10552 lines
242 KiB
Markdown
10552 lines
242 KiB
Markdown
|
<!-- Source: https://www.arista.com/en/um-eos/eos-traffic-management -->
|
|||
|
|
<!-- Scraped: 2026-03-06T20:43:49.294Z -->
|
|||
|
|
|
|||
|
|
# Traffic Management
|
|||
|
|
|
|||
|
|
|
|||
|
|
This chapter describes Traffic Management on Arista switches, including configuration
|
|||
|
|
instructions and command descriptions. Topics discussed by this chapter
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- Traffic Management Conceptual Overview
|
|||
|
|
|
|||
|
|
- Traffic Management Configuration Trident Platform
|
|||
|
|
Switches
|
|||
|
|
|
|||
|
|
- Traffic Management Configuration Trident II
|
|||
|
|
Platform Switches
|
|||
|
|
|
|||
|
|
- Traffic Management Configuration
|
|||
|
|
Commands
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Conceptual
|
|||
|
|
Overview
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic is managed through policy maps that apply data shaping methods to specific data streams.
|
|||
|
|
A policy map is a data structure that identifies specific data streams and
|
|||
|
|
then defines shaping parameters that modify packets within the streams. The
|
|||
|
|
switch defines four types of policies:
|
|||
|
|
|
|||
|
|
- Control Plane
|
|||
|
|
Policies: Control plane policy maps are
|
|||
|
|
applied to the control plane.
|
|||
|
|
|
|||
|
|
- QoS Policies: QoS policy
|
|||
|
|
maps are applied to Ethernet and port channel
|
|||
|
|
interfaces.
|
|||
|
|
|
|||
|
|
- Segment Routing Traffic Engineering Policy (SR-TE).
|
|||
|
|
|
|||
|
|
- PBR Policies: PBR policy
|
|||
|
|
maps are applied to Ethernet interfaces, port channel
|
|||
|
|
interfaces and switch virtual interfaces (SVIs).
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map consists of classes. Each class contains an eponymous class map and traffic
|
|||
|
|
resolution commands.
|
|||
|
|
|
|||
|
|
- A class map is a data structure that defines a data stream by
|
|||
|
|
specifying characteristics of data packets that comprise
|
|||
|
|
that stream. Each class map is typed as either QoS, control
|
|||
|
|
plane, or PBR and is available only to identically typed
|
|||
|
|
policy maps.
|
|||
|
|
|
|||
|
|
- Traffic resolution commands specify data handling methods for
|
|||
|
|
traffic that matches a class map. Traffic resolution options
|
|||
|
|
vary by policy map type.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Data packets that enter an entity to which
|
|||
|
|
a policy map is assigned are managed with traffic resolution commands
|
|||
|
|
of the first class that matches the packets.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Control Plane Policies
|
|||
|
|
|
|||
|
|
|
|||
|
|
The switch defines one control plane policy map named ***copp-system-policy***. The
|
|||
|
|
***copp-system-policy*** policy map always applies to the control plane
|
|||
|
|
and cannot be removed from the switch. Other control plane policy maps cannot be added.
|
|||
|
|
**Copp-system-policy** consists of preconfigured classes, each containing a
|
|||
|
|
static class map and traffic resolution commands. Preconfigured classes cannot be
|
|||
|
|
removed from ***copp-system-policy***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The switch provides static class maps and you cannot modify or delete them. The switch uses a
|
|||
|
|
naming convention of static class maps as ***copp-system-***
|
|||
|
|
*name*, where *name* differentiates the class maps. Static class maps have
|
|||
|
|
pre-defined internal conditions, not based on ACLs, and only listed in
|
|||
|
|
***running-config*** as components of ***copp-system-policy***.
|
|||
|
|
The sequence of static class maps in the policy map is not significant. Traffic
|
|||
|
|
resolution commands define minimum (bandwidth) and maximum (shape) transmission rates
|
|||
|
|
for data streams matching the corresponding class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
***Copp-system-policy*** can be modified through the following steps:
|
|||
|
|
|
|||
|
|
- Add classes consisting of an eponymous dynamic class map and traffic resolution
|
|||
|
|
commands.
|
|||
|
|
Create, edit, or delete dynamic class maps, and filter traffic
|
|||
|
|
with a single IPv4 ACL, and list in
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
- Change traffic resolution commands for a preconfigured class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following section describes control plane traffic policy configuration procedures:
|
|||
|
|
|
|||
|
|
- Configuring Control Plane Traffic Policies Trident Platform
|
|||
|
|
Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
### QoS Policies
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS policy maps are user defined.
|
|||
|
|
The switch does not provide preconfigured QoS policy maps and in the
|
|||
|
|
default configuration, policy maps are not applied to any Ethernet or
|
|||
|
|
port channel interface. Policy maps and class maps are created and applied
|
|||
|
|
to interfaces through configuration commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A QoS policy map is composed of one or more classes. Each class contains an eponymous dynamic
|
|||
|
|
class map and traffic resolution commands. Dynamic class maps are
|
|||
|
|
user created, can be edited or deleted, filter traffic with a
|
|||
|
|
single IPv4 ACL, and are listed in
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic resolution commands perform one of the following:
|
|||
|
|
|
|||
|
|
- Set the Layer 2 CoS field
|
|||
|
|
|
|||
|
|
- Set the DSCP value in the ToS byte
|
|||
|
|
|
|||
|
|
- Specify a traffic class queue
|
|||
|
|
|
|||
|
|
|
|||
|
|
The last class in all QoS policy maps is ***class-default***, which is composed as
|
|||
|
|
follows:
|
|||
|
|
|
|||
|
|
- The ***class-default*** class map matches all traffic except IPv4 or
|
|||
|
|
IPv6 traffic and is not editable.
|
|||
|
|
|
|||
|
|
- By default, ***class-default*** class contains no traffic resolution
|
|||
|
|
commands. Traffic resolution commands can be added through
|
|||
|
|
configuration commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Data packets that enter an interface to which
|
|||
|
|
a policy map is assigned are managed with traffic resolution commands
|
|||
|
|
that correspond to the first class that matches the packet.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These sections describe QoS traffic policy configuration procedures:
|
|||
|
|
|
|||
|
|
- Configuring QoS Traffic Policies Arad Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring QoS Traffic Policies FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring QoS Traffic Policies Petra Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring QoS Traffic Policies Trident Platform
|
|||
|
|
Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Segment Routing Traffic Engineering Policy (SR-TE)
|
|||
|
|
|
|||
|
|
|
|||
|
|
Segment Routing Traffic Engineering Policy (SR-TE) policy uses Segment Routing
|
|||
|
|
(SR) to enable a headend to steer traffic along any path without maintaining
|
|||
|
|
per flow state in every node based on the policy. Configuring SR policy for
|
|||
|
|
the MPLS dataplane (SR-MPLS) for Type-1 SR policy segments with BGP and
|
|||
|
|
locally configured policies as sources of SR policy is available on DCS-7500
|
|||
|
|
and DCS-7280 family of switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### SR Policy Overview
|
|||
|
|
|
|||
|
|
**SR
|
|||
|
|
Policy Identification**The following identifies an SR
|
|||
|
|
policy.
|
|||
|
|
|
|||
|
|
- **Endpoint** - An IPv4 or IPv6 address which
|
|||
|
|
refers to the destination of the policy. EOS
|
|||
|
|
allows 0/0 and 0:: and calls these IP addresses
|
|||
|
|
*null endpoints*.
|
|||
|
|
|
|||
|
|
- **Color** - An unsigned 32-bit opaque
|
|||
|
|
numerical quantity. Define the semantic of a color
|
|||
|
|
as you prefer. It can refer to, for instance, an
|
|||
|
|
application or a type of traffic, such as low
|
|||
|
|
latency, or a geographical location.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**SR Policy
|
|||
|
|
Constituents**The SR policy consists of *candidate
|
|||
|
|
paths*. Each candidate path has the following.
|
|||
|
|
|
|||
|
|
- **SID-lists (SLs)** - An ordered list of
|
|||
|
|
Segment Identifiers. Each SID provides a MPLS
|
|||
|
|
label in the MPLS instantiation of SR). An SL
|
|||
|
|
encodes one path from the headend to the
|
|||
|
|
destination. Each SL has an optional weight
|
|||
|
|
attached to it for the purpose of Unequal Cost
|
|||
|
|
Multipath (UCMP) traffic distribution. The default
|
|||
|
|
value for SL weight is
|
|||
|
|
**1**.
|
|||
|
|
|
|||
|
|
- **Preference** - An optional, unsigned 32-bit
|
|||
|
|
integer used in the candidate path selection
|
|||
|
|
algorithm to select the *active* candidate
|
|||
|
|
path. The default value for preference is
|
|||
|
|
**100**.
|
|||
|
|
|
|||
|
|
- **Binding SID (BSID)** - an optional
|
|||
|
|
SID.Note: In EOS, a BSID is mandatory for each
|
|||
|
|
candidate path.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**SR Policy
|
|||
|
|
Sources**A headend learns SR policies using the
|
|||
|
|
following methods:
|
|||
|
|
|
|||
|
|
- **BGP**
|
|||
|
|
|
|||
|
|
- Single agent routing model (Ribd)
|
|||
|
|
|
|||
|
|
- Multi-agent routing model
|
|||
|
|
|
|||
|
|
- **Local configuration using CLI**
|
|||
|
|
|
|||
|
|
- Single agent routing model (Ribd)
|
|||
|
|
|
|||
|
|
- Multi-agent routing model
|
|||
|
|
|
|||
|
|
- Openconfig YANG models
|
|||
|
|
|
|||
|
|
- **PCEP**Note: EOS does not support
|
|||
|
|
PCEP.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Identity of a Candidate
|
|||
|
|
Path**
|
|||
|
|
|
|||
|
|
A candidate path within an SR policy is
|
|||
|
|
identified by a 3-tuple of {Protocol-Origin, Originator,
|
|||
|
|
Discriminator}. In EOS, for locally configured policies:
|
|||
|
|
|
|||
|
|
- The ASN in the Originator set to 0.
|
|||
|
|
|
|||
|
|
- The node address in the Originator set to
|
|||
|
|
**0.0.0.0**.
|
|||
|
|
|
|||
|
|
- The discriminator set to the Preference
|
|||
|
|
configured.Note: EOS CLI allows configuring only
|
|||
|
|
one candidate path at a given preference and does
|
|||
|
|
not allow configuring the discriminator for a
|
|||
|
|
candidate path.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**State of an SID List (SL)**
|
|||
|
|
|
|||
|
|
The following
|
|||
|
|
describes the state of an SL:
|
|||
|
|
|
|||
|
|
- **Valid** - The top label of the SL resolves within
|
|||
|
|
the LFIB to the outgoing next hop(s), interface(s)
|
|||
|
|
and a label action.
|
|||
|
|
|
|||
|
|
- **Invalid** - The top label of the SL unresolvable to
|
|||
|
|
the outgoing next hop(s), interface(s) and a label
|
|||
|
|
action. An SL is also marked as invalid when the SL
|
|||
|
|
is resolvable, but the resolved labeled stack
|
|||
|
|
exceeds the platform’s maximum SID depth (SID), that
|
|||
|
|
is, exceeds the maximum number of labels the
|
|||
|
|
platform can push in to the outgoing
|
|||
|
|
packet.Note: The state is either
|
|||
|
|
valid or
|
|||
|
|
invalid.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**State of a Candidate Path**
|
|||
|
|
|
|||
|
|
The following
|
|||
|
|
describes the states of a candidate path.
|
|||
|
|
|
|||
|
|
- **Invalid** - Not eligible to participate in the
|
|||
|
|
best/active candidate path selection algorithm
|
|||
|
|
because of one of the reasons below.
|
|||
|
|
|
|||
|
|
- Invalid constituent SLs in the candidate
|
|||
|
|
path.
|
|||
|
|
|
|||
|
|
- No Binding SID present in the candidate
|
|||
|
|
path.
|
|||
|
|
|
|||
|
|
- Binding SIDpresent but outside SRLB range for
|
|||
|
|
the candidate path.
|
|||
|
|
|
|||
|
|
- **Valid** - At least one valid SL has lost out to
|
|||
|
|
some other candidate path in the best / active
|
|||
|
|
candidate path selection algorithm.
|
|||
|
|
|
|||
|
|
- **Active**: - A valid candidate path exists and wins
|
|||
|
|
the best / active candidate path selection
|
|||
|
|
algorithm. The active candidate path installs in the
|
|||
|
|
switch hardware and forwards traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**State of an SR Policy**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EOS considers an SR
|
|||
|
|
policy as *valid* when at least one of its candidate paths is
|
|||
|
|
valid. Otherwise, the SR policy is
|
|||
|
|
*invalid*.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Resolution of an SL**
|
|||
|
|
|
|||
|
|
|
|||
|
|
An SL
|
|||
|
|
resolves if the top label (first SID) can be resolved in the system
|
|||
|
|
Labeled FIB (LFIB) to yield a nexthop and outgoing interface(s). The
|
|||
|
|
other labels in the SID-List do not play a part in
|
|||
|
|
resolution.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Best Candidate Path (Active Candidate
|
|||
|
|
Path) Selection Algorithm**
|
|||
|
|
|
|||
|
|
EOS overrides selection
|
|||
|
|
based on discriminator by retaining the current active candidate
|
|||
|
|
path even when current active path has a lower discriminator value.
|
|||
|
|
This reduces the active path flap when a new path appears with the
|
|||
|
|
same significance. The following lists a summary of valid candidate
|
|||
|
|
paths ordering for a given policy.
|
|||
|
|
|
|||
|
|
- The candidate path with higher preference selected.
|
|||
|
|
|
|||
|
|
- Locally configured candidate path selected over a BGP
|
|||
|
|
learned path
|
|||
|
|
|
|||
|
|
- Lower originator selected in the following instances:
|
|||
|
|
|
|||
|
|
- Lower AS number of Originator field
|
|||
|
|
selected.
|
|||
|
|
|
|||
|
|
- Lower Node address of Originator field
|
|||
|
|
selected.
|
|||
|
|
|
|||
|
|
- Current active candidate path selected in the following
|
|||
|
|
instances:
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following displays the reason for not selecting a
|
|||
|
|
path as an active path for a specified policy.
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch#**show traffic-engineering segment-routing policy endpoint <endpoint> color <color>**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Binding SID**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following describes the use cases for the Binding
|
|||
|
|
SID:
|
|||
|
|
|
|||
|
|
- Stitch together multiple domains.
|
|||
|
|
|
|||
|
|
- Stitch together different traffic tunnels .
|
|||
|
|
|
|||
|
|
- Overcome label stack imposition limitation in hardware.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**BSID Conflict
|
|||
|
|
Handling**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **Between Policies** - If the policy (E1, C1) becomes
|
|||
|
|
eligible to be active first, then it installs in the LFIB
|
|||
|
|
and the policy (E2,C2) whose best path(CP1) conflicts with
|
|||
|
|
the Policy (E1, C1) and does not become active.
|
|||
|
|
|
|||
|
|
- Policy(E1, C1): CP1: Binding-SID 965536 (wins
|
|||
|
|
best path)
|
|||
|
|
|
|||
|
|
- Policy(E2, C2): CP1: Binding-SID 965536 (wins
|
|||
|
|
best path)
|
|||
|
|
|
|||
|
|
- CP2: Binding-SID 965537
|
|||
|
|
|
|||
|
|
- **with another Application**: The SR-TE policies have the
|
|||
|
|
lowest preference when a conflict exists with any other
|
|||
|
|
application in EOS using the SRLB range. The candidate paths
|
|||
|
|
with the same binding-SID as that of an LFIB entry by
|
|||
|
|
another application, for example, static adjacency segment,
|
|||
|
|
remains invalid.
|
|||
|
|
|
|||
|
|
|
|||
|
|
In both the cases, when the conflict no longer exists, the candidate
|
|||
|
|
paths re-evaluate and may become active.
|
|||
|
|
|
|||
|
|
**BGP as a
|
|||
|
|
Source of Policies**
|
|||
|
|
SR Policies from a BGP
|
|||
|
|
peer (a controller, route reflector) received for installation at
|
|||
|
|
the headend by EOS. It does not propagate the received policies to
|
|||
|
|
BGP peers nor does it originate SR Policies for transmission to BGP
|
|||
|
|
peers.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following supports IPv4 or IPv6 peers which can be
|
|||
|
|
single hop or multi-hop iBGP or eBGP peers.
