HP Moonshot-45XGc Guide de l'utilisateur

HP Moonshot-45XGc Switch ACL and QoS Command Reference Part Number: 785507-001 Software version: ESS 2407 Document version: 5W100-20140912

5 description Use description to configure a description for an ACL. Use undo description to delete an ACL description. Syntax description text undo

95 Queue-based accounting commands display qos queue-statistics interface outbound Use display qos queue-statistics interface outbound to display que

96 Queue 5 Forwarded: 0 packets, 0 bytes, 0 pps, 0 bps

97 Parameters interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displa

98 6 100 1000 10 100 1000 10 100 1000 10 9 N 7 100 1000 10 100 1000 10 100 1000 10 9

99 Examples # Apply the queue-based WRED table table1 to interface FortyGigE 1/1/1. <Sysname> system-view [Sysname] interface FortyGigE 1/1/1 [

100 Use undo queue to restore the default. Syntax queue queue-id [ drop-level drop-level ] low-limit low-limit high-limit high-limit [ discard-proba

101 • qos wred table queue ecn Use queue ecn to enable ECN for a queue. Use undo queue ecn to restore the default. Syntax queue queue-id ecn undo

102 Views WRED table view Predefined user roles network-admin Parameters queue-id: Specifies a queue by its ID. weighting-constant exponent: Specifi

103 Aggregate CAR commands car name Use car name to reference an aggregate CAR action in a traffic behavior. Use undo car to remove an aggregate CAR

104 Parameters car-name: Specifies an aggregate CAR action by its name. This argument must start with a letter, and is a case-sensitive string of 1 t

6 acl-number: Specifies an ACL by its number. • 2000 to 2999 for basic ACLs. • 3000 to 3999 for advanced ACLs. • 4000 to 4999 for Ethernet frame h

105 Syntax qos car car-name aggregative cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size ] ] [ green action | re

106 Usage guidelines An aggregate CAR action takes effect only after it is applied to an interface or referenced in a QoS policy. Examples # Configur

107 Time range commands display time-range Use display time-range to display time range configuration and status. Syntax display time-range { time-ra

108 Syntax time-range time-range-name { start-time to end-time days [ from time1 date1 ] [ to time2 date2 ] | from time1 date1 [ to time2 date2 ] | t

109 • Periodic statement in the start-time to end-time days format. A periodic statement recurs periodically on a day or days of the week. • Absolu

110 Use undo buffer apply to cancel the application. Syntax buffer apply undo buffer apply Views System view Predefined user roles network-admin Usag

111 Usage guidelines The fixed-area space for a queue cannot be used by other queues. It is also called the minimum guaranteed buffer. The sum of fi

112 Table 42 Mapping between configured values of ratio-value and effective values Configured value of ratio-value Effective value 0 to 1 1 2 to 3

113 Usage guidelines After you configure the total shared-area ratio, the remaining buffer space is automatically assigned to the fixed area. Example

114 Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID

7 display packet-filter Use display packet-filter to display whether an ACL has been successfully applied to an interface for packet filtering. Synta

115 Field Description Eg Egress buffer. (Total-shared) Total shared-area size. (Guaranteed , Shared) • Guaranteed—Fixed-area ratio for a queue. •

116 XGE1/0/11 0% 0% 0% XGE1/0/12 0% 0% 0% XGE

117 Field Description Block 1 Block where the port resides. The block where the ports on the front panel of the device reside is fixed to Block 1. 5s

118 Index A B C D F I N P Q R S T A accounting,44 acl,1 acl copy,2 acl logging interval,3 acl name,4 B bandwidth,89 buffer apply,109 buffer queue gu

119 qos priority,73 qos qmprofile,93 qos sp,80 qos trust,74 qos vlan-policy,68 qos wfq,87 qos wfq { byte-count | weight },87 qos wfq group sp,88 qos

8 Field Description ACL 2001 IPv4 basic ACL 2001 has been successfully applied. Hardware-count Successfully enables counting ACL rule matches. IPv4

9 name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to 63 characters. It must start with an English

10 Related commands reset packet-filter statistics display packet-filter statistics sum Use display packet-filter statistics sum to display accumulate

