This chapter provides information to configure network QoS policies using the command line interface.
This section provides an overview of QoS policies in network mode and access up-link mode.
Network QoS policies are available for use with network IP interfaces, network port and hybrid port when operating the 7210 SAS device network mode. 7210 SAS-M, 7210 SAS-T, 7210 SAS-Sx/S 1/10GE, 7210 SAS-Sx 10/100GE, and 7210 SAS-Mxp devices support network mode of operation.
The following types of QoS mapping decisions are applicable on a network IP interface when operating in network mode.
The default QoS mapping always exists on an IP interface and every received packet will be mapped to this default if another explicitly defined matching entry does not exist.
The following types of QoS mapping decisions are applicable on a network port when operating in network mode:
The default QoS mapping always exists on network port and every received packet will be mapped to this default if another explicitly defined matching entry does not exist.
Network QoS policies are available for use with access-uplink port when operating the 7210 SAS device in access-uplink mode. 7210 SAS-M, and 7210 SAS-T devices support access-uplink mode of operation.
The following types of QoS mapping decisions are applicable on an access-uplink port when operating in access-uplink mode:
The default QoS mapping always exists on an ingress access uplink port and every received packet will be mapped to this default if another explicitly defined matching entry does not exist.
The following sections provide more details about the network QoS policies for both network mode and access-uplink mode.
The network QoS policy consists of an ingress and egress component. For 7210 SAS-M, 7210 SAS-T, 7210 SAS-Sx/S 1/10GE, 7210 SAS-Sx 10/100GE, and 7210 SAS-Mxp operating in network mode, there are two types of network QoS policies; network QoS policy of type port and network QoS policy of type ip-interface.
A port type network policy is applied to network and hybrid ports and is used for classification and remarking of IP traffic using DSCP or dot1p values. Either DSCP or dot1p can be used for ingress classification but not both. Both DSCP and Dot1p can be configured at egress for remarking.
An ip-interface type network policy is applied to an IP Interface, and is used for classification and remarking of MPLS traffic using EXP values. Note that the FC-to-dot1p marking values configured on the port are also used to mark the dot1p in the VLAN tag, if any, used for MPLS traffic on some 7210 SAS devices.
The ingress component of the policy defines how the EXP, DSCP or dot1p bits are mapped to internal forwarding class (FC) and profile state. The FC and profile state define the per-hop behavior (PHB) or the QoS treatment through the 7210 SAS. The profile mapping can be defined using the mpls-lsp-exp-profile-map policy, which defines the mapping between the LSP EXP bits and the profile (in or out) to be associated with a packet.
The mapping on each ip-interface or port defaults to the mappings defined in the default network QoS policy until an explicit policy is defined for the IP interface or port. It also defines the bandwidth-limiting parameters for the traffic mapped to each FC. Traffic mapped to each FC can be limited to configurable bandwidth values using separate meters and queues for each unicast and multipoint traffic. Multipoint is used for IP interface for MPLS traffic and for IP multicast traffic received on a network or hybrid port.
The total number of QoS resources—that is, ingress classification entries and policers—available for use with IP interfaces is limited. The software allocates these resources to an IP interface on a first-come, first-serve basis. The number of resources used per IP interface limits the total number of IP interfaces configured on the system. The total number of IP interfaces allowed is also subject to a system limit.
Note:
|
The egress component of the network QoS policy defines the LSP EXP, DSCP or dot1p bits marking values associated with each forwarding class.
By default, all ports configured in network mode use Default network policy "1" and all network port IP interfaces use Default network policy "2". Default network policies "1" and "2" cannot be modified or deleted.
New (non-default) network policy parameters can be modified. The no form of this command reverts the object to the default values.
Changes made to a policy are applied immediately to all network ports, hybrid ports, and IP interfaces where the policy is applied. For this reason, when a policy requires several changes, it is recommended that you copy the policy to a work-in-progress policy-id. The work-in-progress copy can be modified until all the changes are made and then the original policy-id can be overwritten using the config>qos>copy command.
