The SAP ingress QoS policy allows the assignment of a tag to each IPv4/IPv6 criteria statement entry. This is useful when a single SAP ingress QoS policy needs to be used for a different service context and it is still needed to apply service specific entries at individual SAP level.
In this concept, the SAP ingress policy can contain entries with different tag values as well as untagged entries. The user configures a tag entry override per-SAP to select which tagged entries are included for the related SAP (untagged entries are always included). Using this tagging concept and matching on destination-port are mutually exclusive.
In the following example, a base configuration IPv4 prefix list is created together with two other lists (list1 and list2) that are used for different VPRN IP interfaces. Also, a base configuration IPv6 prefix list is created together with two other lists (list1 and list2) that are to be used for different VPRN IP interfaces.
The following entries are used for both the IPv4 and IPv6 criteria statement:
VPRN 1/int: 10, 20, 30
VPRN 2/int: 10, 20, 30, 1000
VPRN 3/int: 10, 20, 30, 2000
Example:
configure
qos
match-list
ip-prefix-list "ipv4-base-config" create
prefix 10.0.0.0/16
prefix 10.1.0.0/16
exit
ip-prefix-list "list1" create
prefix 172.16.1.0/24
prefix 172.16.2.0/24
exit
ip-prefix-list "list2" create
prefix 192.168.1.0/24
prefix 192.168.2.0/24
exit
ipv6-prefix-list "ipv6-base-config" create
prefix 2001:db8:1000::/64
prefix 2001:db8:2000::/64
exit
ipv6-prefix-list "list1" create
prefix 2001:db8:3000::/64
prefix 2001:db8:4000::/64
exit
ipv6-prefix-list "list2" create
prefix 2001:db8:5000::/64
prefix 2001:db8:6000::/64
exit
exit
sap-ingress 10 name "10" create
queue 1 create
exit
queue 11 multipoint create
exit
policer 1 create
exit
policer 2 create
exit
ip-criteria
type tagged-entries
entry 10 create
match
src-ip ip-prefix-list "ipv4-base-config"
exit
action fc "l2" policer 1
exit
entry 20 create
match
src-ip 10.2.0.0/16
exit
action fc "af" policer 2
exit
entry 30 create
match
src-ip 10.3.0.0/16
exit
action fc "af"
exit
entry 1000 create
tag 1
match
src-ip ip-prefix-list "list1"
exit
action fc "l1"
exit
entry 2000 create
tag 2
match
src-ip ip-prefix-list "list2"
exit
action fc "ef"
exit
exit
exit
ipv6-criteria
type tagged-entries
entry 10 create
match
src-ip ipv6-prefix-list "ipv6-base-config"
exit
action fc "l2" policer 1
exit
entry 20 create
match
src-ip 10.2.0.0/16
exit
action fc "af" policer 2
exit
entry 30 create
match
src-ip 10.3.0.0/16
exit
action fc "af"
exit
entry 1000 create
tag 1
match
src-ip ip-prefix-list "list1"
exit
action fc "l1"
exit
entry 2000 create
tag 2
match
src-ip ip-prefix-list "list2"
exit
action fc "ef"
exit
exit
exit
exit
service
vprn 1 name "1" customer 1 create
interface "int" create
address 10.10.10.1/24
sap 1/1/1:1 create
ingress
sap-ingress "10"
exit
exit
exit
vprn 2 name "2" customer 1 create
interface "int" create
address 10.20.20.1/24
sap 1/1/1:2 create
ingress
sap-ingress "10"
criteria-overrides
ip-criteria
activate-entry-tag 1
ipv6-criteria
activate-entry-tag 1
exit
exit
exit
exit
exit
vprn 3 name "3" customer 1 create
interface "int" create
address 10/30/30.1/24
sap 1/1/1:3 create
ingress
sap-ingress "10"
criteria-overrides
ip-criteria activate-entry-tag 2
ipv6-criteria activate-entry-tag 2
exit
exit
exit
exit
exit
exit