11 Table 4 Command output Field Description Sum Accumulated packet filtering ACL statistics. In-bound policy Accumulated ACL statistics used for fi

12 name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to 63 characters. It must start with an Englis

13 Field Description MAC default action Packet filter default action for packets that do not match any Ethernet frame header ACLs. This field is disp

14 Field Description Type Resource type: • VFP ACL—ACL rules for local QoS ID remarking before Layer 2 forwarding. • IFP ACL—ACL rules applied to i

Legal and notice information © Copyright 2014 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitte

15 • 4000 to 4999 for Ethernet frame header ACLs. You cannot specify an Ethernet frame header ACL if the ipv6 keyword is specified. • 5000 to 5999 f

16 Examples # Set the packet filter default action to deny. <Sysname> system-view [Sysname] packet-filter default deny Related commands • displ

17 reset packet-filter statistics Use reset packet-filter statistics to clear the match statistics (including the accumulated statistics) of ACLs for

18 rule (Ethernet frame header ACL view) Use rule to create or edit an Ethernet frame header ACL rule. Use undo rule to delete an Ethernet frame head

19 time-range time-range-name: Specifies a time range for the rule. The time-range-name argument is a case-insensitive string of 1 to 32 characters. I

20 Default An IPv4 advanced ACL does not contain any rule. Views IPv4 advanced ACL view Predefined user roles network-admin Parameters rule-id: Specif

21 Parameters Function Description dscp dscp Specifies a DSCP priority. The dscp argument can be a number in the range of 0 to 63, or in words, af11

22 Parameters Function Description { ack ack-value | fin fin-value | psh psh-value | rst rst-value | syn syn-value | urg urg-value } * Specifies one

23 ICMP message name ICMP message type ICMP message code source-route-failed 3 5 timestamp-reply 14 0 timestamp-request 13 0 ttl-exceeded 11 0 U

24 [Sysname-acl-adv-3003] rule permit udp source-port eq snmptrap [Sysname-acl-adv-3003] rule permit udp destination-port eq snmp [Sysname-acl-adv-300

i Contents ACL commands ······························································································································

25 source { source-address source-wildcard | any }: Matches a source address. The source-address source-wildcard arguments represent a source IP addr

26 Syntax rule [ rule-id ] { deny | permit } protocol [ { { ack ack-value | fin fin-value | psh psh-value | rst rst-value | syn syn-value | urg urg-va

27 Table 12 Match criteria and other rule information for IPv6 advanced ACL rules Parameters Function Description source { source-address source-pre

28 Parameters Function Description vpn-instance vpn-instance-name Applies the rule to a VPN instance. The vpn-instance-name argument is a case-sensi

29 Table 15 ICMPv6 message names supported in IPv6 advanced ACL rules ICMPv6 message name ICMPv6 message type ICMPv6 message code echo-reply 129 0

30 Examples # Create an IPv6 advanced ACL rule to permit TCP packets with the destination port 80 from 2030:5060::/64 to FE80:5060::/96. <Sysname&g

31 Syntax rule [ rule-id ] { deny | permit } [ counting | fragment | logging | routing [ type routing-type ] | source { source-address source-prefix |

32 Usage guidelines If an ACL is for QoS traffic classification or packet filtering: • Do not specify the fragment keyword. • Do not specify the vpn

33 Predefined user roles network-admin Parameters rule-id: Specifies a rule ID in the range of 0 to 65534. If you do not specify a rule ID when creati

34 rule comment Use rule comment to add a comment about an existing ACL rule or edit its comment to make the rule easy to understand. Use undo rule co

ii display qos policy ································································································································

35 Views IPv4/IPv6 basic ACL view IPv4/IPv6 advanced ACL view Ethernet frame header ACL view Predefined user roles network-admin Parameters step-value

36 QoS policy commands Traffic class commands display traffic classifier Use display traffic classifier to display traffic classes. Syntax display tra

37 Table 16 Command output Field Description Classifier Traffic class name and its match criteria. Operator Match operator you set for the traffic cl

38 Option Description control-plane protocol-group protocol-group-name Matches a control plane protocol group. The protocol-group-name argument can b

