HP 6125XLG Command Reference Manual

Blade switch acl and qos command reference
Table of Contents

Advertisement

HP 6125XLG Blade Switch
ACL and QoS

Command Reference

Part number: 5998-3737
Software version: Release 2306
Document version: 6W100-20130912

Advertisement

Table of Contents
loading

Summary of Contents for HP 6125XLG

  • Page 1: Command Reference

    HP 6125XLG Blade Switch ACL and QoS Command Reference Part number: 5998-3737 Software version: Release 2306 Document version: 6W100-20130912...
  • Page 2 HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
  • Page 3: Table Of Contents

    Contents ACL commands ···························································································································································· 1   acl ·············································································································································································· 1   acl copy ····································································································································································· 2   acl logging interval ·················································································································································· 3   acl name ···································································································································································· 4   description ································································································································································· 4   display acl ································································································································································· 5   display packet-filter ·················································································································································· 6   display packet-filter statistics ···································································································································...
  • Page 4 display qos policy control-plane ·························································································································· 54   display qos policy control-plane pre-defined ····································································································· 56   display qos policy global ····································································································································· 56   display qos policy interface ································································································································· 58   display qos vlan-policy ········································································································································· 59   qos apply policy (interface view, control plane view) ······················································································ 61  ...
  • Page 5 Aggregate CAR commands ······································································································································· 92   car name ································································································································································ 92   display qos car name ··········································································································································· 92   qos car ···································································································································································· 93   reset qos car name ················································································································································ 95   Data buffer commands ·············································································································································· 96   buffer apply ···························································································································································· 96  ...
  • Page 6: Acl Commands

    ACL commands Use acl to create an ACL, and enter its view. If the ACL has been created, you directly enter its view. Use undo acl to delete the specified or all ACLs. Syntax acl [ ipv6 ] number acl-number [ name acl-name ] [ match-order { auto | config } ] undo acl [ ipv6 ] { all | name acl-name | number acl-number } Default No ACL exists.
  • Page 7: Acl Copy

    You can change the match order only for ACLs that do not contain any rules. Examples # Create IPv4 basic ACL 2000, and enter its view. <Sysname> system-view [Sysname] acl number 2000 [Sysname-acl-basic-2000] # Create IPv4 basic ACL 2001 with the name flow, and enter its view. <Sysname>...
  • Page 8: Acl Logging Interval

    4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the ipv6 keyword is • specified. name dest-acl-name: Assigns a unique name to the ACL you are creating. The dest-acl-name is a case-insensitive string of 1 to 63 characters. It must start with an English letter and to avoid confusion, it cannot be all.
  • Page 9: Acl Name

    When the ipv6 keyword is specified, this command sets the interval for generating and outputting IPv6 packet filtering logs. Examples # Enable the device to generate and output IPv4 packet filtering logs at 10-minute intervals. <Sysname> system-view [Sysname] acl logging interval 10 Related commands •...
  • Page 10: Display Acl

    Use undo description to delete an ACL description. Syntax description text undo description Default An ACL has no description. Views IPv4 basic/advanced ACL view, IPv6 basic/advanced ACL view, Ethernet frame header ACL view Predefined user roles network-admin Parameters text: Configures a description for the ACL, a case-sensitive string of 1 to 127 characters. Examples # Configure a description for IPv4 basic ACL 2000.
  • Page 11: Display Packet-Filter

    all: Displays information about all IPv4 basic, IPv4 advanced, and Ethernet frame header ACLs if you do not specify the ipv6 keyword, or displays information about all IPv6 basic and IPv6 advanced ACLs if you specify the ipv6 keyword. name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to 63 characters.
  • Page 12 Views Any view Predefined user roles network-admin network-operator Parameters interface [ interface-type interface-number ]: Specifies an interface by its type and number. VLAN interfaces are not supported. If no interface is specified, the command displays ACL application information on all interfaces except VLAN interfaces for packet filtering. interface vlan-interface vlan-interface-number: Specifies a VLAN interface by its number.
  • Page 13: Display Packet-Filter Statistics

    display packet-filter statistics Use display packet-filter statistics to display match statistics of ACLs for packet filtering. Syntax display packet-filter statistics interface interface-type interface-number { inbound | outbound } [ [ ipv6 ] { acl-number | name acl-name } ] [ brief ] Views Any view Predefined user roles...
  • Page 14: Display Packet-Filter Statistics Sum

