or

[Sysname-classifier-class1] if-match dscp 1 6 9

# Define a match criterion for traffic class class1 to match the packets with an IP precedence value of 1 or 6.

<Sysname> system-view

[Sysname] traffic classifier class1 operator or

[Sysname-classifier-class1] if-match ip-precedence 1 6

# Define a match criterion for traffic class class1 to match IP packets.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match protocol ip

# Define a match criterion for traffic class class1 to match the RTP packets with even UDP destination port numbers in the range of 16384 to 32767.

<Sysname> system-view

[Sysname] traffic classifier class1 operator or

[Sysname-classifier-class1] if-match rtp start-port 16384 end-port 32767

# Define a match criterion for traffic class class1 to match the packets with a local QoS ID of 3.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match qos-local-id 3

# Define a match criterion for traffic class class1 to match the packets of the application group multimedia.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match app-group multimedia

# Define a match criterion for traffic class class1 to match the packets of the application 3link.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match application 3link

# Define a match criterion for traffic class class1 to match packets with the length in the range of 100 to 200 bytes.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1] if-match packet-length min 100 max 200

traffic classifier

Use traffic classifier to create a traffic class and enter its view, or enter the view of an existing traffic class.

Use undo traffic classifier to delete a traffic class.

Syntax

traffic classifier classifier-name [ operator { and | or } ]

undo traffic classifier classifier-name

Default

No traffic classes exist.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

classifier-name: Specifies a name for the traffic class, a case-sensitive string of 1 to 31 characters.

operator: Sets the operator to logic AND (the default) or OR for the traffic class.

and: Specifies the logic AND operator. The traffic class matches the packets that match all its criteria.

or: Specifies the logic OR operator. The traffic class matches the packets that match any of its criteria.

Examples

# Create a traffic class named class1.

<Sysname> system-view

[Sysname] traffic classifier class1

[Sysname-classifier-class1]

Related commands

display traffic classifier

Traffic behavior commands

car

Use car to configure a CAR action in absolute value in a traffic behavior.

Use undo car to restore the default.

Syntax

car cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ green action | red action | yellow action ] *

car cir committed-information-rate [ cbs committed-burst-size ] pir peak-information-rate [ ebs excess-burst-size ] [ green action | red action | yellow action ] *

undo car

Default

No CAR action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

cir committed-information-rate: Specifies the committed information rate (CIR) in the range of 8 to 10000000 kbps.

cbs committed-burst-size: Specifies the committed burst size (CBS) in the range of 1000 to 1000000000 bytes. The default value for this argument is the product of 62.5 and the CIR.

ebs excess-burst-size: Specifies the excess burst size (EBS) in the range of 0 to 1000000000 bytes. The default EBS is 0.

pir peak-information-rate: Specifies the peak information rate (PIR) in the range of 8 to 10000000 kbps. The PIR must be specified in the same unit as the CIR.

green action: Specifies the action to take on packets that conform to the CIR. The default setting is pass.

red action: Specifies the action to take on packets that conform to neither CIR nor PIR. The default setting is discard.

yellow action: Specifies the action to take on packets that conform to the PIR but not to the CIR. The default setting is pass.

action: Sets the action to take on the packet:

·     discard: Drops the packet.

·     pass: Permits the packet to pass through.

·     remark-dot1p-pass new-cos: Sets the 802.1p priority value of the 802.1p packet to new-cos and permits the packet to pass through. The new-cos argument is in the range of 0 to 7.

·     remark-dscp-pass new-dscp: Sets the DSCP value of the packet to new-dscp and permits the packet to pass through. The new-dscp argument is in the range of 0 to 63.

·     remark-mpls-exp-pass new-exp: Sets the EXP field value of the MPLS packet to new-exp and permits the packet to pass through. The new-exp argument is in the range of 0 to 7.

·     remark-prec-pass new-precedence: Sets the IP precedence of the packet to new-precedence and permits the packet to pass through. The new-precedence argument is in the range of 0 to 7.

Usage guidelines

To use two rates for traffic policing, configure the car command with the pir peak-information-rate option. To use one rate for traffic policing, configure the car command without the pir peak-information-rate option.

If you execute the car command multiple times in the same traffic behavior, the most recent configuration takes effect.

Examples

# Configure a CAR action in traffic behavior database:

·     Set the CIR to 200 kbps, CBS to 51200 bytes, and EBS to 0.

·     Transmit the conforming packets, and mark the excess packets with DSCP value 0 and transmit them.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] car cir 200 cbs 51200 ebs 0 green pass red remark-dscp-pass 0

car percent

Use car percent to configure a CAR action in percentage in a traffic behavior.

Use undo car to restore the default.

Syntax

car cir percent cir-percent [ cbs cbs-time [ ebs ebs-time ] ] [ green action | red action | yellow action ] *

car cir percent cir-percent [ cbs cbs-time ] pir percent pir-percent [ ebs ebs-time ] [ green action | red action | yellow action ] *

undo car

The following compatibility matrixes show the support of hardware platforms for this command:

 

F1000 series

Models

Command compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5

Yes

F1000-C-G5, F1000-C-G5-LI, F1000-E-G5, F1000-H-G5

No

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

No

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

No

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

No

F1000-9380-AI, F1000-9370-AI

Yes

F1000-C83X0 series

F1000-C8395, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C8390, F1000-C8385, F1000-C8380

Yes

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

No

F1000-7X0-HI series

F1000-770-HI

Yes

F1000-750-HI, F1000-740-HI, F1000-730-HI, F1000-720-HI, F1000-710-HI

No

F1000-C-X series

F1000-C-XI

Yes

F1000-E-XI, F1000-C-EI, F1000-C-HI

No

F1000-V series

F1000-E-VG, F1000-S-VG

No

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

Yes

F100 series

Models

Command compatibility

F100-X-G5 series

F100-A-G5, F100-C-G5, F100-E-G5, F100-M-G5, F100-S-G5

No

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

No

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

No

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet, F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1, F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

No

Default

No percentage-based CAR action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

cir percent cir-percent: Specifies the CIR in percentage, in the range of 1 to 100. The actual CIR value is cir-percent × interface bandwidth.

cbs cbs-time: Specifies the CBS in milliseconds. The actual CBS value is cbs-time × the actual CIR value. The value range for the cbs-time argument is 50 to 2000. The default CBS is 500.

ebs ebs-time: Specifies the EBS in milliseconds. The actual EBS value is ebs-time × the actual CIR value. The value range for the ebs-time argument is 0 to 2000. The default EBS is 0.

pir percent pir-percent: Specifies the PIR in percentage, in the range of 1 to 100. The PIR value must be greater than or equal to the CIR value.

green action: Specifies the action to take on packets that conform to the CIR. The default is pass.

red action: Specifies the action to take on packets that conform to neither CIR nor PIR. The default is discard.

yellow action: Specifies the action to take on packets that conform to the PIR but not to the CIR. The default is pass.

action: Sets the action to take on the packet:

·     discard: Drops the packet.

·     pass: Permits the packet to pass through.

·     remark-dot1p-pass new-cos: Sets the 802.1p priority value of the packet to new-cos and permits the packet to pass through. The new-cos argument is in the range of 0 to 7.

·     remark-dscp-pass new-dscp: Sets the DSCP value of the packet to new-dscp and permits the packet to pass through. The new-dscp argument is in the range of 0 to 63. Alternatively, you can specify the new-dscp argument with af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, default, or ef.

·     remark-mpls-exp-pass new-exp: Sets the EXP field value of the MPLS packet to new-exp and permits the packet to pass through. The new-exp argument is in the range of 0 to 7.

·     remark-prec-pass new-precedence: Sets the IP precedence of the packet to new-precedence and permits the packet to pass through. The new-precedence argument is in the range of 0 to 7.

