17-BRAS Services Command Reference

HomeSupportRoutersCR16000-F SeriesReference GuidesCommand ReferencesH3C CR16000-F Routers Command Reference-R838x-6W10117-BRAS Services Command Reference
07-User profile commands
Title Size Download
07-User profile commands 151.83 KB

User profile commands

display user-group-profile

Use display user-group-profile to display configuration and online user information for user group profiles.

Syntax

In standalone mode:

display user-group-profile [ name profile-name ] [ slot slot-number [ cpu cpu-number ] ]

In IRF mode:

display user-group-profile [ name profile-name ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

name profile-name: Specifies a user group profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters, digits, underscores (_), minus signs (–), and dots (.). The name can start with an English letter or digit, and cannot contain only digits. The name must be unique globally. If you do not specify this option, the command displays configuration and online user information for all user group profiles.

slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays user group profile configuration and online user information on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify this option, the command displays user group profile configuration and online user information on all cards. (In IRF mode.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

Examples

# Display configuration and online user information for all user group profiles.

<Sysname> display user-group-profile

  User Group Profile: g1

    Direction: Outbound

      General Traffic Shaping:

        If-match any:

        CIR 1000 (kbps), CBS 62500 (Bytes), EBS 0 (Bytes)

    slot 3:

      User user_1:

        User ID: 0x2811177c

        User type: PPPoE

        Network attributes:

          Interface : Bas-interface0

          VPN : N/A

      User user_2:

        User ID: 0x2811177b

        User type: PPPoE

        Network attributes:

          Interface : Bas-interface0

          VPN : N/A

For information about the command output, see Table 1.

display user-profile

Use display user-profile to display configuration and online user information for user profiles.

Syntax

In standalone mode:

display user-profile [ session-group ] [ name profile-name ] [ slot slot-number [ cpu cpu-number ] ]

In IRF mode:

display user-profile [ session-group ] [ name profile-name ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

session-group: Specifies a session group profile. This keyword is supported only in standard system operating mode.

name profile-name: Specifies a user profile by its name. If you do not specify this option, the command displays configuration and online user information for all user profiles.

slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays user profile configuration and online user information on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify this option, the command displays user profile configuration and online user information on all cards. (In IRF mode.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

Examples

# Display configuration and online user information for user profile aaa.

<Sysname> display user-profile name aaa

  User Profile: aaa

    Direction: Inbound

      Committed Access Rate:

        CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 2500000 (Bytes), PIR 40000 (kbps)

      Policy: 1

      User queue:

        Limit Rate:

          CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 0 (Bytes)

    Direction: Outbound

      Committed Access Rate:

        CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 2500000 (Bytes), PIR 40000 (kbps)

      Policy: 1

      User queue:

        Limit Rate:

          CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

          Queue length: 300 (Packets)

        QMProfile:

          a

        User group profile: g

      Qos Weight: 3

      Queue Name: af3

    Connection-limit amount: 3000

    Connection-limit rate: 300

# Display configuration and online user information for all session group profiles.

<Sysname> display user-profile session-group

  Session Group Profile: g

    Direction: Inbound

      General Traffic Shaping:

        If-match queue 2:

        CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 0 (Bytes)

      General Traffic Shaping:

        If-match any:

        CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

        Queue length: 4000 (Packets)

      QMProfile: a

    Direction: Outbound

      General Traffic Shaping:

        If-match queue 2:

        CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 0 (Bytes), PIR 30000 (kbps)

      General Traffic Shaping:

        If-match any:

        CIR 30000 (kbps), CBS 1875000 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

        Queue length: 400 (Packets)

      QMProfile: a

 

    slot 3:

      User user_1:

        User ID: 0x0000000b

        User type: L2 IPoE dynamic

        Network attributes:

          Interface    : Ten-GigabitEthernet3/1/2.100

          VPN          : N/A

          Service VLAN : 100

        Failed action list:

          Direction: Inbound

           QMProfile: a

Table 1 Command output

Field

Description

User Profile

User profile name.

Inbound

Policy applied to incoming traffic.

Outbound

Policy applied to outgoing traffic.