    From 2013-01-01 05:16:55 to 2013-01-01 05:17:30 rule 0 permit source 2.2.2.2 0 rule 5 permit source 192.168.0.0 0.0.0.255 (2 packets) Totally 2 packets, 100% permitted Totally 0 packets, 0% denied Default action: Deny Table 3 Command output Field Description Interface Interface to which the ACL applies.
  • Page 15 Parameters inbound: Displays the statistics in the inbound direction. outbound: Displays the statistics in the outbound direction. acl-number: Specifies the number of an ACL: 2000 to 2999 for IPv4 basic ACLs if the ipv6 keyword is not specified and for IPv6 basic ACLs if •...
  • Page 16: Display Packet-Filter Verbose

    display packet-filter verbose Use display packet-filter verbose to display application details of ACLs for packet filtering. Syntax display packet-filter verbose interface interface-type interface-number { inbound | outbound } [ [ ipv6 ] { acl-number | name acl-name } ] [ slot slot-number ] Views Any view Predefined user roles...
  • Page 17: Display Qos-Acl Resource

    In-bound policy: ACL 2001, Hardware-count rule 0 permit source 2.2.2.2 0 rule 5 permit source 1.1.1.1 0 Default action: Deny Table 5 Command output Field Description Interface Interface to which the ACL applies. In-bound policy ACL used for filtering incoming traffic. Out-bound policy ACL used for filtering outgoing traffic.
  • Page 18: Packet-Filter

    IFP ACL 2048 1536 IFP Meter 1024 IFP Counter 1024 EFP ACL 1024 1018 EFP Meter EFP Counter Table 6 Command output Field Description Interfaces Interface range for the resource. Resource type: • VFP ACL—ACL rules for local QoS ID remarking before Layer 2 forwarding •...
  • Page 19: Packet-Filter Default Deny

    3000 to 3999 for IPv4 advanced ACLs s if the ipv6 keyword is not specified and for IPv6 advanced • ACLs if the ipv6 keyword is specified. 4000 to 4999 for Ethernet frame header ACLs. This entry is not displayed if the ipv6 keyword is •...
  • Page 20: Reset Acl Counter

    Usage guidelines The packet filter applies the default action to all ACL applications for packet filtering. The default action appears in the display command output for packet filtering. Examples # Set the packet filter default action to deny. <Sysname> system-view [Sysname] packet-filter default deny Related commands display packet-filter...
  • Page 21: Reset Packet-Filter Statistics

    Related commands display acl reset packet-filter statistics Use reset packet-filter statistics to clear the match statistics (including the accumulated statistics) of ACLs for packet filtering. Syntax reset packet-filter statistics interface [ interface-type interface-number ] { inbound | outbound } [ [ ipv6 ] { acl-number | name acl-name } ] Views User view...
  • Page 22: Rule (Ethernet Frame Header Acl View)

    display packet-filter statistics sum • rule (Ethernet frame header ACL view) Use rule to create or edit an Ethernet frame header ACL rule. Use undo rule to delete an Ethernet frame header ACL rule or some attributes in the rule. Syntax rule [ rule-id ] { deny | permit } [ cos vlan-pri | counting | dest-mac dest-address dest-mask | { lsap lsap-type lsap-type-mask | type protocol-type protocol-type-mask } | source-mac source-address...
  • Page 23: Rule (Ipv4 Advanced Acl View)

    source-mac source-address source-mask: Matches a source MAC address range. The source-address argument represents a source MAC address, and the sour-mask argument represents a mask in the H-H-H format. time-range time-range-name: Specifies a time range for the rule. The time-range-name argument is a case-insensitive string of 1 to 32 characters.
  • Page 24 undo rule rule-id [ { { ack | fin | psh | rst | syn | urg } * | established } | counting | destination | destination-port | { dscp | { precedence | tos } * } | fragment | icmp-type | logging | source | source-port | time-range | vpn-instance ] * Default An IPv4 advanced ACL does not contain any rule.
  • Page 25 Parameters Function Description The tos argument can be a number in the range of 0 to 15, or in words: max-reliability (2), max-throughput tos tos Specifies a ToS preference. (4), min-delay (8), min-monetary-cost (1), or normal (0). The dscp argument can be a number in the range of 0 to 63, or in words: af11 (10), af12 (12), af13 (14), af21 (18), af22 (20), af23 (22), af31 (26), af32 (28), af33 dscp dscp...
  • Page 26 Parameters Function Description { ack ack-value Parameters specific to TCP. | fin fin-value | Specifies one or The value for each argument can be 0 (flag bit not set) or 1 (flag bit psh psh-value | more TCP flags set). rst rst-value | including ACK, The TCP flags in a rule are ANDed.
  • Page 27 ICMP message name ICMP message type ICMP message code source-route-failed timestamp-reply timestamp-request ttl-exceeded Usage guidelines When an IPv4 advanced ACL is for QoS traffic classification or packet filtering, do not specify the vpn-instance keyword or specify neq for the operator argument. Within an ACL, the permit or deny statement of each rule must be unique.
  • Page 28: Rule (Ipv4 Basic Acl View)