Usage guidelines

To use two rates for traffic policing, configure the car percent command with the pir percent pir-percent option. To use one rate for traffic policing, configure the car percent command without the pir percent pir-percent option.

A QoS policy that uses a traffic behavior configured with percentage-based CAR can be applied in the inbound or outbound direction of an interface.

If you execute the car percent command multiple times in the same traffic behavior, the most recent configuration takes effect.

A QoS policy that uses a behavior configured with percentage-based CAR can be applied only to interfaces.

The actual CIR value is cir-percent × bandwidth. The actual PIR value is pir-percent × bandwidth. For a physical interface, the bandwidth is the actual interface bandwidth. For a virtual interface(for example, tunnel interface and Layer 3 aggregate interface), you must set its expected bandwidth (the default expected bandwidth is 0 kbps). For more information about the expected bandwidth, see Ethernet interface commands in Interface Command Reference. In the policy nesting case, the bandwidth used for the CIR and PIR calculations is determined by using the following rules:

·     The top policy uses the interface bandwidth.

Examples

# Configure a CAR action in percentage in traffic behavior database. The CAR parameters are as follows: CIR is 20% and CBS is 100 ms.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] car cir percent 20 cbs 100

display traffic behavior

Use display traffic behavior to display traffic behaviors.

Syntax

display traffic behavior user-defined [ behavior-name ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

user-defined: Specifies user-defined traffic behaviors.

behavior-name: Specifies a behavior by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a traffic behavior, this command displays all traffic behaviors.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the traffic behaviors for the master device.

Examples

# Display all user-defined traffic behaviors.

<Sysname> display traffic behavior user-defined

 

  User-defined behavior information:

 

    Behavior: 1 (ID 100)

      Committed Access Rate:

        CIR 2222 (kbps), CBS 22222222 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

Table 3 Command output

Field

Description

Behavior

Name and contents of a traffic behavior.

Committed Access Rate

Information about the CAR action.

Green action

Action to take on green packets.

Yellow action

Action to take on yellow packets.

Red action

Action to take on red packets.

filter

Use filter to configure a traffic filtering action in a traffic behavior.

Use undo filter to restore the default.

Syntax

filter { deny | permit }

undo filter

Default

No traffic filtering action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

deny: Drops packets.

permit: Transmits packets.

Examples

# Configure a traffic filtering action as deny in traffic behavior database.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] filter deny

gts

Use gts to configure a GTS action in absolute value in a traffic behavior.

Use undo gts to restore the default.

Syntax

gts cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ queue-length queue-length ]

undo gts

The following compatibility matrixes show the support of hardware platforms for this command:

 

F1000 series

Models

Command compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

No

F1000-C83X0 series

F1000-C8395

Yes

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

No

F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

No

F1000-C-EI, F1000-C-HI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

Command compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet

Yes

F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

Default

No GTS action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

cir committed-information-rate: Sets the CIR in kbps, which specifies the average traffic rate. The value range for committed-information-rate is 8 to 10000000.

cbs committed-burst-size: Sets the CBS in bytes, which specifies the size of bursty traffic when the actual average rate is not greater than the CIR. The value range for committed-burst-size is 1000 to 1000000000. The default CBS is the product of 62.5 and the CIR.

ebs excess-burst-size: Sets the EBS in bytes. The value range for excess-burst-size is 0 to 1000000000. The default EBS is 0.

queue-length queue-length: Sets the maximum number of packets allowed in the queue. The default is 50. The value range for queue-length is 1 to 1024.

Usage guidelines

A QoS policy that uses a behavior configured with GTS can be applied only to the outbound direction of an interface.

A QoS policy that uses a behavior configured with GTS overwrites the qos gts command on the interface, if both are configured.

If you execute the gts command multiple times in the same traffic behavior, the most recent configuration takes effect.

To use two rates for traffic shaping, configure the gts command with the pir peak-information-rate option. To use one rate for traffic shaping, configure the gts command without the pir peak-information-rate option.

Examples

# Configure a GTS action in absolute value in traffic behavior database. The GTS parameters are as follows: CIR is 200 kbps, CBS is 51200 bytes, EBS is 0, and the maximum queue length is 100.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] gts cir 200 cbs 51200 ebs 0 queue-length 100

Related commands

gts percent

gts percent

Use gts percent to configure a GTS action in percentage in a traffic behavior.

Use undo gts to restore the default.

Syntax

gts percent cir cir-percent [ cbs cbs-time [ ebs ebs-time ] ] [ queue-length queue-length ]

undo gts

The following compatibility matrixes show the support of hardware platforms for this command:

 

F1000 series

Models

Command compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

No

F1000-C83X0 series

F1000-C8395

Yes

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

No

F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

No

F1000-C-EI, F1000-C-HI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

Command compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet

Yes

F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

Default

No percentage-based GTS action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

cir cir-percent: Specifies the CIR in percentage, in the range of 1 to 100. The actual CIR value is cir-percent × interface bandwidth.

cbs cbs-time: Specifies the CBS in milliseconds. The default cbs-time is 500 milliseconds. The actual CBS value is cbs-time × the actual CIR value. The value range for cbs-time is 50 to 2000. The default CBS is 500.

ebs ebs-time: Specifies the EBS in milliseconds. The default ebs-time is 0 milliseconds. The actual EBS value is ebs-time × the actual CIR value. The value range for ebs-time is 0 to 2000. The default EBS is 0.

queue-length queue-length: Specifies the maximum number of packets allowed in the queue. The default is 50. The value range for queue-length is 1 to 1024.

Usage guidelines

A QoS policy that uses a behavior configured with percentage-based GTS can be applied only to the outbound direction of an interface.

A QoS policy that uses a behavior configured with percentage-based GTS overwrites the qos gts command on the interface, if both configured.

If you execute the gts percent command multiple times in the same traffic behavior, the most recent configuration takes effect.

Examples

# Configure a GTS action in percentage in traffic behavior database. The GTS parameters are as follows: CIR is 50 and CBS is 200 ms.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] gts percent cir 50 cbs 200

Related commands

gts

remark dot1p

Use remark dot1p to configure an 802.1p priority marking action or an inner-to-outer tag priority copying action in a traffic behavior.

Use undo remark dot1p to restore the default.

Syntax

remark dot1p dot1p-value

undo remark dot1p

Default

No 802.1p priority marking or inner-to-outer tag priority copying action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

dot1p-value: Specifies the 802.1p priority to be marked for packets, in the range of 0 to 7.

Examples

# Configure traffic behavior database to mark matching traffic with 802.1p 2.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark dot1p 2

remark dscp

Use remark dscp to configure a DSCP marking action in a traffic behavior.

Use undo remark dscp to restore the default.

Syntax

remark dscp dscp-value

undo remark dscp

Default

No DSCP marking action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

dscp-value: Specifies a DSCP value, which can be a number from 0 to 63 or a keyword in Table 4.

Table 4 DSCP keywords and values

Keyword

DSCP value (binary)

DSCP value (decimal)

af11

001010

10

af12

001100

12

af13

001110

14

af21

010010

18

af22

010100

20

af23

010110

22

af31

011010

26

af32

011100

28

af33

011110

30

af41

100010

34

af42

100100

36

af43

100110

38

cs1

001000

8

cs2

010000

16

cs3

011000

24

cs4

100000

32

cs5

101000

40

cs6

110000

48

cs7

111000

56

default

000000

0

ef

101110

46

 

Usage guidelines

If you execute the remark dscp command multiple times in the same traffic behavior, the most recent configuration takes effect.