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **SAFI 73 for AFI 1 and AFI 2**: IPv4 and IPv6 policy
|
|||
|
|
endpoints, with the encoding defined in section 2.1 of
|
|||
|
|
****Advertising Segment Routing Policies
|
|||
|
|
in BGP****.Note: The nexthop
|
|||
|
|
address-family must match the AFI of the
|
|||
|
|
NLRI.
|
|||
|
|
|
|||
|
|
- **Sub-TLVs of Tunnel Encapsulation TLV of type 15 (SR-TE Policy
|
|||
|
|
Type) of the Tunnel Encapsulation Path Attribute**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- Preference (Sub-TLV Type 12)
|
|||
|
|
|
|||
|
|
- Binding SID (Sub-TLV Type 13) of length
|
|||
|
|
**2** or
|
|||
|
|
**6** bytes
|
|||
|
|
|
|||
|
|
- Segment List (Sub-TLV Type 128). The following
|
|||
|
|
Segment List sub-TLVs are supported:
|
|||
|
|
|
|||
|
|
- Type 1 Segment (Sub-TLV type 1)
|
|||
|
|
|
|||
|
|
- Weight (Sub-TLV type 9)
|
|||
|
|
|
|||
|
|
- Explicit NULL Label Policy (Sub-TLV Type
|
|||
|
|
14)
|
|||
|
|
|
|||
|
|
- SR Prefix SID (sub TLV 3 of TLV 149, TLV
|
|||
|
|
150)
|
|||
|
|
|
|||
|
|
- SR Range - Contents of TLV 149, TLV 150
|
|||
|
|
(multi-topology)
|
|||
|
|
|
|||
|
|
|
|||
|
|
Note: EOS ignores all other sub-TLVs of the Tunnel Encapsulation TLV
|
|||
|
|
and Segment List sub-TLVs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Route-Target and NO_ADVERTISE Community in SR-TE SAFI
|
|||
|
|
Updates**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EOS implements the Acceptance and Usability checks as defined in
|
|||
|
|
sections 4.2.1 and 4.2.2 of the IETF draft [Advertising Segment
|
|||
|
|
Routing Policies in BGP](https://datatracker.ietf.org/doc/html/draft-ietf-idr-segment-routing-te-policy-02). However EOS skips
|
|||
|
|
matching the Route-Target with the router-ID of the headend
|
|||
|
|
if the SR-TE NLRI is tagged with
|
|||
|
|
**NO_ADVERTISE**
|
|||
|
|
community.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**ECMP does not support SR-TE SAFI Paths**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EOS does not support ECMP for BGP SR-TE SAFI. The BGP path
|
|||
|
|
selects only one best candidate path and publishes it to
|
|||
|
|
SR-TE Policy Agent for candidate path selection. Note: EOS
|
|||
|
|
supports ECMP of BGP next hops where each next hop
|
|||
|
|
resolves to an SR-TE policy.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Path Selection within BGP**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The IETF draft **[Advertising Segment
|
|||
|
|
Routing Policies in BGP](https://datatracker.ietf.org/doc/html/draft-ietf-idr-segment-routing-te-policy-02)** supports
|
|||
|
|
passing multiple candidate paths from a single protocol
|
|||
|
|
source for an SR-TE policy path selection. Therefore, it
|
|||
|
|
includes a field distinguisher in the NLRI which can be
|
|||
|
|
unique for each controller to make BGP pass through the
|
|||
|
|
policies. However when multiple sources use the same
|
|||
|
|
distinguisher, BGP performs a path selection for the tuple:
|
|||
|
|
Endpoint, Color and Distinguisher. The best path for that
|
|||
|
|
tuple publishes to the SR-TE Policy Agent for selecting an
|
|||
|
|
Active path. The best
|
|||
|
|
**bgp-best-path** selection
|
|||
|
|
applies to SR-TE SAFI as well.
|
|||
|
|
|
|||
|
|
|
|||
|
|
*Error Handling / Edge Cases*
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **Weight 0**: The IETF draft does not limit the range
|
|||
|
|
of SL weight to exclude weight 0. A SID-List with
|
|||
|
|
weight 0 is not used for forwarding so BGP module in
|
|||
|
|
EOS does not pass on SID-Lists with weight 0 to the
|
|||
|
|
SR-TE policy agent. Such SID-Lists will be visible
|
|||
|
|
in **show bgp sr-te** commands
|
|||
|
|
but not in **show traffic-engineering
|
|||
|
|
segment-routing policy**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
- **Empty SLs**: Given the TLV encoding used to
|
|||
|
|
propagate SR Policies in BGP, it is possible to
|
|||
|
|
receive SID-Lists without SIDs. The BGP module in
|
|||
|
|
EOS does not pass empty SID-Lists to SR-TE policy
|
|||
|
|
agent. Such SID-Lists are visible in
|
|||
|
|
**show bgp sr-te** commands
|
|||
|
|
but not in **show traffic-engineering
|
|||
|
|
segment-routing policy**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
- **Non Type 1 segments**: EOS supports only Type-1
|
|||
|
|
segments. When receiving a BGP update with a
|
|||
|
|
SID-List that has non Type-1 segments, EOS ignores
|
|||
|
|
the entire SID-List and sends a
|
|||
|
|
`**BGP-4-SRTE_IGNORED_SEGMENT_LIST_UNSUPPORTED_SEGMENTS**`
|
|||
|
|
syslog. Such SID-Lists are not stored locally, and
|
|||
|
|
**show bgp sr-te** command
|
|||
|
|
does not display them. Note: The SID-Lists made up
|
|||
|
|
of all Type-1 segments pass to the SR-TE policy
|
|||
|
|
agent.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Steering Traffic into a Policy**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Incoming label as BSID - Labelled Steering**
|
|||
|
|
|
|||
|
|
|
|||
|
|
At
|
|||
|
|
the headend when receiving a packet with a label stack with a BSID
|
|||
|
|
of an active CP of a valid SR Policy as the top label, the headend
|
|||
|
|
pops the label, and imposes the resolved label stack on the outgoing
|
|||
|
|
packet.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
For instance, an SR Policy with
|
|||
|
|
an active candidate path with BSID **965536**
|
|||
|
|
and SL with label stack [**965540**,
|
|||
|
|
**900001**,
|
|||
|
|
**900002**]. Assume that
|
|||
|
|
**965540** is an IS-IS SR
|
|||
|
|
Adjacency SID. An incoming packet has a label stack
|
|||
|
|
[**965536**,
|
|||
|
|
**100000**] then the outgoing
|
|||
|
|
label stack consists of [**900001**,
|
|||
|
|
**900002**,
|
|||
|
|
**100000**].
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Steering BGP learnt IP(v6) prefixes - IP Steering**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Incoming label is BSID - Labelled Steering**
|
|||
|
|
|
|||
|
|
|
|||
|
|
At
|
|||
|
|
the headend, BGP IPv4 and IPv6 routes receive one or more extended
|
|||
|
|
color communities and recursively resolves them through any active
|
|||
|
|
SR Policy that matches the BGP routes’ nexthop and color. When
|
|||
|
|
receiving an IPv4 or IPv6 packet forwarded using this policy, the
|
|||
|
|
SL’s resolved label stack imposes on the outgoing packet.
|
|||
|
|
|
|||
|
|
|
|||
|
|
For
|
|||
|
|
BGP routes received with color community to be steered via an SR
|
|||
|
|
policy, the route’s nexthop must already be resolvable through IGP.
|
|||
|
|
If no resolving route exists in IGP, the route is considered
|
|||
|
|
unresolvable and does not program in hardware even if a matching SR
|
|||
|
|
policy existsfor the corresponding nexthop and color.
|
|||
|
|
|
|||
|
|
If no
|
|||
|
|
matching SR policy exists for the received BGP nexthop and color,
|
|||
|
|
the route resolves through the IGP route in IP RIB. If an active SR
|
|||
|
|
policy that matches the BGP nexthop and color gets instantiated at a
|
|||
|
|
later time, the BGP route changes from resolving through IGP to the
|
|||
|
|
new active SR policy. Note: The recursion through SR policy is only
|
|||
|
|
applicable for active BGP routes in RIB.
|
|||
|
|
|
|||
|
|
**Color only IP steering
|
|||
|
|
using CO bits**
|
|||
|
|
|
|||
|
|
|
|||
|
|
It is possible to relax the
|
|||
|
|
requirement of an exact match of the BGP route’s nexthop with the
|
|||
|
|
endpoint of the SR Policy using the “CO” (Color Only) bits in the
|
|||
|
|
color extended community. The “CO” bits are 2 reserved bits
|
|||
|
|
repurposed for color only steering as defined in section 3 of [Advertising Segment Routing
|
|||
|
|
Policies in BGP](https://datatracker.ietf.org/doc/html/draft-ietf-idr-segment-routing-te-policy-02). The exact match of the nexthop is
|
|||
|
|
done with the CO bits set to 00 or 11.
|
|||
|
|
|
|||
|
|
**CO = 01
|
|||
|
|
Steering**: relaxes the nexthop to match the null endpoint of a
|
|||
|
|
policy. For a BGP route with nexthop N and color C, the following
|
|||
|
|
order is used for resolution. If there is no IGP route resolving the
|
|||
|
|
BGP nexthop, the route is not programmed in hardware.
|
|||
|
|
|
|||
|
|
- Active SR policy with endpoint N and color C
|
|||
|
|
|
|||
|
|
- Active SR policy with null endpoint (from the same AFI
|
|||
|
|
as the BGP route) and color C
|
|||
|
|
|
|||
|
|
- Active SR policy with null endpoint from any AFI and
|
|||
|
|
color C
|
|||
|
|
|
|||
|
|
- IGP route
|
|||
|
|
|
|||
|
|
|
|||
|
|
**CO = 10 Steering**: in addition to the steps in CO
|
|||
|
|
= **01** steering, CO =
|
|||
|
|
**10** additionally relaxes
|
|||
|
|
the nexthop to match *any* endpoint. The following order is
|
|||
|
|
used for resolving a BGP route with nexthop N and color C. The
|
|||
|
|
behavior described is in accordance with section 8.8.1 of the IETF
|
|||
|
|
draft [Segment Routing Policy for
|
|||
|
|
Traffic Engineering](https://datatracker.ietf.org/doc/html/draft-filsfils-spring-segment-routing-policy-05).
|
|||
|
|
|
|||
|
|
|
|||
|
|
- Active SR policy with endpoint N and color C
|
|||
|
|
|
|||
|
|
- Active SR policy with null endpoint (from the same AFI
|
|||
|
|
as the BGP route) and color C
|
|||
|
|
|
|||
|
|
- Active SR policy with null endpoint from any AFI and
|
|||
|
|
color C
|
|||
|
|
|
|||
|
|
- Active SR policy for any endpoint from the same AFI as
|
|||
|
|
the BGP route and color C
|
|||
|
|
|
|||
|
|
- Active SR policy for any endpoint from any AFI and color
|
|||
|
|
C
|
|||
|
|
|
|||
|
|
- IGP route
|
|||
|
|
|
|||
|
|
|
|||
|
|
**ECMP of IPv4/IPv6 Prefixes that Resolve over SR-TE
|
|||
|
|
Policies**
|
|||
|
|
|
|||
|
|
|
|||
|
|
When multiple BGP paths of BGP unicast prefixes resolve through
|
|||
|
|
active SR policies form ECMP, the resulting FIB entry for
|
|||
|
|
the BGP route has an ECMP of segment list paths which is a
|
|||
|
|
union of all the segments-list entries present in each of
|
|||
|
|
the resolving SR policies for the BGP paths.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following table displays four paths for prefix
|
|||
|
|
**192.1.0.0/31**, and each
|
|||
|
|
of the four paths resolves via SR-TE policies.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Table 1. List of Paths Resolved via SR-TE Policies
|
|||
|
|
|
|||
|
|
| Path
|
|||
|
|
| Nexthop
|
|||
|
|
| Color
|
|||
|
|
| Policy EP
|
|||
|
|
| Policy Color
|
|||
|
|
| Segment Lists
|
|||
|
|
| Per SL Traffic Distribution
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| 1
|
|||
|
|
| 1.0.0.2
|
|||
|
|
| CO(00):1000
|
|||
|
|
| 1.0.0.2
|
|||
|
|
| 1000
|
|||
|
|
| [2500 500], Weight: 1
|
|||
|
|
[2501 500],
|
|||
|
|
Weight: 2
|
|||
|
|
| 8.33%
|
|||
|
|
16.66%
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| 2
|
|||
|
|
| 1.0.2.2
|
|||
|
|
| CO(00):2000
|
|||
|
|
| 1.0.2.2
|
|||
|
|
| 2000
|
|||
|
|
| [2502 500], Weight: 1
|
|||
|
|
[2503 500],
|
|||
|
|
Weight: 1
|
|||
|
|
| 12.5%
|
|||
|
|
12.5%
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| 3
|
|||
|
|
| 1.0.4.2
|
|||
|
|
| CO(00):3000
|
|||
|
|
| 1.0.4.2
|
|||
|
|
| 3000
|
|||
|
|
| [2504 500], Weight: 1
|
|||
|
|
[2505 500],
|
|||
|
|
Weight: 1
|
|||
|
|
| 12.5%
|
|||
|
|
12.5%
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| 4
|
|||
|
|
| 1.0.6.2
|
|||
|
|
| CO(00):4000
|
|||
|
|
| 1.0.6.2
|
|||
|
|
| 4000
|
|||
|
|
| [2506 500], Weight: 1
|
|||
|
|
[2507 500],
|
|||
|
|
Weight: 1
|
|||
|
|
| 12.5%
|
|||
|
|
12.5%
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`B I 192.1.0.0/31 [200/0] via SR-TE Policy 1.0.4.2, color 3000
|
|||
|
|
via SR-TE tunnel index 6, weight 1
|
|||
|
|
via 1.0.4.2, Ethernet1, label 2505 500
|
|||
|
|
via SR-TE tunnel index 5, weight 1
|
|||
|
|
via 1.0.4.2, Ethernet1, label 2504 500
|
|||
|
|
via SR-TE Policy 1.0.0.2, color 1000
|
|||
|
|
via SR-TE tunnel index 2, weight 1
|
|||
|
|
via 1.0.0.2, Ethernet2, label 2501 500
|
|||
|
|
via SR-TE tunnel index 1, weight 1
|
|||
|
|
via 1.0.0.2, Ethernet2, label 2500 500
|
|||
|
|
via SR-TE Policy 1.0.2.2, color 2000
|
|||
|
|
via SR-TE tunnel index 4, weight 1
|
|||
|
|
via 1.0.2.2, Ethernet3, label 2503 500
|
|||
|
|
via SR-TE tunnel index 3, weight 1
|
|||
|
|
via 1.0.2.2, Ethernet3, label 2502 500
|
|||
|
|
via SR-TE Policy 1.0.6.2, color 4000
|
|||
|
|
via SR-TE tunnel index 8, weight 1
|
|||
|
|
via 1.0.6.2, Ethernet6, label 2507 500
|
|||
|
|
via SR-TE tunnel index 7, weight 1
|
|||
|
|
via 1.0.6.2, Ethernet6, label 2506 500`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The traffic distribution honors the weights of the SID-Lists. In
|
|||
|
|
the example, each of the four SR Policies will get
|
|||
|
|
**25%** of the total traffic
|
|||
|
|
meant for prefix **192.1.0.0/31**.
|
|||
|
|
Within each policy, the distribution is based on the weights
|
|||
|
|
of the SID-Lists.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**ECMP Group when some BGP unicast paths resolve over SR
|
|||
|
|
Policies and some via non SR Policy IGP
|
|||
|
|
paths**
|
|||
|
|
|
|||
|
|
|
|||
|
|
If some BGP paths resolve via SR Policy paths and some BGP paths
|
|||
|
|
resolve via non SR Policy IGP, then the ECMP group formed
|
|||
|
|
programmed as the active route in FIB, only considers the SR
|
|||
|
|
Policy paths. ECMP in the FIB is not formed between paths
|
|||
|
|
that resolve over SR Policy and paths that resolve via non
|
|||
|
|
SR Policy IGP routes. In the example above, if SR Policy
|
|||
|
|
with endpoint **1.0.6.2** and color
|
|||
|
|
**4000** becomes inactive or
|
|||
|
|
is removed, the FIB path for
|
|||
|
|
**192.1.0.0/31** resolves
|
|||
|
|
via 3 SR Policies as shown below.
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`B I 192.1.0.0/31 [200/0] via SR-TE Policy 1.0.4.2, color 3000
|
|||
|
|
via SR-TE tunnel index 6, weight 1
|
|||
|
|
via 1.0.4.2, Ethernet1, label 2505 500
|
|||
|
|
via SR-TE tunnel index 5, weight 1
|
|||
|
|
via 1.0.4.2, Ethernet1, label 2504 500
|
|||
|
|
via SR-TE Policy 1.0.0.2, color 1000
|
|||
|
|
via SR-TE tunnel index 2, weight 1
|
|||
|
|
via 1.0.0.2, Ethernet2, label 2501 500
|
|||
|
|
via SR-TE tunnel index 1, weight 1
|
|||
|
|
via 1.0.0.2, Ethernet2, label 2500 500
|
|||
|
|
via SR-TE Policy 1.0.2.2, color 2000
|
|||
|
|
via SR-TE tunnel index 4, weight 1
|
|||
|
|
via 1.0.2.2, Ethernet3, label 2503 500
|
|||
|
|
via SR-TE tunnel index 3, weight 1
|
|||
|
|
via 1.0.2.2, Ethernet3, label 2502 500`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Note: [**show ip
|
|||
|
|
bgp**](/um-eos/eos-border-gateway-protocol-bgp#xx1117919) still shows a 4-way ECMP.
|
|||
|
|
The FIB paths switch to resolving via the (non SR Policy)
|
|||
|
|
IGP paths when there are no BGP paths in the ECMP group that
|
|||
|
|
resolve via an SR Policy.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**UCMP of IPv4/IPv6 prefixes using LinkBandwidth (LBW) Extended
|
|||
|
|
Community that resolve over SR-TE policies not
|
|||
|
|
supported**
|
|||
|
|
|
|||
|
|
|
|||
|
|
When multiple BGP paths of BGP unicast prefixes resolve through
|
|||
|
|
active SR policies form ECMP, and the unicast paths also
|
|||
|
|
contain the LBW extended community, EOS does not form UCMP
|
|||
|
|
amongst the unicast paths. Only ECMP is formed at the
|
|||
|
|
unicast prefix level. The LBW is ignored the behavior is
|
|||
|
|
identical to the behavior explained in the previous
|
|||
|
|
section.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Resolution of BGP unicast prefixes that resolve over other BGP
|
|||
|
|
unicast prefixes resolved via SR Policies**
|
|||
|
|
|
|||
|
|
|
|||
|
|
A BGP unicast prefix P1, that is recursively resolved via another
|
|||
|
|
BGP prefix P2, such that P2 resolves via an SR Policy, then
|
|||
|
|
in the FIB, P1 is programmed with the resolved nexthop
|
|||
|
|
pointing to the non SR Policy resolution of P2. P1 does not
|
|||
|
|
use P2s SR Policy for forwarding.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Explicit Null Label Imposition**
|
|||
|
|
|
|||
|
|
|
|||
|
|
When the address family of the BGP unicast prefix is
|
|||
|
|
not the same as the address family of the endpoint of the SR
|
|||
|
|
Policy that the unicast prefixes resolves via, an explicit
|
|||
|
|
null label is automatically imposed in the outgoing label
|
|||
|
|
stack.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
If an IPv4 unicast prefix **P1** resolves
|
|||
|
|
over a policy whose endpoint **EP1**
|
|||
|
|
is an IPv6 address (this can happen due to color only
|
|||
|
|
CO=01/10 steering with **P1** having
|
|||
|
|
an IPv4 nexthop) and the SR Policy had a SID-List whose
|
|||
|
|
resolved label stack is [**1001**,
|
|||
|
|
**1002**,
|
|||
|
|
**1003**], the outgoing
|
|||
|
|
packet is imposed with [**1001**,
|
|||
|
|
**1002**,
|
|||
|
|
**1003**,
|
|||
|
|
**2**] where
|
|||
|
|
**0** is the IPv4 explicit
|
|||
|
|
null label.