For information about the tasks and commands necessary to access the CLI and to configure and maintain your devices, refer to the “CLI Usage” chapter in the 7210 SAS-M, T, R6, R12, Mxp, Sx, S Basic System Configuration Guide.
The following behavior is supported with use of network IP interface QoS policies for LDP, segment routing (SR), and RSVP (with fast reroute (FRR) or penultimate hop popping (PHP)) MPLS LSPs:
A basic network QoS policy must conform to the following.
Configuring and applying QoS policies other than the default policy is optional. A default network policy of the type ip-interface is applied.
To create an network QoS policy of type ip-interface when operating in network mode, define the following:
User has an option to specify the mapping of the LSP EXP bits to a profile (in/out). Ingress traffic that matches the specified EXP bits will be assigned the corresponding profile.
The following commands associated a network QoS policy with the network IP interface.
The following is the example for 7210 SAS-M devices:
The following is the example for 7210 SAS-T, 7210 SAS-Mxp, 7210 SAS-Sx/S 1/10GE, and 7210 SAS-Sx 10/100GE devices:
To create a network QoS policy of type port when operating in network mode, define the following:
The following shows the command usage to associate a network QoS policy with the network port.
Use the following syntax to create a network QoS policy.
The default network policy for IP interfaces is identified as policy-id 2. Default policies cannot be modified or deleted. Table 40 lists default network policy parameters.
Field | Default |
description | Default network QoS policy |
scope | template |
ingress | |
default-action | fc be profile out (default action profile out is applicable only for port policies and not for ip-interface policies) |
mpls-lsp-exp-profile | 1 |
egress | |
remarking | no |
fc af: | |
lsp-exp-in-profile | 3 |
lsp-exp-out-profile | 2 |
fc be: | |
lsp-exp-in-profile | 0 |
lsp-exp-out-profile | 0 |
fc ef: | |
lsp-exp-in-profile | 5 |
lsp-exp-out-profile | 5 |
fc h1: | |
lsp-exp-in-profile | 6 |
lsp-exp-out-profile | 6 |
fc h2: | |
lsp-exp-in-profile | 4 |
lsp-exp-out-profile | 4 |
fc h11: | |
lsp-exp-in-profile | 3 |
lsp-exp-out-profile | 2 |
fc h12: | |
lsp-exp-in-profile | 1 |
lsp-exp-out-profile | 1 |
fc nc: | |
lsp-exp-in-profile | 7 |
lsp-exp-out-profile | 7 |
Table 41 lists default parameters for network QoS policy type ip-interface, LSP EXP-to-FC mapping on ingress.
LSP EXP Value | 7210 FC Ingress | Profile |
0 | be | Out |
1 | l2 | In |
2 | af | Out |
3 | af | In |
4 | h2 | In |
5 | ef | In |
6 | h1 | In |
7 | nc | In |
The default network policy for port is identified as policy-id 1. Default policies cannot be modified or deleted. The following output displays the parameters for default network policy of type port when in network mode of operation:
The following output sample is of a default network port policy on 7210 SAS-M.
The following output sample is of a default network interface policy for 7210 SAS-M devices in network mode.
The following output sample is of a default network port QoS policy for 7210 SAS-T, 7210 SAS-Sx/S 1/10GE, 7210 SAS-Sx 10/100GE, and 7210 SAS-Mxp devices.
This section describes the allocation of QoS resources for network QoS policies of both for type ip-interface and type port.
When an IP interface is created, a default network QoS policy of type IP-interface is applied. For the default policy, two meters and two classification entries in hardware are allocated.
The resources are allocated to a network policy only when a port is configured for the IP interface. When a network port is configured a default network QoS policy of type port is applied.
For every FC in use, the system allocates two classification entries in hardware, if the FC is configured to use both the unicast meter and the multicast meter or if the default meter 9 is configured in the policy. If multiple match criteria entries map to the same FC, then each of these are allocated two classification entries in hardware. For example, if there are two match-criteria entries that map to FC ‘af’, then a total of four classification entries are allocated in hardware and if there are four match-criteria entries that map to FC ‘af’, then a total of eight classification entries are allocated in hardware.