Examples

# Configure traffic behavior database to mark matching traffic with DSCP 6.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark dscp 6

remark flow-id

Use remark flow-id to configure a flow ID marking action in a traffic behavior.

Use undo remark flow-id to restore the default.

Syntax

remark flow-id flow-id

undo remark flow-id flow-id

The following compatibility matrix shows the support of hardware platforms for this command:

 

F1000 series

Models

Command compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

No

F1000-C83X0 series

F1000-C8395

Yes

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

No

F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

No

F1000-C-EI, F1000-C-HI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

Command compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet

Yes

F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

Default

No flow ID marking action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

flow-id: Specifies a flow ID in the range of 1 to 65535.

Examples

# Configure traffic behavior behavior1 to mark matching traffic with flow ID 10.

<Sysname> system-view

[Sysname] traffic behavior behavior1

[Sysname-behavior-behavior1] remark flow-id 10

remark ip-precedence

Use remark ip-precedence to configure an IP precedence marking action in a traffic behavior.

Use undo remark ip-precedence to restore the default.

Syntax

remark ip-precedence ip-precedence-value

undo remark ip-precedence

Default

No IP precedence marking action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

ip-precedence-value: Specifies the IP precedence value to be marked for packets, in the range of 0 to 7.

Usage guidelines

If you execute the remark ip-precedence command multiple times in the same traffic behavior, the most recent configuration takes effect.

Examples

# Set the IP precedence to 6 for packets.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark ip-precedence 6

remark local-precedence

Use remark local-precedence to configure a local precedence marking action in a traffic behavior.

Use undo remark local-precedence to restore the default.

Syntax

remark local-precedence local-precedence-value

undo remark local-precedence

The following compatibility matrixes show the support of hardware platforms for this command:

 

F1000 series

Models

Command compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

No

F1000-C83X0 series

F1000-C8395

Yes

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

No

F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

No

F1000-C-EI, F1000-C-HI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

Command compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet

Yes

F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

Default

No local precedence marking action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

local-precedence-value: Specifies the local precedence to be marked for packets, in the range of 0 to 7.

Examples

# Configure traffic behavior database to mark matching traffic with local precedence 2.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark local-precedence 2

remark qos-local-id

Use remark qos-local-id to configure a local QoS ID marking action in a traffic behavior.

Use undo remark qos-local-id to restore the default.

The following compatibility matrixes show the support of hardware platforms for this command:

 

F1000 series

Models

Command compatibility

F1000-X-G5 series

F1000-A-G5, F1000-C-G5, F1000-C-G5-LI, F1000-E-G5, F1000-H-G5, F1000-S-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-C83X0 series

F1000-C8395, F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

Yes

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI, F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-EI, F1000-C-HI, F1000-C-XI, F1000-E-XI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

Command compatibility

F100-X-G5 series

F100-A-G5, F100-C-G5, F100-E-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet, F100-A81-WiNet, F100-A91-WiNet

Yes

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

Syntax

remark qos-local-id local-id-value

undo remark qos-local-id

Default

No local QoS ID marking action is configured.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

local-id-value: Specifies the local QoS ID to be marked for packets, in the range of 1 to 4095.

Usage guidelines

You can use one QoS policy to mark the local QoS ID for packets in the inbound direction. Then, you can use another QoS policy to apply other QoS features in the outbound direction based on the marked local QoS ID.

If you execute the remark qos-local-id command multiple times in the same traffic behavior, the most recent configuration takes effect.

Examples

# Configure the action of marking packets with local QoS ID 2.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] remark qos-local-id 2

traffic behavior

Use traffic behavior to create a traffic behavior and enter its view, or enter the view of an existing traffic behavior.

Use undo traffic behavior to delete a traffic behavior.

Syntax

traffic behavior behavior-name

undo traffic behavior behavior-name

Default

No traffic behaviors exist.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

behavior-name: Specifies a name for the traffic behavior, a case-sensitive string of 1 to 31 characters.

Examples

# Create a traffic behavior named behavior1.

<Sysname> system-view

[Sysname] traffic behavior behavior1

[Sysname-behavior-behavior1]

Related commands

display traffic behavior

traffic-policy

Use traffic-policy to nest a policy in a traffic behavior.

Use undo traffic-policy to remove child policies from a traffic behavior.

Syntax

traffic-policy policy-name

undo traffic-policy

Default

No policy is nested in a traffic behavior.

Views

Traffic behavior view

Predefined user roles

network-admin

context-admin

Parameters

policy-name: Specifies a policy by its name, a string of 1 to 31 characters. If the policy does not exist, it is automatically created.

Usage guidelines

After you nest a child policy in a behavior of a parent policy, the system performs the following operations:

·     Performs the associated behavior defined in the parent policy for a class of traffic.

·     Uses the child policy to further classify the class of traffic and performs the behaviors defined in the child policy.

·     Policy nesting is available for IPv4 and IPv6 packets.

·     To delete the child policy after you apply the parent policy to an interface, first remove the child policy from the parent policy.

Examples

# Nest child policy child in traffic behavior database of the parent policy.

<Sysname> system-view

[Sysname] traffic behavior database

[Sysname-behavior-database] traffic-policy child

Related commands

traffic behavior

traffic classifier

QoS policy commands

classifier behavior

Use classifier behavior to associate a traffic behavior with a traffic class in a QoS policy.

Use undo classifier to delete a class-behavior association from a QoS policy.

Syntax

classifier classifier-name behavior behavior-name [ insert-before before-classifier-name ]

undo classifier classifier-name

Default

No traffic behavior is associated with a traffic class.

Views

QoS policy view

Predefined user roles

network-admin

context-admin

Parameters

classifier-name: Specifies a traffic class by its name, a case-sensitive string of 1 to 31 characters.

behavior-name: Specifies a traffic behavior by its name, a case-sensitive string of 1 to 31 characters.

insert-before before-classifier-name: Inserts the new traffic class before an existing traffic class in the QoS policy. The before-classifier-name argument specifies an existing traffic class by its name, a case-sensitive string of 1 to 31 characters. If you do not specify the insert-before before-classifier-name option, the new traffic class is placed at the end of the QoS policy.

Usage guidelines

A traffic class can be associated only with one traffic behavior in a QoS policy.

If the specified traffic class or traffic behavior does not exist, the system defines a null traffic class or traffic behavior.

The undo classifier default-class command performs the following operations:

·     Deletes the existing class-behavior association for the system-defined class default-class.

·     Associates the system-defined class default-class with the system-defined behavior be.

Examples

# Associate traffic class database with traffic behavior test in QoS policy user1.

<Sysname> system-view

[Sysname] qos policy user1

[Sysname-qospolicy-user1] classifier database behavior test

# Associate traffic class database with traffic behavior test in QoS policy user1, and insert traffic class database before an existing traffic class named class-a.

<Sysname> system-view

[Sysname] qos policy user1

[Sysname-qospolicy-user1] classifier database behavior test insert-before class-a

Related commands

qos policy

control-plane

Use control-plane to enter control plane view.

Syntax

control-plane slot slot-number

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

slot slot-number: Specifies an IRF member device by its member ID.

Examples

# Enter the control plane view of slot 3.

<Sysname> system-view

[Sysname] control-plane slot 3

[Sysname-cp-slot3]

control-plane management

Use control-plane management to enter control-plane management view.

Syntax

control-plane management

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

A QoS policy applied in control-plane management view takes effect on the packets sent from the management interface to the control plane.

Examples

# Enter control-plane management view.

<Sysname> system-view

[Sysname] control-plane management

[Sysname-cp-management]

display qos policy

Use display qos policy to display QoS policies.