|
|||
|
|
|
|||
|
|
|
|||
|
|
If an IPv6 prefix **P2**, resolves over a
|
|||
|
|
policy whose endpoint **EP2** is an
|
|||
|
|
IPv4 address (this can happen with color only CO=01/10
|
|||
|
|
steering with **P2** having a IPv6
|
|||
|
|
nexthop) and the SR Policy had a SID-List whose resolved
|
|||
|
|
label stack is [**1001**,
|
|||
|
|
**1002**,
|
|||
|
|
**1003**], the outgoing
|
|||
|
|
packet is imposed with [**1001**,
|
|||
|
|
**1002**,
|
|||
|
|
**1003**,
|
|||
|
|
**2**] where
|
|||
|
|
**2** is the IPv6 explicit
|
|||
|
|
null label.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following table lists the configurations which result in
|
|||
|
|
having explicit-null label in the resolved label stack.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Table 2. Configurations resulting in Explicit-Null Label in
|
|||
|
|
Resolved Label Stack
|
|||
|
|
|
|||
|
|
| ENLP configuration for the resolving SR
|
|||
|
|
Policy
|
|||
|
|
| IPv4 Prefixes
|
|||
|
|
| IPv6 Prefixes
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| None
|
|||
|
|
| -
|
|||
|
|
| -
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| IPv4
|
|||
|
|
| IPv4 explicit null appended to the end
|
|||
|
|
of label stack
|
|||
|
|
| -
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| IPv6
|
|||
|
|
| -
|
|||
|
|
| IPv6 explicit null appended to the end
|
|||
|
|
of label stack
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| Both
|
|||
|
|
| IPv4 explicit null appended to the end
|
|||
|
|
of label stack
|
|||
|
|
| IPv6 explicit null appended to the end
|
|||
|
|
of label stack
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| No/Default config (incase of
|
|||
|
|
BGP learnt policies ENLP Sub-TLV is not
|
|||
|
|
received)
|
|||
|
|
| Resolving SR Policy has IPv4 Endpoint
|
|||
|
|
address:
|
|||
|
|
No explicit-null
|
|||
|
|
| Resolving SR Policy has IPv4 Endpoint
|
|||
|
|
address:
|
|||
|
|
IPv6 explicit null appended to the end
|
|||
|
|
of label stack
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| Resolving SR Policy has IPv6 Endpoint
|
|||
|
|
address:
|
|||
|
|
IPv4 explicit null appended to the end
|
|||
|
|
of label stack
|
|||
|
|
| Resolving SR Policy has IPv6 Endpoint
|
|||
|
|
address:
|
|||
|
|
No explicit-null
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Traffic Accounting
|
|||
|
|
|
|||
|
|
|
|||
|
|
All egress tunnel counters (MPLS/GRE/MPLSoGRE using
|
|||
|
|
SR-TE/Nexthop-group/BGP-LU tunnel types) share the same hardware
|
|||
|
|
resource.
|
|||
|
|
|
|||
|
|
- **7280E/7500E systems**: Up to
|
|||
|
|
**16k** tunnels
|
|||
|
|
|
|||
|
|
- **7280R/7500R systems**: Up to
|
|||
|
|
**8k** tunnels
|
|||
|
|
|
|||
|
|
|
|||
|
|
Tunnel counters are allocated on a first-come, first-served
|
|||
|
|
basis. Configurations using GRE/MPLSoGRE, GRE, and MPLS further
|
|||
|
|
limit a maximum of 4k countable egress MPLS tunnels on
|
|||
|
|
7280R/7500R.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### FEC Optimizations
|
|||
|
|
|
|||
|
|
|
|||
|
|
The hardware FEC usage could be reduced as the underlying FEC is shared
|
|||
|
|
among different routes.
|
|||
|
|
|
|||
|
|
- Programming of the active candidate path of an SR-TE
|
|||
|
|
policy in hardware is shared between the BSID route
|
|||
|
|
and IP steering route.
|
|||
|
|
|
|||
|
|
- If all of the following conditions are met, ISIS-SR MPLS
|
|||
|
|
routes and tunnel entries directly point to the next
|
|||
|
|
hop FEC generated by the routing agent (IGP FEC).
|
|||
|
|
|
|||
|
|
- All the next hops of the MPLS route either
|
|||
|
|
point to pop or forward (i.e. swapping to the same
|
|||
|
|
label) label action.
|
|||
|
|
|
|||
|
|
- The switch is either a 7280 or a 7500
|
|||
|
|
platform.
|
|||
|
|
|
|||
|
|
- The corresponding SR-TE policy BSID routes (and
|
|||
|
|
corresponding Segment List tunnels) that resolve
|
|||
|
|
over ISIS-SR MPLS routes, will directly point to the
|
|||
|
|
IGP FEC.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Configuring SR-TE
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following commands start the **SrTePolicy**
|
|||
|
|
agent and enter the switch into the Traffic Engineering
|
|||
|
|
configuration
|
|||
|
|
sub-mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **router traffic-engineering**
|
|||
|
|
switch(config-te)# **segment-routing**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Note: The agent must be running even if the only source of policies is
|
|||
|
|
BGP.
|
|||
|
|
**Static Policy Configuration**
|
|||
|
|
The following commands set the policy using endpoint and color value, and
|
|||
|
|
define the BSID for the
|
|||
|
|
policy.
|
|||
|
|
```
|
|||
|
|
`switch(config-te-sr)# **policy endpoint *v4Address*|*v6Address* color *color-value***
|
|||
|
|
switch(config-te-sr-policy)# **binding-sid *mpls-label***
|
|||
|
|
switch(config-te-sr-policy)# **path-group preference *value***`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following commands enter the policy path configuration sub mode, and
|
|||
|
|
adds a segment list to the candidate
|
|||
|
|
path.
|
|||
|
|
```
|
|||
|
|
`switch(config-te-sr-policy)# **path-group preference *value***
|
|||
|
|
switch(config-te-sr-policy-path)# **segment-list label-stack** **label1 label2 …****weight *value***`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Note: The default weight value is **1**. Adding weight
|
|||
|
|
is optional. Repear the configuration statement for multiple segment
|
|||
|
|
lists per candidate path.
|
|||
|
|
|
|||
|
|
The following commands configures a null label
|
|||
|
|
policy.
|
|||
|
|
```
|
|||
|
|
`switch(config-te-sr-policy-path)# **explicit-null [none|ipv4|ipv6|both]**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Note: The null label policy configuration is optional.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**BGP configuration for SR-TE SAFI**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following commands configures a BGP router to activate a neighbor to
|
|||
|
|
negotiate and accept SR-TE address-family with this
|
|||
|
|
peer.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **router bgp <as>**
|
|||
|
|
switch(config-router-bgp)# **address-family ipv4|ipv6 sr-te**
|
|||
|
|
switch(config-router-bgp-af-srte)# **neighbor *neighbor* activate**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command configures an inbound route-map to filter or modify
|
|||
|
|
attributes on incoming SR-TE prefixes from the
|
|||
|
|
peer.
|
|||
|
|
```
|
|||
|
|
`switch(config-router-bgp-af-srte)# **neighbor *neighbor* route-map *routeMapName* in**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Configuring Egress SR-TE Traffic Accounting
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command enables egress traffic accounting for SR policies
|
|||
|
|
(also known as MPLS
|
|||
|
|
tunnels).
|
|||
|
|
```
|
|||
|
|
`switch(config)# **hardware counter feature mpls tunnel**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays current status of the MPLS
|
|||
|
|
counters.
|
|||
|
|
```
|
|||
|
|
`switch# **show hardware counter feature**
|
|||
|
|
Feature Direction Counter Resource (Engine)
|
|||
|
|
------------------ ---------------- --------------------------
|
|||
|
|
ACL-IPv4 out Jericho: 2, 3
|
|||
|
|
ACL in Jericho: 4, 5, 6, 7
|
|||
|
|
MPLS tunnel out Jericho: 8, 9`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command disables egress traffic accounting for SR
|
|||
|
|
policies.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **no hardware counter feature mpls tunnel**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays a summary information of SR-TE
|
|||
|
|
SAFI.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te summary**
|
|||
|
|
BGP summary information for VRF default
|
|||
|
|
Router identifier 100.1.1.2, local AS number 100
|
|||
|
|
Neighbor Status Codes: m - Under maintenance
|
|||
|
|
Neighbor V AS MsgRcvd MsgSent InQ OutQ Up/Down State PfxRcd PfxAcc
|
|||
|
|
100.1.1.1 4 100 407 413 0 0 00:18:57 Estab 1 1
|
|||
|
|
1000::1 4 100 407 413 0 0 00:18:57 Estab 1 1`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays a summary information of candidate paths
|
|||
|
|
received from neighbors which have negotiated AFI=1 for SR-TE
|
|||
|
|
SAFI.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te ipv4 summary**
|
|||
|
|
BGP summary information for VRF default
|
|||
|
|
Router identifier 100.1.1.2, local AS number 100
|
|||
|
|
Neighbor Status Codes: m - Under maintenance
|
|||
|
|
Neighbor V AS MsgRcvd MsgSent InQ OutQ Up/Down State PfxRcd PfxAcc
|
|||
|
|
100.1.1.1 4 100 407 413 0 0 00:18:57 Estab 0 0`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays a summary information of candidate paths
|
|||
|
|
received from neighbors which have negotiated AFI=2 for SR-TE
|
|||
|
|
SAFI.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te ipv6 summary**
|
|||
|
|
BGP summary information for VRF default
|
|||
|
|
Router identifier 100.1.1.2, local AS number 100
|
|||
|
|
Neighbor Status Codes: m - Under maintenance
|
|||
|
|
Neighbor V AS MsgRcvd MsgSent InQ OutQ Up/Down State PfxRcd PfxAcc
|
|||
|
|
1000::1 4 100 407 413 0 0 00:18:57 Estab 0 0`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays all the SR-TE candidate
|
|||
|
|
paths.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
Policy status codes: * - valid, > - active, E - ECMP head, e - ECMP
|
|||
|
|
c - Contributing to ECMP
|
|||
|
|
Origin codes: i - IGP, e - EGP, ? - incomplete
|
|||
|
|
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop
|
|||
|
|
|
|||
|
|
Endpoint Color Distinguisher Next Hop Metric LocPref Weight Path
|
|||
|
|
*> 133.1.1.1 0 1 130.1.1.3 0 100 0 ?
|
|||
|
|
*> 133.1.1.1 0 2 130.1.1.3 0 100 0 ?
|
|||
|
|
*> 1330::1 0 1 1300::3 0 100 0 ?
|
|||
|
|
*> 1330::1 0 2 1300::3 0 100 0 ?`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays all the SR-TE candidate paths with IPv4
|
|||
|
|
endpoints.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te ipv4**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
Policy status codes: * - valid, > - active, E - ECMP head, e - ECMP
|
|||
|
|
c - Contributing to ECMP
|
|||
|
|
Origin codes: i - IGP, e - EGP, ? - incomplete
|
|||
|
|
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop
|
|||
|
|
|
|||
|
|
Endpoint Color Distinguisher Next Hop Metric LocPref Weight Path
|
|||
|
|
*> 133.1.1.1 0 1 130.1.1.3 0 100 0 ?
|
|||
|
|
*> 133.1.1.1 0 2 130.1.1.3 0 100 0 ?`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays all the SR-TE candidate paths with IPv6
|
|||
|
|
endpoints.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te ipv6**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
Policy status codes: * - valid, > - active, E - ECMP head, e - ECMP
|
|||
|
|
c - Contributing to ECMP
|
|||
|
|
Origin codes: i - IGP, e - EGP, ? - incomplete
|
|||
|
|
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop
|
|||
|
|
|
|||
|
|
Endpoint Color Distinguisher Next Hop Metric LocPref Weight Path
|
|||
|
|
*> 1330::1 0 1 1300::3 0 100 0 ?
|
|||
|
|
*> 1330::1 0 2 1300::3 0 100 0 ?`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays information about a specific candidate
|
|||
|
|
path.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te endpoint 133.1.1.1 color 0 distinguisher 1**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
BGP routing table entry for Endpoint: 133.1.1.1 Color: 0 Distinguisher: 1
|
|||
|
|
Paths: 1 available
|
|||
|
|
Local
|
|||
|
|
130.1.1.3 from 100.1.1.2 (100.1.1.2)
|
|||
|
|
Origin INCOMPLETE, metric 0, localpref 100, IGP metric 0, weight 0,
|
|||
|
|
received 00:01:29 ago, valid, internal, best
|
|||
|
|
Community: no-advertise
|
|||
|
|
Rx SAFI: SR TE Policy`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays information about a specific candidate
|
|||
|
|
path including the contents of the Tunnel encapsulation path
|
|||
|
|
attribute TLV of type SR
|
|||
|
|
policy.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp sr-te endpoint 133.1.1.1 color 0 distinguisher 1 detail**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
BGP routing table entry for Endpoint: 133.1.1.1 Color: 0 Distinguisher: 1
|
|||
|
|
Paths: 1 available
|
|||
|
|
Local
|
|||
|
|
130.1.1.3 from 100.1.1.2 (100.1.1.2)
|
|||
|
|
Origin INCOMPLETE, metric 0, localpref 100, IGP metric 0, weight 0,
|
|||
|
|
received 00:01:29 ago, valid, internal, best
|
|||
|
|
Community: no-advertise
|
|||
|
|
Rx SAFI: SR TE Policy
|
|||
|
|
Tunnel encapsulation attribute: SR Policy
|
|||
|
|
Preference: 200
|
|||
|
|
Binding SID: 965536
|
|||
|
|
Explicit null label policy: IPv4
|
|||
|
|
Segment-List: Label Stack: [ 16004 16003 ], Weight: 10
|
|||
|
|
Segment-List: Label Stack: [ 2000 3000 ]`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays information about SR candidate paths
|
|||
|
|
received from the specified neighbor. The “policies” keyword
|
|||
|
|
displays only the candidate paths that are accepted.
|
|||
|
|
“received-policies” additionally also displays the rejected
|
|||
|
|
candidate
|
|||
|
|
paths.
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp neighbors 100.1.1.2 ipv4 sr-te policies**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
Policy status codes: * - valid, > - active
|
|||
|
|
Origin codes: i - IGP, e - EGP, ? - incomplete
|
|||
|
|
AS Path Attributes: Or-ID - Originator ID, C-LST - Cluster List, LL Nexthop - Link Local Nexthop
|
|||
|
|
|
|||
|
|
Endpoint Color Distinguisher Next Hop Metric LocPref Weight Path
|
|||
|
|
*> 133.1.1.1 0 1 133.1.1.3 0 100 0 ?
|
|||
|
|
*> 133.1.1.1 0 2 133.1.1.3 0 100 0 ?`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The following command displays information about SR candidate paths
|
|||
|
|
received from the specified neighbor along with the contents of the
|
|||
|
|
Tunnel Encapsulation path attribute’s TLV of type SR Policy. The
|
|||
|
|
**policies** keyword displays
|
|||
|
|
only the candidate paths that are accepted.
|
|||
|
|
**received-policies**
|
|||
|
|
additionally also displays the rejected candidate
|
|||
|
|
paths..
|
|||
|
|
```
|
|||
|
|
`switch# **show bgp neighbors 100.1.1.2 ipv4 sr-te policies detail**
|
|||
|
|
BGP routing table information for VRF default
|
|||
|
|
Router identifier 100.1.1.1, local AS number 100
|
|||
|
|
BGP routing table entry for Endpoint: 133.1.1.1 Color: 0 Distinguisher: 2
|
|||
|
|
Paths: 1 available
|
|||
|
|
Local
|
|||
|
|
130.1.1.3 from 100.1.1.2 (100.1.1.2)
|
|||
|
|
Origin INCOMPLETE, metric 0, localpref 100, IGP metric 0, weight 0,
|
|||
|
|
received 00:01:29 ago, invalid, internal
|
|||
|
|
Rx SAFI: SR TE Policy
|
|||
|
|
Tunnel encapsulation attribute: SR Policy
|
|||
|
|
Preference: 200
|
|||
|
|
Binding SID: 965536
|
|||
|
|
Explicit null label policy: IPv4
|
|||
|
|
Segment-List: Label Stack: [ 16004 16003 ], Weight: 10
|
|||
|
|
Segment-List: Label Stack: [ 2000 3000 ]`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### PBR Policies
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Based Routing (PBR)
|
|||
|
|
allows the operator to specify the next hop for selected incoming packets
|
|||
|
|
on an L3 interface, overriding the routing table. Incoming packets are
|
|||
|
|
filtered through a policy map referencing one or more ACLs, and matching
|
|||
|
|
packets are routed to the next hop specified.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A PBR policy map is composed of one or more classes and can include next-hop information for each
|
|||
|
|
class. It can also include single-line raw match statements,
|
|||
|
|
which have the appearance and function of a single line from an
|
|||
|
|
ACL. Each class contains an eponymous class map. Class maps are
|
|||
|
|
user-created, can be edited or deleted, filter traffic using
|
|||
|
|
IPv4 ACLs, and are listed in ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These sections describe PBR policy configuration procedures:
|
|||
|
|
|
|||
|
|
- Configuring PBR Policies Arad Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring PBR Policies FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring PBR Policies Petra Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring PBR Policies Trident Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Configuration
|
|||
|
|
Arad Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic policies are implemented
|
|||
|
|
by policy maps, which are applied to the control plane, or to L3 interfaces
|
|||
|
|
for Policy-Based Routing (PBR). Policy maps contain classes, which are
|
|||
|
|
composed of class maps and traffic resolution commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic Management Conceptual
|
|||
|
|
Overview describes traffic policies.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring Control Plane Traffic
|
|||
|
|
PoliciesArad Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Default control plane traffic
|
|||
|
|
policies are implemented automatically without user intervention. These
|
|||
|
|
policies are modified by associating traffic resolution commands with
|
|||
|
|
static classes that comprise the control plane policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Static Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Control plane traffic policies utilize
|
|||
|
|
static class maps, which are provided by the switch, are not editable,
|
|||
|
|
and cannot be deleted.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Editing the Policy Map
|
|||
|
|
|
|||
|
|
|
|||
|
|
The only control plane policy map is **copp-system-policy**, which cannot
|
|||
|
|
be deleted. In its default form, **copp-system-policy**
|
|||
|
|
consists of the classes listed in class (policy-map (control-plane) Arad). Although
|
|||
|
|
the underlying class map of each class cannot be edited, the traffic resolution
|
|||
|
|
commands can be adjusted. The default classes cannot be removed from the policy map
|
|||
|
|
and their sequence within the policy map is not editable.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are modified in policy-map configuration mode. The policy-map type
|
|||
|
|
copp command enters policy-map configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters policy-map configuration mode for editing copp-system-policy.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class (policy-map (control-plane)
|
|||
|
|
Arad)** command enters policy-map-class configuration mode,
|
|||
|
|
where traffic resolution commands are modified for the configuration mode class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters policy-map-class configuration mode for the copp-system-lacp
|
|||
|
|
static
|
|||
|
|
class.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-copp-system-policy)# **class copp-system-lacp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Two traffic resolution commands determine bandwidth parameters for class traffic:
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Arad) specifies the
|
|||
|
|
minimum bandwidth.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Arad) specifies the maximum bandwidth.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a bandwidth range of **2000** to
|
|||
|
|
**4000** kilobits per seconds (kbps) for traffic
|
|||
|
|
filtered by the copp-system-lacp class
|
|||
|
|
map:
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **bandwidth kbps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **shape kbps 4000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map and policy-map-class configuration modes are group-change modes. Changes
|
|||
|
|
are saved with the **exit** command or discarded with the
|
|||
|
|
**abort** command. The **show
|
|||
|
|
active** command displays the saved version of policy map. The
|
|||
|
|
**show pending** command displays the modified policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exit policy-map-class configuration mode, display the pending
|
|||
|
|
policy-map, then exit policy-map configuration mode, which saves the altered policy
|
|||
|
|
map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **show pending**
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
class copp-system-bpdu
|
|||
|
|
|
|||
|
|
class copp-system-lldp
|
|||
|
|
|
|||
|
|
class copp-system-lacp
|
|||
|
|
shape kbps 4000
|
|||
|
|
bandwidth kbps 2000
|
|||
|
|
|
|||
|
|
class copp-system-l3ttl1
|
|||
|
|
|
|||
|
|
class copp-system-l3slowpath
|
|||
|
|
|
|||
|
|
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to the Control Plane
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **copp-system-policy**
|
|||
|
|
policy map is always applied to the control plane. No commands are available
|
|||
|
|
to add or remove this assignment.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Displaying Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
The show policy-map interface type qos command displays the configured
|
|||
|
|
values of the policy maps classes and the number of packets filtered and dropped as
|
|||
|
|
a result of the class maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exit policy-map-class configuration mode, display the pending
|
|||
|
|
policy-map, then exit policy-map configuration mode, which saves the altered policy
|
|||
|
|
map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Hardware programming status: InProgress
|
|||
|
|
|
|||
|
|
Class-map: copp-system-mlag (match-any)
|
|||
|
|
shape : 10000001 kbps
|
|||
|
|
bandwidth : 10000001 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
Class-map: copp-system-bpdu (match-any)
|
|||
|
|
shape : 2604 kbps
|
|||
|
|
bandwidth : 1302 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lacp (match-any)
|
|||
|
|
shape : 4230 kbps
|
|||
|
|
bandwidth : 2115 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#
|
|||
|
|
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **exit**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring QoS Traffic Policies Arad Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies are implemented
|
|||
|
|
by creating class maps and policy maps, then applying the policy maps
|
|||
|
|
to Ethernet and port channel interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies utilize dynamic class maps that are created and modified in class-map
|
|||
|
|
configuration mode. The class-map type
|
|||
|
|
qos command enters class-map configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters class-map configuration mode to create QoS class map named
|
|||
|
|
**Q-CMap_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos match-any Q-CMap_1**
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map contains one IPv4 access control list (ACL). The **match
|
|||
|
|
ip access-group** command assigns an ACL to the
|
|||
|
|
class map. Subsequent **match** commands replace the
|
|||
|
|
existing **match** command. Class maps filter traffic
|
|||
|
|
only on ACL permit rules. Deny ACL rules are disregarded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the IPv4 ACL named **ACL_1** to the
|
|||
|
|
class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-Q-CMap_1)# **match ip access-group ACL_1**
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-map configuration mode is a group-change mode. Changes made in a
|
|||
|
|
group-change mode are saved by exiting the mode. The **show
|
|||
|
|
active** command displays the saved version of class
|
|||
|
|
map. The **show pending** command displays the unsaved
|
|||
|
|
class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show active** command indicates that the
|
|||
|
|
configuration mode class map is not stored in ***running-config***.