For every meter or policer in use, the system allocates one meter in hardware. A meter or policer is considered to be in use when it is associated with an FC in use.
The number of IP interfaces and network ports allowed is limited by number of classification resources available in hardware, subject to system limit on the number of IP interfaces and network/hybrid ports supported by the system.
Calculating the Number of QoS Resources
To calculate the number of QoS resources used by an IP interface, determine the following items:
Only the FCs used by the match-criteria classification entries are to be considered for the number of FCs, which are referred to as “FC in use”. Also, note that for network policy of type ip-interface, the default multipoint meter 9 is created in a policy; whereas for policy of type port, the default multipoint meter needs to be explicitly configured by the user, if required.
Use the following rules to compute the number of classification entries per FC in use:
Given the number of match criteria and the number of FCs used, use the equation below to calculate the total number of classification entries (TC) per policy.
TC = Σ 2 * E(i)
i = nc, h1, ef, h2, l1, af, l2, be
where:
Note: In the worst case, only 2 classification entries are used for each FC in a network policy, because only two types of traffic are supported. |
Determining the Number of Policers or Meters
Determine the number of policers or meters (TP) to use. A maximum of 16 meters per network policy is available.
The number of TPs used is the number of meters configured in the policy. Among that number, only those meters configured for use with an FC are considered during resource allocation. In other words, meters that are created but not associated with an FC are not counted for resource allocation.
Note: In the following examples, the profile configuration is not shown. In practice, users need to configure the mpls-lsp-exp-profile policy and associate it with the network policy. Association of a profile policy with the network QoS policy does not change the resource calculation methodology shown in the following examples. |
The number of classification entries (TC) used is calculated, as follows:
(2 * 0)nc + (2 * 0)h1 + (2 * 0)ef + (2 * 0)h2 + (2 * 0)l1 + (2 * 0)af + (2 * 0)l2 + (2 * 1)be = 2
The number of meters (TP) used is 2 (meters 1 and 9).
The number of classification entries (TC) used is calculated, as follows:
(2 * 0)nc + (2 * 0)h1 + (2 * 0)ef + (2 * 0)h2 + (2 * 0)l1 + (2 * 1)af + (2 * 0)l2 + (2 * 1)be = 4
The number of meters (TP) user is 4 (meters 1, 2, 9, and 12)
The number of classification entries (TC) used are calculated, as follows:
(2 * 0)nc + (2 * 0)h1 + (2 * 0)ef + (2 * 0)h2 + (2 * 0)l1 + (2 * 1)af + (2 * 0)l2 + (2 * 1)be = 4
The number of meters (TP) user is 2 (meters 2 and 12).
The number of Filter-Entries (TC) used is calculated, as follows:
(2 * 1)nc + (2 * 1)h1 + (2 * 1)ef + (2 * 1)h2 + (2 * 0)l1 + (2 * 2)af + (2 * 1)l2 + (2 * 1)be = 16
The number of meters (TP) used is 2 (meters 1 and 9).
The number of classification entries (TC) used is calculated, as follows:
(2 * 1)nc + (2 * 1)h1 + (2 * 1)ef + (2 * 1)h2 + (2 * 0)l1 + (2 * 2)af + (2 * 1)l2 + (2 * 1)be = 16
The number of meters (TP) used is 2 (meters 1 and 9). Note that meters 2 and 12 are not accounted for because they are not associated with any FC.
The number of classification entries (TC) used is calculated, as follows:
(2 * 1)nc + (2 * 1)h1 + (2 * 1)ef + (2 * 1)h2 + (2 * 0)l1 + (2 * 2)af + (2 * 1)l2 + (2 * 1)be = 16
The number of meters (TP) used is 5 (meters 1, 2, 3, 9, and 12).
The number of classification entries (TC) used is 2.
The number of meters (TP) used is 2.
The number of classification entries (TC) used is calculated, as follows:
(2 * 2)nc + (2 * 0)h1 + (2 * 1)ef + (2 * 0)h2 + (2 * 0)l1 + (2 * 1)af + (2 * 1)l2 + (0 * 0)be = 10
The numbers of meters (TP) used is 6 (meters 2, 3, 4, 7, 8, and 12).