    Related commands • acl logging interval • • display acl step • time-range • rule (IPv4 basic ACL view) Use rule to create or edit an IPv4 basic ACL rule. Use undo rule to delete an entire IPv4 basic ACL rule or some attributes in the rule. Syntax rule [ rule-id ] { deny | permit } [ counting | fragment | logging | source { source-address source-wildcard | any } | time-range time-range-name | vpn-instance vpn-instance-name ] *...
  • Page 29: Rule (Ipv6 Advanced Acl View)

    configured, the system creates the rule. However, the rule using the time range can take effect only after you configure the timer range. For more information about time range, see ACL and QoS Configuration Guide. vpn-instance vpn-instance-name: Applies the rule to packets in a VPN instance. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
  • Page 30 source-address/source-prefix | any } | source-port operator port1 [ port2 ] | time-range time-range-name | vpn-instance vpn-instance-name ] * undo rule rule-id [ { { ack | fin | psh | rst | syn | urg } * | established } | counting | destination | destination-port | dscp | flow-label | fragment | icmp6-type | logging | routing | hop-by-hop | source | source-port | time-range | vpn-instance ] * Default...
  • Page 31 Table 12 Match criteria and other rule information for IPv6 advanced ACL rules Parameters Function Description source The source-address and source-prefix arguments represent { source-address an IPv6 source address, and prefix length in the range of 1 Specifies a source IPv6 source-prefix | to 128.
  • Page 32 Parameters Function Description The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. vpn-instance Applies the rule to packets vpn-instance-name in a VPN instance. If no VPN instance is specified, the rule applies only to non-VPN packets. If the protocol argument is tcp (6) or udp (17), set the parameters shown in Table Table 13 TCP/UDP-specific parameters for IPv6 advanced ACL rules Parameters...
  • Page 33 Table 15 ICMPv6 message names supported in IPv6 advanced ACL rules ICMPv6 message name ICMPv6 message type ICMPv6 message code echo-reply echo-request err-Header-field frag-time-exceeded hop-limit-exceeded host-admin-prohib host-unreachable neighbor-advertisement neighbor-solicitation network-unreachable packet-too-big port-unreachable redirect router-advertisement router-solicitation unknown-ipv6-opt unknown-next-hdr Usage guidelines If an ACL is for QoS traffic classification: •...
  • Page 34: Rule (Ipv6 Basic Acl View)

    Examples # Create an IPv6 advanced ACL rule to permit TCP packets with the destination port 80 from 2030:5060::/64 to FE80:5060::/96. <Sysname> system-view [Sysname] acl ipv6 number 3000 [Sysname-acl6-adv-3000] rule permit tcp source 2030:5060::/64 destination fe80:5060::/96 destination-port eq 80 # Create IPv6 advanced ACL rules to permit all IPv6 packets but the ICMPv6 packets destined for FE80:5060:1001::/48.
  • Page 35 Syntax rule [ rule-id ] { deny | permit } [ counting | fragment | logging | routing [ type routing-type ] | source { source-address source-prefix | source-address/source-prefix | any } | time-range time-range-name | vpn-instance vpn-instance-name ] * undo rule rule-id [ counting | fragment | logging | routing | source | time-range | vpn-instance ] * Default An IPv6 basic ACL does not contain any rule.
  • Page 36: Rule Comment

    Usage guidelines When an IPv6 basic ACL is for QoS traffic classification or packet filtering, do not specify the vpn-instance or fragment keyword. If the ACL is for outbound QoS traffic classification or packet filtering, do not specify the routing keyword. Within an ACL, the permit or deny statement of each rule must be unique.
  • Page 37: Step

    Parameters rule-id: Specifies an ACL rule ID in the range of 0 to 65534. The ACL rule must already exist. text: Specifies a comment about the ACL rule, a case-sensitive string of 1 to 127 characters. Examples # Create a rule for IPv4 basic ACL 2000, and add a comment about the rule. <Sysname>...
  • Page 38 Related commands display acl...
  • Page 39: Qos Policy Commands

    QoS policy commands Traffic class commands display traffic classifier Use display traffic classifier to display traffic class information. Syntax display traffic classifier user-defined [ classifier-name ] Views Any view Predefined user roles network-admin network-operator Parameters user-defined: Displays user-defined traffic classes. classifier-name: Traffic class name, a case-sensitive string of 1 to 31 characters.
  • Page 40: If-Match