Syntax

display qos policy user-defined [ policy-name [ classifier classifier-name ] ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

user-defined: Specifies user-defined QoS policies.

policy-name: Specifies a QoS policy by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a QoS policy, this command displays all user-defined QoS policies.

classifier classifier-name: Specifies a traffic class by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a traffic class, this command displays all traffic classes.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the QoS policies for the master device.

Examples

# Display all user-defined QoS policies.

<Sysname> display qos policy user-defined

 

  User-defined QoS policy information:

 

  Policy: 1 (ID 100)

   Classifier: 1 (ID 100)

     Behavior: 1

      Marking:

        Remark dscp 3

      Committed Access Rate:

        CIR 112 (kbps), CBS 51200 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

   Classifier: 2 (ID 101)

     Behavior: 2

      Filter enable: Permit

   Classifier: 3 (ID 102)

     Behavior: 3

      -none-

Table 5 Command output

Field

Description

User-defined QoS policy information

Information about a user-defined QoS policy.

System-defined QoS policy information

Information about a system-defined QoS policy.

Policy

User-defined QoS policy name.

 

For the description of other fields, see Table 1 and Table 3.

display qos policy advpn

Use display qos policy advpn to display QoS policies applied to hub-spoke tunnels on a tunnel interface.

Syntax

display qos policy advpn tunnel number [ ipv4-address | ipv6-address ] [ outbound ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

number: Specifies a tunnel interface by its number. The value range for the number argument is 0 to 1023.

ipv4-address: Specifies the spoke's private IPv4 address of a hub-spoke tunnel.

ipv6-address: Specifies the spoke's private IPv6 address of a hub-spoke tunnel.

outbound: Specifies the QoS policies applied to the outbound direction.

Usage guidelines

If you do not specify a spoke's private IP address of a hub-spoke tunnel, this command displays the QoS policy information for all hub-spoke tunnels on a tunnel interface. For information about hub-spoke tunnels, see ADVPN in VPN Configuration Guide.

For configuration commands for tunnel interfaces, see tunnel commands in Layer 3—IP Services Command Reference.

Examples

# Display the QoS policy applied to the outgoing traffic of all hub-spoke tunnels on tunnel interface 1.

<Sysname> display qos policy advpn tunnel 1 outbound

Session: Tunnel1 192.168.0.3

  Direction: Outbound

  Policy: finance

   Classifier: default-class

     Matched : 0 (Packets) 0 (Bytes)

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: be

      -none-

   Classifier: finance

     Matched : 123713988 (Packets) 13608538380 (Bytes)

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: finance

      Committed Access Rate:

        CIR 1500 (kbps), CBS 93750 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 14980239 (Packets) 1647826290 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 108733781 (Packets) 11960715910 (Bytes)

 

Session: Tunnel1 192.168.0.4 (inactive)

  Direction: Outbound

  Policy: business

Table 6 Command output

Field

Description

Session

Hub-spoke tunnel information.

A hub-spoke tunnel is uniquely identified by a tunnel interface and the spoke's private IPv4 or IPv6 address. The word inactive indicates that a QoS policy fails to be applied to the hub-spoke tunnel or the applied QoS policy does not exist.

Direction

Direction to which a QoS policy is applied on the hub-spoke tunnel.

 

For the description of other fields, see Table 1 and Table 3.

display qos policy control-plane

Use display qos policy control-plane to display QoS policies applied to a control plane.

Syntax

display qos policy control-plane slot slot-number

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

slot slot-number: Specifies an IRF member device by its member ID.

Examples

# Display the QoS policy applied to the control plane of slot 1.

<Sysname> display qos policy control-plane slot 1

 

Control plane slot 1

 

  Direction: Inbound

 

  Policy: 1

   Classifier: 1

     Operator: AND

     Rule(s) :

      If-match acl 2000

     Behavior: 1

      Marking:

        Remark dscp 3

      Committed Access Rate:

        CIR 112 (kbps), CBS 51200 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

   Classifier: 2

     Operator: AND

     Rule(s) :

      If-match protocol ipv6

     Behavior: 2

      Filter enable: Permit

      Marking:

        Remark dscp 3

   Classifier: 3

     Operator: AND

     Rule(s) :

      -none-

     Behavior: 3

      -none-

Table 7 Command output

Field

Description

Direction

Direction in which the QoS policy is applied.

Green packets

Statistics about green packets.

Yellow packets

Statistics about yellow packets.

Red packets

Statistics about red packets.

 

For the description of other fields, see Table 1 and Table 3.

display qos policy control-plane management pre-defined

Use display qos policy control-plane management pre-defined to display the predefined QoS policy applied in control-plane management view.

Syntax

display qos policy control-plane management pre-defined

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display the predefined QoS policy applied in control-plane management view.

<Sysname> display qos policy control-plane management pre-defined

Pre-defined control plane policy management

  Protocol          Priority   Bandwidth                 Group

  Default           N/A        100000 (bps)             N/A

  ARP               N/A        128 (bps)                normal

  BGP               N/A        256 (bps)                critical

  BGPv6             N/A        256 (bps)                critical

  HTTP              N/A        512 (bps)                management

  HTTPS             N/A        512 (bps)                management

  ICMP              N/A        128 (bps)                monitor

  ICMPv6            N/A        128 (bps)                monitor

  OSPF Multicast    N/A        256 (bps)                critical

  OSPF Unicast      N/A        256 (bps)                critical

  OSPFv3 Multicast  N/A        256 (bps)                critical

  OSFPv3 Unicast    N/A        256 (bps)                critical

  RIP               N/A        1024 (bps)               critical

  RIPng             N/A        256 (bps)                critical

  SNMP              N/A        512 (bps)                management

  SSH               N/A        512 (bps)                management

  TELNET            N/A        512 (bps)                management

  FTP               N/A        512 (bps)                management

  TFTP              N/A        512 (bps)                management

Table 8 Command output

Field

Description

Pre-defined control plane policy management

Predefined QoS policy applied in control-plane management view.

Protocol

System-defined protocol packet type.

Group

Protocol group to which the protocol belongs.

 

display qos policy control-plane pre-defined

Use display qos policy control-plane pre-defined to display predefined control plane QoS policies.

Syntax

display qos policy control-plane pre-defined [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays predefined control plane QoS policies for all member devices.

Examples

# Display the predefined control plane QoS policy of slot 1.

<Sysname> display qos policy control-plane pre-defined slot 1

Pre-defined policy information slot 1

  Protocol          Priority   Bandwidth (kbps)   Group

  Default           N/A        100000             N/A

  ARP               N/A        100000             normal

  BGP               N/A        100000             critical

  BGPv6             N/A        100000             critical

  HTTP              N/A        100000             management

  HTTPS             N/A        100000             management

  ICMP              N/A        100000             monitor

  ICMPv6            N/A        100000             monitor

  IGMP              N/A        100000             important

  IS-IS             N/A        100000             critical

  LDP               N/A        100000             critical

  LDPv6             N/A        100000             critical

  MSDP              N/A        100000             critical

  NTP               N/A        100000             important

  OSPF Multicast    N/A        100000             critical

  OSPF Unicast      N/A        100000             critical

  OSPFv3 Multicast  N/A        100000             critical

  OSPFv3 Unicast    N/A        100000             critical

  PIM Multicast     N/A        100000             critical

  PIM Unicast       N/A        100000             critical

  PIMv6 Multicast   N/A        100000             critical

  PIMv6 Unicast     N/A        100000             critical

  RADIUS            N/A        100000             management

  RIP               N/A        100000             critical

  RIPng             N/A        100000             critical

  RSVP              N/A        100000             critical

  SNMP              N/A        100000             management

  TACACS            N/A        100000             management

  VRRP              N/A        100000             important

  VRRPv6            N/A        100000             important

  SSH               N/A        100000             management

  TELNET            N/A        100000             management

  FTP               N/A        100000             management

  TFTP              N/A        100000             management

Table 9 Command output

Field

Description

Pre-defined control plane policy

Contents of the predefined control plane QoS policy.