|
|||
|
|
The **show pending** command displays the class map to
|
|||
|
|
be stored upon exiting class-map configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-Q-CMap_1)# **show active**
|
|||
|
|
switch(config-cmap-Q-CMap_1)# **show pending**
|
|||
|
|
class-map type qos match-any Q-CMap_1
|
|||
|
|
match ip access-group ACL_1
|
|||
|
|
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to global
|
|||
|
|
configuration mode and saves pending class map changes. The
|
|||
|
|
**abort** command returns the switch to
|
|||
|
|
global configuration mode and discards pending changes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command exits class-map configuration mode and stores pending changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-CP-CMAP_1)# **exit**
|
|||
|
|
switch(config)# **show class-map type control-plane CP-CMAP_1**
|
|||
|
|
Class-map: CP-CMAP_1 (match-any)
|
|||
|
|
Match: ip access-group name ACLv4_1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are created and modified in policy-map configuration mode. The policy-map type
|
|||
|
|
quality-of-service command enters policy-map configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command places the switch in policy-map configuration mode and creates a
|
|||
|
|
QoS policy map named
|
|||
|
|
**Q-PMAP_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service Q-PMAP_1**
|
|||
|
|
switch(config-pmap-Q-PMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy map are edited by adding or removing classes. A class automatically
|
|||
|
|
contains its eponymous class map; traffic resolution commands are added or
|
|||
|
|
edited in ***policy-map-class*** configuration mode. The
|
|||
|
|
**below** command adds a class to the
|
|||
|
|
configuration mode policy map and places the switch in
|
|||
|
|
***policy-map-class*** configuration mode, where traffic
|
|||
|
|
resolution commands are added to the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the **Q-CMap_1** class to the
|
|||
|
|
**Q-PMAP_1** policy map and places the
|
|||
|
|
switch in ***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-Q-PMAP_1)# **class Q-CMap_1**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set cos** commands configure traffic resolution
|
|||
|
|
methods for data that passes the class map:
|
|||
|
|
|
|||
|
|
- **set cos** sets the Layer 2 CoS
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **set dscp** sets the DSCP value in the ToS
|
|||
|
|
byte.
|
|||
|
|
|
|||
|
|
- **set traffic class** specifies a traffic
|
|||
|
|
class queue.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set the **CoS field
|
|||
|
|
7** on packets filtered by the class map, then
|
|||
|
|
assigns those packets to **traffic class
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
***Policy-map*** and***policy-map-class*** configuration modes
|
|||
|
|
are group-change modes. Changes are saved with the
|
|||
|
|
**exit** command or discarded with the
|
|||
|
|
**abort** command. The **show
|
|||
|
|
active** and **show pending**
|
|||
|
|
commands display the saved and modified policy map versions,
|
|||
|
|
respectively.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exit policy-map-class configuration mode, display the pending
|
|||
|
|
policy-map, then exit policy-map configuration mode to save the altered
|
|||
|
|
policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **exit**
|
|||
|
|
switch(config-pmap-Q-PMAP_1)# **show pending**
|
|||
|
|
policy-map type quality-of-service Q-PMAP_1
|
|||
|
|
class Q-CMap_1
|
|||
|
|
set cos 7
|
|||
|
|
set traffic-class 4
|
|||
|
|
|
|||
|
|
class class-default
|
|||
|
|
|
|||
|
|
switch(config-pmap-Q-PMAP_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The last class in all QoS policy maps is ***class-default***. The
|
|||
|
|
***class-default*** class map matches all traffic except
|
|||
|
|
IPv4 or IPv6 traffic and provides no traffic resolution commands. The
|
|||
|
|
***class-default*** class map is not editable; traffic
|
|||
|
|
resolution commands can be added to the ***class-default***
|
|||
|
|
class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
To modify traffic resolution commands for the ***class-default***
|
|||
|
|
class, enter ***policy-map-class*** configuration mode for the
|
|||
|
|
class, then enter the desired **set** commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands enter ***policy-map-class*** configuration mode for
|
|||
|
|
***class-default***, configures the stream to enter
|
|||
|
|
**traffic class 2**, and saves the altered
|
|||
|
|
policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service Q-PMap_1**
|
|||
|
|
switch(config-pmap-Q-PMap_1)# **class class-default**
|
|||
|
|
switch(config-pmap-c-Q-PMap_1-class-default)# **set traffic-class 2**
|
|||
|
|
switch(config-pmap-c-Q-PMap_1-class-default)# **exit**
|
|||
|
|
switch(config-pmap-Q-PMap_1)# **exit**
|
|||
|
|
switch(config)# **show policy-map type qos Q-PMap_1**
|
|||
|
|
Service-policy Q-PMap_1
|
|||
|
|
|
|||
|
|
Class-map: Q-CMap_1 (match-any)
|
|||
|
|
Match: ipv6 access-group name ACLv6_1
|
|||
|
|
set cos 7
|
|||
|
|
set traffic-class 4
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
set traffic-class 2
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to an Interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
The service-policy
|
|||
|
|
type qos (Interface mode) command applies a specified policy map to the
|
|||
|
|
configuration mode interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands apply **PMAP-1** policy map to
|
|||
|
|
**interfaceEthernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
switch(config-if-Et8)# **service-policy input PMAP-1**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
interface Ethernet8
|
|||
|
|
service-policy type qos input PMAP-1
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring PBR Policies
|
|||
|
|
Arad Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Based Routing (PBR)
|
|||
|
|
is implemented by creating class maps and policy maps, then applying
|
|||
|
|
the policy maps to Ethernet interfaces, port channel interfaces or switch
|
|||
|
|
virtual interfaces (SVIs).
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating PBR Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
PBR policies utilize class maps that are created and modified in the ***class-map***
|
|||
|
|
configuration mode. The class-map type
|
|||
|
|
pbr command enters the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***class-map*** configuration mode to create a PBR class
|
|||
|
|
map named
|
|||
|
|
CMAP1.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type pbr match-any CMAP1**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map contains one or more access control lists (ACLs). The match (policy-map (pbr)) command
|
|||
|
|
assigns an ACL to the class map. Subsequent **match** commands add
|
|||
|
|
additional ACLs to the class map. Class maps filter traffic only on ACL permit rules.
|
|||
|
|
Deny ACL rules are disregarded; if a class map includes ACLs with deny rules, the
|
|||
|
|
configuration reverts to its previous state.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the ACL named **ACL1** to the class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **match ip access-group ACL1**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map*** configuration mode is a group-change mode. Changes made in a
|
|||
|
|
group-change mode are saved by exiting the mode. The **show
|
|||
|
|
active** command displays the saved version of class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show active** command indicates that the configuration mode
|
|||
|
|
class map is not stored in ***running-config***.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **show active**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***global*** configuration mode and saves pending class map changes. The
|
|||
|
|
**abort** command returns the switch to the
|
|||
|
|
***global*** configuration mode and discards pending changes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command exits class-map configuration mode and stores pending changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **exit**
|
|||
|
|
switch(config)# **show class-map type pbr CMAP1**
|
|||
|
|
class-map type pbr match-any CMAP1
|
|||
|
|
10 match ip access-group ACL1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating PBR Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are created and modified in policy-map configuration mode. The policy-map type pbr command enters the
|
|||
|
|
***policy-map*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***policy-map*** configuration mode for creating a PBR
|
|||
|
|
policy map named
|
|||
|
|
**PMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy map are edited by adding or removing classes. A class automatically contains its
|
|||
|
|
eponymous class map; next-hop commands are added or edited in the
|
|||
|
|
***policy-map-class*** configuration mode. The class (policy-map (pbr)) command adds
|
|||
|
|
a class to the configuration mode policy map and places the switch in the
|
|||
|
|
***policy-map-class*** configuration mode, where next-hop commands are
|
|||
|
|
added to the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- This command adds the CMAP1 class to the policy map and
|
|||
|
|
places the switch into the ***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The set
|
|||
|
|
nexthop (policy-map-class pbr) command configures the next hop for
|
|||
|
|
data that passes the class map.
|
|||
|
|
|
|||
|
|
- This command configures the policy map to set the next hop to
|
|||
|
|
**10.12.0.5** on packets filtered by the class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-PMAP1-CMAP1)# **set nexthop 10.12.0.5**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The set nexthop-group (policy-map-class(pbr) Arad) command configures a
|
|||
|
|
nexthop group as the next hop for data that passes the class map.
|
|||
|
|
|
|||
|
|
- These commands configure the policy map **PMAP1** to set
|
|||
|
|
the next hop to a nexthop group named **GROUP1** for traffic
|
|||
|
|
defined by class map **CMAP1**.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)# **set nexthop-group GROUP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
***policy-map*** and ***policy-map-class*** configuration
|
|||
|
|
modes are group-change modes. Changes are saved with the
|
|||
|
|
**exit** command or discarded with the
|
|||
|
|
**abort** command. The **show
|
|||
|
|
active** command displays the currently saved map
|
|||
|
|
version.
|
|||
|
|
|
|||
|
|
- These commands exits the ***policy-map-class*** configuration mode,
|
|||
|
|
then exits the ***policy-map*** configuration mode to save the altered
|
|||
|
|
policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-PMAP1-CMAP1)# **exit**
|
|||
|
|
switch(config-pmap-PMAP1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying a PBR Policy Map to an Interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
The service-policy type pbr (Interface mode) command applies the
|
|||
|
|
specified PBR policy map to the configuration mode interface. Only one PBR service
|
|||
|
|
policy is supported per interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands apply the PMAP1 PBR policy map to **interface ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **service-policy type pbr input PMAP1**
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Hardware Decapsulation
|
|||
|
|
|
|||
|
|
|
|||
|
|
When hardware decapsulation takes place,
|
|||
|
|
PBR policy maps on Arad platform switches match on outer packet headers
|
|||
|
|
(i.e., they match based on the attributes of the packet before it is
|
|||
|
|
decapsulated).
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Configuration
|
|||
|
|
FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic policies are implemented by policy maps, which are applied to the control plane or an
|
|||
|
|
interface. Policy maps contain classes, which are composed of class maps and traffic
|
|||
|
|
resolution commands. Traffic Management Conceptual Overview describes traffic policies.
|
|||
|
|
|
|||
|
|
|
|||
|
|
FM6000 platform switches support the following traffic policies:
|
|||
|
|
|
|||
|
|
- Control plane policies manage control plane traffic.
|
|||
|
|
|
|||
|
|
- QoS traffic policies manage traffic on Ethernet and port channel
|
|||
|
|
interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These sections describe the construction and application of policy maps on FM6000 platform
|
|||
|
|
switches:
|
|||
|
|
|
|||
|
|
- Configuring Control Plane Traffic Policies FM6000 Platform
|
|||
|
|
Switches
|
|||
|
|
|
|||
|
|
- Configuring QoS Traffic Policies FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring PBR Policies FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring Control Plane Traffic
|
|||
|
|
PoliciesFM6000 Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Default control plane traffic
|
|||
|
|
policies are implemented automatically without user intervention. These
|
|||
|
|
policies are modified by associating traffic resolution commands with
|
|||
|
|
static classes that comprise the control plane policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Static Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Control plane traffic policies utilize
|
|||
|
|
static class maps, which are provided by the switch, are not editable,
|
|||
|
|
and cannot be deleted.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Editing the Policy Map
|
|||
|
|
|
|||
|
|
|
|||
|
|
The only control plane policy map is **copp-system-policy**, which cannot
|
|||
|
|
be deleted. In its default form, **copp-system-policy** consists of the classes
|
|||
|
|
listed in copp-system-policy default classes:
|
|||
|
|
FM6000 Platform Switches. Although the underlying class map of each class
|
|||
|
|
cannot be edited, the traffic resolution commands can be adjusted. The default
|
|||
|
|
classes cannot be removed from the policy map and their sequence within the policy
|
|||
|
|
map is not editable.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Table 3. Copp-system-policy Default Classes: FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
| Class Name
|
|||
|
|
| **shape (pps)**
|
|||
|
|
| **bandwidth (pps)**
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-arp
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-default
|
|||
|
|
| 8000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcrsvd
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcmiss
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-igmp
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l2rsvd
|
|||
|
|
| 10000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3slowpath
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-pim-ptp
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ospf-isis
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-selfip
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-selfip-tc6to7
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-sflow
|
|||
|
|
| 25000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are modified in the ***policy-map*** configuration mode. The policy-map type
|
|||
|
|
copp command enters the ***policy-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***policy-map*** configuration mode for editing
|
|||
|
|
***copp-system-policy***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The class (policy-map (control-plane) FM6000) command
|
|||
|
|
enters the ***policy-map-class*** configuration mode, where traffic
|
|||
|
|
resolution commands are modified for the configuration mode class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***policy-map-class*** configuration mode for the
|
|||
|
|
copp-system-arp static
|
|||
|
|
class.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-copp-system-policy)# **class copp-system-arp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-arp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Two traffic resolution commands determine bandwidth parameters for class traffic:
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) FM6000)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a bandwidth range of **2000** to
|
|||
|
|
**4000** packets per seconds (pps) for traffic
|
|||
|
|
filtered by the copp-system-arp class
|
|||
|
|
map:
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-arp)# **bandwidth pps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-arp)# **shape pps 4000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-arp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
***The policy-map*** and ***policy-map-class*** configuration modes
|
|||
|
|
are group-change modes. Changes are saved with the **exit**
|
|||
|
|
command or discarded with the **abort** command. The
|
|||
|
|
**show active** command displays the saved version of
|
|||
|
|
policy map. The **show pending** command displays the modified
|
|||
|
|
policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exit the ***policy-map-class*** configuration mode, display
|
|||
|
|
the pending policy-map, then exits the ***policy-map*** configuration mode,
|
|||
|
|
which saves the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-CP-CMAP_1)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **show pending**
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
class CP-CMAP_1
|
|||
|
|
shape pps 4000
|
|||
|
|
bandwidth pps 2000
|
|||
|
|
|
|||
|
|
class copp-system-bpdu
|
|||
|
|
|
|||
|
|
class copp-system-lldp
|
|||
|
|
|
|||
|
|
class copp-system-lacp
|
|||
|
|
|
|||
|
|
class copp-system-arp
|
|||
|
|
|
|||
|
|
class copp-system-arpresolver
|
|||
|
|
|
|||
|
|
class copp-system-default
|
|||
|
|
|
|||
|
|
switch(config-pmap-copp-system-policy)#**exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to the Control Plane
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **copp-system-policy** policy map is always applied to the control
|
|||
|
|
plane. No commands are available to add or remove this assignment.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring QoS Traffic Policies
|
|||
|
|
FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies are implemented
|
|||
|
|
by creating class maps and policy maps, then applying the policy maps
|
|||
|
|
to Ethernet and port channel interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies utilize dynamic class maps that are created and modified in the
|
|||
|
|
***class-map*** configuration mode. The class-map type qos command enters the ***class-map***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***class-map*** configuration mode to create
|
|||
|
|
QoS class map named
|
|||
|
|
**Q-CMap_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos match-any Q-CMap_1**
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map contains one IPv4 access control list (ACL). The match (class-map (qos) FM6000)
|
|||
|
|
command assigns an ACL to the class map. Subsequent
|
|||
|
|
**match** commands replace the existing
|
|||
|
|
**match** command. Class maps filter
|
|||
|
|
traffic only on ACL permit rules. Deny ACL rules are disregarded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the IPv4 ACL named **ACL_1** to the
|
|||
|
|
class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-Q-CMap_1)# **match ip access-group ACL_1**
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map*** configuration mode is a group-change mode. Changes
|
|||
|
|
made in a group-change mode are saved by exiting the mode. The
|
|||
|
|
**show active** command displays the saved
|
|||
|
|
version of class map. The **show pending** command
|
|||
|
|
displays the unsaved class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show active** command indicates that the
|
|||
|
|
configuration mode class map is not stored in ***running-config***.