    Field Description Match operator you set for the traffic class. If the operator is AND, the traffic class Operator matches the packets that match all its match criteria. If the operator is OR, the traffic class matches the packets that match any of its match criteria. Rule(s) Match criteria.
  • Page 41 Option Description Matches the 802.1p priority of the customer network. customer-dot1p The dot1p-value&<1-8> argument is a list of 802.1p priority values. An dot1p-value&<1-8> 802.1p priority is in the range of 0 to 7. &<1-8> indicates that you can enter up to eight 802.1p priority values. Matches the customer VLAN IDs (CVLANs).
  • Page 42 customer-dot1p 8021p-list • • destination-mac mac-address dscp dscp-list • ip-precedence ip-precedence-list • • service-dot1p 8021p-list source-mac mac-address • control-plane protocol protocol-name • To create multiple if-match clauses for these match criteria or specify multiple values for the list arguments, specify the operator of the class as OR and use the if-match command multiple times. Defining an ACL-based match criterion •...
  • Page 43 To delete a criterion that matches VLAN IDs, the specified VLAN IDs in the command must be • identical with those defined in the criterion (the sequence can be different). Defining a criterion to match control plane protocols • This criterion cannot coexist with other criteria in a traffic class. Otherwise, the relevant QoS policy cannot be applied correctly.
  • Page 44 [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match acl ipv6 3101 # Define a match criterion for traffic class class1 to match the IPv6 ACL named flow. <Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match acl ipv6 name flow # Define a match criterion for traffic class class1 to match all packets. <Sysname>...
  • Page 45: Traffic Classifier

    # Define a match criterion for traffic class class1 to match packets of the protocols in protocol group normal. <Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match control-plane protocol-group normal traffic classifier Use traffic classifier to create a traffic class and enter traffic class view. Use undo traffic classifier to delete a traffic class.
  • Page 46: Car

    Syntax accounting { byte | packet } undo accounting Default No traffic accounting action is configured. Views Traffic behavior view Predefined user roles network-admin Parameters byte: Counts traffic in bytes. packet: Counts traffic in packets. Examples # Configure a traffic accounting action in traffic behavior database to count traffic in bytes. <Sysname>...
  • Page 47: Display Traffic Behavior

    the product is not an integral multiple of 512, it is rounded up to the nearest integral multiple of 512 that is greater than the product. A default value greater than 256000000 is converted to 256000000. ebs excess-burst-size: Specifies the excess burst size (EBS) in bytes. The value range for the excess-burst-size argument is an integral multiple of 512 between 0 and 256000000, and the default value is 512.
  • Page 48 Views Any view Predefined user roles network-admin network-operator Parameters user-defined: Displays user-defined traffic behaviors. behavior-name: Behavior name, a case-sensitive string of 1 to 31 characters. If no traffic behavior name is specified, this command displays information about all the user-defined traffic behaviors. Examples # Display information about user-defined traffic behaviors.
  • Page 49: Filter

    Field Description None No other traffic behavior is configured. filter Use filter to configure a traffic filtering action in a traffic behavior. Use undo filter to delete a traffic filtering action from a traffic behavior. Syntax filter { deny | permit } undo filter Default No traffic filtering action is configured.
  • Page 50: Redirect

    Parameters vlan-id vlan-id: Specifies the ID of the VLAN tag to be added. The vlan-id argument is in the range of 1 to 4094. dot1p dot1p-cos: Sets an 802.1p priority value for the VLAN tag to be added, in the range of 0 to 7. If you do not specify this option, the 802.1p priority value for the outer VLAN tag is the same as the inner VLAN tag.
  • Page 51: Remark Customer-Vlan-Id

    [Sysname-behavior-database] redirect interface ten-gigabitethernet1/1/5 Related commands • classifier behavior qos policy • • traffic behavior remark customer-vlan-id Use remark customer-vlan-id to add a CVLAN marking action to a traffic behavior. Use undo remark customer-vlan-id to remove the action from the traffic behavior. Syntax remark customer-vlan-id vlan-id undo remark customer-vlan-id...
  • Page 52: Remark Drop-Precedence

    Predefined user roles network-admin Parameters green: Specifies green packets. red: Specifies red packets. yellow: Specifies yellow packets. dot1p-value: Specifies the 802.1p priority to be marked for packets, in the range of 0 to 7. customer-dot1p-trust: Copies the 802.1p priority value in the inner VLAN tag to the outer VLAN tag after the QoS policy is applied to an interface.
  • Page 53: Remark Dscp

    Usage guidelines The command applies to only incoming traffic. Examples # Configure traffic behavior database to mark matching traffic with drop priority 2. <Sysname> system-view [Sysname] traffic behavior database [Sysname-behavior-database] remark drop-precedence 2 remark dscp Use remark dscp to configure a DSCP marking action. Use undo remark dscp to restore the default.
  • Page 54: Remark Ip-Precedence

    Keyword DSCP value (binary) DSCP value (decimal) af33 011110 af41 100010 af42 100100 af43 100110 001000 010000 011000 100000 101000 110000 111000 101110 Examples # Configure traffic behavior database to mark matching traffic with DSCP 6. <Sysname> system-view [Sysname] traffic behavior database [Sysname-behavior-database] remark dscp 6 remark ip-precedence Use remark ip-precedence to configure an IP precedence marking action.
  • Page 55: Remark Local-Precedence

    [Sysname-behavior-database] remark ip-precedence 6 remark local-precedence Use remark local-precedence to configure a local precedence marking action. Use undo remark local-precedence to delete the action. Syntax remark [ green | red | yellow ] local-precedence local-precedence-value undo remark [ green | red | yellow ] local-precedence Default No local precedence marking action is configured.
  • Page 56: Remark Service-Vlan-Id