Session Group Profile

Session group profile name.

CIR

Committed information rate, in kbps.

CBS

Committed burst size, in bytes.

EBS

Excess burst size, in bytes.

PIR

Peak information rate, in kbps.

Connection-limit amount

Maximum number of user connections set by the connection limits.

Connection-limit rate

Maximum connection establishment rate set by the connection limits.

Policy

Policy name.

Queue length

Maximum number of packets allowed in a queue.

QMProfile

Queue scheduling profile.

User group profile

User group profile name.

QoS Weight

Outbound weight (byte count).

Queue Name

Name of the queue specified for the session.

User user_1

Username of a user account with which a user profile or session group profile is associated.

User type

User type:

·     Command—AAA user for which command authorization and command accounting are enabled.

·     FTP—FTP user.

·     HTTP web—HTTP web user.

·     HTTPS web—HTTPS web user.

·     IPoE L2VPN leased—IPoE L2VPN leased user.

·     L2 IPoE dynamic users—Layer 2 IPoE dynamic user.

·     L2 IPoE interface leased—Layer 2 IPoE interface leased user.

·     L2 IPoE leased subusers—Layer 2 IPoE leased subuser.

·     L2 IPoE static—Layer 2 IPoE static user.

·     L3 IPoE dynamic—Layer 3 IPoE dynamic user.

·     L3 IPoE interface leased—Layer 3 IPoE interface leased user.

·     L3 IPoE subnet leased—Layer 3 IPoE subnet leased user.

·     L3 IPoE static—Layer 3 IPoE static user.

·     LNS—L2TP user on an LNS.

·     NETCONF RESTful HTTP—NETCONF over RESTful over HTTP user.

·     NETCONF RESTful HTTPS—NETCONF over RESTful over HTTPS user.

·     NETCONF SOAP HTTPS—NETCONF over SOAP over HTTPS user.

·     NETCONF SOAP HTTPS—NETCONF over SOAP over HTTPS user.

·     PPPoE—PPP over Ethernet user.

·     PPPoPhy—PPP over physical link user.

·     SSH—SSH user.

·     Super—Super user.

·     Telnet—Telnet user.

·     Terminal—User that logs in through the console port or Asyn port.

·     VPPP—L2TP user that performs automatic dialing on an LAC.

Network attributes

Online user information:

·     Interface—Interface where the user comes online.

·     MAC address—MAC address of the user.

·     IP address—IP address of the user.

·     VPN—VPN instance to which the user belongs.

·     Service VLAN—Service provider VLAN ID of the user.

·     Customer VLAN—Customer VLAN ID of the user.

Failed action list

Actions that failed to be applied to the user.

 

display user-profile interface

Use display user-profile interface to display the configuration and traffic policing statistics for a user profile applied to an interface.

Syntax

In standalone mode:

display user-profile interface [ interface-type interface-number ] [ slot slot-number [ cpu cpu-number ] ] [ inbound | outbound ]

In IRF mode:

display user-profile interface [ interface-type interface-number ] [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ inbound | outbound ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays the configuration and traffic policing statistics for all applied user profiles.

slot slot-number: Specifies a card by its slot number. If you do not specify this option, the command displays the user profile configuration and the traffic policing statistics on the active MPU. This option is supported only for aggregate interfaces. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify this option, the command displays the user profile configuration and the traffic policing statistics on the global active MPU. This option is supported only for aggregate interfaces. (In IRF mode.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

inbound: Specifies the inbound direction.

outbound: Specifies the outbound direction.

Usage guidelines

If you do not specify the inbound or outbound keyword, this command displays the configuration and traffic policing statistics for the user profile applied with neither keyword specified.

If you specify the inbound or outbound keyword, this command displays the configuration and traffic policing statistics for the user profile applied in the specified direction and does not display information about the user profile applied with neither keyword specified.