|
|||
|
|
The **show pending** command displays the class map to
|
|||
|
|
be stored upon exiting the ***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-Q-CMap_1)# **show active**
|
|||
|
|
switch(config-cmap-Q-CMap_1)# **show pending**
|
|||
|
|
class-map type qos match-any Q-CMap_1
|
|||
|
|
match ip access-group ACL_1
|
|||
|
|
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***global*** configuration mode and saves pending class
|
|||
|
|
map changes. The **abort** command returns the switch
|
|||
|
|
to the ***global*** configuration mode and discards pending
|
|||
|
|
changes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command exits the ***class-map*** configuration mode and stores
|
|||
|
|
pending changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-CP-CMAP_1)# **exit**
|
|||
|
|
switch(config)# **show class-map type control-plane CP-CMAP_1**
|
|||
|
|
Class-map: CP-CMAP_1 (match-any)
|
|||
|
|
Match: ip access-group name ACLv4_1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are created and modified in the ***policy-map*** configuration mode. The
|
|||
|
|
policy-map type
|
|||
|
|
quality-of-service command enters the ***policy-map***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command places the switch in the ***policy-map*** configuration
|
|||
|
|
mode and creates a QoS policy map named
|
|||
|
|
**Q-PMAP_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service Q-PMAP_1**
|
|||
|
|
switch(config-pmap-Q-PMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy map are edited by adding or removing classes. A class automatically
|
|||
|
|
contains its eponymous class map; traffic resolution commands are added or
|
|||
|
|
edited in the ***policy-map-class*** configuration mode. The class (policy-map (qos) FM6000)
|
|||
|
|
command adds a class to the configuration mode policy map and places the
|
|||
|
|
switch in the *policy-map-class* configuration mode, where traffic
|
|||
|
|
resolution commands are added to the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the **Q-CMap_1** class to the
|
|||
|
|
**Q-PMAP_1** policy map and places the
|
|||
|
|
switch in the ***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-Q-PMAP_1)# **class Q-CMap_1**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
set (policy-map-class (qos) FM6000)
|
|||
|
|
commands configure traffic resolution methods for data that passes the class
|
|||
|
|
map:
|
|||
|
|
|
|||
|
|
- **set cos** sets the Layer 2 CoS
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **set dscp** sets the DSCP value in the ToS
|
|||
|
|
byte.
|
|||
|
|
|
|||
|
|
- **set traffic class** specifies a traffic
|
|||
|
|
class queue.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set the **CoS field
|
|||
|
|
7** on packets filtered by the class map, then
|
|||
|
|
assigns those packets to **traffic class
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***policy-map*** and ***policy-map-class*** configuration
|
|||
|
|
modes are group-change modes. Changes are saved with the
|
|||
|
|
**exit** command or discarded with the
|
|||
|
|
**abort** command. The **show
|
|||
|
|
active** and **show pending**
|
|||
|
|
commands display the saved and modified policy map versions,
|
|||
|
|
respectively.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exit the ***policy-map-class*** configuration mode,
|
|||
|
|
display the pending policy-map, then exits the ***policy-map***
|
|||
|
|
configuration mode to save the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **exit**
|
|||
|
|
switch(config-pmap-Q-PMAP_1)# **show pending**
|
|||
|
|
policy-map type quality-of-service Q-PMAP_1
|
|||
|
|
class Q-CMap_1
|
|||
|
|
set cos 7
|
|||
|
|
set traffic-class 4
|
|||
|
|
|
|||
|
|
class class-default
|
|||
|
|
|
|||
|
|
switch(config-pmap-Q-PMAP_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The last class in all QoS policy maps is ***class-default***. The
|
|||
|
|
***class-default*** class map matches all traffic except
|
|||
|
|
IPv4 or IPv6 traffic and provides no traffic resolution commands. The
|
|||
|
|
***class-default*** class map is not editable; traffic
|
|||
|
|
resolution commands can be added to the ***class-default***
|
|||
|
|
class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
To modify traffic resolution commands for the ***class-default***
|
|||
|
|
class, enter the ***policy-map-class*** configuration mode for the
|
|||
|
|
class, then enter the desired **set** commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands enter the ***policy-map-class*** configuration mode for
|
|||
|
|
***class-default***, configures the stream to enter
|
|||
|
|
**traffic class 2**, and saves the altered
|
|||
|
|
policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service Q-PMap_1**
|
|||
|
|
switch(config-pmap-Q-PMap_1) #**class class-default**
|
|||
|
|
switch(config-pmap-c-Q-PMap_1-class-default)# **set traffic-class 2**
|
|||
|
|
switch(config-pmap-c-Q-PMap_1-class-default)# **exit**
|
|||
|
|
switch(config-pmap-Q-PMap_1)# **exit**
|
|||
|
|
switch(config)# **show policy-map type qos Q-PMap_1**
|
|||
|
|
Service-policy Q-PMap_1
|
|||
|
|
|
|||
|
|
Class-map: Q-CMap_1 (match-any)
|
|||
|
|
Match: ipv6 access-group name ACLv6_1
|
|||
|
|
set cos 7
|
|||
|
|
set traffic-class 4
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
set traffic-class 2
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to an Interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
The service-policy type qos (Interface mode) command applies a specified
|
|||
|
|
policy map to the configuration mode interface.
|
|||
|
|
|
|||
|
|
These commands apply
|
|||
|
|
**PMAP-1** policy map to **interface ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
switch(config-if-Et8)# **service-policy input PMAP-1**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
interface Ethernet8
|
|||
|
|
service-policy type qos input PMAP-1
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring PBR Policies
|
|||
|
|
FM6000 Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Based Routing (PBR) is implemented by creating class maps and policy maps, then applying
|
|||
|
|
the policy maps to Ethernet interfaces, port channel interfaces or Switch Virtual
|
|||
|
|
Interfaces (SVIs).
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating PBR Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
PBR policies utilize class maps that are created and modified in the ***class-map***
|
|||
|
|
configuration mode. The class-map type
|
|||
|
|
pbr command enters the ***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***class-map*** configuration mode to create a PBR class
|
|||
|
|
map named
|
|||
|
|
**CMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type pbr match-any CMAP1**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map contains one or more IPv4 access control lists (ACLs). The match (policy-map
|
|||
|
|
(pbr)) command assigns an ACL to the class map. Subsequent
|
|||
|
|
**match** commands add additional ACLs to the class map.
|
|||
|
|
Class maps filter traffic only on ACL permit rules. Deny ACL rules are disregarded; if a
|
|||
|
|
class map includes ACLs with deny rules, the configuration reverts to its previous
|
|||
|
|
state.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
On FM6000 platform switches, counters are not supported, so a [counters per-entry (ACL configuration modes)](/um-eos/eos-acls-and-route-maps#xx1151725) command in
|
|||
|
|
an ACL is ignored.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the IPv4 ACL named **ACL1** to the class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **match ip access-group ACL1**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map*** configuration mode is a group-change mode. Changes made in a
|
|||
|
|
group-change mode are saved by exiting the mode. The **show
|
|||
|
|
active** command displays the saved version of class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show active** command indicates that the configuration mode
|
|||
|
|
class map is not stored in ***running-config***.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **show active**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to ***global***
|
|||
|
|
configuration mode and saves pending class map changes. The
|
|||
|
|
**abort** command returns the switch to ***global***
|
|||
|
|
configuration mode and discards pending changes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command exits the ***class-map*** configuration mode and stores pending
|
|||
|
|
changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **exit**
|
|||
|
|
switch(config)# **show class-map type pbr CMAP1**
|
|||
|
|
class-map type pbr match-any CMAP1
|
|||
|
|
10 match ip access-group ACL1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating PBR Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are created and modified in the ***policy-map*** configuration mode. The
|
|||
|
|
policy-map type
|
|||
|
|
pbr command enters the ***policy-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***policy-map*** configuration mode for creating a PBR
|
|||
|
|
policy map named
|
|||
|
|
**PMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy map are edited by adding or removing classes. A class automatically contains its
|
|||
|
|
eponymous class map; next-hop commands are added or edited in the
|
|||
|
|
***policy-map-class*** configuration mode. The class (policy-map
|
|||
|
|
(pbr)) command adds a class to the configuration mode policy map and
|
|||
|
|
places the switch in the ***policy-map-class*** configuration mode, where
|
|||
|
|
next-hop commands are added to the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- This command adds the **CMAP1** class to the policy map and
|
|||
|
|
places the switch in the ***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The set
|
|||
|
|
nexthop (policy-map-class pbr) command configures the
|
|||
|
|
next hop for data that passes the class map.
|
|||
|
|
|
|||
|
|
- This command configures the policy map to set the next hop to
|
|||
|
|
**10.12.0.5** on packets filtered by the class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-PMAP1-CMAP1)# **set nexthop 10.12.0.5**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
***policy-map*** and ***policy-map-clas***s configuration
|
|||
|
|
modes are group-change modes. Changes are saved with the
|
|||
|
|
**exit** command or discarded with the
|
|||
|
|
**abort** command. The **show
|
|||
|
|
active** command displays the currently saved map
|
|||
|
|
version.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exits the ***policy-map-class*** configuration mode, then exits
|
|||
|
|
the ***policy-map configuration*** mode to save the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-PMAP1-CMAP1)# **exit**
|
|||
|
|
switch(config-pmap-PMAP1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying a PBR Policy Map to an Interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
The service-policy
|
|||
|
|
type pbr (Interface mode) command applies the specified PBR
|
|||
|
|
policy map to the configuration mode interface. Only one PBR service policy is supported
|
|||
|
|
per interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands apply the **PMAP1** PBR policy map to
|
|||
|
|
**interface ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **service-policy type pbr input PMAP1**
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Hardware Decapsulation
|
|||
|
|
|
|||
|
|
|
|||
|
|
When hardware decapsulation takes place,
|
|||
|
|
PBR policy maps on FM6000 platform switches match on outer packet headers
|
|||
|
|
(i.e., they match based on the attributes of the packet before it is
|
|||
|
|
decapsulated).
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Configuration
|
|||
|
|
Petra Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic policies are implemented
|
|||
|
|
by policy maps, which are applied to the control plane. Policy maps contain
|
|||
|
|
classes, which are composed of class maps and traffic resolution commands.
|
|||
|
|
QoS traffic policies are not supported on 7500 Series switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic Management Conceptual
|
|||
|
|
Overview describes traffic policies.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring Control Plane Traffic
|
|||
|
|
PoliciesPetra Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Default control plane traffic
|
|||
|
|
policies are implemented automatically without user intervention. These
|
|||
|
|
policies are modified by associating traffic resolution commands with
|
|||
|
|
static classes that comprise the control plane policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Static Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Control plane traffic policies utilize
|
|||
|
|
static class maps, which are provided by the switch, are not editable,
|
|||
|
|
and cannot be deleted.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Editing the Policy Map
|
|||
|
|
|
|||
|
|
|
|||
|
|
The only control plane policy map is **copp-system-policy**, which cannot
|
|||
|
|
be deleted. In its default form, **copp-system-policy** consists of the classes
|
|||
|
|
listed in copp-system-policy default classes:
|
|||
|
|
Petra Platform Switches. Although the underlying class map of each class
|
|||
|
|
cannot be edited, the traffic resolution commands can be adjusted. The default
|
|||
|
|
classes cannot be removed from the policy map and their sequence within the policy
|
|||
|
|
map is not editable.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Table 4. copp-system-policy default classes: Petra Platform Switches
|
|||
|
|
|
|||
|
|
| Class Name
|
|||
|
|
| **shape (kbps)**
|
|||
|
|
| **bandwidth (kbps)**
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-bpdu
|
|||
|
|
| 2500
|
|||
|
|
| 1250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-default
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-igmp
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipbroadcast
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmc
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcmiss
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcrsvd
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipunicast
|
|||
|
|
| NO
|
|||
|
|
LIMIT
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3destmiss
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3slowpath
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3ttl0
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3ttl1
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-lacp
|
|||
|
|
| 2500
|
|||
|
|
| 1250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-lldp
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-unicast-arp
|
|||
|
|
| 2500
|
|||
|
|
| 250
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are modified in the ***policy-map*** configuration mode. The policy-map type
|
|||
|
|
copp command enters the ***policy-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the***policy-map*** configuration mode for editing
|
|||
|
|
**copp-system-policy**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The class (policy-map (control-plane) Petra) command
|
|||
|
|
enters the ***policy-map-class*** configuration mode, where traffic
|
|||
|
|
resolution commands are modified for the configuration mode class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
- This command enters the ***policy-map-class***
|
|||
|
|
configuration mode for the **copp-system-lldp** static
|
|||
|
|
class.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Two traffic resolution commands determine bandwidth parameters for class traffic:
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane)
|
|||
|
|
Petra) specifies the minimum bandwidth.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane)
|
|||
|
|
Petra) specifies the maximum bandwidth.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a bandwidth range of **2000** to
|
|||
|
|
**4000** kilobits per seconds (kbps) for traffic
|
|||
|
|
filtered by the**copp-system-arp** class
|
|||
|
|
map:
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **bandwidth kbps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **shape kbps 4000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***policy-map*** and ***policy-map-class*** configuration modes
|
|||
|
|
are group-change modes. Changes are saved with the **exit**
|
|||
|
|
command or discarded with the **abort** command. The
|
|||
|
|
**show active** command displays the saved version of
|
|||
|
|
policy map. The **show pending** command displays the
|
|||
|
|
configured policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Petra platform switches do not support all discrete rate values. When a
|
|||
|
|
**bandwidth** or **shape**
|
|||
|
|
command specifies a value that is not supported, the switch converts the rate to the
|
|||
|
|
next highest discrete value that it supports. The show policy-map interface type qos command displays the
|
|||
|
|
converted rate and not the user configured rate.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exits the ***policy-map-class*** configuration mode, display
|
|||
|
|
the pending policy-map, then exits the ***policy-map*** configuration mode,
|
|||
|
|
which saves the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **show pending**
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
class copp-system-bpdu
|
|||
|
|
|
|||
|
|
class copp-system-lldp
|
|||
|
|
shape kbps 4000
|
|||
|
|
bandwidth kbps 2000
|
|||
|
|
|
|||
|
|
class copp-system-lacp
|
|||
|
|
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Changes are saved with the **exit** command or discarded with
|
|||
|
|
the **abort** command. The **show
|
|||
|
|
active** command displays the saved version of policy map. The
|
|||
|
|
**show pending** command displays the modified policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Displaying Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
The show policy-map interface type qos command displays the traffic
|
|||
|
|
resolution rates of the policy maps classes and the number of packets filtered and
|
|||
|
|
dropped as a result of the class maps. The shape and bandwidth rates may differ from
|
|||
|
|
configured values, because the switch does not support all discrete rate values.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exits the ***policy-map-class*** configuration mode, display
|
|||
|
|
the pending policy-map, then exits the *policy-map* configuration mode, which
|
|||
|
|
saves the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Hardware programming status: InProgress
|
|||
|
|
|
|||
|
|
Class-map: copp-system-mlag (match-any)
|
|||
|
|
shape : 10000001 kbps
|
|||
|
|
bandwidth : 10000001 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lacp (match-any)
|
|||
|
|
shape : 2604 kbps
|
|||
|
|
bandwidth : 1302 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to the Control Plane
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **copp-system-policy** policy map is always applied to the control
|
|||
|
|
plane. No commands are available to add or remove this assignment.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring QoS Traffic Policies
|
|||
|
|
Petra Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies are not supported on Petra platform switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring PBR Policies
|
|||
|
|
Petra Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
PBR policies are not supported on Petra platform switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Configuration
|
|||
|
|
Trident Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic policies are implemented by policy maps, which are applied to the control plane or an
|
|||
|
|
interface. Policy maps contain classes, which are composed of class maps and traffic
|
|||
|
|
resolution commands. Traffic Management Conceptual Overview describes traffic policies.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident platform switches support the following traffic policies:
|
|||
|
|
|
|||
|
|
- Control plane policies manage control plane traffic.