    Parameters local-id-value: Specifies the local QoS ID to be marked for packets, in the range of 1 to 4095. The switch supports local QoS IDs in the range of 1 to 3999. Usage guidelines Remarking local QoS IDs combines different traffic classes into one new class, which is indicated by a local QoS ID.
  • Page 57: Qos Policy Commands

    Syntax traffic behavior behavior-name undo traffic behavior behavior-name Default No traffic behavior exists. Views System view Predefined user roles network-admin Parameters behavior-name: Sets a traffic behavior name, a case-sensitive string of 1 to 31 characters. Examples # Create a traffic behavior named behavior1. <Sysname>...
  • Page 58: Control-Plane

    mode dcbx: Specifies that the class-behavior association applies only to the Data Center Bridging Exchange Protocol (DCBX). For more information about DCBX, see Layer 2—LAN Switching Configuration Guide. Usage guidelines A traffic class can associate with only one traffic behavior in a QoS policy. If the specified traffic class or traffic behavior does not exist, the system defines a null traffic class or traffic behavior.
  • Page 59: Display Qos Policy Control-Plane

    Predefined user roles network-admin network-operator Parameters user-defined: Displays user-defined QoS policies. policy-name: Specifies a QoS policy by its name, a case-sensitive string of 1 to 31 characters. If no QoS policy name is specified, this command displays configuration information of all the user-defined QoS policies.
  • Page 60 Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device. The slot-number argument is the member device ID in the IRF fabric. inbound: Displays information about the QoS policy applied to the incoming traffic of the control plane. Examples # Display information about the QoS policy applied to the incoming traffic of the control plane of IRF member device 1.
  • Page 61: Display Qos Policy Control-Plane Pre-Defined

    display qos policy control-plane pre-defined Use display qos policy control-plane pre-defined to display information about the pre-defined QoS policy applied to the control plane. Syntax display qos policy control-plane pre-defined [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters...
  • Page 62 Syntax display qos policy global [ slot slot-number ] [ inbound | outbound ] Views Any view Predefined user roles network-admin network-operator Parameters inbound: Displays information about the inbound global QoS policy. An inbound global QoS policy applies to the incoming traffic globally. outbound: Displays information about the outbound global QoS policy.
  • Page 63: Display Qos Policy Interface

    Filter enable: Permit Marking: Remark dot1p 1 Table 22 Command output Field Description Direction Direction (inbound or outbound ) in which the QoS policy is applied. Green packets Statistics about green packets. Red packets Statistics about red packets. For the output description, see Table 16 Table display qos policy interface...
  • Page 64: Display Qos Vlan-Policy

    Policy: 1 Classifier: 1 Operator: AND Rule(s) : If-match acl 2000 Behavior: 1 Marking: Remark dscp 3 Committed Access Rate: CIR 128 (kbps), CBS 8192 (Bytes), EBS 512 (Bytes) Green action: pass Yellow action: pass Red action: discard Green packets: 0 (Packets) Red packets: 0 (Packets) Classifier: 2 Operator: AND...
  • Page 65 Parameters name policy-name: Displays information about a QoS policy applied to VLANs. The policy-name argument is a case-sensitive string of 1 to 31 characters. vlan vlan-id: Displays information about the QoS policies applied to the VLAN specified by its ID. inbound: Displays information about the QoS policy applied to the incoming traffic of the specified VLAN.
  • Page 66: Qos Apply Policy (Interface View, Control Plane View)

    Remark dot1p 1 Classifier: 3 Operator: AND Rule(s) : -none- Behavior: 3 -none- Table 24 Command output Field Description Direction Direction in which the QoS policy is applied for the VLAN. Green packets Statistics about green packets. Red packets Statistics about red packets. For the output description, see Table 16 Table...
  • Page 67: Qos Apply Policy Global

    [Sysname-cp-slot3] qos apply policy aaa inbound qos apply policy global Use qos apply policy global to apply a QoS policy globally. Use undo qos apply policy global to remove the QoS policy. Syntax qos apply policy policy-name global { inbound | outbound } undo qos apply policy policy-name global { inbound | outbound } Default No QoS policy is applied globally.
  • Page 68: Qos Vlan-Policy

    Predefined user roles network-admin Parameters policy-name: QoS policy name, a case-sensitive string of 1 to 31 characters. Usage guidelines To use the undo qos policy command to delete a QoS policy that has been applied to a certain object, you must first remove it from the object. Examples # Define QoS policy user1.
  • Page 69: Reset Qos Policy Control-Plane

    Examples # Apply the QoS policy test to the incoming traffic of VLAN 200, VLAN 300, VLAN 400, and VLAN 500. <Sysname> system-view [Sysname] qos vlan-policy test vlan 200 300 400 500 inbound reset qos policy control-plane Use reset qos policy control-plane to clear the statistics of the QoS policy applied in a certain direction of a control plane.
  • Page 70: Reset Qos Vlan-Policy