Examples

# Display the configuration and traffic policing statistics for user profiles applied to all interfaces.

<Sysname> display user-profile interface inbound

Interface: Ten-GigabitEthernet3/1/1

  Direction: Inbound

    User Profile: u1

      Committed Access Rate(active):

        CIR 112 (kbps), CBS 5120 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

      Policy(inactive): p

      User queue:

        Limit Rate(inactive):

          CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

        QMProfile(inactive):

          a

Interface: Ten-GigabitEthernet3/1/2

  Direction: Inbound

    User Profile: u2

      Committed Access Rate(active):

        CIR 128 (kbps), CBS 5120 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

      Policy(inactive): q

      User queue:

        Limit Rate(inactive):

          CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

        QMProfile(inactive):

          B

# Display the configuration and traffic policing statistics for the user profile applied to Ten-GigabitEthernet 3/1/1 with neither keyword specified.

<Sysname> display user-profile interface ten-gigabitethernet 3/1/1

Interface: Ten-GigabitEthernet3/1/1

  User Profile: test

    Direction: Inbound

      Committed Access Rate(active):

        CIR 112 (kbps), CBS 5120 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

      Policy(inactive): p

      User queue:

        Limit Rate(inactive):

          CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

        QMProfile(inactive):

          a

    Direction: Outbound

      Committed Access Rate(active):

        CIR 112 (kbps), CBS 5120 (Bytes), EBS 512 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

      Policy(inactive): p

      User queue:

        Limit Rate(active):

          CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

          Queue length: 3000 (Packets)

        QMProfile(active):

          a

        User group profile(inactive): gg

      Qos Weight(inactive): 2

      Queue Name(inactive): af3

    IGMP access policy:

      3000

    MLD access policy:

      3000

    Authentication-free rule:

      acl 3000

# Display the configuration and traffic policing statistics for the user profile applied to Route-Aggregation 1 with neither keyword specified.

<Sysname> display user-profile interface route-aggregation 1 slot 3

Interface: Route-Aggregation 1

  User Profile: u2

    Direction: Inbound

      Committed Access Rate(inactive):

        CIR 128 (kbps), CBS 8000 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

      Policy(inactive): 1

      User queue:

        Limit Rate(inactive):

          CIR 3000 (kbps), CBS 187500 (Bytes), EBS 0 (Bytes), PIR 40000 (kbps)

      Connection-limit amount(inactive): 10

      Connection-limit rate(inactive): 5

    Direction: Outbound

      Committed Access Rate(inactive):

        CIR 128 (kbps), CBS 8000 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Yellow packets: 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

      Policy(inactive): 1

      User queue:

        Limit Rate(active):

          CIR 32 (kbps), CBS 2048 (Bytes), EBS 0 (Bytes), PIR 888 (kbps)

          Queue length: 1024 (Packets)

        QMProfile(active):

          qm1

        User group profile(inactive): ug1

      QoS Weight(inactive): 10

      Queue Name(inactive): af1

      Connection-limit amount(inactive): 10

      Connection-limit rate(inactive): 5

Table 2 Command output

Field

Description

active

The configuration item has been successfully issued and has taken effect.

inactive

The configuration item fails to be issued and has not taken effect.

QoS Weight

Outbound weight. The unit is byte count.

Authentication-free rule

Authentication-free rule.

User group profile

User group profile name.

IGMP access policy

This field is not supported in the current software version.

IGMP access policy.

MLD access policy

This field is not supported in the current software version.

MLD access policy.

For descriptions of other fields, see Table 1.

Related commands

qos apply user-profile

reset user-profile interface

free-rule

Use free-rule to create a user profile free rule.

Use undo free-rule to delete a user profile free rule.

Syntax

free-rule acl [ ipv6 ] { acl-number | name acl-name }

undo free-rule acl [ ipv6 ] { acl-number | name acl-name }

Default

No user profile free rules exist.

Views

User profile view

Predefined user roles

network-admin

Parameters

ipv6: Specifies the IPv6 ACL type. To specify the IPv4 ACL type, do not use this keyword.

acl-number: Specifies the ACL number. The following are available value ranges:

·     2000 to 2999 for basic ACLs.

·     3000 to 3999 for advanced ACLs.

name acl-name: Specifies the ACL name. The acl-name argument is a case-insensitive string of 1 to 63 characters. It must start with an English letter.

