IP QoS policy match commands

dscp

Syntax

dscp dscp-value | dscp-name [dscp-mask]

no dscp

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command configures a DiffServ Code Point (DSCP) code point to be used for classification of packets from the specified FC.

The no form of this command removes the DSCP match criterion.

Note:
  • This feature is applicable for ip-criteria (any and dscp-only), and ipv6-criteria (any and dscp-only).

  • Either DSCP name or DSCP value with a mask can be configured.

  • When the user configures dscp value alone, the show command displays the dscp value as the configured value and the dscp-mask as the FC.

Parameters

dscp-value

Specifies the DSCP value in either hexadecimal format, decimal format or binary format.

Values

0 to 64

dscp-name

Specifies a DSCP name that has been previously mapped to a value using the dscp-name command. The DiffServ code point can only be specified by its name.

Values

be, cp1, cp2, cp3, cp4, cp5, cp6, cp7, cs1, cp9, af11, cp11, af12, cp13, af13, cp15, cs2, cp17, af21, cp19, af22, cp21, af23, cp23, cs3, cp25, af31, cp27, af32, cp29, af33, cp31, cs4, cp33, af41, c p35, af42, cp37, af43, cp39, cs5, cp41, cp42, cp43, cp44, cp45, ef, cp47, nc1, cp49, cp50, cp51, cp52, cp53, cp54, cp55, nc2, cp57, cp58, cp59, cp60, cp61, cp62, cp63

dscp-mask

Specifies a 6-bit mask that can be configured using the following formats:

Format Style Format Syntax Example

Decimal

D

4

Hexadecimal

0xH

0x4

Binary

0bBBB

0b100

To select a range from 4 up to 7 specify 4 and 0b000100 for value and mask.

Values

0 to 64 (decimal, hexadecimal, or binary)

Default

64 (exact match)

dst-ip

Syntax

dst-ip {ip-address/mask | ip-address netmask}

no dst-ip

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command configures a destination address range to be used as a SAP QoS policy match criterion.

To match on the destination address, specify the address and its associated mask; for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used.

The no form of this command removes the destination IP address match criterion.

Parameters

ip-address

Specifies the IP address of the destination IP or IPv6 interface. This address must be unique within the subnet and specified in dotted-decimal notation.

Values

ipv4-prefix — a.b.c.d

ipv6-prefix — x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x — 0 to FFFF (hexadecimal)

d — 0 to 255 (decimal)

ipv4-prefix-length — 0 to 32

ipv6-prefix-length — 0 to 128

netmask

Specifies the subnet mask in dotted decimal notation.

Values

0.0.0.0 to 255.255.255.255

dst-port

Syntax

dst-port {eq} dst-port-number

no dst-port

Context

config>qos>sap-ingress

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command configures a destination TCP or UDP port number for a SAP QoS policy match criterion.

The no form of this command removes the destination port match criterion.

Parameters

eq dst-port-number

Specifies the TCP or UDP port number to match, specified as equal to (eq) the destination port value specified as a decimal integer.

Values

1 to 65535 (decimal hex or binary)

fragment

Syntax

fragment {true | false}

no fragment

Context

config>qos>sap-ingress>ip-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command configures fragmented or non-fragmented IP packets as a SAP QoS policy match criterion.

The no form of this command removes the match criterion.

Default

fragment false

Parameters

true

Keyword to configure a match on all fragmented IP packets. A match will occur for all packets that have either the MF (more fragment) bit set OR have the Fragment Offset field of the IP header set to a non-zero value.

false

Keyword to configure a match on all non-fragmented IP packets. Non-fragmented IP packets are packets that have the MF bit set to zero and have the Fragment Offset field also set to zero.

ip-prec

Syntax

ip-prec ip-prec-value [ip-prec-mask]

no ip-prec

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command defines a specific IP Precedence value that must be matched to perform the associated classification actions. If an ingress packet on the SAP where the SAP ingress QoS policy is applied to matches the specified IP Precedence value, the actions associated with this entry are taken.

The ip-prec-value is derived from the most significant three bits in the IP header ToS byte field (precedence bits). The three precedence bits define 8 Class-of-Service (CoS) values commonly used to map packets to per-hop QoS behavior. The precedence bits are also part of the newer DiffServ Code Point (DSCP) method of mapping packets to QoS behavior. The DSCP uses the most significant six bits in the IP header ToS byte and so overlaps with the precedence bits.

Both IP precedence and DSCP classification rules are supported. A match entry cannot match on both IP DSCP and IP precedence values. That is, the user can use either IP DSCP or IP precedence match in a match entry but not both. The software blocks configuration of ip-precedence match if ip-dscp is configured already. The converse is also true. A single policy having multiple match entries can have entries such that some of them match IP DSCP and some others match IP precedence. The order of the entry determines the priority of the match.

The no form of this command removes the IP Precedence match criterion.

Parameters

ip-prec-value

Specifies the unique IP header ToS byte precedence bits value that will match the IP precedence rule.

Values

0 to 7

ip-prec-mask

Specifies the mask to use for the match.

src-ip

Syntax

src-ip {ip-address/mask | ip-address netmask}

no src-ip

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command configures a source IP or IPv6 address range to be used as an SAP QoS policy match criterion.

To match on the source IP or IPv6 address, specify the address and its associated mask; for example, 10.1.0.0/16. The conventional notation of 10.1.0.0 255.255.0.0 can also be used.

The no form of this command removes the source IP or IPv6 address match criterion.

Parameters

ip-address | ipv6-address

Specifies the IP or IPv6 address of the source IP interface. This address must be unique within the subnet and specified in dotted-decimal notation.

Values

ipv4-prefix — a.b.c.d

ipv6-prefix — x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x — 0 to FFFF (hexadecimal)

d — 0 to 255 (decimal)

ipv4-prefix-length — 1 to 32

ipv6-prefix-length — 0 to 128

mask

Specifies the subnet mask length, expressed as an integer or in dotted-decimal notation.

Values

0 to 32

netmask

Specifies the subnet mask, in dotted-decimal notation.

Values

a.b.c.d (dotted quad equivalent of mask length)

src-port

Syntax

src-port {eq} src-port-number

no src-port

Context

config>qos>sap-ingress>ip-criteria>entry>match

config>qos>sap-ingress>ipv6-criteria>entry>match

Platforms

Supported on all 7210 SAS platforms as described in this document, including those operating in access-uplink mode

Description

This command configures a source TCP or UDP port number for a SAP QoS policy match criterion.

The no form of this command removes the source port match criterion.

Parameters

eq src-port-number

Specifies the TCP or UDP port number to match specified as equal to (eq) to the source port value specified as a decimal integer.

Values

1 to 65535 (decimal, hexadecimal, or binary)