    <Sysname> reset qos policy global inbound reset qos vlan-policy Use reset qos vlan-policy to clear the statistics of the QoS policy applied in a certain direction of a VLAN. Syntax reset qos vlan-policy [ vlan vlan-id ] [ inbound | outbound ] Views User view Predefined user roles...
  • Page 71: Priority Mapping Commands

    Priority mapping commands Priority map commands display qos map-table Use display qos map-table to display the configuration of a priority map. Syntax display qos map-table [ dot1p-dp | dot1p-lp | dscp-dot1p| dscp-dp | dscp-dscp ] Views Any view Predefined user roles network-admin network-operator Parameters...
  • Page 72: Import

    Table 26 Command output Field Description MAP-TABLE NAME Name of the priority map. TYPE Type of the priority map. IMPORT Input values of the priority map. EXPORT Output values of the priority map. import Use import to configure mappings for a priority map. Use undo import to restore the specified or all mappings to the default for a priority map.
  • Page 73: Port Priority Commands

    Syntax qos map-table { dot1p-dp | dot1p-lp | dscp-dot1p| dscp-dp | dscp-dscp } Views System view Predefined user roles network-admin Parameters For the description of keywords, see Table Examples # Enter the 802.1p-drop priority map view. <Sysname> system-view [Sysname] qos map-table dot1p-dp [Sysname-maptbl-dot1p-dp] Related commands display qos map-table...
  • Page 74: Priority Trust Mode Commands

    Related commands display qos trust interface Priority trust mode commands display qos trust interface Use display qos trust interface to display priority trust mode and port priority information on an interface. Syntax display qos trust interface [ interface-type interface-number ] Views Any view Predefined user roles...
  • Page 75 Default The switch does not trust the priority carried in packets. Views Ethernet interface view Predefined user roles network-admin Parameters dot1p: Uses the 802.1p priority in incoming packets for priority mapping. dscp: Uses the DSCP value in incoming packets for priority mapping. Examples # Set the trusted packet priority type to 802.1p priority on Ten-GigabitEthernet 1/1/5.
  • Page 76: Gts And Rate Limit Commands

    GTS and rate limit commands GTS commands display qos gts interface Use display qos gts interface to view generic traffic shaping (GTS) configuration and statistics on a specified interface or all the interfaces. Syntax display qos gts interface [ interface-type interface-number ] Views Any view Predefined user roles...
  • Page 77: Rate Limit Commands

    Syntax qos gts queue queue-number cir committed-information-rate [ cbs committed-burst-size ] undo qos gts queue queue-number Default No GTS parameters are configured on an interface. Views Ethernet interface view Predefined user roles network-admin Parameters queue queue-number: Shapes the packets in the specified queue. The value range for the queue-number argument is 0 to 7.
  • Page 78: Qos Lr

    Parameters interface-type interface-number: Specifies an interface by its type and number. If no interface is specified, this command displays the rate limit configuration on all the interfaces. Examples # Display the rate limit configuration on all the interfaces. <Sysname> display qos lr interface Interface : Ten-GigabitEthernet1/1/5 Direction: Inbound CIR 102400 (kbps), CBS 5120000 (Bytes)
  • Page 79 cbs committed-burst-size: Specifies the CBS in bytes. The value range for the committed-burst-size argument is an integral multiple of 512 between 512 and 134217728. The default value for this argument is the product of 62.5 and the CIR and must be an integral multiple of 512. If the product is not an integral multiple of 512, it is rounded up to the nearest integral multiple of 512 that is greater than the product.
  • Page 80: Congestion Management Commands

    Congestion management commands SP commands display qos sp Use display qos sp interface to view the SP queuing configuration of an interface. Syntax display qos sp interface [ interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface-type interface-number: Specifies an interface by its type and number.
  • Page 81: Wrr Commands

    undo qos sp Default An interface uses the WRR queuing algorithm. Views Ethernet interface view Predefined user roles network-admin Examples # Enable SP queuing on Ten-GigabitEthernet 1/1/5. <Sysname> system-view [Sysname] interface ten-gigabitethernet 1/1/5 [Sysname-Ten-GigabitEthernet1/1/5] qos sp Related commands display qos sp interface WRR commands display qos wrr interface Use display qos wrr interface to display the WRR queuing configuration on an interface.
  • Page 82: Qos Wrr

    Table 31 Command output Field Description Interface Interface type and interface number. Output queue Type of the current output queue. Queue ID ID of a queue. Number of the group a queue is assigned to. By default, all queues belong to group Group Packet-based queue scheduling weight of a queue.
  • Page 83: Qos Wrr { Byte-Count | Weight