Usage guidelines

The user profile free rule specifies resources accessible for an authenticated user who uses an overdue account. Accessible resources are defined by the ACL permit rules.

You can create multiple free rules in a user profile. The device matches the free rules in their configuration order and stops the matching process until a free rule is matched.

Examples

# In user profile user, create a free rule using IPv4 ACL 3000.

<Sysname> system-view

[Sysname] user-profile user

[Sysname-user-profile-user] free-rule acl 3000

# In user profile user, create a free rule using IPv6 ACL 3000.

<Sysname> system-view

[Sysname] user-profile user

[Sysname-user-profile-user] free-rule acl ipv6 3000

# In user profile user, create a free rule using ACL a1.

<Sysname> system-view

[Sysname] user-profile user

[Sysname-user-profile-user] free-rule acl name a1

Related commands

acl (ACL and QoS Command Reference)

qos apply user-profile

Use qos apply user-profile to apply a user profile to an interface.

Use undo qos apply user-profile to remove a user profile application from an interface.

Syntax

qos apply user-profile profile-name [ inbound | outbound ]

undo qos apply user-profile [ inbound | outbound ]

Default

No user profile is applied to an interface.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

Predefined user roles

network-admin

Parameters

profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters (a-z, A-Z), digits (0-9), underscores (_), hyphens (-), and dots (.). The name can start with an English letter or digit, and cannot contain only digits.

inbound: Specifies the inbound direction of an interface.

outbound: Specifies the outbound direction of an interface.

Usage guidelines

The following rules apply if you specify a direction when applying a user profile to an interface:

·     The settings in the user profile take effect only if the direction of the settings is the same as the application direction.

·     Only one user profile can be applied to the same direction.

The following rules apply if you do not specify a direction when applying a user profile to an interface:

·     The settings in the user profile take effect in the direction as they are configured.

·     No other user profile can be applied to the interface, regardless of whether it is applied with a direction.

When you remove an existing user profile from the interface, only the user profile in the specified direction is removed.

Examples

# Apply user profile u1 to Ten-GigabitEthernet 3/1/1 without specifying either direction.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/1/1

[Sysname-Ten-GigabitEthernet3/1/1] qos apply user-profile u1

# Apply user profile u1 to the inbound direction of Ten-GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/1/1

[Sysname-Ten-GigabitEthernet3/1/1] qos apply user-profile u1 inbound

Related commands

display user-profile interface

reset user-profile interface

user-profile

qos queue

Use qos queue to specify a queue for session packets that use the user profile.

Use undo qos queue to restore the default.

Syntax

qos queue { queue-id | queue-name }

undo qos queue

Default

No queue for session packets is specified for a user profile.

Views

User profile view

Predefined user roles

network-admin

Parameters

queue { queue-id | queue-name }: Specifies a queue by its ID or name. The value range for the queue-id argument is 0 to 7. The following matrix shows the mapping between queue IDs and queue names:

 

Queue ID

Queue name

0

be

1

af1

2

af2

3

af3

4

af4

5

ef

6

cs6

7

cs7

 

Usage guidelines

Session packets are scheduled based on the scheduling priority of the specified queue.

Examples

# Specify queue 7 for session packets that use user profile user.

<Sysname> system-view

[Sysname] user-profile user

[Sysname-user-profile-user] qos queue 7

qos session-group identify

Use qos session-group identify to identify a session group on an interface.

Use undo qos session-group identify to restore the default.

Syntax

qos session-group identify { customer-vlan | service-vlan | customer-service-vlan | subscriber-id }

undo qos session-group identify

Default

No session group is identified on the interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

customer-vlan: Identifies a session group by CVLAN. A CVLAN is used by a customer on the private network.

service-vlan: Identifies a session group by SVLAN. An SVLAN is used by a service provider to transmit VLAN tagged traffic for customers.

customer-service-vlan: Identifies a session group by CVLAN and SVLAN.

subscriber-id: Identifies a session group by subscriber ID.

Usage guidelines

The system identifies packets according to the specified method and classifies packets with the same characteristics to the same user group. You can configure a session group profile or user group profile for multiple users for unified traffic rate limiting or queue scheduling.