|
|||
|
|
|
|||
|
|
- QoS traffic policies manage traffic on Ethernet and port channel
|
|||
|
|
interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
These sections describe the construction and application of policy maps:
|
|||
|
|
|
|||
|
|
- Configuring Control Plane Traffic Policies Trident Platform
|
|||
|
|
Switches
|
|||
|
|
|
|||
|
|
- Configuring QoS Traffic Policies Trident Platform Switches
|
|||
|
|
|
|||
|
|
- Configuring PBR Policies Trident Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring Control Plane Traffic
|
|||
|
|
PoliciesTrident Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Default control plane traffic
|
|||
|
|
policies are implemented automatically without user intervention. These
|
|||
|
|
policies are modified by creating class maps and editing the policy map
|
|||
|
|
to include the new class maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Control plane traffic policies utilize static and dynamic class maps. Static class maps are
|
|||
|
|
provided by the switch, are not editable, and cannot be deleted. Dynamic class maps
|
|||
|
|
are created and modified in the ***class-map*** configuration mode. The
|
|||
|
|
class-map type
|
|||
|
|
copp command enters the***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***class-map*** configuration mode for creating or
|
|||
|
|
editing a control plane dynamic class map named
|
|||
|
|
**CP-CMAP_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type copp match-any CP-CMAP_1**
|
|||
|
|
switch(config-cmap-CP-CMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class maps contain one IPv4 or IPv6 access control list (ACL). The match (class-map (control-plane) Trident) command
|
|||
|
|
assigns an ACL to the class map. Subsequent **match** commands
|
|||
|
|
replace the existing **match** command. Class maps filter
|
|||
|
|
traffic only on ACL permit rules. Deny ACL rules are disregarded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command assigns the IPv4 ACL named **ACLv4_1** to the
|
|||
|
|
class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-CP-CMAP_1)# **match ip access-group ACLv4_1**
|
|||
|
|
switch(config-cmap-CP-CMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map*** configuration mode is a group-change mode. Changes are
|
|||
|
|
saved by exiting the mode. The **show active** command
|
|||
|
|
displays the saved version of class map. The **show pending**
|
|||
|
|
command displays the unsaved class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show active** command indicates that the configuration
|
|||
|
|
mode class map is not stored in ***running-config***. The **show
|
|||
|
|
pending** command displays the class map to be stored upon
|
|||
|
|
exiting the ***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-CP-CMAP_1)# **show active**
|
|||
|
|
switch(config-cmap-CP-CMAP_1)# **show pending**
|
|||
|
|
class-map type copp match-any CP-CMAP_1
|
|||
|
|
match ip access-group ACLv4_1
|
|||
|
|
|
|||
|
|
switch(config-cmap-CP-CMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***global*** configuration mode and saves pending class map changes. The
|
|||
|
|
**abort** command returns the switch to the
|
|||
|
|
***global*** configuration mode and discards pending class map
|
|||
|
|
changes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command exits the ***class-map*** configuration mode and stores pending
|
|||
|
|
changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-CP-CMAP_1)# **exit**
|
|||
|
|
switch(config)# **show class-map type control-plane CP-CMAP_1**
|
|||
|
|
Class-map: CP-CMAP_1 (match-any)
|
|||
|
|
Match: ip access-group name ACLv4_1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Editing the Policy Map
|
|||
|
|
|
|||
|
|
|
|||
|
|
The only control plane policy map is **copp-system-policy**, which cannot
|
|||
|
|
be deleted. In its default form, **copp-system-policy**
|
|||
|
|
consists of the classes listed in copp-system-policy default classes: Trident Platform Switches. Although
|
|||
|
|
the underlying class map of each class cannot be edited, the traffic resolution
|
|||
|
|
commands can be adjusted. The default classes cannot be removed from the policy map
|
|||
|
|
and their sequence within the policy map is not editable.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Table 5. copp-system-policy default classes: Trident Platform Switches
|
|||
|
|
|
|||
|
|
| Class Name
|
|||
|
|
| **shape (pps)**
|
|||
|
|
| **bandwidth (pps)**
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-bpdu
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-lacp
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-selfip-tc6to7
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-selfip
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-tc6to7
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-lldp
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcrsvd
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-igmp
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcmiss
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-glean
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-tc3to5
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-arp
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-arpresolver
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3destmiss
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3slowpath
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3ttl1
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-default
|
|||
|
|
| 8000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-acllog
|
|||
|
|
| 10000
|
|||
|
|
| 1000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-sflow
|
|||
|
|
| 25000
|
|||
|
|
| 0
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are modified in the ***policy-map*** configuration mode. The policy-map type
|
|||
|
|
copp command enters the ***policy-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***policy-map*** configuration mode for editing
|
|||
|
|
**copp-system-policy**.
|
|||
|
|
```
|
|||
|
|
`switch(config)#**policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Dynamic classes are inserted in front of the static classes. Classes automatically
|
|||
|
|
contain their eponymous class map; traffic resolution commands are created or edited
|
|||
|
|
in the ***policy-map-class*** configuration mode. The class
|
|||
|
|
(policy-map (control-plane) Trident) command adds a class to the policy
|
|||
|
|
map and places the switch in the ***policy-map-class*** configuration mode,
|
|||
|
|
where traffic resolution commands are added to the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the **CP-CMAP_1** class to the
|
|||
|
|
copp-system-policy policy map and places the switch in the
|
|||
|
|
***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-copp-system-policy)# **class CP-CMAP_1**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-CP-CMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Two traffic resolution commands determine bandwidth parameters for class traffic:
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident) specifies
|
|||
|
|
the minimum bandwidth.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident) specifies the maximum bandwidth.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a bandwidth range of **2000** to
|
|||
|
|
**4000** packets per seconds (pps) for traffic
|
|||
|
|
filtered by the **CP-CMAP_1** class
|
|||
|
|
map:
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-CP-CMAP_1)# **bandwidth pps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-CP-CMAP_1)# **shape pps 4000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-CP-CMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***policy-map*** and ***policy-map-class*** configuration modes
|
|||
|
|
are group-change modes. Changes are saved with the **exit**
|
|||
|
|
command or discarded with the **abort** command. The
|
|||
|
|
**show active** command displays the saved version of
|
|||
|
|
policy map. The **show pending** command displays the modified
|
|||
|
|
policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exits the ***policy-map-class*** configuration mode, display
|
|||
|
|
the pending policy-map, then exits the ***policy-map*** configuration mode,
|
|||
|
|
which saves the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-CP-CMAP_1)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **show pending**
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
class CP-CMAP_1
|
|||
|
|
shape pps 4000
|
|||
|
|
bandwidth pps 2000
|
|||
|
|
|
|||
|
|
class copp-system-bpdu
|
|||
|
|
|
|||
|
|
class copp-system-lldp
|
|||
|
|
|
|||
|
|
class copp-system-lacp
|
|||
|
|
|
|||
|
|
class copp-system-arp
|
|||
|
|
|
|||
|
|
class copp-system-arpresolver
|
|||
|
|
|
|||
|
|
class copp-system-default
|
|||
|
|
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
To modify traffic resolution commands for a static class, enter the
|
|||
|
|
***policy-map-class*** configuration mode for the class, then enter
|
|||
|
|
the desired **bandwidth** and **shape**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands enters the ***policy-map-class*** configuration mode for
|
|||
|
|
**copp-system-bpdu** class, change the bandwidth range
|
|||
|
|
for the class, then save the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-bpdu**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-bpdu)# **shape pps 200**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-bpdu)# **bandwidth pps 100**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-bpdu)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **show pending**
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
class CP-CMAP_1
|
|||
|
|
shape pps 4000
|
|||
|
|
bandwidth pps 2000
|
|||
|
|
|
|||
|
|
class copp-system-bpdu
|
|||
|
|
shape pps 200
|
|||
|
|
bandwidth pps 100
|
|||
|
|
|
|||
|
|
class copp-system-lldp
|
|||
|
|
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to the Control Plane
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **copp-system-policy** policy map is always applied to the control
|
|||
|
|
plane. No commands are available to add or remove this assignment.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring QoS Traffic Policies
|
|||
|
|
Trident Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies are implemented
|
|||
|
|
by creating class maps and policy maps, then applying the policy maps
|
|||
|
|
to Ethernet and port channel interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
QoS traffic policies utilize dynamic class maps that are created and modified in the
|
|||
|
|
***class-map*** configuration mode. The class-map type qos command enters the ***class-map***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***class-map*** configuration mode to create
|
|||
|
|
QoS class map named
|
|||
|
|
**Q-CMap_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos match-any Q-CMap_1**
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map contains one IPv4 or IPv6 Access Control List (ACL). The match (class-map (qos) Trident)
|
|||
|
|
command assigns an ACL to the class map. Subsequent
|
|||
|
|
**match** commands replace the existing
|
|||
|
|
**match** command. Class maps filter
|
|||
|
|
traffic only on ACL permit rules. Deny ACL rules are disregarded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the IPv6 ACL named **ACLv6_1** to the
|
|||
|
|
class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-Q-CMap_1)# **match ipv6 access-group ACLv6_1**
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map*** configuration mode is a group-change mode. Changes
|
|||
|
|
made in a group-change mode are saved by exiting the mode. The
|
|||
|
|
**show active** command displays the saved
|
|||
|
|
version of class map. The **show pending** command
|
|||
|
|
displays the unsaved class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show active** command indicates that the
|
|||
|
|
configuration mode class map is not stored in ***running-config***.
|
|||
|
|
The **show pending** command displays the class map to
|
|||
|
|
be stored upon exiting the ***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-Q-CMap_1)# **show active**
|
|||
|
|
switch(config-cmap-Q-CMap_1)# **show pending**
|
|||
|
|
class-map type qos match-any Q-CMap_1
|
|||
|
|
match ipv6 access-group ACLv6_1
|
|||
|
|
|
|||
|
|
switch(config-cmap-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to
|
|||
|
|
***global*** configuration mode and saves pending class
|
|||
|
|
map changes. The **abort** command returns the switch
|
|||
|
|
to ***global*** configuration mode and discards pending class map
|
|||
|
|
changes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command exits the ***class-map*** configuration mode and stores
|
|||
|
|
pending changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-CP-CMAP_1)# **exit**
|
|||
|
|
switch(config)# **show class-map type control-plane CP-CMAP_1**
|
|||
|
|
Class-map: CP-CMAP_1 (match-any)
|
|||
|
|
Match: ip access-group name ACLv4_1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are created and modified in the ***policy-map*** configuration mode. The
|
|||
|
|
policy-map type
|
|||
|
|
quality-of-service command enters the ***policy-map***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***policy-map*** configuration mode for
|
|||
|
|
creating a QoS policy map named
|
|||
|
|
**Q-PMAP_1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service Q-PMAP_1**
|
|||
|
|
switch(config-pmap-Q-PMAP_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are edited by adding or removing classes. A class automatically
|
|||
|
|
contains its eponymous class map; traffic resolution commands are added or
|
|||
|
|
edited in the ***policy-map-class*** configuration mode. The class (policy-map (qos) Trident)
|
|||
|
|
command adds a class to the configuration mode policy map and places the
|
|||
|
|
switch in the ***policy-map-class*** configuration mode, where
|
|||
|
|
traffic resolution commands are added to the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command adds the **Q-CMap_1** class to the
|
|||
|
|
**Q-PMAP_1** policy map and places the
|
|||
|
|
switch in the ***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-Q-PMAP_1)# **class Q-CMap_1**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The set (policy-map-class (qos) Trident)
|
|||
|
|
command configures traffic resolution methods for data that passes the class
|
|||
|
|
map:
|
|||
|
|
|
|||
|
|
- **set cos** sets the layer 2 CoS
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **set dscp** sets the DSCP value in the ToS
|
|||
|
|
byte.
|
|||
|
|
|
|||
|
|
- **set traffic class** specifies a traffic
|
|||
|
|
class queue.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set **CoS field
|
|||
|
|
7** on packets filtered by the class map, then
|
|||
|
|
assigns those packets to **traffic class
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***policy-map*** and ***policy-map-class*** configuration
|
|||
|
|
modes are group-change modes. Changes are saved with the **exit** command
|
|||
|
|
or discarded with the **abort** command. The
|
|||
|
|
**show active** and **show
|
|||
|
|
pending** commands display the saved and modified
|
|||
|
|
policy map versions, respectively.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands exit the ***policy-map-class*** configuration mode,
|
|||
|
|
display the pending policy-map, then exits the ***policy-map***
|
|||
|
|
configuration mode to save the altered policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-Q-PMAP_1-Q-CMap_1)# **exit**
|
|||
|
|
switch(config-pmap-Q-PMAP_1)# **show pending**
|
|||
|
|
policy-map type quality-of-service Q-PMAP_1
|
|||
|
|
class Q-CMap_1
|
|||
|
|
set cos 7
|
|||
|
|
set traffic-class 4
|
|||
|
|
|
|||
|
|
class class-default
|
|||
|
|
|
|||
|
|
switch(config-pmap-Q-PMAP_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The last class in all QoS policy maps is ***class-default***. The
|
|||
|
|
***class-default*** class map matches all traffic except
|
|||
|
|
IPv4 or IPv6 traffic and provides no traffic resolution commands. The
|
|||
|
|
***class-default*** class map is not editable; traffic
|
|||
|
|
resolution commands can be added to the ***class-default***
|
|||
|
|
class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
To modify traffic resolution commands for the ***class-default***
|
|||
|
|
class, enter the ***policy-map-class*** configuration mode for the
|
|||
|
|
class, then enter the desired **set** commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands enters the ***policy-map-class*** configuration mode for
|
|||
|
|
***class-default***, configures the stream to enter
|
|||
|
|
**traffic class 2**, and saves the altered
|
|||
|
|
policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service Q-PMap_1**
|
|||
|
|
switch(config-pmap-Q-PMap_1)# **class class-default**
|
|||
|
|
switch(config-pmap-c-Q-PMap_1-class-default)# **set traffic-class 2**
|
|||
|
|
switch(config-pmap-c-Q-PMap_1-class-default)# **exit**
|
|||
|
|
switch(config-pmap-Q-PMap_1)# **exit**
|
|||
|
|
switch(config)# **show policy-map type qos Q-PMap_1**
|
|||
|
|
Service-policy Q-PMap_1
|
|||
|
|
|
|||
|
|
Class-map: Q-CMap_1 (match-any)
|
|||
|
|
Match: ipv6 access-group name ACLv6_1
|
|||
|
|
set cos 7
|
|||
|
|
set traffic-class 4
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
set traffic-class 2
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to an Interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
The service-policy
|
|||
|
|
type qos (Interface mode) command applies a specified policy map to the
|
|||
|
|
configuration mode interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands apply **PMAP-1** policy map to
|
|||
|
|
**interface ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
switch(config-if-Et8)# **service-policy input PMAP-1**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
interface Ethernet8
|
|||
|
|
service-policy type qos input PMAP-1
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring PBR Policies
|
|||
|
|
Trident Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Based Routing (PBR) is implemented by creating class maps and policy maps, then applying
|
|||
|
|
the policy maps to Ethernet interfaces, port channel interfaces or Switch Virtual
|
|||
|
|
Interfaces (SVIs).
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating PBR Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
PBR policies utilize class maps that are created and modified in the ***class-map***
|
|||
|
|
configuration mode. The class-map type
|
|||
|
|
pbr command enters the ***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command enters the ***class-map*** configuration mode to create a PBR class
|
|||
|
|
map named
|
|||
|
|
**CMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type pbr match-any CMAP1**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map contains one or more Access Control Lists (ACLs). The match (policy-map
|
|||
|
|
(pbr)) command assigns an ACL to the class map. Subsequent
|
|||
|
|
**match** commands add additional ACLs to the class map.
|
|||
|
|
Class maps filter traffic only on ACL permit rules. Deny ACL rules are disregarded; if a
|
|||
|
|
class map includes ACLs with deny rules, the configuration reverts to its previous
|
|||
|
|
state.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
- This command adds the ACL named **ACL1** to the
|
|||
|
|
class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **match ip access-group ACL1**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map***
|
|||
|
|
configuration mode is a group-change mode. Changes made in a group-change mode are
|
|||
|
|
saved by exiting the mode. The **show active** command
|
|||
|
|
displays the saved version of class map.
|
|||
|
|
|
|||
|
|
- The **show active** command indicates that the configuration
|
|||
|
|
mode class map is not stored in ***running-config***.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **show active**
|
|||
|
|
switch(config-cmap-PBR-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- The **exit** command returns the switch to
|
|||
|
|
***global*** configuration mode and saves pending class map changes. The
|
|||
|
|
**abort** command returns the switch to
|
|||
|
|
***global*** configuration mode and discards pending changes.
|
|||
|
|
|
|||
|
|
- This command exits the ***class-map*** configuration mode and stores pending
|
|||
|
|
changes to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-cmap-PBR-CMAP1)# **exit**
|
|||
|
|
switch(config)# **show class-map type pbr CMAP1**
|
|||
|
|
class-map type pbr match-any CMAP1
|
|||
|
|
10 match ip access-group ACL1
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Creating PBR Policy Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are created and modified in the ***policy-map*** configuration mode. The
|
|||
|
|
policy-map type
|
|||
|
|
pbr command enters policy-map configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
- This command enters the ***policy-map*** configuration mode for creating a
|
|||
|
|
PBR policy map named
|
|||
|
|
**PMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy map are edited by adding or removing classes. A class automatically
|
|||
|
|
contains its eponymous class map; next-hop commands are added or edited in the
|
|||
|
|
***policy-map-class*** configuration mode. The class (policy-map
|
|||
|
|
(pbr)) command adds a class to the configuration mode
|
|||
|
|
policy map and places the switch in the ***policy-map-class***
|
|||
|
|
configuration mode, where next-hop commands are added to the class.
|
|||
|
|
|
|||
|
|
- This command adds the **CMAP1** class to the policy map and
|
|||
|
|
places the switch in the ***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- The set nexthop (policy-map-class pbr) command
|
|||
|
|
configures the next hop for data that passes the class map.This command configures
|
|||
|
|
the policy map to set the next hop to **10.12.0.5** on packets
|
|||
|
|
filtered by the class
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-PMAP1-CMAP1)# **set nexthop 10.12.0.5**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- The ***policy-map*** and ***policy-map-class*** configuration modes
|
|||
|
|
are group-change modes. Changes are saved with the **exit**
|
|||
|
|
command or discarded with the **abort** command. The
|
|||
|
|
**show active** command displays the currently saved map
|
|||
|
|
version. These commands exits the ***policy-map-class*** configuration mode,
|
|||
|
|
then exits the ***policy-map*** configuration mode to save the altered policy
|
|||
|
|
map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-PMAP1-CMAP1)# **exit**
|
|||
|
|
switch(config-pmap-PMAP1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying a PBR Policy Map to an Interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
The service-policy type pbr
|
|||
|
|
(Interface mode) command applies the specified PBR policy map to the
|
|||
|
|
configuration mode interface. Only one PBR service policy is supported per interface.
|
|||
|
|
|
|||
|
|
- These commands apply the **PMAP1** PBR policy map to
|
|||
|
|
**interface ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **service-policy type pbr input PMAP1**
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Hardware Decapsulation
|
|||
|
|
|
|||
|
|
|
|||
|
|
When hardware decapsulation takes place,
|
|||
|
|
PBR policy maps on Trident platform switches match on inner packet headers
|
|||
|
|
(i.e., they match based on the attributes of the decapsulated packet).
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Configuration
|
|||
|
|
Trident II Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Traffic policies are implemented by policy maps, which are applied to the control plane or an
|
|||
|
|
interface. Policy maps contain classes, which are composed of class maps and traffic
|
|||
|
|
resolution commands. Traffic
|
|||
|
|
Management Conceptual Overview describes traffic policies.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident platform switches support the following traffic policies:
|
|||
|
|
|
|||
|
|
- Control plane policies manage control plane traffic.
|
|||
|
|
|
|||
|
|
- QoS traffic policies manage traffic on Ethernet and port channel interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Configuring Control Plane Traffic
|
|||
|
|
PoliciesTrident II Platform Switches
|
|||
|
|
|
|||
|
|
|
|||
|
|
Default control plane traffic
|
|||
|
|
policies are implemented automatically without user intervention. These
|
|||
|
|
policies are modified by associating traffic resolution commands with
|
|||
|
|
static classes that comprise the control plane policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Static Class Maps
|
|||
|
|
|
|||
|
|
|
|||
|
|
Control plane traffic policies utilize
|
|||
|
|
static class maps, which are provided by the switch, are not editable,
|
|||
|
|
and cannot be deleted.
