HP HSR6800 Routers ACL and QoS Command Reference Part number: 5998-4510 Software version: HSR6800-CMW520-R3103 Document version: 6PW103-20130628...
Page 2
The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
ACL commands Use acl to create an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL, and enter its view. If the ACL has been created, you directly enter its view. Use undo acl to delete the specified ACLs. Syntax acl number acl-number [ name acl-name ] [ match-order { auto | config } ] undo acl { all | name acl-name | number acl-number } Default...
ACL acceleration speeds up ACL lookup. The acceleration effect increases with the number of ACL rules. ACL acceleration uses memory. To achieve the best trade-off between memory and ACL processing performance, HP recommends enabling ACL acceleration for large ACLs, for example, ACLs that contain more than 50 rules.
[Sysname] acl accelerate number 3000 Related commands display acl accelerate acl copy Use acl copy to create an IPv4 basic, IPv4 advanced, or Ethernet frame header ACL by copying an ACL that already exists. The new ACL has the same properties and content as the source IPv4 ACL, but not the same ACL number and name.
acl ipv6 Use acl ipv6 to create an IPv6 basic or IPv6 advanced ACL, and enter its ACL view. If the ACL has been created, you directly enter its view. Use undo acl ipv6 to delete the specified ACLs. Syntax acl ipv6 number acl6-number [ name acl6-name ] [ match-order { auto | config } ] undo acl ipv6 { all | name acl6-name | number acl6-number } Default...
[Sysname-acl6-basic-2001-flow] acl ipv6 copy Use acl ipv6 copy to create an IPv6 basic or IPv6 advanced ACL by copying an ACL that already exists. The new ACL has the same properties and content as the source ACL, but not the same ACL number and name.
Views System view Default command level 2: System level Parameters acl6-name: Specifies an IPv6 basic or IPv6 advanced ACL name, a case-insensitive string of 1 to 63 characters. It must start with an English letter. The ACL must already exist. Examples # Enter the view of IPv6 basic ACL flow.
Syntax description text undo description Default An ACL has no ACL description. Views IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view Default command level 2: System level Parameters text: ACL description, a case-sensitive string of 1 to 127 characters. Examples # Configure a description for IPv4 basic ACL 2000.
Page 14
all: Displays information for all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs. name acl-name: Specifies an ACL by its name. The acl-name argument takes a case-insensitive string of 1 to 63 characters. It must start with an English letter. slot slot-number: Displays the match statistics for ACLs on a card.
Field Description rule 0 permit Content of rule 0. There have been two matches for the rule. The statistic counts only ACL matches performed in software. 2 times matched This field is not displayed when no packets have matched the rule.
3000 3001 3002 UNACC Table 2 Command output Field Description Group ACL number. Whether ACL acceleration is enabled: • Accelerate ACC—Enabled. • UNACC—Disabled. Whether ACL acceleration is using up to date criteria for rule matching: • UTD—The ACL criteria are up to date and have not changed since ACL acceleration was enabled.
Page 17
include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines This command displays ACL rules in config or depth-first order, whichever is configured. Examples # Display configuration and match statistics for the specified IPv6 ACL or all IPv6 basic and IPv6 advanced ACLs.
display acl resource Use display acl resource to display the usage of ACL rules. Syntax display acl resource [ slot slot-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters slot slot-number: Displays the usage of ACL rules on a card.
IFP Counter 2048 2017 EFP ACL EFP Meter EFP Counter 512 Table 4 Command output Field Description Interface Interface name formed by interface type and interface number. Resource type: • VFP ACL—ACL rules for QinQ before Layer 2 forwarding • IFP ACL—ACL rules applied to inbound traffic •...
Examples # Display the configuration and status of time range t4. <Sysname> display time-range t4 Current time is 17:12:34 4/13/2010 Tuesday Time-range : t4 ( Inactive ) 10:00 to 12:00 Mon 14:00 to 16:00 Wed from 00:00 1/1/2010 to 00:00 2/1/2010 from 00:00 6/1/2010 to 00:00 7/1/2010 Table 5 Command output Field...
reset acl ipv6 counter Use reset acl ipv6 counter to clear statistics for one or all IPv6 basic and IPv6 advanced ACLs. Syntax reset acl ipv6 counter { acl6-number | all | name acl6-name } Views User view Default command level 2: System level Parameters acl6-number: Specifies an ACL by its number:...
Page 22
Parameters rule-id: Specifies a rule ID in the range of 0 to 65534. If no rule ID is provided when you create an ACL rule, the system automatically assigns it a rule ID. This rule ID takes the nearest higher multiple of the numbering step to the current highest rule ID, starting from 0.
rule (IPv4 advanced ACL view) Use rule to create or edit an IPv4 advanced ACL rule. You can edit ACL rules only when the match order is config. Use undo rule to delete an entire IPv4 advanced ACL rule or some attributes in the rule. If no optional keywords are provided, this command deletes the entire rule.
Page 24
Parameters Function Description The dest-address dest-wildcard arguments represent a destination destination IP address and wildcard mask in dotted { dest-address Specifies a destination decimal notation. An all-zero wildcard specifies a host dest-wildcard | address address. any } The any keyword represents any destination IP address. Counts the number of times the ACL rule has been matched.
Page 25
Table 7 TCP/UDP-specific parameters for IPv4 advanced ACL rules Parameters Function Description The operator argument can be lt (lower than), gt (greater than), eq (equal to), neq (not equal to), or range (inclusive range). The port1 and port2 arguments are TCP or UDP port numbers in the range of 0 to 65535.
