VPLS filter and QoS policy commands

egress

Syntax

egress

Context

config>service>vpls>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure egress filter policies.

If no egress filter is defined, no filtering is performed.

ingress

Syntax

ingress

Context

config>service>vpls>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure ingress SAP Quality of Service (QoS) policies and filter policies.

If no SAP-ingress QoS policy is defined, the system default SAP-ingress QoS policy is used for ingress processing. If no ingress filter is defined, no filtering is performed.

filter

Syntax

filter ip ip-filter-id

filter ipv6 ipv6-filter-id

filter mac mac-filter-id

Context

config>service>vpls>sap>egress

config>service>vpls>sap>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document.

Description

This command associates an IP filter policy or MAC filter policy with an ingress or egress SAP or IP interface.

Filter policies control the forwarding and dropping of packets based on IP or MAC matching criteria. There are two types of filter policies: IP and MAC. Only one type may be applied to a SAP at a time.

The filter command is used to associate a filter policy that has a specified filter ID with an ingress or egress SAP. The filter ID must already be defined before the filter command is executed. If the filter policy does not exist, the operation fails and an error message is returned.

In general, filters applied to SAPs (ingress or egress) apply to all packets on the SAP. One exception is non-IP packets are not applied to IP match criteria, so the default action in the filter policy applies to these packets.

The no form of this command removes any configured filter ID association with the SAP or IP interface. The filter ID is not removed from the system.

Special Cases

VPLS

Both MAC and IP filters are supported on a VPLS service SAP.

Parameters

ip ip-filter-id

Specifies IP filter policy. The filter ID must already exist within the created IP filters.

Values

1 to 65535

ipv6 ipv6-filter-id

Specifies the IPv6 filter policy. The filter ID must already exist within the created IPv6 filters.

Values

1 to 65535

mac mac-filter-id

Specifies the MAC filter policy. The specified filter ID must already exist within the created MAC filters. The filter policy must already exist within the created MAC filters.

Values

1 to 65535

qos

Syntax

qos policy-id

no qos

Context

config>service>vpls>sap>ingress

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command associates a QoS policy with an ingress SAP or IP interface.

QoS ingress policies are important for the enforcement of SLA agreements. The policy ID must be defined before associating the policy with a SAP. If the policy-id does not exist, an error is returned.

The qos command is used to associate ingress policies. The qos command only allows ingress policies to be associated on SAP ingress. Attempts to associate a QoS policy of the wrong type returns an error.

Only one ingress QoS policy can be associated with a SAP at one time. Attempts to associate a second QoS policy of a specific type returns an error.

By default, if no specific QoS policy is associated with the SAP for ingress, the default QoS policy is used.

The no form of this command removes the QoS policy association from the SAP, and the QoS policy reverts to the default.

Parameters

policy-id

Specifies the ingress policy ID to associate with SAP on ingress. The policy ID must already exist.

Values

1 to 65535

agg-shaper-rate

Syntax

agg-shaper-rate agg-rate

no agg-shaper-rate

Context

config>service>vpls>sap>ingress

Platforms

7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies the aggregate rate for the SAP shaper. The aggregate SAP shaper is available to limit only the unicast traffic and the BUM traffic across all the FCs of the SAP configured to use ingress queues. Users can specify the CIR rate and the PIR rate. Users must not oversubscribe the total bandwidth available for use by ingress queues.

The no form of this command disables the SAP aggregate rate shaper; that is, the SAP can use up the maximum bandwidth available.

Default

no agg-shaper-rate

Parameters

agg-rate

Specifies the rate in kilobits per second.

Values

50 to 3000000 | max (7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T)

64 to 20000000 | max (7210 SAS-K 3SFP+ 8C)

Default

max

agg-shaper-rate

Syntax

agg-shaper-rate agg-rate

no agg-shaper-rate

Context

config>service>vpls>sap>egress

Description

7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

This command configures the aggregate rate for the SAP shaper. The aggregate SAP shaper is available to limit only the unicast traffic and the BUM traffic across all the FCs of the SAP configured to use ingress queues. Users can specify the CIR rate and the PIR rate. Users must not oversubscribe the total bandwidth available for use by ingress queues.

The no form of this command disables the use of SAP aggregate rate shaper; that is, the SAP can use up the maximum bandwidth available.

Default

no agg-shaper-rate

Parameters

agg-rate

Specifies the rate in kilobits per second.

Values

50 to 1000000 | max (7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T)

64 to 10000000 | max (7210 SAS-K 3SFP+ 8C)

Default

max

aggregate-meter-rate

Syntax

aggregate-meter-rate rate-in-kbps [burst burst-in-kbits]

no aggregate-meter-rate

Context

config>service>epipe>sap>ingress

config>service>vpls>sap>ingress

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command configures the SAP ingress aggregate policer. The rate of the SAP ingress aggregate policer must be specified. Users can optionally specify the burst size for the SAP aggregate policer. The aggregate policer monitors the ingress traffic on different FCs and determines the final disposition of the packet. The packet is either forwarded to an identified profile or dropped.

Note:

The sum of CIR of the individual FCs configured under the SAP cannot exceed the PIR rate configured for the SAP. Although the 7210 SAS software does not block this configuration, it is not recommended.

The following table lists the final disposition of the packet based on the operating rate of the per-FC policer and the per-SAP aggregate policer.