To configure a session group profile or user group profile, you must first execute this command.

Examples

# Configure Ten-GigabitEthernet 3/1/1 to identify a session group by an SVLAN.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/1/1

[Sysname-Ten-GigabitEthernet3/1/1] qos session-group identify service-vlan

qos user-queue

Use qos user-queue to configure queue scheduling parameters for user queues.

Use undo qos user-queue to restore the default.

Syntax

qos user-queue { cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ queue-length queue-length ] | qmprofile qmprofile-name | user-group-profile user-group-profile-name } * outbound

qos user-queue { cir committed-information-rate [ cbs committed-burst-size ] pir peak-information-rate [ ebs excess-burst-size ] [ queue-length queue-length ] | qmprofile qmprofile-name | user-group-profile user-group-profile-name } * outbound

qos user-queue { { cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] | qmprofile qmprofile-name } * | user-group-profile user-group-profile-name } inbound

qos user-queue { { cir committed-information-rate [ cbs committed-burst-size ] pir peak-information-rate [ ebs excess-burst-size ] | qmprofile qmprofile-name } * | user-group-profile user-group-profile-name } inbound

undo qos user-queue { inbound | outbound }

Default

No queue scheduling parameters are configured for user queues.

Views

User profile view

Predefined user roles

network-admin

Parameters

cir committed-information-rate: Sets the CIR in kbps, which specifies the average traffic rate. The value range for committed-information-rate is 300 to 300000000.

cbs committed-burst-size: Sets the CBS in bytes, which specifies the size of bursty traffic when the actual average rate is not greater than the CIR. The value range for committed-burst-size is 4096 to 133169152.

ebs excess-burst-size: Sets the EBS in bytes. The the value range for excess-burst-size is 0 to 256000000.

pir peak-information-rate: Sets the PIR in kbps. The PIR cannot be smaller than the CIR. The value range for peak-information-rate is 300 to 300000000.

queue-length queue-length: Sets the maximum number of packets allowed in the queue.The value range for queue-length is 1 to 29296875. This option is supported only in standard system operating mode.

qmprofile qmprofile-name: Specifies a queue scheduling profile by its name. The specified queue scheduling profile must already exist.

user-group-profile profile-name: Specifies a user group profile by its name. The specified user group profile must already exist.

inbound: Applies the queue scheduling parameters to the inbound direction (traffic sent by online users).

outbound: Applies the queue scheduling parameters to the outbound direction (traffic received by online users).

Usage guidelines

The CIR, CBS, EBS, PIR, and queue scheduling profile settings in this command for the inbound direction take effect only on the following cards:

 

Card category

Cards

CEPC

CEPC-XP4LX, CEPC-XP24LX, CEPC-XP48RX, CEPC-CP4RX, CEPC-CP4RXA, CEPC-CP4RX-L, CEPC-CQ8L, CEPC-CQ8LA, CEPC-CQ8L1A, CEPC-CQ16L1

CSPEX

CSPEX-1304X, CSPEX-1404X, CSPEX-1502X, CSPEX-1504X, CSPEX-1504XA, CSPEX-1602X, CSPEX-1602XA, CSPEX-1804X, CSPEX-1512X, CSPEX-1612X, CSPEX-1812X, CSPEX-1802X, CSPEX-1802XA, CSPEX-2612XA, CSPEX-1812X-E, CSPEX-2304X-G, CSPEX-1502XA

SPE

RX-SPE200, RX-SPE200-E

 

You can use this command to configure rate limit settings, associate the user profile with a user group profile, and specify a queue scheduling profile.

If the user profile has been authorized, you can modify the parameters in the queue scheduling profile or user group profile associated with the user profile. However, to add, modify, or delete any rate limit parameters, first execute the undo qos user-queue command to remove the configuration.

To delete a queue scheduling profile or user group profile that has been associated with a user profile, first execute the undo qos user-queue command to remove the association setting.

For the same online user, you cannot both associate a user group profile and authorize a session group profile.

Examples

# In user profile u1, set the CIR to 512 kbps and the queue length to 2048. Use queue scheduling profile qm1, and associate the user profile with user group profile g1.

<Sysname> system-view

[Sysname] user-profile u1

[Sysname-user-profile-u1] qos user-queue cir 512 queue-length 2048 qmprofile qm1 user-group-profile g1 outbound

Related commands

qos qmprofile (ACL and QoS Command Reference)

user-group-profile

qos weight outbound (user profile view, user group profile view, session group profile view)

Use qos weight outbound to set an outbound weight value for a user profile, user group profile, or session group profile.

Use undo qos weight outbound to restore the default.

Syntax

qos weight weight-value outbound

undo qos weight outbound

Default

No outbound weight value is set for a user profile, user group profile, or session group profile.

Views

User profile view

User group profile view

Session group profile view

Predefined user roles

network-admin

Parameters

weight-value: Specifies a weight value. The value range for this argument is 1 to 15.

outbound: Applies the weight value to the outbound direction (traffic sent by the device to online users).

Usage guidelines

Users are allocated bandwidth resources based on the weight value.

Examples

# Set an outbound weight value of 3 for user profile abc.

<Sysname> system-view

[Sysname] user-profile abc

[Sysname-user-profile-abc] qos weight 3 outbound

# Set an outbound weight value of 3 for session group profile abc.

<Sysname> system-view

[Sysname] user-profile abc type session-group

[Sysname-session-group-profile-abc] qos weight 3 outbound

reset user-profile interface

Use reset user-profile interface to clear the traffic policing statistics for a user profile applied to an interface.

Syntax

reset user-profile interface [ interface-type interface-number ] [ inbound | outbound ]

Views

Any view

Predefined user roles

network-admin

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command clears the traffic policing statistics for applied user profiles on all interfaces.

inbound: Specifies the inbound direction.

outbound: Specifies the outbound direction.

Usage guidelines

If you do not specify the inbound or outbound keyword, this command clears the traffic policing statistics for all applied user profiles.

Examples

# Clear the traffic policing statistics for appplied user profiles on all interfaces.

<Sysname> reset user-profile interface

# Clear the traffic policing statistics for all user profiles applied to Ten-GigabitEthernet 3/1/1.

<Sysname> reset user-profile interface ten-gigabitethernet 3/1/1

Related commands

display user-profile interface

qos apply user-profile

user-group-profile

Use user-group-profile to create a user group profile and enter its view, or enter the view of an existing user group profile.

Use undo user-group-profile to delete a user group profile.

Syntax

user-group-profile profile-name

undo user-group-profile profile-name

Default

No user group profiles exist.

Views

System view

Predefined user roles

network-admin

Parameters

profile-name: Specifies a user group profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters (a-z, A-Z), digits (0-9), underscores (_), hyphens (-), and dots (.). The name can start with an English letter or digit, and cannot contain only digits. The name cannot be the same as the name of an existing user profile or session group profile.

Usage guidelines

To delete a user group profile that has been associated with a user profile, first execute the undo qos user-queue command to remove the association setting.

Examples

# Create user group profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-group-profile a123

[Sysname-user-group-profile-a123]

user-profile

Use user-profile to create a user profile and enter its view, or enter the view of an existing user profile.

Use undo user-profile to delete a user profile.

Syntax

user-profile profile-name [ type session-group ]

undo user-profile profile-name

Default

No user profiles exist.

Views

System view

Predefined user roles

network-admin

Parameters

profile-name: Specifies a user profile by its name, a case-sensitive string of 1 to 31 characters. Valid characters include English letters (a-z, A-Z), digits (0-9), underscores (_), hyphens (-), and dots (.). The name can start with an English letter or digit, and cannot contain only digits. The name must be unique globally. The name cannot be the same as the name of an existing user group profile or session group profile.

type session-group: Specifies a session group profile.

Examples

# Create user profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-profile a123

[Sysname-user-profile-a123]

# Create session group profile a123 and enter the view of a123.

<Sysname> system-view

[Sysname] user-profile a123 type session-group

[Sysname-session-group-profile-a123]

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网