Page 26
ICMP message name ICMP message type ICMP message code host-redirect host-tos-redirect host-unreachable information-reply information-request net-redirect net-tos-redirect net-unreachable parameter-problem port-unreachable protocol-unreachable reassembly-timeout source-quench source-route-failed timestamp-reply timestamp-request ttl-exceeded Usage guidelines Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating or editing has the same deny or permit statement as another rule in the ACL, your creation or editing attempt fails.
fragment: Applies the rule only to non-first fragments. A rule without this keyword applies to both fragments and non-fragments. logging: Logs matching packets. This function is available only when the application module (such as the firewall) that uses the ACL supports the logging function. source { source-address source-wildcard | any }: Matches a source address.
Page 30
Parameters Function Description The dscp argument can be a number in the range of 0 to 63, or in words, af11 (10), af12 (12), af13 (14), af21 Specifies a DSCP (18), af22 (20), af23 (22), af31 (26), af32 (28), af33 dscp dscp preference.
Page 31
Parameters Function Description { ack ack-value | fin fin-value | Specifies one or more Parameters specific to TCP. psh psh-value | TCP flags, including rst rst-value | The value for each argument can be 0 (flag bit not set) or 1 (flag bit ACK, FIN, PSH, RST, syn syn-value | set).
Usage guidelines Within an ACL, the permit or deny statement of each rule must be unique. If the ACL rule you are creating or editing has the same deny or permit statement as another rule in the ACL, your creation or editing attempt fails.
Page 33
Syntax rule [ rule-id ] { deny | permit } [ counting | fragment | logging | routing [ type routing-type ] | source { source-address source-prefix | source-address/source-prefix | any } | time-range time-range-name | vpn-instance vpn-instance-name ] * undo rule rule-id [ counting | fragment | logging | routing | source | time-range | vpn-instance ] * Default An IPv6 basic ACL does not contain any rule.
Examples # Create an IPv6 basic ACL rule to deny the packets from any source IP segment but 1001::/16, 3124:1 123::/32, or FE80:5060:1001::/48. <Sysname> system-view [Sysname] acl ipv6 number 2000 [Sysname-acl6-basic-2000] rule permit source 1001:: 16 [Sysname-acl6-basic-2000] rule permit source 3124:1123:: 32 [Sysname-acl6-basic-2000] rule permit source fe80:5060:1001:: 48 [Sysname-acl6-basic-2000] rule deny source any Related commands...
[Sysname-acl6-basic-2000] rule 0 comment This rule is used on GigabitEthernet 0/0.1. Related commands • display acl display acl ipv6 • rule remark Use rule remark to add a start or end remark for a range of rules that are created for the same purpose. Use undo rule remark to delete the specified or all rule range remarks.
number for the rule-id argument. In this approach, the end rule appears below the end remark. Whichever approach you use, be consistent. Examples # Display the running configuration of IPv4 basic ACL 2000. <Sysname> system-view [Sysname] acl number 2000 [Sysname-acl-basic-2000] display this acl number 2000 rule 0 permit source 14.1.1.0 0.0.0.255 rule 5 permit source 10.1.1.1 0 time-range work-time...
Use undo step to restore the default. Syntax step step-value undo step Default The rule numbering step is 5. Views IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view Default command level 2: System level Parameters step-value: ACL rule numbering step in the range of 1 to 20.
Page 38
Views System view Default command level 2: System level Parameters time-range-name: Specifies a time range name. The name is a case-insensitive string of 1 to 32 characters. It must start with an English letter and to avoid confusion, it cannot be all. start-time to end-time: Specifies a periodic statement.
Page 39
Combining all periodic statements Combining all absolute statements Taking the intersection of the two statement sets as the active period of the time range Examples # Create a periodic time range t1, setting it to be active between 8:00 to 18:00 during working days. <Sysname>...
Table 14 Command output Field Description Classifier Class name and its match criteria. Match operator you set for the class. If the operator is AND, the class matches the packets Operator that match all its match criteria. If the operator is OR, the class matches the packets that match any of its match criteria.
Page 42
Keyword and argument combination Description Matches all packets. Matches a QoS class. The classifier-name argument is the name of the class. classifier classifier-name This option is not supported on SAP modules operating in bridge mode. Matches DSCP values. dscp dscp-list The dscp-list argument is a list of up to eight DSCP values.
Page 43
If a class that uses the AND operator has multiple if-match customer-vlan-id or if-match service-vlan-id clauses, a packet that matches any of the clauses matches the class. The match criteria listed below must be unique in a class that uses the AND operator. To ensure that the class can be successfully applied to interfaces, avoid defining multiple if-match clauses for these match criteria or inputting multiple values for any of the list arguments, such as the 8021p-list argument.
Page 44
To delete a criterion that matches DSCP values, the specified DSCP values must be identical with those defined in the criterion (the sequence can be different). Defining a criterion to match 802.1p priority in customer or service provider VLAN tags •...
Page 45
You can configure multiple VLAN IDs in one command line. If the same VLAN ID is specified multiple times, the system considers them as one. If a packet matches one of the defined VLAN IDs, it matches the if-match clause. To delete a criterion that matches VLAN IDs, the specified VLAN IDs in the command must be identical with those defined in the criterion (the sequence can be different).
Page 46
<Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match acl ipv6 3101 # Define a match criterion for class class1 to match the IPv6 ACL named flow. <Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match acl ipv6 name flow # Define a match criterion for class class1 to match all packets. <Sysname>...
<Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match rtp start-port 16384 end-port 32767 # Define a match criterion for class class1 to match the packets of customer network VLAN 1, 6, or 9. <Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match customer-vlan-id 1 6 9 # Define a match criterion for class class1 to match packets with their local QoS IDs being 3.
Examples # Create a class class1. <Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] Related commands qos policy • qos apply policy • classifier behavior • Traffic behavior commands accounting Use accounting to configure the class-based traffic accounting action in a traffic behavior. Use undo accounting to remove the class-based traffic accounting action from a traffic behavior.
Use car to configure a CAR action in a traffic behavior. Use undo car to delete the CAR action in a traffic behavior. Syntax car cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ pir peak-information-rate ] [ green action ] [ red action ] [ yellow action ] undo car Default CBS is the amount of traffic transmitted at the rate of CIR over 500 ms.
remark-prec-pass new-precedence: Sets the IP precedence of the packet to new-precedence and • permits the packet to pass through. The value range for new-precedence is 0 to 7. This option is not supported on SAP modules operating in bridge mode. Usage guidelines A QoS policy that has a CAR action can be applied to the inbound or outbound direction of an interface or PVC.
Page 51
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
Field Description Green Action Action to be taken on green packets. For more information, see car. Red Action Action to be taken on red packets. For more information, see car. Expedited Forwarding Information about expedited forwarding. Redirect enable Traffic redirecting configuration information. Traffic redirecting type: VLAN, CPU, interface, next hop, or Redirect type service-loop group.
Default command level 2: System level Parameters cir committed-information-rate: CIR in kbps, which specifies the average traffic rate. cbs committed-burst-size: CBS in bytes, which specifies the size of bursty traffic when the actual average rate is not greater than CIR. ebs excess-burst-size: EBS in bytes.
cbs cbs-time: Sets the CBS in the specified time in ms. The default cbs-time is 500. The actual CBS value is cbs-time × the actual CIR value. ebs ebs-time: Sets the EBS in the specified time in ms. The default ebs-time is 0 ms. The actual EBS value is ebs-time ×...
interface type to bridgeport-aggregation. To redirect traffic to a Layer 3 aggregate interface, set the interface type to routeport-aggregation. next-hop: Redirects traffic to a next hop. ipv4-add: Specifies the IPv4 address of the next hop. The ipv4-add2 argument backs up ipv4-add1. If redirecting traffic to ipv4-add1 fails, the router redirects the traffic to ipv4-add2.
traffic behavior • • classifier behavior remark drop-precedence Use remark drop-precedence to configure a drop precedence marking action. Use undo remark drop-precedence to delete the action. Syntax remark drop-precedence drop-precedence-value undo remark drop-precedence Views Traffic behavior view Default command level 2: System level Parameters drop-precedence-value: Sets the drop precedence to be marked for packets, in the range of 0 to 2.
Syntax remark ip-precedence ip-precedence-value undo remark ip-precedence Views Traffic behavior view Default command level 2: System level Parameters ip-precedence-value: Sets the IP precedence value to be marked for packets, in the range of 0 to 7. Examples # Set the IP precedence to 6 for packets. <Sysname>...
Related commands qos policy • traffic behavior • • classifier behavior remark qos-local-id Use remark qos-local-id to configure the action of setting the specified QoS-local ID for packets. Use undo remark qos-local-id to delete the action. Syntax remark qos-local-id local-id-value undo remark qos-local-id Views Traffic behavior view...
Usage guidelines A traffic behavior is a set of actions, such as priority marking, dropping, rate limiting, and accounting. You provide QoS for a class of traffic by associating a traffic behavior with the class of traffic. Examples # Create a traffic behavior named behavior1. <Sysname>...
To configure CBQ in the child policy successfully, configure GTS in the parent policy, and make sure • that the configured GTS bandwidth is no smaller than CBQ bandwidth configured in the child policy. • If GTS bandwidth in the parent policy is set in percentage, also set CBQ bandwidth in percentage in the child policy.
You can configure multiple class-behavior associations in a QoS policy, and each class can associate with only one traffic behavior. If the specified class or traffic behavior does not exist, the system creates a null class or traffic behavior. Examples # Associate traffic class database with traffic behavior test in QoS policy user1.
Classifier: default-class Behavior: be -none- Classifier: USER1 Behavior: USER1 Marking: Remark IP Precedence 3 Committed Access Rate: CIR 200 (kbps), CBS 15000 (byte), EBS 0 (byte) Green Action: pass Action: discard Expedited Forwarding: Bandwidth 50 (Kbps) CBS 1500 (Bytes) Classifier: database Behavior: database Assured Forwarding: Bandwidth 30 (Kbps)
Page 64
Default command level 1: Monitor level Parameters interface-type interface-number: Specifies an interface by its type and number to display information about the QoS policy or policies applied to it. inbound: Displays information about the QoS policy applied in the inbound direction of the specified interface.
Page 65
Classifier: USER1 Matched : 0/0 (Packets/Bytes) Operator: AND Rule(s) : If-match ip-precedence 5 Behavior: USER1 Marking 0(Packets): Remark IP Precedence 3 Committed Access Rate: CIR 200 (kbps), CBS 15000 (byte), EBS 0 (byte) Green Action: pass Action: discard Green: 0/0 (Packets/Bytes) Red : 0/0 (Packets/Bytes) Expedited Forwarding: Bandwidth 50 (Kbps), CBS 1500 (Bytes)
Field Description Green Traffic statistics for green packets. Traffic statistics for red packets. Expedited Forwarding EF queue information. Assured Forwarding AF queue information. Bandwidth Minimum guaranteed bandwidth. General Traffic Shape GTS information. Queue Length Number of packets that the buffer queue can hold. Queue Size Number of packets in the buffer.