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Editing the Policy Map
|
|||
|
|
|
|||
|
|
|
|||
|
|
The only control plane policy map is **copp-system-policy**, which cannot
|
|||
|
|
be deleted. In its default form, **copp-system-policy**
|
|||
|
|
consists of the classes listed in copp-system-policy default classes: Trident II Platform Switches.
|
|||
|
|
Although the underlying class map of each class cannot be edited, the traffic
|
|||
|
|
resolution commands can be adjusted. The default classes cannot be removed from the
|
|||
|
|
policy map and their sequence within the policy map is not editable.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Table 6. copp-system-policy default classes: Trident II Platform Switches
|
|||
|
|
|
|||
|
|
| Class Name
|
|||
|
|
| shape (pps)
|
|||
|
|
| bandwidth (pps)
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-acllog
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-arp
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-arpresolver
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-bfd
|
|||
|
|
| 5000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-bgp
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-bpdu
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-default
|
|||
|
|
| 1000
|
|||
|
|
| 8000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-glean
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-igmp
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcmiss
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-ipmcrsvd
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3destmiss
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3slowpath
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-l3ttl1
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-lacp
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-lldp
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-mlag
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-selfip
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-selfip-tc6to7
|
|||
|
|
| 5000
|
|||
|
|
| 5000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-sflow
|
|||
|
|
| 0
|
|||
|
|
| 25024
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-tc3to5
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-tc6to7
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
| copp-system-urm
|
|||
|
|
| 1000
|
|||
|
|
| 10000
|
|||
|
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy maps are modified in the ***policy-map*** configuration mode. The policy-map type copp command enters
|
|||
|
|
the ***policy-map*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- This command enters the ***policy-map*** configuration mode for
|
|||
|
|
editing
|
|||
|
|
**copp-system-policy**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- The class (policy-map (control-plane) Trident II) command enters the
|
|||
|
|
***policy-map-class*** configuration mode, where traffic
|
|||
|
|
resolution commands are modified for the configuration mode class.
|
|||
|
|
|
|||
|
|
- This command enters the ***policy-map-class*** configuration mode
|
|||
|
|
for the **copp-system-lacp static**
|
|||
|
|
class.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-copp-system-policy)# **class copp-system-lacp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
Two traffic resolution commands determine bandwidth parameters for class traffic:
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident II)
|
|||
|
|
specifies the minimum bandwidth.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident II) specifies the maximum bandwidth.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- These commands configure a bandwidth range of **2000**
|
|||
|
|
to **4000** packets per seconds (pps) for traffic
|
|||
|
|
filtered by the **copp-system-lacp** class
|
|||
|
|
map:
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **bandwidth pps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **shape pps 4000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lacp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- The ***policy-map*** and ***policy-map-class***
|
|||
|
|
configuration modes are group-change modes. Changes are saved with the
|
|||
|
|
**exit** command or discarded with the
|
|||
|
|
**abort** command. The **show
|
|||
|
|
active** command displays the saved version of policy
|
|||
|
|
map. The **show pending** command displays the
|
|||
|
|
modified policy map.
|
|||
|
|
|
|||
|
|
- These commands exits the ***policy-map-class*** configuration mode,
|
|||
|
|
display the pending ***policy-map***, then exit
|
|||
|
|
***policy-map*** configuration mode, which saves the altered
|
|||
|
|
policy map to
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch(config-pmap-c-copp-system-policy-copp-system-lacp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **show pending**
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
class copp-system-bpdu
|
|||
|
|
|
|||
|
|
class copp-system-lldp
|
|||
|
|
|
|||
|
|
class copp-system-lacp
|
|||
|
|
shape pps 4000
|
|||
|
|
bandwidth pps 2000
|
|||
|
|
|
|||
|
|
class copp-system-arp
|
|||
|
|
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
#### Applying Policy Maps to the Control Plane
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **copp-system-policy** policy map is always applied to the control
|
|||
|
|
plane. No commands are available to add or remove this assignment.
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Traffic Management Configuration Commands
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Traffic Policy (Control Plane) Configuration Commands
|
|||
|
|
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane)
|
|||
|
|
Arad)
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane)
|
|||
|
|
FM6000)
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane)
|
|||
|
|
Petra)
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident
|
|||
|
|
II)
|
|||
|
|
|
|||
|
|
- class-map type
|
|||
|
|
copp
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Arad)
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane)
|
|||
|
|
FM6000)
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane)
|
|||
|
|
Petra)
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident
|
|||
|
|
II)
|
|||
|
|
|
|||
|
|
- match (class-map (control-plane) Helix)
|
|||
|
|
|
|||
|
|
- match (class-map (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
- match (class-map (control-plane) Trident
|
|||
|
|
II)
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
copp
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane)
|
|||
|
|
Arad)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane)
|
|||
|
|
FM6000)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane)
|
|||
|
|
Petra)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident
|
|||
|
|
II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Traffic Policy (PBR) Configuration Commands
|
|||
|
|
|
|||
|
|
|
|||
|
|
- action set-ttl
|
|||
|
|
|
|||
|
|
- class (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
- class-map type
|
|||
|
|
pbr
|
|||
|
|
|
|||
|
|
- feature pbr
|
|||
|
|
|
|||
|
|
- match (class-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
- match (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
- platform arad tcam counters feature
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
pbr
|
|||
|
|
|
|||
|
|
- resequence
|
|||
|
|
(class-map (pbr))
|
|||
|
|
|
|||
|
|
- resequence
|
|||
|
|
(policy-map (pbr))
|
|||
|
|
|
|||
|
|
- service-policy type pbr (Interface
|
|||
|
|
mode)
|
|||
|
|
|
|||
|
|
- set nexthop (policy-map-class pbr)
|
|||
|
|
|
|||
|
|
- set nexthop-group (policy-map-class(pbr)
|
|||
|
|
Arad)
|
|||
|
|
|
|||
|
|
|
|||
|
|
### CPU Traffic Policy Command
|
|||
|
|
|
|||
|
|
|
|||
|
|
- feature traffic-policy cpu
|
|||
|
|
|
|||
|
|
- feature traffic-policy port
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Traffic Policy (QoS) Configuration Commands
|
|||
|
|
|
|||
|
|
|
|||
|
|
- class-map type
|
|||
|
|
qos
|
|||
|
|
|
|||
|
|
- class (policy-map (qos) FM6000)
|
|||
|
|
|
|||
|
|
- class (policy-map (qos) Helix)
|
|||
|
|
|
|||
|
|
- class (policy-map (qos) Trident)
|
|||
|
|
|
|||
|
|
- class (policy-map (qos) Trident II)
|
|||
|
|
|
|||
|
|
- match (class-map (qos) FM6000)
|
|||
|
|
|
|||
|
|
- match (class-map (qos) Helix)
|
|||
|
|
|
|||
|
|
- match (class-map (qos) Trident)
|
|||
|
|
|
|||
|
|
- match (class-map (qos) Trident II)
|
|||
|
|
|
|||
|
|
- policy-map type quality-of-service
|
|||
|
|
|
|||
|
|
- policy-map type quality-of-service policer
|
|||
|
|
|
|||
|
|
- service-policy type qos (Interface
|
|||
|
|
mode)
|
|||
|
|
|
|||
|
|
- set (policy-map-class (qos) FM6000)
|
|||
|
|
|
|||
|
|
- set (policy-map-class (qos) Helix)
|
|||
|
|
|
|||
|
|
- set (policy-map-class (qos) Trident)
|
|||
|
|
|
|||
|
|
- set (policy-map-class (qos) Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
### Traffic Policy Display and Utility Commands
|
|||
|
|
|
|||
|
|
|
|||
|
|
- clear policy-map
|
|||
|
|
counters
|
|||
|
|
|
|||
|
|
- show
|
|||
|
|
class-map type control-plane
|
|||
|
|
|
|||
|
|
- show class-map
|
|||
|
|
type pbr
|
|||
|
|
|
|||
|
|
- show class-map
|
|||
|
|
type qos
|
|||
|
|
|
|||
|
|
- show policy-map
|
|||
|
|
type copp
|
|||
|
|
|
|||
|
|
- show policy-map
|
|||
|
|
type pbr
|
|||
|
|
|
|||
|
|
- show policy-map
|
|||
|
|
type qos
|
|||
|
|
|
|||
|
|
- show
|
|||
|
|
policy-map type qos counters
|
|||
|
|
|
|||
|
|
- show policy-map
|
|||
|
|
copp
|
|||
|
|
|
|||
|
|
- show
|
|||
|
|
policy-map interface type qos
|
|||
|
|
|
|||
|
|
- show policy-map interface type qos
|
|||
|
|
counters
|
|||
|
|
|
|||
|
|
- show traffic-policy
|
|||
|
|
|
|||
|
|
|
|||
|
|
### action set-ttl
|
|||
|
|
|
|||
|
|
|
|||
|
|
The TTL action is effective only when it is configured along with a set nexthop or
|
|||
|
|
nexthop-group action. The TCAM profile has the set-ttl-3b or set-ttl action in the pbr
|
|||
|
|
ip and pbr ipv6 features, such as in the tc-counters system profile.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IP
|
|||
|
|
|
|||
|
|
|
|||
|
|
TCAM feature PBR IP configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IPv6
|
|||
|
|
|
|||
|
|
|
|||
|
|
TCAM feature PBR IPv6 configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
action set-time [set-ttl |
|
|||
|
|
set-ttl-3b]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no action set-time [set-ttl |
|
|||
|
|
set-ttl-3b]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default action set-time [set-ttl |
|
|||
|
|
set-ttl-3b]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **set-ttl**Set time to live.
|
|||
|
|
|
|||
|
|
- **set-ttl-3b** Set 3-bit time to live.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- In the following example, for IP, the action sets the time to live for the next
|
|||
|
|
hop.
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`(config)# hardware tcam
|
|||
|
|
(config-tcam)# profile pbr-set-ttl copy default
|
|||
|
|
(config-tcam-profile-pbr-set-ttl)# feature pbr ip
|
|||
|
|
(config-tcam-feature-pbr-ip)# action set-ttl`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- In the following example, for IPv6, the action sets the time to live for the next
|
|||
|
|
hop group.
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`config)# hardware tcam
|
|||
|
|
(config-tcam)# profile pbr-set-ttl copy default
|
|||
|
|
(config-tcam-profile-pbr-set-ttl)# feature pbr ip
|
|||
|
|
(config-tcam-feature-pbr-ip)# feature pbr ipv6
|
|||
|
|
(config-tcam-feature-pbr-ipv6)# action set-ttl`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### bandwidth (policy-map-class
|
|||
|
|
(control-plane)Arad)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **bandwidth** command specifies the minimum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no bandwidth** and **default
|
|||
|
|
bandwidth** commands remove the minimum bandwidth guarantee for
|
|||
|
|
the configuration mode class by deleting the corresponding
|
|||
|
|
**bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (control-plane)
|
|||
|
|
Arad)**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
bandwidth kbps
|
|||
|
|
kilobits
|
|||
|
|
|
|||
|
|
|
|||
|
|
no bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
default bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**kilobits** Minimum data rate in kilobits per second. Value
|
|||
|
|
ranges from **1** to **10000000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Arad) places the switch in the
|
|||
|
|
***policy-map-class*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Arad) specifies the
|
|||
|
|
maximum bandwidth for traffic defined by the associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Bandwidth**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Arad platform switches define these default bandwidths for control plane static
|
|||
|
|
classes:
|
|||
|
|
|
|||
|
|
- copp-system-bgp 250 copp-system-l3lpmoverflow 250
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 1250 copp-system-l3slowpath 250
|
|||
|
|
|
|||
|
|
- copp-system-default 250 copp-system-l3ttl1 250
|
|||
|
|
|
|||
|
|
- copp-system-ipbroadcast 250 copp-system-lacp 1250
|
|||
|
|
|
|||
|
|
- copp-system-ipmc 250 copp-system-linklocal 250
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 250 copp-system-lldp 250
|
|||
|
|
|
|||
|
|
- copp-system-ipunicast 250 copp-system-mlag 250
|
|||
|
|
|
|||
|
|
- copp-system-l2broadcast 250 copp-system-multicastsnoop 250
|
|||
|
|
|
|||
|
|
- copp-system-l2unicast 250 copp-system-OspfIsis 250
|
|||
|
|
|
|||
|
|
- copp-system-l3destmiss 250 copp-system-sflow 250
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the minimum bandwidth of **500** kbps
|
|||
|
|
for data traffic specified by the class map
|
|||
|
|
**copp-system-lldp** of the default
|
|||
|
|
***control-plane*** policy map.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **bandwidth kbps 500**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Hardware programming status: InProgress
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 2500 kbps
|
|||
|
|
bandwidth : 500 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### bandwidth (policy-map-class
|
|||
|
|
(control-plane)FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **bandwidth** command specifies the minimum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no bandwidth** and **default
|
|||
|
|
bandwidth** commands remove the minimum bandwidth guarantee for
|
|||
|
|
the configuration mode class by deleting the corresponding
|
|||
|
|
**bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (control-plane)
|
|||
|
|
FM6000)**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
bandwidth pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
default bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Minimum data rate in packets per second. Value
|
|||
|
|
ranges from **1** to **100000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) FM6000) places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) FM6000) specifies the
|
|||
|
|
maximum bandwidth for traffic defined by the associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Bandwidth**
|
|||
|
|
|
|||
|
|
|
|||
|
|
FM6000 platform switches define these default bandwidths for control plane static
|
|||
|
|
classes:
|
|||
|
|
|
|||
|
|
- copp-system-arp 1000 copp-system-l3slowpath 1000
|
|||
|
|
|
|||
|
|
- copp-system-default 1000 copp-system-pim-ptp 1000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 1000 copp-system-ospf-isis 1000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 1000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-igmp 1000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-l2rsvd 10000 copp-system-sflow 1000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the minimum bandwidth of **1000**
|
|||
|
|
packets per second for data traffic specified by the class map
|
|||
|
|
**PMAP-1** in the policy map named
|
|||
|
|
**copp-system-policy**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class PMAP-1**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)# **bandwidth pps 1000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### bandwidth (policy-map-class
|
|||
|
|
(control-plane)Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **bandwidth** command specifies the minimum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no bandwidth** and **default
|
|||
|
|
bandwidth** commands remove the minimum bandwidth guarantee for
|
|||
|
|
the configuration mode class by deleting the corresponding
|
|||
|
|
**bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (control-plane)
|
|||
|
|
Helix)**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
bandwidth pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
default bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Minimum data rate in packets per second. Value
|
|||
|
|
ranges from **1** to **100000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Helix) places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Helix) specifies the
|
|||
|
|
maximum bandwidth for traffic defined by the associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Bandwidth**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Helix platform switches define these default bandwidths for control plane static
|
|||
|
|
classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog 1000 copp-system-l3ttl1 1000
|
|||
|
|
|
|||
|
|
- copp-system-arp 1000 copp-system-lacp 5000
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver 1000 copp-system-lldp 1000
|
|||
|
|
|
|||
|
|
- copp-system-bfd 5000 copp-system-mlag 5000
|
|||
|
|
|
|||
|
|
- copp-system-bgp 5000 copp-system-OspfIsis 5000
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 5000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-default 1000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-glean 1000 copp-system-sflow 0
|
|||
|
|
|
|||
|
|
- copp-system-igmp 1000 copp-system-tc3to5 1000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 1000 copp-system-tc6to7 1000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 1000 copp-system-urm 1000
|
|||
|
|
|
|||
|
|
- copp-system-l3destmiss 1000 copp-system-vrrp 1000
|
|||
|
|
|
|||
|
|
- copp-system-l3slowpath 1000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the minimum bandwidth of **500**
|
|||
|
|
packets per second for data traffic specified by the class map
|
|||
|
|
**copp-system-lldp**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **bandwidth pps 500**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map interface control-plan copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Number of units programmed: 4
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 10000 pps
|
|||
|
|
bandwidth : 500 pps
|
|||
|
|
Out Packets : 304996
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### bandwidth (policy-map-class
|
|||
|
|
(control-plane)Petra)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **bandwidth** command specifies the minimum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no bandwidth** and **default
|
|||
|
|
bandwidth** commands remove the minimum bandwidth guarantee for
|
|||
|
|
the configuration mode class by deleting the corresponding
|
|||
|
|
**bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (control-plane)
|
|||
|
|
Petra)**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
bandwidth kbps
|
|||
|
|
kilobits
|
|||
|
|
|
|||
|
|
|
|||
|
|
no bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
default bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**kbits** Minimum data rate in kilobits per second. Value
|
|||
|
|
ranges from **1** to **10000000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Petra) places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Petra) specifies the
|
|||
|
|
maximum bandwidth for traffic defined by the associated class map in its
|
|||
|
|
***policy map class*** configuration mode .
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Bandwidth**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Petra platform switches define these default bandwidths for control plane static
|
|||
|
|
classes:
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 1250 copp-system-l3destmiss 250
|
|||
|
|
|
|||
|
|
- copp-system-default 250 copp-system-l3slowpath 250
|
|||
|
|
|
|||
|
|
- copp-system-igmp 250 copp-system-l3ttl0 250
|
|||
|
|
|
|||
|
|
- copp-system-ipbroadcast 250 copp-system-l3ttl1 250
|
|||
|
|
|
|||
|
|
- copp-system-ipmc 250 copp-system-lacp 1250
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 250 copp-system-lldp 250
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 250 copp-system-unicast-arp 250
|
|||
|
|
|
|||
|
|
- copp-system-ipunicast 250
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Petra does not support all discrete rate values. When a specified discrete value is not supported, the switch converts the rate to the next highest discrete value that it supports. The **show** command displays the converted rate and not the user-configured rate.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a minimum bandwidth of **500** kbps
|
|||
|
|
for data traffic specified by the class map ***copp-system-lldp*** of the
|
|||
|
|
default ***control-plane*** policy map. Because the switch does not support
|
|||
|
|
the discrete value of **500** kbps, it converts the bandwidth
|
|||
|
|
up to **651**
|
|||
|
|
kbps.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **bandwidth kbps 500**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Hardware programming status: InProgress
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 2766 kbps
|
|||
|
|
bandwidth : 651 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### bandwidth (policy-map-class
|
|||
|
|
(control-plane)Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **bandwidth** command specifies the minimum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no bandwidth** and **default
|
|||
|
|
bandwidth** commands remove the minimum bandwidth guarantee for
|
|||
|
|
the configuration mode class by deleting the corresponding
|
|||
|
|
**bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (control-plane) Trident
|
|||
|
|
II)**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
bandwidth pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
default bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Minimum data rate in packets per second. Value
|
|||
|
|
ranges from 1 to **100000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident II) places the switch
|
|||
|
|
in ***policy-map-class*** (control plane) configuration mode.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident II) specifies
|
|||
|
|
the maximum bandwidth for traffic defined by the associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Bandwidth**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident II platform switches define these default bandwidths for control plane static
|
|||
|
|
classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog 1000 copp-system-l3slowpath 1000
|
|||
|
|
|
|||
|
|
- copp-system-arp 1000 copp-system-l3ttl1 1000
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver 1000 copp-system-lacp 5000
|
|||
|
|
|
|||
|
|
- copp-system-bfd 5000 copp-system-lldp 1000
|
|||
|
|
|
|||
|
|
- copp-system-bgp 5000 copp-system-mlag 5000
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 5000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-default 1000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-glean 1000 copp-system-sflow 0
|
|||
|
|
|
|||
|
|
- copp-system-igmp 1000 copp-system-tc3to5 1000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 1000 copp-system-tc6to7 1000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 1000 copp-system-urm 1000
|
|||
|
|
|
|||
|
|
- copp-system-l3destmiss 1000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the minimum bandwidth of **500**
|
|||
|
|
packets per second for data traffic specified by the class map
|
|||
|
|
**copp-system-lldp**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **bandwidth pps 500**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map interface control-plan copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Number of units programmed: 4
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 10000 pps
|
|||
|
|
bandwidth : 500 pps
|
|||
|
|
Out Packets : 304996
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### bandwidth (policy-map-class
|
|||
|
|
(control-plane)Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **bandwidth** command specifies the minimum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no bandwidth** and **default
|
|||
|
|
bandwidth** commands remove the minimum bandwidth guarantee for
|
|||
|
|
the configuration mode class by deleting the corresponding
|
|||
|
|
**bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (control-plane)
|
|||
|
|
Trident)**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
bandwidth pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
default bandwidth
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Minimum data rate in packets per second. Value
|
|||
|
|
ranges from **1** to **100000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident) places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident) specifies the
|
|||
|
|
maximum bandwidth for traffic defined by the associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Bandwidth**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident platform switches define these default bandwidths for control plane static
|
|||
|
|
classes:
|
|||
|
|
|
|||
|
|
- copp-system-arp 1000 copp-system-lldp 1000
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver 1000 copp-system-l3destmiss 1000
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 5000 copp-system-l3slowpath 1000
|
|||
|
|
|
|||
|
|
- copp-system-default 1000 copp-system-l3ttl1 1000
|
|||
|
|
|
|||
|
|
- copp-system-glean 1000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-igmp 1000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 1000 copp-system-sflow 0
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 1000 copp-system-tc6to7 1000
|
|||
|
|
|
|||
|
|
- copp-system-lacp 5000 copp-system-tc3to5 1000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the minimum bandwidth of **1000**
|
|||
|
|
packets per second for data traffic specified by the class map
|
|||
|
|
**PMAP-1** in the policy map named
|
|||
|
|
**copp-system-policy**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class PMAP-1**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)# **bandwidth pps 1000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (control-plane)
|
|||
|
|
Arad)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in policy-map-class
|
|||
|
|
(control plane) configuration mode, which is a group change mode for changing
|
|||
|
|
bandwidth and shape parameters associated with a specified class. All changes in a
|
|||
|
|
group change mode edit session are pending until the end of the session.