Group

Protocol group of the protocol.

 

display qos policy interface

Use display qos policy interface to display the QoS policies applied to interfaces.

Syntax

display qos policy interface [ interface-type interface-number ] [ slot slot-number ] [ inbound | outbound ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays QoS policies applied to all interfaces except VA interfaces. For information about VA interfaces, see PPP in Layer 2—WAN Access Configuration Guide.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify an IRF member device, this command displays QoS policies on the master device. Only logical interfaces support this option.

inbound: Specifies the QoS policy applied to incoming traffic.

outbound: Specifies the QoS policy applied to outgoing traffic.

Usage guidelines

If you do not specify a direction, this command displays the QoS policy applied to incoming traffic and the QoS policy applied to outgoing traffic.

If you specify a VT interface, this command displays the QoS policies applied to each VA interface of the VT interface. It does not display QoS information about the VT interface.

Examples

# Display the QoS policy applied to the incoming traffic of GigabitEthernet 1/0/1.

<Sysname> display qos policy interface gigabitethernet 1/0/1 inbound

Interface: GigabitEthernet1/0/1

  Direction: Inbound

  Policy: 1

   Classifier: 1

     Matched : 0 (Packets) 0 (Bytes)

     5-minute statistics:

      Forwarded: 0/0 (pps/bps)

      Dropped  : 0/0 (pps/bps)

     Operator: AND

     Rule(s) :

      If-match acl 2000

     Behavior: 1

      Marking:

        Remark dscp 3

      Committed Access Rate:

        CIR 112 (kbps), CBS 51200 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

   Classifier: 2

     Matched : 0 (Packets) 0 (Bytes)

     5-minute statistics:

      Forwarded: 0/0 (pps/bps)

      Dropped  : 0/0 (pps/bps)

     Operator: AND

     Rule(s) :

      If-match protocol ipv6

     Behavior: 2

      Filter enable: Permit

 

   Classifier: 3

     Matched : 0 (Packets) 0 (Bytes)

     5-minute statistics:

      Forwarded: 0/0 (pps/bps)

      Dropped  : 0/0 (pps/bps)

     Operator: AND

     Rule(s) :

      -none-

     Behavior: 3

      -none-

# Display the QoS policies applied to all interfaces.

<Sysname> display qos policy interface

Interface: GigabitEthernet1/0/1

  Direction: Inbound

  Policy: a

   Classifier: a

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: a

      Committed Access Rate:

        CIR 112 (kbps), CBS 51200 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets)

        Red packets   : 0 (Packets)

Interface: GigabitEthernet1/0/3

  Direction: Inbound

  Policy: b

   Classifier: b

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: b

      Committed Access Rate:

        CIR 112 (kbps), CBS 51200 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0(Packets)

        Red packets   : 0 (Packets)

Interface: GigabitEthernet1/0/3

  Direction: Inbound

  Policy: a

   Classifier: a

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: a

      Committed Access Rate:

        CIR 112 (kbps), CBS 51200 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets)

        Red packets   : 0 (Packets)

Table 10 Command output

Field

Description

Direction

Direction in which the QoS policy is applied.

Policy

User-defined QoS policy name or system-defined QoS policy name.

Matched

Number of matching packets.

Forwarded

Average rate of successfully forwarded matching packets in a statistics collection period.

Dropped

Average rate of dropped matching packets in a statistics collection period.

Green packets

Traffic statistics for green packets.

Yellow packets

Traffic statistics for yellow packets.

Red packets

Traffic statistics for red packets.

 

For the description of other fields, see Table 1, Table 3, and Table 5.

qos apply policy (interface view, control plane view, control-plane management view)

Use qos apply policy to apply a QoS policy to an interface or control plane.

Use undo qos apply policy to remove an applied QoS policy.

Syntax

qos apply policy policy-name { inbound | outbound }

undo qos apply policy policy-name { inbound | outbound }

Default

No QoS policy is applied.

Views

Control plane view

Control-plane management view

Interface view

Predefined user roles

network-admin

context-admin

Parameters

policy-name: Specifies a QoS policy by its name, a case-sensitive string of 1 to 31 characters.

inbound: Applies the QoS policy to incoming traffic.

outbound: Applies the QoS policy to outgoing traffic.

Usage guidelines

When you apply a QoS policy to an interface, follow these rules:

·     The bandwidth assigned to AF and EF queues in the QoS policy must be smaller than the available bandwidth of the interface. Otherwise, the QoS policy cannot be successfully applied to the interface.

·     If you modify the available bandwidth of the interface to be smaller than the bandwidth for AF and EF queues, the applied QoS policy is removed.

A QoS policy configured with CBQ is not supported in control plane view or control-plane management view.

Examples

# Apply QoS policy USER1 to the incoming traffic of GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos apply policy USER1 inbound

qos policy

Use qos policy to create a QoS policy and enter its view, or enter the view of an existing QoS policy.

Use undo qos policy to delete a QoS policy.

Syntax

qos policy policy-name

undo qos policy policy-name

Default

No QoS policies exist.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

policy-name: Specifies a name for the QoS policy, a case-sensitive string of 1 to 31 characters.

Usage guidelines

To delete a QoS policy that has been applied to an object, you must first remove the QoS policy from the object.

Examples

# Create a QoS policy named user1.

<Sysname> system-view

[Sysname] qos policy user1

[Sysname-qospolicy-user1]

Related commands

classifier behavior

qos apply policy

reset qos policy advpn

Use reset qos policy advpn to clear the statistics for QoS policies applied to hub-spoke tunnels on a tunnel interface.

Syntax

reset qos policy advpn tunnel number [ ipv4-address | ipv6-address ] [ outbound ]

Views

User view

Predefined user roles

network-admin

context-admin

Parameters

number: Specifies a tunnel interface by its number. The value range for the number argument is 0 to 1023.

ipv4-address: Specifies the spoke's private IPv4 address of a hub-spoke tunnel.

ipv6-address: Specifies the spoke's private IPv6 address of a hub-spoke tunnel.

outbound: Specifies the QoS policies applied to the outbound direction.

Usage guidelines

If you do not specify a spoke's private IP address of a hub-spoke tunnel, this command clears the QoS policy statistics for all hub-spoke tunnels on a tunnel interface. For information about hub-spoke tunnels, see ADVPN in VPN Configuration Guide.

For configuration commands for tunnel interfaces, see tunnel commands in VPN Command Reference.

Examples

# Clear the statistics for the QoS policy applied to the outgoing traffic of the hub-spoke tunnel with spoke's IPv4 address 192.168.0.3 on tunnel interface 1.

<Sysname> reset qos policy advpn tunnel 1 192.168.0.3 outbound

reset qos policy control-plane

Use reset qos policy control-plane to clear the statistics of the QoS policy applied to a control plane.

Syntax

reset qos policy control-plane slot slot-number

Views

User view

Predefined user roles

network-admin

context-admin

Parameters

slot slot-number: Specifies an IRF member device by its member ID.

Examples

# Clear the statistics of the QoS policy applied to the control plane of slot 1.

<Sysname> reset qos policy control-plane slot 1

# Clear the statistics of the QoS policy applied to the control plane of slot 3 in chassis 1.

<Sysname> reset qos policy control-plane chassis 1 slot 3

QoS policy-based traffic rate statistics collection period commands

qos flow-interval

Use qos flow-interval to set the QoS policy-based traffic rate statistics collection period for an interface.

Use undo qos flow-interval to restore the default.