The network QoS policy consists of an ingress and egress component. For 7210 SAS-M and 7210 SAS-T devices operating in access-uplink mode, network policy is available for use. The ingress component of the policy defines how Dot1p bits are mapped to internal forwarding class and profile state (DSCP is not available for use). The forwarding class and profile state define the Per Hop Behavior (PHB) or the QoS treatment through the system.
The mapping on each access uplink port defaults to the mappings defined in the default network QoS policy until an explicit policy is defined for the access uplink ports. It also defines the rate-limiting parameters for the traffic mapped to each forwarding classes. Traffic mapped to each forwarding class can be rate limited using separate meters for each unicast and multipoint traffic.
The egress component of the network QoS policy provides an option to define either Dot1p bits and IP DSCP marking values or both associated with each forwarding class. By default, network QoS policy remarking is always disabled. If the egressing packet originated on an ingress SAP, the egress QoS policy also defines the Dot1p bit marking based on the forwarding class and the profile state. The default map of FC-Dot1p marking is as shown in default network QoS policy of type 'port', where in the policy-id is equal to 1. All non-default network QoS policies inherits the FC-Dot1p map.
Network policy-id 1 exists as the default policy and is applied to access uplink ports.The network policy-id 1 cannot be modified or deleted. It defines the default Dot1p-to-FC mapping and default meters for unicast and multipoint meters for the ingress. For the egress, it defines eight forwarding classes and the packet marking criteria.
New (non-default) network policy parameters can be modified. The no form of this command reverts the object to the default values.
Changes made to a policy are applied immediately to all ports where the policy is applied. For this reason, when a policy requires several changes, it is recommended that you copy the policy to a work area policy-id. The work-in-progress copy can be modified until all the changes are made and then the original policy-id can be overwritten with the config qos copy command.
For information about the tasks and commands necessary to access the command line interface and to configure and maintain your devices, refer to CLI Usage chapter in the 7210 SAS-M, T, R6, R12, Mxp, Sx, S Basic System Configuration Guide.
A basic network QoS policy must conform to the following:
To create an network QoS policy when operating in access-uplink mode, define the following:
The following commands associated a network QoS policy with the access-uplink port.
Use the following syntax to create a network QoS policy for 7210 SAS-M and 7210 SAS-T in access uplink mode.
This following output sample is of a default network policy on 7210 SAS-M in access-uplink mode.
This following output sample is of a default network port policy on 7210 SAS-T in access-uplink mode.
DSCP marking for CPU generated traffic is not configurable by the user, except on the 7210 SAS-Mxp (see QoS for Self-Generated (CPU) Traffic on Network Interfaces for the 7210 SAS-Mxp). The default values are listed in Table 42.
Note: Protocols such as BGP, RSVP, TLDP, OSPF, and IS-IS are not supported on 7210 SAS platforms operating in access-uplink mode. |
Protocol | IPv4 | DSCP Marking | Dot1P Marking | Default FC | DSCP Values (Decimal) | Dot1P Values |
OSPF | Yes | Yes | Yes | NC | 48 | 7 |
ISIS | Yes | No | Yes | NC | - | 7 |
TLDP | Yes | Yes | Yes | NC | 48 | 7 |
RSVP | Yes | Yes | Yes | NC | 48 | 7 |
SNMP | Yes | Yes | Yes | H2 | 34 | 4 |
NTP | Yes | Yes | Yes | NC | 48 | 7 |
TELNET | Yes | Yes | Yes | H2 | 34 | 4 |
FTP | Yes | Yes | Yes | H2 | 34 | 4 |
TFTP | Yes | Yes | Yes | H2 | 34 | 4 |
SYSLOG | Yes | Yes | Yes | H2 | 34 | 4 |
TACACS | Yes | Yes | Yes | H2 | 34 | 4 |
RADIUS | Yes | Yes | Yes | H2 | 34 | 4 |
SSH | Yes | Yes | Yes | H2 | 34 | 4 |
ICMP Req | Yes | Yes | Yes | NC | 0 | 7 |
ICMP Res | Yes | Yes | Yes | NC | 0 | 7 |
ICMP Unreach | Yes | Yes | Yes | NC | 0 | 7 |
SCP | Yes | Yes | Yes | H2 | 34 | 4 |
PIM (SSM) | Yes | Yes | Yes | NC | ||
STP | NA | NA | Yes | NC | - | 7 |
CFM | NA | NA | Yes | NC | - | 7 |
ARP | NA | NA | Yes | NC | - | 7 |
Trace route | Yes | Yes | Yes | NC | 0 | 7 |
TACPLUS | Yes | Yes | Yes | H2 | 34 | 4 |
IGMP | Yes | Yes | Yes | NC | 48 | 7 |
DNS | Yes | Yes | Yes | H2 | 34 | 4 |
BGP | Yes | Yes | Yes | NC | 48 | 7 |
PTP | Yes | Yes | Yes | H2 | 48 | 7 |
Note:
|
Differentiated services code point (DSCP), forwarding class (FC), and IEEE 802.1p values can be specified for use by protocol packets generated by the node. This enables prioritization or deprioritization of supported protocols (as required).