Page 68
include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Usage guidelines If no slot number is specified, this command displays all the VLAN QoS policy information of the router. Examples # Display QoS policy test applied to VLANs on card 6.
Field Description Operator Logical relationship between match criteria. Rule(s) Match criteria. Behavior Name of the behavior, and its actions. Accounting Class-based accounting action and the collected statistics. Committed Access Rate CAR information. CIR in kbps. CBS in bytes, which specifies the depth of the token bucket for holding bursty traffic.
A policy must be applied to an interface or PVC following these rules: • You can apply a QoS policy configured with various QoS actions (such as remark, car, gts, queue af, queue ef, queue wfq, and wred) to common physical interfaces, PVCs, and VT interfaces used by Multilink PPP (MP).
Usage guidelines You can only edit or remove the configurations in a disabled user profile. Disabling a user profile logs out the users that are using the user profile. The QoS policy applied to a user profile takes effect when the user-profile is activated and the users are online.
qos vlan-policy Use qos vlan-policy to apply a QoS policy to VLANs. Use undo qos vlan-policy to remove the QoS policy applied to VLANs. Syntax qos vlan-policy policy-name vlan vlan-id-list { inbound | outbound } undo qos vlan-policy [ policy-name ] vlan vlan-id-list { inbound | outbound } Views System view Default command level...
Page 73
Usage guidelines If no direction is specified, the statistics of the QoS policies in both directions of the VLAN are cleared. Examples # Clear the statistics of QoS policies applied to VLAN 2. <Sysname> reset qos vlan-policy vlan 2...
Priority mapping commands The commands in this chapter are supported only on SAP modules operating in bridge mode. Priority mapping table commands display qos map-table Use display qos map-table to display the configuration of a priority mapping table. Syntax display qos map-table [ dot1p-dp | dot1p-lp | dscp-dot1p | dscp-dp | dscp-dscp ] [ | { begin | exclude | include } regular-expression ] Views Any view...
# Display the configuration information of the 802.1p-to-drop mapping table. <Sysname> display qos map-table dot1p-dp MAP-TABLE NAME: dot1p-dp TYPE: pre-define IMPORT EXPORT MAP-TABLE NAME: dot1p-dp TYPE: pre-define IMPORT EXPORT Table 22 Command output Field Description MAP-TABLE NAME Name of the priority mapping table. TYPE Type of the priority mapping table.
Syntax import import-value-list export export-value undo import { import-value-list | all } Views Priority mapping table view Default command level 2: System level Parameters import-value-list: List of input values. export-value: Output value. all: Deletes all the mappings in the priority mapping table. Usage guidelines In the DSCP-to-drop mapping table, the router does not support mapping DSCP values to drop precedence 1.
Usage guidelines For the DSCP-to-drop mapping table, the router does not support mapping DSCP values to drop precedence 1. Examples # Enter the inbound 802.1p-to-drop mapping table view. <Sysname> system-view [Sysname] qos map-table inbound dot1p-dp [Sysname-maptbl-dot1p-dp] Related commands display qos map-table Port priority commands qos priority Use qos priority to change the port priority of an interface.
Per-port priority trust mode commands display qos trust interface Use display qos trust interface to display priority trust mode and port priority information on an interface. Syntax display qos trust interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view...
qos trust Use qos trust to configure an interface to use a particular priority field carried in packets for priority mapping. Use undo qos trust to restore the default priority trust mode. Syntax qos trust dscp undo qos trust Default No trusted packet priority type is configured.
Traffic policing, GTS, and rate limit commands Traffic policing commands display qos car interface Use display qos car interface to display the CAR settings and operational statistics on a specified interface. Syntax display qos car interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view...
: 0(Packets) 0(Bytes) Direction: Outbound Rule(s): If-match ACL 2002 CIR 10 (kbps), CBS 1875 (byte), EBS 0 (byte) Green Action: pass Red Action : discard Green : 0(Packets) 0(Bytes) : 0(Packets) 0(Bytes) Table 24 Command output Field Description Interface Interface name, including interface type and interface number. Direction Direction in which traffic policing is applied.
Usage guidelines If no carl-index is specified, this command displays information about all the CAR lists. Examples # Display the rule indexed 1 in the CARL. <Sysname> display qos carl 1 Current CARL Configuration: List Params ------------------------------------------------------ MAC Address 0001-0001-0001 Table 25 Command output Field Description...
ebs excess-burst-size: EBS in bytes. The default is 0. green: Action conducted to packets when the traffic rate conforms to CIR. The default is pass. red: Action conducted to packets when the traffic rate exceeds CIR. The default is discard. action: Action conducted to packets: continue: Continues to process the packet using the next CAR policy.
Page 84
Syntax qos carl carl-index { precedence precedence-value | mac mac-address | mpls-exp mpls-exp-value | dscp dscp-list | { destination-ip-address | source-ip-address } { subnet ip-address mask-length | range start-ip-address to end-ip-address } [ per-address [ shared-bandwidth ] ] } undo qos carl carl-index Views System view Default command level...
To perform rate limiting for a single IP address, use the qos car acl command in interface view. When you apply an IP network segment-based CAR list to an interface with the qos car command, the CIR you defined takes different meanings depending on the configuration of the per-address keyword and the shared-bandwidth keyword for the CAR list.