Syntax

qos flow-interval interval

undo qos flow-interval

Default

The QoS policy-based traffic rate statistics collection period is 5 minutes on an interface.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

interval: Sets the QoS policy-based traffic rate statistics collection period in minutes. The value range for this argument is 1 to 10.

Usage guidelines

You can enable collection of per-class traffic statistics over a period of time, including the average forwarding rate and drop rate. For example, if you set the statistics collection period to 10 minutes, the system performs the following operations:

·     Collects traffic statistics for the most recent 10 minutes.

·     Refreshes the statistics every 10/5 minutes, 2 minutes.

The traffic rate statistics collection period of a subinterface is the same as the period configured on the main interface.

Examples

# Set the QoS policy-based traffic rate statistics collection period to 10 minutes on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos flow-interval 10

Related commands

display qos policy interface

 


Traffic policing commands

Traffic policing commands

display qos car interface

Use display qos car interface to display the CAR configuration and statistics for interfaces.

Syntax

display qos car interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays the CAR configuration and statistics for all interfaces except VA interfaces. For information about VA interfaces, see PPP in Layer 2—WAN Access Configuration Guide.

Usage guidelines

If you specify a VT interface, this command displays the CAR configuration and statistics of each VA interface of the VT interface. It does not display QoS information about the VT interface.

Examples

# Display the CAR configuration and statistics for GigabitEthernet 1/0/1.

<Sysname> display qos car interface gigabitethernet 1/0/1

Interface: GigabitEthernet1/0/1

 Direction: inbound

  Rule: If-match any

   CIR 128 (kbps), CBS 5120 (Bytes), PIR 128 (kbps), EBS 512 (Bytes)

   Green action  : pass

   Yellow action : pass

   Red action    : discard

   Green packets : 0 (Packets), 0 (Bytes)

   Yellow packets: 0 (Packets), 0 (Bytes)

   Red packets   : 0 (Packets), 0 (Bytes)

# Display the CAR information on GigabitEthernet 1/0/2.

<Sysname> display qos car interface gigabitethernet 1/0/2

Interface: GigabitEthernet1/0/2

 Direction: inbound

  Rule: If-match any

   CIR 50 (%), CBS 600 (ms), EBS 0 (ms), PIR 50 (%)

   Green action  : pass

   Yellow action : pass

   Red action    : discard

   Green packets : 0 (Packets), 0 (Bytes)

   Yellow packets: 0 (Packets), 0 (Bytes)

   Red packets   : 0 (Packets), 0 (Bytes)

Table 11 Command output

Field

Description

Interface

Interface name, including interface type and interface number.

Direction

Direction in which traffic policing is applied.

Rule

Match criteria.

CIR

CIR in kbps.

CBS

CBS in bytes.

EBS

EBS in bytes.

PIR

PIR in kbps.

Green action

Action to take on green packets.

Yellow action

Action to take on yellow packets.

Red action

Action to take on red packets.

Overhead compensation length

Packet compensation length in bytes for outbound traffic policing.

Online session count

Number of current online sessions.

Current CIR

CIR in kbps after dynamic adjustment.

Current bandwidth

The actual total traffic rate in kbps for all online sessions.

This value might be greater than the current CIR multiplied by the number of current online sessions.

Bandwidth utilization threshold

Maximum bandwidth threshold in kbps.

·     If the bandwidth command is not executed on the interface, this value is the actual interface bandwidth multiplied by the maximum bandwidth percentage.

·     If the bandwidth command is executed on the interface, this value is the configured interface bandwidth multiplied by the maximum bandwidth percentage.

 

Related commands

bandwidth (Interface Command Reference)

qos car (interface view)

qos carl

display qos carl

Use display qos carl to display CAR lists.

Syntax

display qos carl [ carl-index ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

carl-index: Specifies a CAR list by its number in the range of 1 to 199. If you do not specify a CAR list, this command displays all CAR lists.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the CAR lists for the master device.

Examples

# Display all CAR lists.

<Sysname> display qos carl

List  Rules

1     destination-ip-address range 1.1.1.1 to 1.1.1.2 per-address shared-bandwidth

2     destination-ip-address subnet 1.1.1.1 22 per-address shared-bandwidth

4     dscp 1 2 3 4 5 6 7 cs1

5     mac 0000-0000-0000

6     mpls-exp 0 1 2

9     precedence 0 1 2 3 4 5 6 7

10    source-ip-address range 1.1.1.1 to 1.1.1.2

11    source-ip-address subnet 1.1.1.1 31

qos car

Use qos car to configure a CAR policy on an interface.

Use undo qos car to delete a CAR policy from an interface.

Syntax

qos car { inbound | outbound } { any | acl [ ipv6 ] acl-number | carl carl-index } cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ green action | red action | yellow action ] *

qos car { inbound | outbound } { any | acl [ ipv6 ] acl-number | carl carl-index } cir committed-information-rate [ cbs committed-burst-size ] pir peak-information-rate [ ebs excess-burst-size ] [ green action | red action | yellow action ] *

undo qos car { inbound | outbound } { any | acl [ ipv6 ] acl-number | carl carl-index }

Default

No CAR policy is configured.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

inbound: Performs CAR for incoming packets on the interface.

outbound: Performs CAR for outgoing packets on the interface.

any: Performs CAR for all IP packets in the specified direction.

acl [ ipv6 ] acl-number: Performs CAR for packets matching an ACL specified by its number. The value range for the acl-number argument is 2000 to 2999 for basic ACLs and 3000 to 3999 for advanced ACLs. If you do not specify ipv6, this option specifies an IPv4 ACL. If you specify ipv6, this option specifies an IPv6 ACL.

carl carl-index: Performs CAR for packets matching a CAR list specified by its number in the range of 1 to 199.

cir committed-information-rate: Specifies the CIR in kbps. The value range for committed-information-rate is 8 to 10000000.

cbs committed-burst-size: Specifies the CBS in bytes, which is the size of bursty traffic when the actual average rate is not greater than the CIR. The value range for committed-burst-size is 1875 to 19375000. The default CBS is the product of 62.5 and the CIR.

ebs excess-burst-size: Specifies the EBS in bytes. The value range for excess-burst-size is 0 to 19375000. The default EBS is 0.

pir peak-information-rate: Specifies the PIR in kbps. The value range for peak-information-rate is 8 to 10000000.

green: Specifies the action to take on packets when the traffic rate conforms to the CIR. The default is pass.

red: Specifies the action to take on packets when the traffic rate conforms to neither CIR nor PIR. The default is discard.

yellow: Specifies the action to take on packets when the traffic rate exceeds the CIR but conforms to the PIR. The default is pass.

action: Specifies the action to take on packets:

·     continue: Continues to process the packet by using the next CAR policy.

·     discard: Drops the packet.

·     pass: Permits the packet to pass through.

·     remark-dot1p-continue new-cos: Sets the 802.1p priority value of the 802.1p packet to new-cos and continues to process the packet by using the next CAR policy. The new-cos argument is in the range of 0 to 7.

·     remark-dot1p-pass new-cos: Sets the 802.1p priority value of the 802.1p packet to new-cos and permits the packet to pass through. The new-cos argument is in the range of 0 to 7.

·     remark-dscp-continue new-dscp: Remarks the packet with a new DSCP value and continues to process the packet by using the next CAR policy. The new-dscp argument is in the range of 0 to 63. Alternatively, you can specify the new-dscp argument with af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, default, or ef.

·     remark-dscp-pass new-dscp: Remarks the packet with a new DSCP value and permits the packet to pass through. The new-dscp argument is in the range of 0 to 63. Alternatively, you can specify the new-dscp argument with af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, default, or ef.