DSCP marking for internally generated control and management traffic should be used for a specified application. This can be configured per routing instance. For example, OSPF packets can carry a different DSCP marking for the base instance than for a VPRN service. ARP and IS-IS are not IP protocols, so only 802.1p values can be configured.
The DSCP value can be set per application. When an application is configured to use a specified DSCP value and an FC, the 802.1p and MPLS EXP bits are marked in accordance with the network (default 802.1p value of 7) or access (default 802.1p value of 0) egress policy as it applies to the logical interface the packet will be egressing.
Configuring self-generated QoS is supported in the base router and VPRN service contexts.
The default values for self-generated traffic on network interfaces are:
Note:
|
Table 43 lists the DSCP mapping between DSCP name and DSCP values (decimal, hexadecimal, and binary) and label.
DSCP Name | DSCP Value Decimal | DSCP Value Hexadecimal | DSCP Value Binary | Label |
Default | 0 | 0x00 | 0b000000 | be |
nc1 | 48 | 0x30 | 0b110000 | h1 |
nc2 | 56 | 0x38 | 0b111000 | nc |
ef | 46 | 0x2e | 0b101110 | ef |
af11 | 10 | 0x0a | 0b001010 | assured |
af12 | 12 | 0x0c | 0b001100 | assured |
af13 | 14 | 0x0e | 0b001110 | assured |
af21 | 18 | 0x12 | 0b010010 | l1 |
af22 | 20 | 0x14 | 0b010100 | l1 |
af23 | 22 | 0x16 | 0b010110 | l1 |
af31 | 26 | 0x1a | 0b011010 | l1 |
af32 | 28 | 0x1c | 0b011100 | l1 |
af33 | 30 | 0x1d | 0b011110 | l1 |
af41 | 34 | 0x22 | 0b100010 | h2 |
af42 | 36 | 0x24 | 0b100100 | h2 |
af43 | 38 | 0x26 | 0b100110 | h2 |
default 1 | 0 |
Note:
A network policy is associated by default with IP interfaces and network ports for devices operating in network mode. A network policy is associated by default with access uplink ports for devices in access uplink mode.
You can replace the default policy with a non-default policy, but you cannot remove default policies from the configuration. When you remove a non-default policy, the policy association reverts to the appropriate default network policy.
Use the following syntax to delete a network policy.
You can copy an existing network policy to a new policy ID value or overwrite an existing policy ID. The overwrite option must be specified or an error occurs if the destination policy ID exists.
The following is a sample of the copied policies output.
You can change existing policies, except the default policies, and entries in the CLI. The changes are applied immediately to all network ports or IP interfaces or access uplink ports where the policy is applied. To prevent configuration errors use the copy command to make a duplicate of the original policy to a work area, make the edits, and then overwrite the original policy. The number of meters (TP) used are: 5 (Meters 1, 2, 3, 9, 12).