Page 86
Syntax display qos gts interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level 1: Monitor level Parameters interface-type interface-number: Specifies an interface by its type and number. |: Filters command output by specifying a regular expression.
Field Description Queue Length Number of packets that the buffer can hold. Queue Number of packets in the buffer. Size Passed Number and bytes of the packets that have passed. Discarded Number and bytes of dropped packets. Delayed Number and bytes of delayed packets. qos gts Use qos gts to set GTS parameters for a specific class of traffic or all the traffic on the interface or port group.
Usage guidelines The qos gts any, qos gts acl, and qos gts queue commands are mutually exclusive with one another. GTS for software forwarding does not support IPv6. Examples # Shape the packets matching ACL 2001 on GigabitEthernet 1/0/1. The GTS parameters are as follows: CIR is 200 kbps, CBS is 50000 bytes, EBS is 0, and the maximum buffer queue length is 100.
<Sysname> display qos lr interface Interface: GigabitEthernet1/0/1 Direction: Outbound CIR 10 (kbps), CBS 1875 (byte), EBS 0 (byte) Passed : 0(Packets) 0(Bytes) Delayed: 0(Packets) 0(Bytes) Active Shaping: NO Table 27 Command output Field Description Interface Interface type and interface number. Direction Direction in which the rate limit configuration is applied: inbound or outbound.
Examples # Limit the rate of outgoing packets on GigabitEthernet 1/0/1, with CIR 20 kbps, CBS 2000 bytes, and EBS 0. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] qos lr outbound cir 20 cbs 2000 ebs 0 Packet resequencing commands qos resequencing Use qos resequencing to enable packet resequencing on an interface.
Field Description Bottom Bottom priority queue. Related commands qos pq display qos pql Use display qos pql to display the configuration information of a PQ list or all the PQ lists. Syntax display qos pql [ pql-number ] [ | { begin | exclude | include } regular-expression ] Views Any view Default command level...
Use undo qos pq to restore the default. Syntax qos pq pql pql-index undo qos pq Default The congestion management policy of an interface is FIFO. Views Interface view, PVC view Default command level 2: System level Parameters pql: Specifies a PQ list. pql-index: PQ list index in the range of 1 to 16.
Views System view Default command level 2: System level Parameters pql-index: PQ list index in the range of 1 to 16. top, middle, normal, bottom: Corresponds to the four queues in PQ in descending priority order. The default queue is the normal queue. Usage guidelines If this command is executed multiple times with the same pql-index argument, the new configuration overrides the previous one.
queue-key key-value Table 29 Values of the argument and the argument queue-key key-value Description ACL number from 2000 to 3999 IP packets matching the specified ACL are enqueued. fragments — Fragmented IP packets are enqueued. greater-than Length from 0 to 65535 IP packets larger than a specified value are enqueued.
Parameters pql-index: PQL index in the range of 1 to 16. queue-length: Queue length for the specified queue, in the range of 1 to 1024. 20 for the top queue 20 for the top queue • 40 for the middle queue •...
Usage guidelines If no interface is specified, this command displays the CQ configuration and statistics of all the interfaces. If a VT interface is specified, this command displays QoS CQ information of all VA interfaces inheriting the VT interface, but does not display QoS information about the VT interface. Examples # Display the CQ configuration and statistics of GigabitEthernet 1/0/1.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression.
queue, and the matching process is over. If the packet matches no rule in the CQ list, it is allocated to the default queue. You must enable the rate limit function for the queuing function to take effect on these interfaces: tunnel interfaces, subinterfaces, Layer 3 aggregate interfaces, HDLC link bundle interfaces, RPR logical interfaces, and VT interfaces configured with PPPoE, PPPoA, or PPPoEoA.
Related commands qos cql protocol • qos cql queue serving • • qos cql queue queue-length qos cq • qos cql protocol Use qos cql protocol to assign a custom queue for IP packets that match a certain criterion. Use undo qos cql protocol to delete the match criterion. Syntax qos cql cql-index protocol ip [ queue-key key-value ] queue queue-number undo qos cql cql-index protocol ip [ queue-key key-value ]...
Usage guidelines The system matches a packet with match criteria of a CQ list in the order configured. When the packet matches a certain criterion, it is allocated to the queue and the matching process is over. You can execute this command multiple times with the same cql-index argument to create multiple match criteria for IP packets.
qos cql queue serving • • qos cq qos cql queue serving Use qos cql queue serving to set the byte count for a custom queue on a CQ list. Use undo qos cql queue serving to restore the default. Syntax qos cql cql-index queue queue-number serving byte-count undo qos cql cql-index queue queue-number serving...
Page 104
Default command level 1: Monitor level Parameters interface-type interface-number: Specifies an interface by its type and number. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
qos wfq Use qos wfq to apply WFQ to an interface or modify WFQ parameters on an interface/PVC. Use undo qos wfq to restore the default congestion management mechanism FIFO on the interface/PVC. Syntax qos wfq [ dscp | precedence ] [ queue-length max-queue-length [ queue-number total-queue-number ] ] undo qos wfq Default The weight is based on IP precedence.
Maximum available bandwidth of the interface, in the range of 1 to 10000000 kbps. Usage guidelines HP recommends that you configure the maximum available bandwidth to be smaller than the actual available bandwidth of a physical interface or logical link.
0 kbps for the other virtual interfaces such as tunnel interfaces, Layer 3 aggregate interfaces, HDLC • link bundle interfaces, and RPR logical interfaces. On an MP-group interface or MFR interface configured with the qos max-bandwidth command, AF and EF perform queue bandwidth check and calculation based on the bandwidth specified with the qos max-bandwidth command.
Examples # Set the maximum reserved bandwidth to 70% of available bandwidth on interface Serial 2/0/1. <Sysname> system-view [Sysname] interface Serial2/0/1 [Sysname-Serial2/0/1] qos reserved-bandwidth pct 70 queue af Use queue af to enable assured-forwarding (AF) and set the minimum guaranteed bandwidth for it. Use undo queue af to delete the configuration.
queue ef Use queue ef to configure expedited forwarding (EF) and assign the maximum bandwidth for it. Use undo queue ef to delete the configuration. Syntax queue ef bandwidth { bandwidth [ cbs burst ] | pct percentage [ cbs-ratio ratio ] } undo queue ef Views Traffic behavior view...
queue wfq Use queue wfq to configure WFQ in the traffic behavior. Use undo queue wfq to delete the configuration. Syntax queue wfq [ queue-number total-queue-number ] undo queue wfq Views Traffic behavior view Default command level 2: System level Parameters queue-number total-queue-number: Specifies the number of fair queues, which can be 16, 32, 64, 128, 256, 512, 1024, 2048, or 4096.
Default Tail drop is used. Views Traffic behavior view Default command level 2: System level Parameters queue-length: Maximum queue length in the range of 1 to 4096. Usage guidelines Before configuring this command, make sure that the queue af command or the queue wfq command has been configured.
Parameters dscp: Uses the DSCP value for calculating drop probability of a packet. ip-precedence: Uses the IP precedence value for calculating drop probability of a packet. This keyword is the default. Usage guidelines You can configure this command only after you have configured the queue af command or the queue wfq command.
Usage guidelines Before configuring this command, make sure the DSCP-based WRED drop is enabled using the wred command. Removing the wred command configuration removes the wred dscp command configuration as well. The drop-related parameters are removed if the configuration set with the queue af command or the queue wfq command is removed.
Usage guidelines Before configuring this command, make sure the IP precedence-based WRED drop is enabled using the wred command. The wred ip-precedence command configuration is removed when the wred command configuration is removed. The drop-related parameters are removed if the queue af command configuration or the queue wfq command configuration is removed.
<Sysname> system-view [Sysname] traffic behavior database [Sysname-behavior-database] queue af bandwidth 200 [Sysname-behavior-database] wred ip-precedence [Sysname-behavior-database] wred weighting-constant 6 Related commands qos policy • • traffic behavior classifier behavior • RTP queuing commands display qos rtpq interface Use display qos rtpq interface to display the information of the current IP RTP priority queue, including the queue length and the number of dropped packets on an interface or all interfaces.
Table 34 Command output Field Description Interface Interface type and interface number. Output queue Current output queue. Size Number of packets in the queue. Historical maximum number of packets in the queue. Outputs Number of sent packets. Discards Number of dropped packets. qos rtpq Use qos rtpq to enable RTP queuing for RTP packets with even UDP destination port numbers in the specified range on the interface/PVC.
This feature can control the number of packets sent to such queues based on the number of tokens. HP recommends that you set the token-number to 1 on an interface for FTP transmission. Examples # Set the number of QoS tokens to 1.
[Sysname-Serial2/0/1] shutdown [Sysname-Serial2/0/1] undo shutdown Packet information pre-extraction commands qos pre-classify Use qos pre-classify to enable packet information pre-extraction on an interface. Use undo qos pre-classify to disable packet information pre-extraction on an interface. Syntax qos pre-classify undo qos pre-classify Default Packet information pre-extraction is disabled.
Hardware congestion management commands The commands in this chapter are supported only on SAP modules operating in bridge mode. SP queuing commands display qos sp Use display qos sp interface to view the strict priority (SP) queuing configuration of an interface. Syntax display qos sp interface [ interface-type interface-number ] [ | { begin | exclude | include } regular-expression ]...
Related commands qos sp qos sp Use qos sp to configure SP queuing on an interface. Use undo qos sp to restore the default. Syntax qos sp undo qos sp Default SP queuing is used. Views Interface view, port group view Default command level 2: System level Parameters...
Default command level 1: Monitor level Parameters interface-type interface-number: Specifies an interface by its type and number. |: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression.
Use undo qos wrr to disable WRR queuing. Syntax qos wrr undo qos wrr Default An interface uses SP queuing. Views Interface view, port group view Default command level 2: System level Parameters None. Usage guidelines Settings in interface view take effect on the current interface. Settings in port group view take effect on all ports in the port group.
sp: Specifies strict priority (SP) queuing. Usage guidelines This command is available only on a WRR-enabled interface. Queues in the SP group are scheduled with SP. The SP group has strict higher scheduling priority than the WRR groups. Settings in Ethernet interface view take effect on the current interface only. Settings in port group view take effect on all the ports in the port group.
Queue Weight Usage guidelines Settings in interface view take effect on the current interface. Settings in port group view take effect on all ports in the port group. Examples # Enable packet-based WRR queuing on GigabitEthernet 1/0/1, and assign queue 0, with the scheduling weight 100, to WRR group 1.