·     remark-mpls-exp-continue new-exp: Sets the EXP field value of the MPLS packet to new-exp and continues to process the packet by using the next CAR policy. The new-exp argument is in the range of 0 to 7.

·     remark-mpls-exp-pass new-exp: Sets the EXP field value of the MPLS packet to new-exp and permits the packet to pass through. The new-exp argument is in the range of 0 to 7.

·     remark-prec-continue new-precedence: Re-marks the packet with a new IP precedence and continues to process the packet by using the next CAR policy. The new-precedence argument is in the range of 0 to 7.

·     remark-prec-pass new-precedence: Re-marks the packet with a new IP precedence and permits the packet to pass through. The new-precedence argument is in the range of 0 to 7.

Usage guidelines

To use two rates for traffic policing, configure the qos car command with the pir peak-information-rate option. To use one rate for traffic policing, configure the qos car command without the pir peak-information-rate option.

You can configure multiple qos car commands on an interface to define multiple CAR policies. These CAR policies are executed in their configuration order.

When you reference an ACL, follow these restrictions and guidelines:

·     If the ACL does not exist or contains no rules, the ACL is not used to match packets.

·     If the vpn-instance vpn-instance option is specified in a rule, the rule takes effect only on VPN packets. If the vpn-instance vpn-instance option is not specified in a rule, the rule takes effect on both VPN packets and non-VPN packets.

Dynamic traffic policing allows you to dynamically adjust the bandwidth allowed per IP address on an interface to improve bandwidth usage.

When the following conditions exist, the dynamic traffic policing feature is activated on an interface:

·     A CAR list is used and he per-address parameter is specified in the CAR list.

·     Only one CAR list-based CAR policy is applied to the same direction of an interface, and the max-cir parameter is specified.

Examples

# Perform CAR for all packets in the outbound direction of GigabitEthernet 1/0/1. The CAR parameters are as follows:

·     CIR is 200 kbps.

·     CBS is 5120 bytes.

·     EBS is 0.

·     Conforming packets are transmitted.

·     Excess packets are set with an IP precedence of 0 and transmitted.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos car outbound any cir 200 cbs 5000 ebs 0 green pass red remark-prec-pass 0

Related commands

display qos car interface

qos carl

qos carl

Use qos carl to create or modify a CAR list.

Use undo qos carl to delete a CAR list.

Syntax

qos carl carl-index { dscp dscp-list | mac mac-address | mpls-exp mpls-exp-value | precedence precedence-value | { destination-ip-address | source-ip-address } { range start-ip-address to end-ip-address | subnet ip-address mask-length } [ per-address [ shared-bandwidth ] ] }

undo qos carl carl-index

Default

No CAR list is configured.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

carl-index: Specifies a CAR list by its number in the range of 1 to 199.

dscp dscp-list: Specifies a list of DSCP values. A DSCP value can be a number from 0 to 63 or any of the following keywords af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs6, cs7, default, or ef. You can configure up to eight DSCP values in one command line. If the same DSCP value is specified multiple times, the system considers the values to be one value. If a packet matches one of the defined DSCP values, it matches the if-match clause.

mac mac-address: Specifies a MAC address in hexadecimal format.

mpls-exp mpls-exp-value: Specifies an MPLS EXP value in the range of 0 to 7. You can configure up to eight MPLS EXP values in one command line. If the same MPLS EXP value is specified multiple times, the system considers the values to be one value. If a packet matches one of the defined MPLS EXP values, it matches the if-match clause.

precedence precedence: Specifies a precedence value in the range of 0 to 7. You can configure up to eight IP precedence values in one command line. If the same IP precedence value is specified multiple times, the system considers the values to be one value. If a packet matches one of the defined IP precedence values, it matches the if-match clause.

destination-ip-address: Configures a destination IP address-based CAR list.

source-ip-address: Configures a source IP address-based CAR list.

range start-ip-address to end-ip-address: Specifies an IP address range by the start address and end address. The value for end-ip-address must be greater than the value for start-ip-address.

subnet ip-address mask-length: Specifies a subnet by the IP subnet address and IP subnet address mask length. The value range for mask-length is 22 to 31.

per-address: Performs per-IP address rate limiting within the network segment. When this keyword is specified, the CIR is dedicated bandwidth for each IP address and is not shared by any other IP address. If you do not specify this keyword, the following events occur:

·     Rate limiting is performed for the entire network segment.

·     All of the CIR is allocated among all IP addresses in proportion to the traffic load of each IP address.

shared-bandwidth: Specifies that traffic of all IP addresses within the network segment shares the remaining bandwidth (the CIR). If you specify this keyword, all of the CIR is allocated evenly among all IP addresses with traffic load.

Usage guidelines

You can create a CAR list based on IP precedence, MAC address, MPLS EXP, DSCP, or IP network segment.

If you execute this command multiple times for the same CAR list, the most recent configuration takes effect. If you execute this command multiple times for different CAR lists, multiple CAR lists are created.

To perform rate limiting for a single IP address, use the qos car acl command in interface view.

Examples

# Apply CAR list 1 to the outbound direction of GigabitEthernet 1/0/1 to meet the following requirements:

·     The rate of each host on the subnet 1.1.1.0/24 is limited to 512 kbps.

·     Traffic of IP addresses in the subnet does not share the remaining bandwidth.

<Sysname> system-view

[Sysname] qos carl 1 source-ip-address subnet 1.1.1.0 24 per-address

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos car outbound carl 1 cir 512 cbs 5120 ebs 0 green pass red discard

# Apply CAR list 2 to the outbound direction of GigabitEthernet 1/0/1 to meet the following requirements:

·     The rate of each host in the IP address range of 1.1.2.100 to 1.1.2.199 is limited to 5 Mbps.

·     Traffic of IP addresses in the subnet shares the remaining bandwidth.

<Sysname> system-view

[Sysname] qos carl 2 source-ip-address range 1.1.2.100 to 1.1.2.199 per-address shared-bandwidth

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos car outbound carl 2 cir 5120 cbs 51200 ebs 51200 green pass red discard

Related commands

display qos carl

qos car

GTS commands

The following compatibility matrixes show the support of hardware platforms for GTS:

 

F1000 series

Models

GTS compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

No

F1000-C83X0 series

F1000-C8395

Yes

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

No

F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

No

F1000-C-EI, F1000-C-HI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

GTS compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet

Yes

F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

display qos gts interface

Use display qos gts interface to display the GTS configuration and statistics for interfaces.

Syntax

display qos gts interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays the GTS configuration and statistics for all interfaces except VA interfaces. For information about VA interfaces, see PPP in Layer 2—WAN Access Configuration Guide.

Usage guidelines

If you specify a VT interface, this command displays the GTS configuration and statistics of each VA interface of the VT interface. It does not display QoS information about the VT interface.

Examples

# Display the GTS configuration and statistics for all interfaces.

<Sysname> display qos gts interface

Interface: GigabitEthernet1/0/1

 Rule: If-match acl 2001

  CIR 512 (kbps), CBS 51200 (Bytes), PIR 5120 (kbps), EBS 0 (Bytes)

  Queue Length: 100 (Packets)

  Queue Size: 70 (Packets)

  Passed   : 0 (Packets) 0 (Bytes)

  Discarded: 0 (Packets) 0 (Bytes)

  Delayed  : 0 (Packets) 0 (Bytes)

 

Interface: GigabitEthernet1/0/2

 Rule: If-match acl 2001

  CIR 64 (kbps), CBS 51200 (Bytes), EBS 0 (Bytes)

  Queue Length: 100 (Packets)

  Queue Size: 70 (Packets)

  Passed   : 0 (Packets) 0 (Bytes)

  Discarded: 0 (Packets) 0 (Bytes)

  Delayed  : 0 (Packets) 0 (Bytes)

Table 12 Command output

Field

Description

Interface

Interface name, including the interface type and interface number.