Table: Final disposition of the packet based on per-FC and per-SAP policer or meter

Per FC meter operating rate

Per FC assigned color

SAP aggregate meter operating rate

SAP aggregate meter color

Final packet color

Within CIR

Green

Within PIR

Green

Green or

In-profile

Within CIR 1

Green

Above PIR

Red

Green or

In-profile

Above CIR, Within PIR

Yellow

Within PIR

Green

Yellow or

Out-of-Profile

Above CIR, Within PIR

Yellow

Above PIR

Red

Red or

Dropped

Above PIR

Red

Within PIR

Green

Red or

Dropped

Above PIR

Red

Above PIR

Red

Red or

Dropped

When the SAP aggregate policer is configured, the per-FC policer can be configured only in ‟trtcm2” mode (RFC 4115).

The meter modes ‟srtcm” and ‟trtcm1” are used in the absence of an aggregate meter.

The SAP ingress meter counters increment the packet or octet counts based on the final disposition of the packet.

If ingress frame-based accounting is used, the SAP aggregate meter rate accounts for the Ethernet frame overhead. The system accounts for 12 bytes of IFG and 8 bytes of start delimiter.

The no form of this command removes the aggregate policer from use.

Default

no aggregate-meter-rate

Parameters

rate-in-kbps

Specifies the rate in kilobits per second.

Values

0 to 20000000, max

Default

max

burst-in-kilobits

Specifies the burst size for the policer in kilobits. The burst size cannot be configured without configuring the rate.

Values

4 to 2146959

Default

512

aggregate-meter-rate

Syntax

aggregate-meter-rate rate-in-kbps [burst burst-in-kbits] [enable-stats]

no aggregate-meter-rate

Context

config>service>vpls>sap>egress

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command configures the access SAP egress aggregate policer. The rate (PIR) of the SAP egress aggregate policer must be specified. Users can optionally specify the burst size for the SAP aggregate policer. The aggregate policer monitors the traffic sent out of the SAP and determines the final disposition of the packet, which is either forwarded or dropped.

Users can optionally associate a set of two counters to count total forwarded packets and octets, and total dropped packets and octets. When this counter is enabled, the amount of resources required increases by twice the amount of resources taken up when the counter is not used. If the enable-stats keyword is specified during the creation of the meter, the counter is allocated by software (if available). To free up the counter and relinquish its use, the user can use the no aggregate-meter-rate command and then recreate the meter using the aggregate-meter rate command.

If egress frame-based accounting is used, the SAP egress aggregate meter rate accounts for the Ethernet frame overhead. The system accounts for 12 bytes of IFG and 8 bytes of start delimiter. Frame-based accounting does not affect the count of octets maintained by the counter (if in use).

Note:

  • Before enabling this command for a SAP, resources must be allocated to this feature from the egress-internal-tcam resource pool using the config system resource-profile egress-internal-tcam egress-sap-aggregate-meter command. Refer to the 7210 SAS-D, Dxp, K 2F1C2T, K 2F6C4T, K 3SFP+ 8C Basic System Configuration Guide for information.

  • The egress aggregate meter is not FC-aware. The forward and drop decisions are made based on the order in which the packets are sent out of the SAP by the egress port scheduler.

The no form of this command removes the egress aggregate policer from use.

Default

no aggregate-meter-rate

Parameters

rate-in-kbps

Specifies the rate in kilobits per second.

Values

1 to 4000000, max (7210 SAS-D)

1 to 20000000, max (7210 SAS-Dxp)

Default

max

burst-in-kbits

Specifies the burst size for the policer in kilobits. The burst size cannot be configured without configuring the rate.

Values

4 to 16384, default (7210 SAS-D)

4 to 2146959, default (7210 SAS-Dxp)

Default

512

enable-stats

Keyword to specify if the counter to count forwarded and dropped packets and octets is allocated. If this keyword is used while configuring the meter, the counter is allocated.

accounting-policy

Syntax

accounting-policy acct-policy-id

no accounting-policy

Context

config>service>vpls>spoke-sdp (only supported on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

config>service>vpls>mesh-sdp (only supported on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

config>service>vpls>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Note: This command is not applicable for access uplink SAPs.

This command creates the accounting policy context that can be applied to a SAP.

An accounting policy must be defined before it can be associated with a SAP.

If the policy-id does not exist, an error message is generated.

A maximum of one accounting policy can be associated with a SAP at one time. Accounting policies are configured in the config>log context.

The no form of this command removes the accounting policy association from the SAP, and the accounting policy reverts to the default.

Default

default accounting policy

Parameters

acct-policy-id

Specifies the accounting policy ID as configured in the config>log>accounting-policy context.

Values

1 to 99

collect-stats

Syntax

[no] collect-stats

Context

config>service>vpls>spoke-sdp (only supported on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

config>service>vpls>mesh-sdp (only supported on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

config>service>vpls>sap

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Note:

This command is not applicable for access uplink SAPs.

This command enables accounting and statistical data collection for either the SAP, network port, or IP interface. by default, when applying accounting policies the data is collected in the appropriate records and written to the designated billing file.

When the no collect-stats command is issued the statistics are still accumulated by the cards. However, the CPU will not obtain the results and write them to the billing file. If a subsequent collect-stats command is issued then the counters written to the billing file include all the traffic while the no collect-stats command was in effect.

Default

no collect-stats

1 This configuration is not recommended for use. For more information, see the aggregate-meter-rate description.