    Examples # Enable weight-based WRR queuing on Ten-GigabitEthernet 1/1/5. <Sysname> system-view [Sysname] interface ten-gigabitethernet 1/1/5 [Sysname-Ten-GigabitEthernet1/1/5] qos wrr weight # Enable byte-count WRR queuing on Ten-GigabitEthernet 1/1/5. <Sysname> system-view [Sysname] interface ten-gigabitethernet 1/1/5 [Sysname-Ten-GigabitEthernet1/1/5] qos wrr byte-count Related commands display qos wrr interface qos wrr { byte-count | weight } Use qos wrr { byte-count | weight } to configure the WRR queuing parameters for a queue on an interface.
  • Page 84: Qos Wrr Group Sp

    queue-id Table 32 The number-keyword map for the argument Number Keyword Examples # Enable byte-count WRR queuing on Ten-GigabitEthernet 1/1/5, assign queue 0, with the scheduling weight 10, to WRR group 1, and assign queue 1, with the scheduling weight 5, to WRR group 2. <Sysname>...
  • Page 85: Wfq Commands

    Usage guidelines This command is available only on a WRR-enabled interface. Queues in the SP group are scheduled with SP. The SP group has higher scheduling priority than the WRR group. Queues in a WRR group are scheduled according to user-configured weights, and WRR groups are scheduled at a 1:1 ratio. You must use the qos wrr command to enable WRR queuing before you can configure this command on an interface.
  • Page 86: Qos Bandwidth Queue

    Table 33 Command output Field Description Interface Interface type and interface number. Output queue Type of the current output queue. Queue ID ID of a queue. Number of the group that holds the queue. By default, all queues are in Group group 1.
  • Page 87: Qos Wfq

    Usage guidelines You must use the qos wfq command to enable WFQ before you can configure this command on an interface. The queue-id argument can be either a number or a keyword. Table 32 shows the number-keyword map. Examples # Set the minimum guaranteed bandwidth to 100 kbps for queue 0 on Ten-GigabitEthernet 1/1/5. <Sysname>...
  • Page 88: Qos Wfq { Byte-Count | Weight

    [Sysname-Ten-GigabitEthernet1/1/5] qos wfq byte-count Related commands display qos wfq interface qos wfq { byte-count | weight } Use qos wfq { byte-count | weight } to assign a queue to a WFQ group with a certain scheduling weight. Use undo qos wfq to restore the default. Syntax qos wfq queue-id group { 1 | 2 } { byte-count | weight } schedule-value undo qos wfq queue-id...
  • Page 89: Qos Wfq Group Sp

    qos wfq • qos wfq group sp Use qos wfq group sp to assign a queue to the SP group. Use undo qos wfq group sp to restore the default. Syntax qos wfq queue-id group sp undo qos wfq queue-id Default When WFQ queuing is used on an interface, all the queues are in the WFQ group.
  • Page 90: Congestion Avoidance Commands

    Congestion avoidance commands display qos wred interface Use display qos wred interface to display the WRED configuration and statistics of an interface. Syntax display qos wred interface [ interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface-type interface-number: Specifies an interface by its type and number.
  • Page 91 Parameters name table-name: Specifies the name of the WRED table to be displayed. slot slot-number: Specifies an IRF member device. The slot-number argument is the member device ID in the IRF fabric. Usage guidelines If no WRED table name is specified, this command displays the configuration of all the WRED tables. If no slot number is specified, this command displays information about all queue scheduling profiles.
  • Page 92: Qos Wred Apply

    qos wred apply Use qos wred apply to apply a WRED table on an interface. Use undo qos wred apply to restore the default. Syntax qos wred apply [ table-name ] undo qos wred apply Default No WRED table is applied to an interface, and the tail drop mode is used on an interface. Views Ethernet interface view Predefined user roles...
  • Page 93: Queue

    Predefined user roles network-admin Parameters queue: Creates a queue-based WRED table, which drops packets based on the queue when congestion occurs. table table-name: Specifies a name for the WRED table. Usage guidelines You cannot delete a WRED table in use. To delete it, first remove it from the specified interface. Examples # Create a queue-based WRED table named queue-table1.
  • Page 94: Queue Ecn

    high-limit high-limit: Specifies the upper limit for the average queue length. The high-limit argument is in the range of 0 to 38000 and must be greater than the low-limit argument. discard-probability discard-prob: Specifies the numerator for drop probability calculation in percentage, in the range of 0 to 100.
  • Page 95: Queue Weighting-Constant

    Usage guidelines When both the receiver and sender support ECN, the device can notify the peer end of the congestion status by identifying and setting the ECN flag. ECN avoids deteriorating congestion. Examples # In WRED table queue-table1, enable ECN for queue 1. <Sysname>...
  • Page 96 Related commands display qos wred table • qos wred table •...
  • Page 97: Aggregate Car Commands