39 Protocol Description bgp4+ IPv6 BGP packets bpdu-tunnel BPDU tunnel packets dhcp DHCP packets dhcp-snooping DHCP snooping packets dhcp6 IPv6 DHC

40 If a class that uses the AND operator has multiple if-match acl, if-match acl ipv6, if-match customer-vlan-id or if-match service-vlan-id clau

41 • To delete a criterion that matches IP precedence values, the specified IP precedence values in the command must be identical with those defined

42 [Sysname-classifier-class1] if-match acl 3101 # Define a match criterion for traffic class class1 to match the ACL named flow. <Sysname> syst

43 <Sysname> system-view [Sysname] traffic classifier class1 [Sysname-classifier-class1] if-match qos-local-id 3 # Define a match criterion for

44 Traffic behavior commands accounting Use accounting to configure a traffic accounting action in a traffic behavior. Use undo accounting to delete

iii Queue-based accounting commands ··················································································································

45 Predefined user roles network-admin Parameters cir committed-information-rate: Specifies the committed information rate (CIR) in kbps, which specif

46 [Sysname-behavior-database] car cir 200 cbs 51200 ebs 0 green pass red remark-dscp-pass 0 display traffic behavior Use display traffic behavior to

47 Table 19 Command output Field Description Behavior Name and contents of a traffic behavior. Marking Information about priority marking. Remark ds

48 [Sysname-behavior-database] filter deny nest top-most Use nest top-most to configure a VLAN tag adding action in a traffic behavior. Use undo nest

49 Predefined user roles network-admin Parameters cpu: Redirects traffic to the CPU. interface: Redirects traffic to an interface. interface-type inte

50 remark dot1p Use remark dot1p to configure an 802.1p priority marking action or an inner-to-outer tag priority copying action in a traffic behavio

51 remark drop-precedence Use remark drop-precedence to configure a drop priority marking action in a traffic behavior.. Use undo remark drop-precede

52 Parameters green: Specifies green packets. red: Specifies red packets. yellow: Specifies yellow packets. dscp-value: DSCP value, which can be a

53 Use undo remark ip-precedence to delete the action. Syntax remark ip-precedence ip-precedence-value undo remark ip-precedence Default No IP precede

54 <Sysname> system-view [Sysname] traffic behavior database [Sysname-behavior-database] remark local-precedence 2 remark qos-local-id Use remar

1 ACL commands acl Use acl to create an ACL, and enter its view. If the ACL has been created, you directly enter its view. Use undo acl to delete the

55 Views Traffic behavior view Predefined user roles network-admin Parameters vlan-id: Specifies an SVLAN ID in the range of 1 to 4094. Examples # Con

56 QoS policy commands classifier behavior Use classifier behavior to associate a traffic behavior with a traffic class in a QoS policy. Use undo clas

57 Related commands qos policy control-plane Use control-plane to enter control plane view. Syntax control-plane slot slot-number Views System view Pr

58 <Sysname> display qos policy user-defined User-defined QoS policy information: Policy: 1 (ID 100) Classifier: 1 (ID 100) Behavi

59 Policy: 1 Classifier: 1 Operator: AND Rule(s) : If-match acl 2000 Behavior: 1 Marking: Remark dscp 3

60 Parameters slot slot-number: Specifies an IRF member device by its member ID (slot number). If you do not specify an IRF member device, this comman

61 Table 22 Command output Field Description Pre-defined policy information Contents of the predefined control plane QoS policy. Protocol System-d

62 CIR 128 (kbps), CBS 8192 (Bytes), EBS 512 (Bytes) Green action : pass Yellow action : pass Red action : discard

63 Examples # Display the QoS policy applied to the incoming traffic of FortyGigE 1/1/1. <Sysname> display qos policy interface FortyGigE 1/1/1

64 Views Any view Predefined user roles network-admin network-operator Parameters name policy-name: Specifies a QoS policy by its name, a case-sensiti

2 Usage guidelines You can assign a name to an ACL only when you create it. After an ACL is created with a name, you cannot rename it or remove its na

65 Remark dot1p 1 Classifier: 3 Operator: AND Rule(s) : -none- Behavior: 3 -none- Table 25 Command output Field Descri

66 Usage guidelines For information about S-channel interfaces, S-channel aggregate interfaces, VSI interfaces, and VSI aggregate interfaces, see EVB

67 The QoS policy applied to a user profile takes effect only after the QoS policy is successfully issued to the driver. Examples # Apply QoS policy t

68 Default No QoS policy is configured. Views System view Predefined user roles network-admin Parameters policy-name: QoS policy name, a case-sensiti

69 the start VLAN ID must be smaller than the end VLAN ID. Each item in the VLAN list is separated by a space. You can specify up to eight VLAN IDs.

