H3C Routers
Control Plane-Based QoS Policy Configuration Examples

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Contents

Introduction· 1

Prerequisites· 1

Example: Policing the ICMP packets sent to a control plane· 1

Network configuration· 1

Analysis· 2

Software versions used· 2

Procedures· 2

Verifying the configuration· 2

Configuration files· 3

Example: Policing the ARP packets sent to a control plane· 3

Network configuration· 3

Analysis· 4

Software versions used· 4

Procedures· 4

Verifying the configuration· 5

Configuration files· 5

Related documentation· 6

 

Introduction

The following information provides examples for applying a QoS policy to the control plane.

A QoS policy applied to the control plane can perform QoS processing such as filtering and rate limiting for the packets sent to the control plane, thus protecting normal packet receiving and sending and maintaining the normal processing status on the control plane.

Prerequisites

The following information applies to Comware 9-based routers. Procedures and information in the examples might be slightly different depending on the software or hardware version of the routers.

The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

The following information is provided based on the assumption that you have basic knowledge of applying a QoS policy to the control plane.

Example: Policing the ICMP packets sent to a control plane

Network configuration

As shown in Figure 1, the device might receive a large number of ICMP packets from the Internet, which causes high CPU usage and degraded device performance. Apply a QoS policy to a control plane to police incoming ICMP packets to 640 kbps.

Figure 1 Network diagram

‌

Analysis

By default, the device applies a predefined QoS policy to the control plane. You can use the display qos policy control-plane pre-defined command to display the predefined QoS policy applied to the control plane. Each protocol has a default rate limit value.

Use the if-match command in traffic class view to match ICMP packets, and use the car command in traffic behavior view to set the CIR to 640 kbps.

Software versions used

The configuration examples were created and verified on Release 9141P16 of the MSR2630E-X1 router.

Procedures

# Create traffic class ICMP, and configure it to match ICMP packets.

<Device> system-view

[Device] traffic classifier ICMP

[Device-classifier-ICMP] if-match control-plane protocol icmp

[Device-classifier-ICMP] quit

# Create traffic behavior ICMP, and configure a traffic policing action with the CIR as 640 kbps.

[Device] traffic behavior ICMP

[Device-behavior-ICMP] car cir 640

[Device-behavior-ICMP] quit

# Create QoS policy ICMP, and associate the traffic class with the traffic behavior.

[Device] qos policy ICMP

[Device-qospolicy-ICMP] classifier ICMP behavior ICMP

[Device-qospolicy-ICMP] quit

# Apply the QoS policy to the control plane.

[Device] control-plane slot 0

[Device-cp] qos apply policy ICMP inbound

[Device-cp] quit

Verifying the configuration

# Use the display qos policy control-plane command to display information about the QoS policy applied to the control plane.

[Device] display qos policy control-plane slot 0

Control plane slot 0

  Direction: Inbound

  Policy: ICMP

   Classifier: default-class

     Matched : 0 (Packets) 0 (Bytes)

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: be

      -none-

   Classifier: ICMP

     Matched : 0 (Packets) 0 (Bytes)

     Operator: AND

     Rule(s) :

      If-match control-plane protocol icmp

     Behavior: ICMP

      Committed Access Rate:

        CIR 640 (kbps), CBS 40000 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 0 (Packets) 0 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

The output shows that the QoS policy has been correctly applied to the control plane.

Configuration files

#

traffic classifier ICMP operator and

 if-match control-plane protocol icmp

#

traffic behavior ICMP

 car cir 640 cbs 40000 ebs 0 green pass red discard yellow pass

#

qos policy ICMP

 classifier ICMP behavior ICMP

#

control-plane slot 0

 qos apply policy ICMP inbound

Example: Policing the ARP packets sent to a control plane

Network configuration

As shown in Figure 2, the device might receive a large number of ARP packets from the Internet, which causes high CPU usage and degraded device performance. Apply a QoS policy to a control plane to police incoming ARP packets to 1000 kbps.

Figure 2 Network diagram

‌

Analysis

To police ARP packets sent to a control plane, use the if-match command in traffic class view to match ARP packets, and use the car command in traffic behavior view to set the CIR.

Software versions used

The configuration examples were created and verified on Release 9141P16 of the MSR2630E-X1 router.

Procedures

# Create traffic class ARP, and configure it to match ARP packets.

<Device> system-view

[Device] traffic classifier ARP

[Device-classifier-ARP] if-match control-plane protocol arp

[Device-classifier-ARP] quit

# Create traffic behavior ARP, and configure a traffic policing action with the CIR as 1000 kbps.

[Device] traffic behavior ARP

[Device-behavior-ARP] car cir 1000

[Device-behavior-ARP] quit

# Create QoS policy ARP, and associate the traffic class with the traffic behavior.

[Device] qos policy ARP

[Device-qospolicy-ARP] classifier ARP behavior ARP

[Device-qospolicy-ARP] quit

# Apply the QoS policy to the control plane.

[Device] control-plane slot 0

[Device-cp] qos apply policy ARP inbound

[Device-cp] quit

Verifying the configuration

Use the display qos policy control-plane command to display information about the QoS policy applied to the control plane.

[Device] display qos policy control-plane slot 0

Control plane slot 0

  Direction: Inbound

  Policy: ARP

   Classifier: default-class

     Matched : 0 (Packets) 0 (Bytes)

     Operator: AND

     Rule(s) :

      If-match any

     Behavior: be

      -none-

   Classifier: ARP

     Matched : 12 (Packets) 552 (Bytes)

     Operator: AND

     Rule(s) :

      If-match control-plane protocol arp

     Behavior: ARP

      Committed Access Rate:

        CIR 1000 (kbps), CBS 62500 (Bytes), EBS 0 (Bytes)

        Green action  : pass

        Yellow action : pass

        Red action    : discard

        Green packets : 12 (Packets) 552 (Bytes)

        Red packets   : 0 (Packets) 0 (Bytes)

The output shows that the QoS policy has been correctly applied to the control plane.

Configuration files

#

traffic classifier ARP operator and

 if-match control-plane protocol arp

#

traffic behavior ARP

 car cir 1000 cbs 62500 ebs 0 green pass red discard yellow pass

#

qos policy ARP

 classifier ARP behavior ARP

#

control-plane slot 0

 qos apply policy ARP inbound

Related documentation

·     ACL and QoS Configuration Guide in H3C MSR1000[2600][3600] Routers Configuration Guides(V9)

·     ACL and QoS Command Reference in H3C MSR1000[2600][3600] Routers Command References(V9)