    Aggregate CAR commands car name Use car name to reference an aggregate CAR action in a traffic behavior. Use undo car to remove an aggregate CAR action from a traffic behavior. Syntax car name car-name undo car Default No aggregate CAR action is configured in a traffic behavior. Views Traffic behavior view Predefined user roles...
  • Page 98: Qos Car

    network-operator Parameters car-name: Specifies the name of an aggregate CAR action. This argument must start with a letter, and is a case-sensitive string of 1 to 31 characters. If no CAR action is specified, this command displays the configuration and statistics of all the aggregate CAR actions. Examples # Display aggregate CAR configuration.
  • Page 99 Syntax qos car car-name aggregative cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ pir peek-information-rate ] [ green action | red action | yellow action ] * undo qos car car-name Default No aggregate CAR action is configured. Views System view Predefined user roles...
  • Page 100: Reset Qos Car Name

    Usage guidelines An aggregate CAR action takes effect only after it is applied to an interface or referenced in a QoS policy. Examples # Configure the aggregate CAR action aggcar-1, where CIR is 25600, CBS is 512000, and red packets are dropped.
  • Page 101: Data Buffer Commands

    Data buffer commands Inappropriate data buffer changes can cause system problems. Before manually changing data buffer settings, make sure you understand its impact on your device. If the system requires large buffer spaces, HP recommends that you use the burst-mode enable command. This command cannot be configured together with any other command in this chapter except the display buffer command.
  • Page 102: Buffer Queue Shared

    Predefined user roles network-admin Parameters egress: Specifies the egress buffer. slot slot-number: Specifies a member device by its number in an IRF fabric. Without this option, the command applies to all member devices. cell: Specifies cell resources. queue-id: Specifies a queue by its number in the range of 0 to 7. ratio ratio: Specifies the fixed-area space ratio, in percentage.
  • Page 103: Buffer Total-Shared

    cell: Specifies cell resources. queue-id: Specifies a queue by its number in the range of 0 to 7. ratio ratio: Specifies the maximum shared-area space ratio, in percentage. Usage guidelines By default, all queues have the same maximum ratio of the shared area. You can set the shared-area ratio for a queue.
  • Page 104: Burst-Mode Enable

    Views System view Predefined user roles network-admin Parameters egress: Specifies the egress buffer. slot slot-number: Specifies a member device by its number in an IRF fabric. Without this option, the command applies to all member devices. cell: Specifies cell resources. ratio ratio: Specifies the ratio of the shared area, in percentage.
  • Page 105: Display Buffer

    Examples # Enable the Burst function. <Sysname> system-view [Sysname] burst-mode enable display buffer Use display buffer to display buffer configuration. Syntax display buffer [ slot slot-number ] [ queue [ queue-id ] ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies a member device by its number in an IRF fabric.
  • Page 106 Table 38 Command output Field Description Slot ID of an IRF member device. Resource type: cell. Type The switch only supports configuring cell resources. Queue Queue ID in the range of 0 to 7. Egress buffer. Configuration made by the buffer total-shared (Total-shared) command.
  • Page 107: Time Range Commands

    Time range commands display time-range Use display time-range to display time range configuration and status. Syntax display time-range { time-range-name | all } Views Any view Predefined user roles network-admin network-operator Parameters time-range-name: Specifies a time range name, a case-insensitive string of 1 to 32 characters. It must start with an English letter.
  • Page 108 Syntax time-range time-range-name { start-time to end-time days [ from time1 date1 ] [ to time2 date2 ] | from time1 date1 [ to time2 date2 ] | to time2 date2 } undo time-range time-range-name [ start-time to end-time days [ from time1 date1 ] [ to time2 date2 ] | from time1 date1 [ to time2 date2 ] | to time2 date2 ] Default No time range exists.
  • Page 109 Periodic statement in the start-time to end-time days format. A periodic statement recurs periodically • on a day or days of the week. Absolute statement in the from time1 date1 to time2 date2 format. An absolute statement does not • recur.
  • Page 110: Support And Other Resources

    Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.com/support Before contacting HP, collect the following information: Product model names and numbers • Technical support registration number (if applicable) • • Product serial numbers Error messages •...
  • Page 111: Conventions

    Conventions This section describes the conventions used in this documentation set. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which { x | y | ...
  • Page 112 Network topology icons Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 113: Index

    Index A B C D F I N P Q R S T W display qos vlan-policy,59 display qos wfq interface,80 accounting,40 display qos wred interface,85 acl,1 display qos wred table,85 copy,2 display qos wrr interface,76 acl logging interval,3 display qos-acl resource,12 name,4 display...
  • Page 114 qos wfq group sp,84 reset qos car name,95 qos wred apply,87 reset qos policy control-plane,64 qos wred table,87 reset qos policy global,64 wrr,77 reset qos vlan-policy,65 qos wrr { byte-count | weight },78 rule (Ethernet frame header ACL view),17 qos wrr group sp,79 rule (IPv4 advanced ACL view),18...

Table of Contents