70 Examples # Clear the statistics of the global QoS policy applied to the incoming traffic globally. <Sysname> reset qos policy global inbound

71 Priority mapping commands Priority map commands display qos map-table Use display qos map-table to display the configuration of a priority map. Syn

72 1 : 0 2 : 1

73 qos map-table Use qos map-table to enter the specified priority map view. Syntax qos map-table { dot1p-dp | dot1p-exp | dot1p-lp | dscp-dot1p| dscp

74 Examples # Set the port priority of FortyGigE 1/1/1 to 2. <Sysname> system-view [Sysname] interface FortyGigE 1/1/1 [Sysname-FortyGigE1/1/1]

3 • 2000 to 2999 for basic ACLs. • 3000 to 3999 for advanced ACLs. • 4000 to 4999 for Ethernet frame header ACLs. You cannot create an Ethernet fr

75 Use undo qos trust to restore the default priority trust mode. Syntax qos trust { dot1p | dscp } undo qos trust Default An interface does not trust

76 GTS and rate limit commands GTS commands display qos gts interface Use display qos gts interface to view generic traffic shaping (GTS) configurati

77 Use undo qos gts to remove GTS parameters for traffic of a queue on an interface. Syntax qos gts queue queue-id cir committed-information-rate [ c

78 Parameters interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displa

79 cbs committed-burst-size: Specifies the CBS in bytes. The value range for the committed-burst-size argument is an integral multiple of 512 betwee

80 Congestion management commands SP commands display qos queue sp interface Use display qos queue sp interface to display the SP queuing configurati

81 Default An interface uses the WRR queuing algorithm. Views Layer 2 Ethernet interface view, Layer 3 Ethernet interface view Predefined user roles

82 ef 1 9 cs6 1 13

83 # Enable byte-count WRR queuing on FortyGigE 1/1/1. <Sysname> system-view [Sysname] interface FortyGigE 1/1/1 [Sysname-FortyGigE1/1/1] qos

84 Number Keyword 3 af3 4 af4 5 ef 6 cs6 7 cs7 Examples # Enable byte-count WRR queuing on FortyGigE 1/1/1, assign queue 0, with the scheduling weig

4 • When the ipv6 keyword is not specified, this command sets the interval for generating and outputting IPv4 packet filtering logs. • When the ipv6

85 This command is available only on a WRR-enabled interface. Queues in the SP group are scheduled with SP. The SP group has higher scheduling priori

86 cs7 1 1 64 Table 34 Command output Field Description Interface Interface type and interface number. Outp

87 Related commands qos wfq qos wfq Use qos wfq to enable WFQ and specify the WFQ weight type on an interface. Use undo qos wfq to disable WFQ and re

88 undo qos wfq queue-id Default When WFQ queuing is used on an interface, all the queues are in WFQ group 1 and have a weight of 1. Views Layer 2 E

89 Views Layer 2 Ethernet interface view, Layer 3 Ethernet interface view Predefined user roles network-admin Parameters queue-id: Specifies a queue

90 Views Queue scheduling profile view Predefined user roles network-admin Parameters queue-id: Specifies a queue by its ID. The value can be an inte

91 slot slot-number: Specifies an IRF member device. The slot-number argument represents the ID of the IRF member device. If you do not specify an IR

92 Views Any view Predefined user roles network-admin network-operator Parameters interface-type interface-number: Specifies an interface by its type

93 <Sysname> system-view [Sysname] interface FortyGigE 1/1/1 [Sysname-FortyGigE1/1/1] qos apply qmprofile myprofile Related commands display qo

94 undo queue queue-id Default A queue uses SP queuing. Views Queue scheduling profile view Predefined user roles network-admin Parameters queue-id: