Assigning Acl Groups To A Port; Acl Metering And Re-Marking - IBM RackSwitch G8000 Application Manual

Assigning ACL Groups to a Port

ACL Metering and Re-Marking

84
RackSwitch G8000: Application Guide
To assign an ACL Group to a port, use the following command:
RS G8000(config-if)# access-control group <ACL group number>
RS G8000(config-if)# exit
You can define a profile for the aggregate traffic flowing through the G8000 by
configuring a QoS meter (if desired) and assigning ACLs to ports.
Note: When you add ACLs to a port, make sure they are ordered correctly in terms
of precedence (see
Actions taken by an ACL are called In-Profile actions. You can configure additional
In-Profile and Out-of-Profile actions on a port. Data traffic can be metered, and
re-marked to ensure that the traffic flow provides certain levels of service in terms of
bandwidth for different types of network traffic.
Metering
QoS metering provides different levels of service to data streams through
user-configurable parameters. A meter is used to measure the traffic stream against
a traffic profile which you create. Thus, creating meters yields In-Profile and
Out-of-Profile traffic for each ACL, as follows:
• In-Profile—If there is no meter configured or if the packet conforms to the meter,
the packet is classified as In-Profile.
• Out-of-Profile—If a meter is configured and the packet does not conform to the
meter (exceeds the committed rate or maximum burst rate of the meter), the
packet is classified as Out-of-Profile.
Note: Metering is not supported for IPv6 ACLs. All traffic matching an IPv6 ACL is
considered in-profile for re-marking purposes.
Using meters, you set a Committed Rate in Kbps (1000 bits per second in each
Kbps). All traffic within this Committed Rate is In-Profile. Additionally, you can set a
Maximum Burst Size that specifies an allowed data burst larger than the Committed
Rate for a brief period. These parameters define the In-Profile traffic.
Meters keep the sorted packets within certain parameters. You can configure a
meter on an ACL, and perform actions on metered traffic, such as packet
re-marking.
Re-Marking
Re-marking allows for the treatment of packets to be reset based on new network
specifications or desired levels of service. You can configure the ACL to re-mark a
packet as follows:
• Change the DSCP value of a packet, used to specify the service level that traffic
receives.
• Change the 802.1p priority of a packet.
"ACL Order of Precedence" on page 82).