Usage guidelines If no interface is specified, this command displays the WFQ configuration of all the interfaces. Examples # Display the WFQ configuration of GigabitEthernet 1/0/1. <Sysname> display qos wfq interface gigabitethernet 1/0/1 Interface: GigabitEthernet1/0/1 Output queue: Hardware weighted fair queue Queue ID Weight Min-Bandwidth...
min bandwidth-value: Sets the minimum guaranteed bandwidth in kbps for a queue when the port is congested. Usage guidelines Settings in interface view take effect on the current interface. Settings in port group view take effect on all ports in the port group. Examples # Set the minimum guaranteed bandwidth to 100 kbps for queue 0 on GigabitEthernet 1/0/1.
Use undo qos wfq weight to restore the default WFQ settings of a queue on an interface. Syntax qos wfq queue-id weight schedule-value undo qos wfq queue-id weight Views Interface view, port group view Default command level 2: System level Parameters queue-id: Specifies a queue by its ID in the range of 0 to 7.
Default command level 2: System level Parameters bandwidth: Specifies the minimum guaranteed bandwidth in the range of 8 to 10000000 kbps. Usage guidelines When associating AF and EF traffic behaviors with classes in a policy, make sure that the total bandwidth assigned in the behaviors is no more than the maximum available bandwidth of the interface where the policy is to be applied.
Examples # Enable EF, and set the maximum bandwidth to 200 kbps and CBS to 5000 bytes in traffic behavior database. <Sysname> system-view [Sysname] traffic behavior database [Sysname-behavior-database] queue ef bandwidth 200 cbs 5000 Related commands qos policy • traffic behavior •...
Page 131
Default command level 2: System level Parameters dscp: Uses DSCP for calculating drop probability for a packet. ip-precedence: Uses IP precedence for calculating drop probability for a packet. If neither dscp nor ip-precedence is specified, IP precedence applies by default. Usage guidelines You can configure a WRED drop action only after you have configured the queue af command or the queue wfq command.
Table 39 Command output Field Description Interface Interface type and interface number. Exponent WRED exponent for average queue length calculation. Precedence IP precedence. Random discard Number of packets randomly dropped. Tail discard Number of packets dropped using tail drop. Low limit Lower limit for a queue.
Use undo qos wred ip-precedence to restore the default. Syntax qos wred ip-precedence ip-precedence low-limit low-limit high-limit high-limit discard-probability discard-prob undo qos wred ip-precedence ip-precedence Views Interface view, PVC view Default command level 2: System level Parameters ip-precedence precedence: IP precedence value in the range of 0 to 7. low limit low-limit: Specifies the lower WRED limit in number of packets.
Views Interface view, PVC view Default command level 2: System level Parameters exponent: Exponent for average queue length calculation, in the range of 1 to 16. This argument is 9 by default. Usage guidelines Before this configuration, enable WRED on the interface/PVC with the qos wred enable command first. Examples # Set the exponent for the average queue length calculation to 6 on GigabitEthernet 1/0/1.
Usage guidelines If no WRED table name is specified, this command displays the configuration of all the WRED tables. Examples # Display the configuration of WRED table 1. <Sysname> display qos wred table 1 Table Name: 1 Table Type: Queue based WRED QID: gmin gmax...
undo qos wred table table-name Default No global WRED table is created. Views System view Default command level 2: System level Parameters queue: Creates a queue-based table. Packets are dropped based on the queue when congestion occurs. table table-name: Specifies a name for the table. Usage guidelines A WRED table in use cannot be removed.
drop-level drop-level: Drop level. If this argument is not specified, the subsequent configuration takes effect on the packets in the queue regardless of the drop level. low limit low-limit: Specifies the lower WRED limit in number of packets. The value range for the low-limit argument is 1 to 1024, and the default is 10.
MPLS QoS commands if-match mpls-exp Use if-match mpls-exp to define an MPLS EXP-based match criterion. Use undo if-match mpls-exp to remove the match criterion. Syntax if-match [ not ] mpls-exp exp-value-list undo if-match [ not ] mpls-exp exp-value-list Views Traffic class view Default command level 2: System level Parameters...
queue queue: Specifies a custom queue by its number in the range of 0 to 16. exp-value-list: List of EXP values in the range of 0 to 7. You can enter up to eight EXP values for this argument. Usage guidelines This command can be executed multiple times with the same cql-index argument to create multiple classification rules for the CQ list.
Related commands qos pql protocol remark mpls-exp Use remark mpls-exp to remark the EXP value for MPLS packets. Use undo remark mpls-exp to remove the configuration. Syntax remark mpls-exp exp-value undo remark mpls-exp Views Traffic behavior view Default command level 2: System level Parameters exp-value: EXP value in the range of 0 to 7.
FR QoS configuration commands Use cbs to set the CBS for the FR PVCs. Use undo cbs to restore the default. Syntax cbs [ inbound | outbound ] committed-burst-size undo cbs [ inbound | outbound ] Views FR class view Default command level 2: System level Parameters...
Syntax cir committed-information-rate undo cir Views FR class view Default command level 2: System level Parameters committed-information-rate: Minimum CIR in the range of 1000 to 45000000 bps. The CIR is 56000 bps by default. Usage guidelines CIR is the minimum transmit rate that a PVC can provide. When congestion occurs to the network, the user can still send data at the rate of CIR.
Parameters inbound: Sets the CIR ALLOW for the incoming packets. This argument is available when FR traffic policing is enabled on interfaces. outbound: Sets the CIR ALLOW for the outgoing packets. This argument is available when FR traffic policing is enabled on interfaces. committed-information-rate: CIR ALLOW in the range of 1000 to 45000000 bps.
queue-percentage: Threshold for network congestion, expressed in the usage percentage of PVC queues (the percentage of the current PVC queue length to the total queue length). The value range for this argument is 1 to 100, and the default is 7. Usage guidelines When the percentage of the current PVC queue length to the total PVC queue length exceeds the set threshold for congestion, congestion occurs to the PVCs.