Rule

Match criteria.

CIR

CIR in kbps (if the CIR is specified in absolute value) or in percentage (if the CIR is specified in percentage).

CBS

CBS in bytes (if the CBS is specified in absolute value) or in ms (if the CBS is specified in milliseconds). When the CBS is specified in milliseconds, the actual CBS value is cbs-time × the actual CIR value.

EBS

EBS in bytes (if the EBS is specified in absolute value) or in ms (if the EBS is specified in milliseconds). When the EBS is specified in milliseconds, the actual EBS value is ebs-time × the actual CIR value.

PIR

PIR in kbps (if the PIR is specified in absolute value) or in percentage (if the PIR is specified in percentage).

Queue Length

Number of packets that the buffer can hold.

Queue Size

Number of packets in the buffer.

Passed

Number and bytes of packets that have been forwarded.

Discarded

Number and bytes of dropped packets.

Delayed

Number and bytes of delayed packets.

 

qos gts

Use qos gts to set GTS parameters on an interface.

Use undo qos gts to delete the GTS configuration on an interface.

Syntax

qos gts { any | acl [ ipv6 ] acl-number } cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ queue-length queue-length ]

undo qos gts { any | acl [ ipv6 ] acl-number }

Default

No GTS parameters are configured.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

any: Shapes all packets.

acl [ ipv6 ] acl-number: Performs GTS for packets matching an ACL specified by its number. The value range for the acl-number argument is 2000 to 3999 for basic ACLs and 3000 to 3999 for advanced ACLs. If you do not specify ipv6, this option specifies an IPv4 ACL. If you specify ipv6, this option specifies an IPv6 ACL.

cir committed-information-rate: Specifies the CIR in kbps. The value range for committed-information-rate is 8 to 32000000.

cbs committed-burst-size: Specifies the CBS in bytes. The value range for committed-burst-size is 512 to 1000000000. The default CBS is the product of 62.5 and the CIR.

ebs excess-burst-size: Specifies the EBS in bytes, which is the traffic exceeding CBS when two token buckets are used. The value range for excess-burst-size is 0 to 1000000000. The default EBS is 0.

queue-length queue-length: Specifies the maximum number of packets allowed in the queue. The value range for queue-length is 1 to 1024. The default is 50.

Usage guidelines

To use two rates for traffic shaping, configure the qos gts command with the pir peak-information-rate option. To use one rate for traffic shaping, configure the qos gts command without the pir peak-information-rate option.

When you reference an ACL, follow these restrictions and guidelines:

·     If the ACL does not exist or contains no rules, the ACL is not used to match packets.

·     If the vpn-instance vpn-instance option is specified in a rule, the rule takes effect only on VPN packets. If the vpn-instance vpn-instance option is not specified in a rule, the rule takes effect on both VPN packets and non-VPN packets.

Examples

# Shape the packets matching ACL 2001 on GigabitEthernet 1/0/1. The GTS parameters are as follows:

·     The CIR is 200 kbps.

·     The CBS is 51200 bytes.

·     The EBS is 0.

·     The maximum buffer queue length is 100.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos gts acl 2001 cir 200 cbs 51200 ebs 0 queue-length 100

Rate limit commands

The following compatibility matrixes show the support of hardware platforms for rate limit:

 

F1000 series

Models

Rate limit compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

Yes

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI , F1000-910-AI, F1000-905-AI

Yes

F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

No

F1000-C83X0 series

F1000-C8395

Yes

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

No

F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

No

F1000-C-EI, F1000-C-HI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

F100 series

Models

Rate limit compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet

Yes

F100-A81-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1

Yes

F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

Yes

display qos lr

Use display qos lr to display the rate limit configuration and statistics for interfaces.

Syntax

display qos lr interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays the rate limit configuration and statistics for all interfaces except VA interfaces. For information about VA interfaces, see PPP in Layer 2—WAN Access Configuration Guide.

Usage guidelines

If you specify a VT interface, this command displays the rate limit configuration and statistics of each VA interface of the VT interface. It does not display QoS information about the VT interface.

Examples

# Display the rate limit configuration and statistics for all interfaces.

<Sysname> display qos lr interface

Interface: GigabitEthernet1/0/1

 Direction: Outbound

  CIR 2000 (kbps), CBS 20480 (Bytes), EBS 0 (Bytes)

  Passed   : 1000 (Packets) 1000 (Bytes)

  Discarded: 1000 (Packets) 1000 (Bytes)

  Delayed  : 1000 (Packets) 1000 (Bytes)

  Active shaping: No

Interface: GigabitEthernet1/0/2

 Direction: Outbound

  CIR 64 (kbps), CBS 512 (Bytes), EBS 0 (Bytes)

  Passed   : 1000 (Packets) 1000 (Bytes)

  Discarded: 1000 (Packets) 1000 (Bytes)

  Delayed  : 1000 (Packets) 1000 (Bytes)

  Active shaping: No

Table 13 Command output

Field

Description

Interface

Interface name, including the interface type and interface number.

Direction

Direction in which the rate limit configuration is applied.

CIR

CIR in kbps (if the CIR is specified in absolute value) or in percentage (if the CIR is specified in percentage).

CBS

CBS in bytes (if the CBS is specified in absolute value) or in ms (if the CBS is specified in milliseconds). When the CBS is specified in milliseconds, the actual CBS value is cbs-time × the actual CIR value.

EBS

EBS in bytes (if the EBS is specified in absolute value) or in ms (if the EBS is specified in milliseconds). When the EBS is specified in milliseconds, the actual EBS value is ebs-time × the actual CIR value.

Passed

Number and bytes of packets that have passed.

Discarded

Number and bytes of dropped packets.

Delayed

Number and bytes of delayed packets.

Active shaping

Indicates whether the rate limit configuration is activated:

·     Yes—Activated.

·     No—Not activated.

 

qos lr

Use qos lr to configure rate limiting on an interface.

Use undo qos lr to delete the rate limit configuration on an interface.

Syntax

qos lr outbound cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ]

undo qos lr outbound

Default

No rate limit is configured.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

outbound: Limits the rate of outgoing packets.

cir committed-information-rate: Specifies the CIR in kbps. The value range for committed-information-rate is 5 to 1000000.

cbs committed-burst-size: Specifies the CBS in the range of 100 to 100000 bytes. The default CBS is the product of 62.5 and the CIR.

ebs excess-burst-size: Specifies the EBS in bytes, which is the traffic exceeding CBS when two token buckets are used. The value range for excess-burst-size is 0 to 100000. The default is 0.

Examples

# Limit the rate of outgoing packets on GigabitEthernet 1/0/1, with CIR 256 kbps and CBS 51200 bytes.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] qos lr outbound cir 256 cbs 51200

qos overhead layer

Use qos overhead layer physical to include the physical layer header in calculating the packet length for rate limiting.

Use undo qos overhead layer physical to restore the default.

Syntax

qos overhead layer physical

undo qos overhead layer physical

Default

The device calculates the packet length for rate limiting based on the data link layer frame.

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

This command allows the device to include a 24-byte physical layer header in calculating the packet length for rate limiting. As a best practice, configure this command in scenarios where packets are small and precise rate limiting is required. To save computing resources, do not configure this command if the device processes large packets.

This command takes effect only on Layer 3 Ethernet interfaces and Layer 3 aggregate interfaces.

Examples

# Include the physical layer header in calculating the packet length for rate limiting.

<Sysname> system-view

[Sysname] qos overhead layer physical

Related commands

display qos lr

qos lr

qos lr percent

 

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网