Tagging of Ingress Ip-criteria and Ipv6-criteria

The SAP ingress QoS policy allows the assignment of a tag to each IPv4/IPv6 criteria statement entry. This is useful when a single SAP ingress QoS policy needs to be used for a different service context and it is still needed to apply service specific entries at individual SAP level.

In this concept, the SAP ingress policy can contain entries with different tag values as well as untagged entries. The user configures a tag entry override per-SAP to select which tagged entries are included for the related SAP (untagged entries are always included). Using this tagging concept and matching on destination-port are mutually exclusive.

In the following example, a base configuration IPv4 prefix list is created together with two other lists (list1 and list2) that are used for different VPRN IP interfaces. Also, a base configuration IPv6 prefix list is created together with two other lists (list1 and list2) that are to be used for different VPRN IP interfaces.

The following entries are used for both the IPv4 and IPv6 criteria statement:

Example:

configure
    qos
        match-list
            ip-prefix-list "ipv4-base-config" create
                prefix 10.0.0.0/16
                prefix 10.1.0.0/16
            exit
            ip-prefix-list "list1" create
                prefix 172.16.1.0/24
                prefix 172.16.2.0/24
            exit
            ip-prefix-list "list2" create
                prefix 192.168.1.0/24
                prefix 192.168.2.0/24
            exit
            ipv6-prefix-list "ipv6-base-config" create
                prefix 2001:db8:1000::/64
                prefix 2001:db8:2000::/64
            exit
            ipv6-prefix-list "list1" create
                prefix 2001:db8:3000::/64
                prefix 2001:db8:4000::/64
            exit
            ipv6-prefix-list "list2" create
                prefix 2001:db8:5000::/64
                prefix 2001:db8:6000::/64
            exit
        exit
        sap-ingress 10 name "10" create
            queue 1 create
            exit
            queue 11 multipoint create
            exit
            policer 1 create
            exit
            policer 2 create
            exit
            ip-criteria
                type tagged-entries
                entry 10 create 
                    match
                        src-ip ip-prefix-list "ipv4-base-config"
                    exit
                    action fc "l2" policer 1
                exit
                entry 20 create
                    match
                        src-ip 10.2.0.0/16
                    exit
                    action fc "af" policer 2
                exit
                entry 30 create
                    match
                        src-ip 10.3.0.0/16
                    exit
                    action fc "af"
                exit
                entry 1000 create 
tag 1
                    match
                        src-ip ip-prefix-list "list1"
                    exit
                    action fc "l1"
                exit
                entry 2000 create 
tag 2
                    match
                        src-ip ip-prefix-list "list2"
                    exit
                    action fc "ef"
                exit
            exit
        exit
            ipv6-criteria
                type tagged-entries
                entry 10 create 
                    match
                        src-ip ipv6-prefix-list "ipv6-base-config"
                    exit
                    action fc "l2" policer 1
                exit
                entry 20 create
                    match
                        src-ip 10.2.0.0/16
                    exit
                    action fc "af" policer 2
                exit
                entry 30 create
                    match
                        src-ip 10.3.0.0/16
                    exit
                    action fc "af"
                exit
                entry 1000 create 
tag 1
                    match
                        src-ip ip-prefix-list "list1"
                    exit
                    action fc "l1"
                exit
                entry 2000 create 
tag 2
                    match
                        src-ip ip-prefix-list "list2"
                    exit
                    action fc "ef"
                exit
            exit
        exit
    exit
    service
        vprn 1 name "1" customer 1 create
            interface "int" create
                address 10.10.10.1/24
                sap 1/1/1:1 create
ingress
    sap-ingress "10"
                exit
            exit
        exit
        vprn 2 name "2" customer 1 create
            interface "int" create
                address 10.20.20.1/24
                sap 1/1/1:2 create
                    ingress
    sap-ingress "10"
                        criteria-overrides
                            ip-criteria
                                activate-entry-tag 1
                            ipv6-criteria
                                activate-entry-tag 1
                        exit
                    exit 
                exit
            exit
        exit
        vprn 3 name "3" customer 1 create
            interface "int" create
                address 10/30/30.1/24
                sap 1/1/1:3 create
                    ingress
    sap-ingress "10"
                        criteria-overrides
                            ip-criteria activate-entry-tag 2
                            ipv6-criteria activate-entry-tag 2
                        exit
                    exit 
                exit
            exit
        exit
    exit