Usage guidelines For this command, you can specify an FR class name, or specify a primary interface. However, you cannot specify a subinterface. Examples # Display the mapping relationship between Serial 2/0/1 and FR classes. <Sysname> display fr class-map interface Serial 2/0/1 Serial2/0/1 fr-class ts1 Serial2/0/1.1...
Page 151
Parameters interface interface-type interface-number: Displays the FR fragmentation information about an interface specified by its type and number. dlci-number: Displays the FR fragmentation information for an DLCI specified by its number in the range of 16 to 1007. With this argument specified, this command displays the detailed fragmentation information.
Table 43 Command output Field Description Type Fragment type, which can only be FRF12. Size Fragment size in bytes. Pre-fragment Number of packets to be fragmented. Fragmented Number of fragmented packets. Assembled Number of assembled fragments. Dropped Number of dropped fragments. Out-of-sequence pkts Number of out-of-sequence fragments.
<Sysname> display fr switch-table all Total PVC switch records:2 PVC-Name Status Interface(Dlci) <-----> Interface(Dlci) Inactive Pos4/1/0(50) Pos4/1/1(50) Active Pos5/2/1(40) Pos5/2/3(50) Table 44 Command output Field Description PVC-Name Name of a switching PVC. Status Connection state of the frame relay switching link. The first interface represents a local interface, and the second interface represents a Interface peer interface.
[Sysname] fr class test1 [Sysname-fr-class-test1] ebs 32000 Related commands • cir allow • • fifo queue-length Use fifo queue-length to set the FIFO queue length for FR PVCs. Use undo fifo queue-length to restore the default. Syntax fifo queue-length queue-length undo fifo queue-length Views FR class view...
Default No FR class is created. Views System view Default command level 2: System level Parameters class-name: Name of an FR class, a string of 1 to 30 characters. Usage guidelines The FR class parameters do not take effect until you associate the FR class with an interface or PVC and enable the FR QoS function on the interface.
queue-percentage: Congestion threshold, expressed in the interface queue utilization rate, which means the percentage of the current interface queue length to the total queue length. The value range for this argument is 1 to 100, and the default is 100. Usage guidelines This command is similar to the congestion-threshold command.
Examples # Apply DE rule list 3 to DLCI 100 of Serial 2/0/1. <Sysname> system-view [Sysname]interface Serial 2/0/1 [Sysname-Serial2/0/1] fr dlci 100 [Sysname-Serial2/0/1] fr de del 3 dlci 100 Related commands • fr del inbound-interface fr del protocol • fr del inbound-interface Use fr del inbound-interface to configure an interface-based DE rule list.
fr del protocol Use fr del protocol ip to configure an IP protocol-based DE rule list. The DE flag bits of FR packets encapsulated with the IP packets matching the specific rule are set to 1. Use undo fr del protocol ip to remove the specific DE rules from the DE rule list. Syntax fr del list-number protocol ip [ acl acl-number | fragments | greater-than bytes | less-than bytes | tcp ports | udp ports ]...
<Sysname> system-view [Sysname] fr del 1 protocol ip Related commands fr de del • fr del inbound-interface • fr traffic-policing Use fr traffic-policing to enable FR traffic policing. Use undo fr traffic-policing to disable FR traffic policing. Syntax fr traffic-policing undo fr traffic-policing Views FR interface view, MFR interface view...
Views FR interface view, MFR interface view Default command level 2: System level Usage guidelines FRTS is applied to the outgoing interfaces and are usually applied to the DCE of an FR network. Examples # Enable FRTS on Serial 2/0/1. <Sysname>...
Related commands fr class fr-class Use fr-class to associate an FR class with the current FR PVC or FR interface. Use undo fr-class to cancel the association. Syntax fr-class class-name undo fr-class class-name Default No FR class is associated with an FR PVC or an FR interface. Views FR DLCI view, FR interface view Default command level...
Syntax pq pql pql-index undo pq Default FR PVCs adopt FIFO queuing. Views FR class view Default command level 2: System level Parameters pql-index: PQL index in the range of 1 to 16. Examples # Apply PQL 10 to the FR class test1. <Sysname>...
top: Specifies the top queue. Usage guidelines PVC PQ queues include the top queue, the middle queue, the normal queue, and the bottom queue, in descending priority order. The packets of a given PVC can only be assigned to a specific queue. Examples # Assign packets from the PVCs associated with the FR class test1 to the top queue of PVC PQ.
<Sysname> system-view [Sysname] fr class test1 [Sysname-fr-class-test1] rtpq start-port 16383 end-port 16384 bandwidth 20 traffic-shaping adaptation Use traffic-shaping adaptation to enable FRTS adaptation. Use undo traffic-shaping adaptation to disable this function. Syntax traffic-shaping adaptation { becn percentage | interface-congestion number } undo traffic-shaping adaptation { becn | interface-congestion } Default FRTS adaptation is enabled for traffic with the BECN flag, and 25% of the total traffic is regulated every...
Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals For related documentation, navigate to the Networking section, and select a networking category. •...
Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
Page 167
Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Index A B C D E F G I P Q R S T W display qos policy interface,57 display qos pq interface,85 accounting,42 display qos pql,87 acl,1 display qos rtpq interface,1 10 accelerate,2 display qos sp,1 14 copy,3 display qos trust interface,72 ipv6,4 display qos...