|
|||
|
|
|
|||
|
|
A
|
|||
|
|
policy map is an ordered list of classes. The control plane policy map contains
|
|||
|
|
**20** static classes. Each class contains an
|
|||
|
|
eponymous class map and may contain **bandwidth** and
|
|||
|
|
**shape** commands.
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream.
|
|||
|
|
|
|||
|
|
- **bandwidth** command defines the streams minimum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
- **shape** command defines the streams maximum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps identify a data stream by definition. Each data packet
|
|||
|
|
is managed by commands of the first class whose map matches the packets content.
|
|||
|
|
Dynamic classes are not supported for control plane policing on Arad platform
|
|||
|
|
switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each class corresponds to a transmission queue. Queue scheduling is
|
|||
|
|
round-robin until ***bandwidth*** rate for a queue is exceeded. Scheduling
|
|||
|
|
becomes strict-priority with CPU queue number determining priority until the
|
|||
|
|
***shape*** rate is reached. Packets are dropped after the shape
|
|||
|
|
rate is exceeded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the
|
|||
|
|
switch to policy-map configuration mode. Saving policy-map-class changes also
|
|||
|
|
require an exit from policy-map mode, which saves pending policy-map-class and
|
|||
|
|
policy-map changes to ***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and
|
|||
|
|
**default class** commands remove
|
|||
|
|
**policy-map-class** commands for the specified class
|
|||
|
|
assignment from the policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (control plane) configuration accessed through **policy-map type
|
|||
|
|
copp** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**class_name** name of the class.
|
|||
|
|
**Static Classes**
|
|||
|
|
|
|||
|
|
Arad platform switches provide the following static control plane classes:
|
|||
|
|
|
|||
|
|
- copp-system-bgp copp-system-l2broadcast copp-system-linklocal
|
|||
|
|
|
|||
|
|
- copp-system-bpdu copp-system-l2unicast copp-system-lldp
|
|||
|
|
|
|||
|
|
- copp-system-default copp-system-l3destmiss copp-system-mlag
|
|||
|
|
|
|||
|
|
- copp-system-ipbroadcast copp-system-l3lpmoverflow
|
|||
|
|
copp-system-multicastsnoop
|
|||
|
|
|
|||
|
|
- copp-system-ipmc copp-system-l3slowpath copp-system-OspfIsis
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss copp-system-l3ttl1 copp-system-sflow
|
|||
|
|
|
|||
|
|
- copp-system-ipunicast copp-system-lacp
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (control plane) Configuration
|
|||
|
|
Mode**
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Arad)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Arad)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to global configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to global configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
policy-map type copp places switch
|
|||
|
|
in ***policy-map*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
These commands enters ***policy-map-class***
|
|||
|
|
configuration mode to modify the shape, bandwidth parameters associated with the static
|
|||
|
|
class named ***copp-system-lldp***.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (control-plane)
|
|||
|
|
FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration mode, which is
|
|||
|
|
a group change mode for changing bandwidth and shape parameters associated with a
|
|||
|
|
specified class. All changes in a group change mode edit session are pending until
|
|||
|
|
the end of the session.
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. The
|
|||
|
|
control plane policy map contains **12** static classes. Each
|
|||
|
|
class contains an eponymous class map and may contain
|
|||
|
|
**bandwidth** and **shape**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream.
|
|||
|
|
|
|||
|
|
- **bandwidth** command defines the streams minimum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
- **shape** command defines the streams maximum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps identify a data stream by definition. Each data packet
|
|||
|
|
is managed by commands of the first class whose map matches the packets content.
|
|||
|
|
Dynamic classes are not supported for control plane policing on FM6000 platform
|
|||
|
|
switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each class corresponds to a transmission queue. Queue scheduling is
|
|||
|
|
round-robin until ***bandwidth*** rate for a queue is exceeded. Scheduling
|
|||
|
|
becomes strict-priority with CPU queue number determining priority until the
|
|||
|
|
***shape*** rate is reached. Packets are dropped after the shape
|
|||
|
|
rate is exceeded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the
|
|||
|
|
switch to policy-map configuration mode. Saving policy-map-class changes also
|
|||
|
|
require an exit from policy-map mode, which saves pending policy-map-class and
|
|||
|
|
policy-map changes to ***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and
|
|||
|
|
**default class** commands remove
|
|||
|
|
**policy-map-class** commands for the specified class
|
|||
|
|
assignment from the policy map. The class is removed from the policy map if it is a
|
|||
|
|
dynamic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (control plane) configuration accessed through **policy-map type
|
|||
|
|
copp** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**class_name** name of the class.
|
|||
|
|
**Static Classes**
|
|||
|
|
|
|||
|
|
FM6000 platform switches provide the following static control plane classes:
|
|||
|
|
|
|||
|
|
- copp-system-arp copp-system-igmp copp-system-PimPtp
|
|||
|
|
|
|||
|
|
- copp-system-default copp-system-l2rsvd copp-system-selfip
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss copp-system-l3slowpath copp-system-selfip-tc6to7
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd copp-system-OspfIsis copp-system-sflow
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (control plane)
|
|||
|
|
Configuration Mode**
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) FM6000)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) FM6000)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
policy-map type copp places switch
|
|||
|
|
in ***policy-map*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
These commands enters
|
|||
|
|
***policy-map-class*** configuration mode to modify the shape, bandwidth
|
|||
|
|
parameters associated with the static class named
|
|||
|
|
**copp-system-arp**.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-arp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-arp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (control-plane)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration mode, which is
|
|||
|
|
a group change mode for changing bandwidth and shape parameters associated with a
|
|||
|
|
specified class. All changes in a group change mode edit session are pending until
|
|||
|
|
the end of the session.
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. The
|
|||
|
|
**control plane** policy map contains
|
|||
|
|
23 static classes. Each class contains an eponymous class map
|
|||
|
|
and may contain **bandwidth** and
|
|||
|
|
**shape** commands.
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream.
|
|||
|
|
|
|||
|
|
- **bandwidth** command defines the streams minimum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
- **shape** command defines the streams maximum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps identify a data stream by definition. Each data packet
|
|||
|
|
is managed by commands of the first class whose map matches the packets content.
|
|||
|
|
Dynamic classes are not supported for control plane policing on Helix platform
|
|||
|
|
switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each class corresponds to a transmission queue. Queue scheduling is
|
|||
|
|
strict-priority; CPU queue number determines priority until the ***shape***
|
|||
|
|
rate is reached. Packets are dropped after the shape rate is exceeded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
**exit** command returns the switch to
|
|||
|
|
***policy-map*** configuration mode. Saving policy-map-class changes
|
|||
|
|
also require an exit from ***policy-map*** mode, which saves the pending
|
|||
|
|
***policy-map-class*** and ***policy-map*** changes to
|
|||
|
|
***running-config*** and returns the switch to global configuration
|
|||
|
|
mode. The **abort** command discards pending changes,
|
|||
|
|
returning the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
**no class** and **default
|
|||
|
|
class** commands remove the ***policy-map-class*** commands
|
|||
|
|
for the specified class assignment from the policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (control plane) configuration accessed through **policy-map type
|
|||
|
|
copp** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**class_name** name of the class.
|
|||
|
|
**Static Classes**
|
|||
|
|
|
|||
|
|
Helix platform switches provide the following static control plane classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog copp-system-ipmcmiss copp-system-OspfIsis
|
|||
|
|
|
|||
|
|
- copp-system-arp copp-system-ipmcrsvd copp-system-selfip
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver copp-system-l3destmiss
|
|||
|
|
copp-system-selfip-tc6to7
|
|||
|
|
|
|||
|
|
- copp-system-bfd copp-system-l3slowpath copp-system-sflow
|
|||
|
|
|
|||
|
|
- copp-system-bgp copp-system-l3ttl1 copp-system-tc3to5
|
|||
|
|
|
|||
|
|
- copp-system-bpdu copp-system-lacp copp-system-tc6to7
|
|||
|
|
|
|||
|
|
- copp-system-default copp-system-lldp copp-system-urm
|
|||
|
|
|
|||
|
|
- copp-system-glean copp-system-lldp copp-system-vrrp
|
|||
|
|
|
|||
|
|
- copp-system-igmp copp-system-lldp
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (control plane)
|
|||
|
|
Configuration Mode**
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Helix)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Helix)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the *global* configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
policy-map type copp places switch in ***policy-map*** (control
|
|||
|
|
plane) configuration mode.
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
These commands enters ***policy-map-class*** configuration mode to modify
|
|||
|
|
the shape, bandwidth parameters associated with the static class named
|
|||
|
|
**copp-system-arp**.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map**
|
|||
|
|
switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (control-plane)
|
|||
|
|
Petra)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in policy-map-class
|
|||
|
|
(control plane) configuration mode, which is a group change mode for changing
|
|||
|
|
bandwidth and shape parameters associated with a specified class. All changes in a
|
|||
|
|
group change mode edit session are pending until the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. The control plane policy map contains 15
|
|||
|
|
static classes. Each class contains an eponymous class map and may contain
|
|||
|
|
**bandwidth** and **shape**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream.
|
|||
|
|
|
|||
|
|
- **bandwidth** command defines the streams minimum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
- **shape** command defines the streams maximum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps identify a data stream by
|
|||
|
|
definition. Each data packet is managed by commands of the first class
|
|||
|
|
whose map matches the packets content. Dynamic classes are not supported
|
|||
|
|
for control plane policing on Petra platform switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each class corresponds to a transmission queue. Queue scheduling is round-robin until
|
|||
|
|
***bandwidth*** rate for a queue is exceeded. Scheduling becomes
|
|||
|
|
strict-priority with CPU queue number determining priority until the
|
|||
|
|
***shape*** rate is reached. Packets are dropped after the shape rate is
|
|||
|
|
exceeded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to
|
|||
|
|
***policy-map*** configuration mode. Saving the
|
|||
|
|
***policy-map-class*** changes also require an exit from
|
|||
|
|
***policy-map*** mode, which saves the pending
|
|||
|
|
***policy-map-class*** and ***policy-map*** changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the **policy-map-class** commands for the
|
|||
|
|
specified class assignment from the policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (control plane) configuration accessed through policy-map type copp command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**class_name** name of the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Petra platform switches provide the following static control plane classes:
|
|||
|
|
|
|||
|
|
- copp-system-bpdu copp-system-ipmcmiss copp-system-l3ttl0
|
|||
|
|
|
|||
|
|
- copp-system-default copp-system-ipmcrsvd copp-system-l3ttl1
|
|||
|
|
|
|||
|
|
- copp-system-igmp copp-system-ipunicast copp-system-lacp
|
|||
|
|
|
|||
|
|
- copp-system-ipbroadcast copp-system-l3destmiss copp-system-lldp
|
|||
|
|
|
|||
|
|
- copp-system-ipmc copp-system-l3slowpath copp-system-unicast-arp
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (control plane) Configuration Mode**
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Petra)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Petra)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
|
|||
|
|
policy-map type copp places switch
|
|||
|
|
in ***policy-map*** (control plane) configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands enters ***policy-map-class*** configuration mode to modify the
|
|||
|
|
shape, bandwidth parameters associated with the static class named
|
|||
|
|
**copp-system-lldp**.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map**
|
|||
|
|
switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (control-plane)
|
|||
|
|
Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in
|
|||
|
|
***policy-map-clas***s (control plane) configuration mode, which is
|
|||
|
|
a group change mode for changing bandwidth and shape parameters associated with a
|
|||
|
|
specified class. All changes in a group change mode edit session are pending until
|
|||
|
|
the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. The
|
|||
|
|
control plane policy map contains **23** static classes. Each
|
|||
|
|
class contains an eponymous class map and may contain
|
|||
|
|
**bandwidth** and **shape**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream.
|
|||
|
|
|
|||
|
|
- **bandwidth** command defines the streams
|
|||
|
|
minimum transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
- **shape** command defines the streams
|
|||
|
|
maximum transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps identify a data stream by definition. Each data packet is
|
|||
|
|
managed by commands of the first class whose map matches the packets content.
|
|||
|
|
Dynamic classes are not supported for control plane policing on Trident II platform
|
|||
|
|
switches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each class corresponds to a transmission queue. Queue scheduling is
|
|||
|
|
strict-priority; CPU queue number determines priority until the ***shape***
|
|||
|
|
rate is reached. Packets are dropped after the shape rate is exceeded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
**exit** command returns the switch to the
|
|||
|
|
***policy-map*** configuration mode. Saving the
|
|||
|
|
***policy-map-class*** changes also require an exit from the
|
|||
|
|
***policy-map*** mode, which saves the pending
|
|||
|
|
***policy-map-class*** and ***policy-map*** changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and
|
|||
|
|
**default class** commands remove the
|
|||
|
|
***policy-map-class*** commands for the specified class assignment
|
|||
|
|
from the policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (control plane)
|
|||
|
|
configuration accessed through **policy-map type copp**
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**class_name**
|
|||
|
|
name of the class.
|
|||
|
|
**Static Classes**
|
|||
|
|
|
|||
|
|
Trident II platform switches
|
|||
|
|
provide the following static control plane classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog copp-system-igmp copp-system-mlag
|
|||
|
|
|
|||
|
|
- copp-system-arp copp-system-ipmcmiss copp-system-selfip
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver copp-system-ipmcrsvd copp-system-selfip-tc6to7
|
|||
|
|
|
|||
|
|
- copp-system-bfd copp-system-l3destmiss copp-system-sflow
|
|||
|
|
|
|||
|
|
- copp-system-bgp copp-system-l3slowpath copp-system-tc3to5
|
|||
|
|
|
|||
|
|
- copp-system-bpdu copp-system-l3ttl1 copp-system-tc6to7
|
|||
|
|
|
|||
|
|
- copp-system-default copp-system-lacp copp-system-urm
|
|||
|
|
|
|||
|
|
- copp-system-glean copp-system-lldp
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (control plane) Configuration
|
|||
|
|
Mode**
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident II)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident II)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
policy-map type copp places switch in ***policy-map (control
|
|||
|
|
plane)*** configuration mode.
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
These commands enters
|
|||
|
|
the ***policy-map-class*** configuration mode to modify the shape, bandwidth
|
|||
|
|
parameters associated with the static class named
|
|||
|
|
**copp-system-arp**.
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map**
|
|||
|
|
switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in
|
|||
|
|
***policy-map-class*** (control plane) configuration mode, which is
|
|||
|
|
a group change mode for changing bandwidth and shape parameters associated with a
|
|||
|
|
specified class. The command adds the specified class to the policy map if it was
|
|||
|
|
not previously included. All changes in a group change mode edit session are pending
|
|||
|
|
until the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. The control plane policy map contains 18
|
|||
|
|
static classes and up to 30 dynamic classes. Dynamic classes
|
|||
|
|
contain an eponymous class map. All classes may contain
|
|||
|
|
**bandwidth** and **shape**
|
|||
|
|
commands.
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream.
|
|||
|
|
|
|||
|
|
- **bandwidth** command defines the streams minimum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
- **shape** command defines the streams maximum
|
|||
|
|
transmission rate through the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Dynamic class maps identify a data stream with an ACL assigned by **match (class-map (control-plane)
|
|||
|
|
Trident)**. Static class maps identify a data stream by
|
|||
|
|
definition. Each data packet is managed by commands of the first class whose map
|
|||
|
|
matches the packets content.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static classes are provided with the switch and cannot be removed from the policy map
|
|||
|
|
or modified by the **class** command. Dynamic classes are user
|
|||
|
|
defined and added to the policy map by this command. Dynamic classes are always
|
|||
|
|
placed in front of the static classes. Bandwidth and shape parameters are editable
|
|||
|
|
for all classes.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each class corresponds to a transmission queue. Queue scheduling is round-robin until
|
|||
|
|
***bandwidth*** rate for a queue is exceeded. Scheduling becomes
|
|||
|
|
strict-priority with CPU queue number determining priority until the
|
|||
|
|
***shape*** rate is reached. Packets are dropped after the shape rate is
|
|||
|
|
exceeded.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to policy-map
|
|||
|
|
configuration mode. Saving the ***policy-map-class*** changes also require
|
|||
|
|
an exit from ***policy-map*** mode, which saves the pending
|
|||
|
|
***policy-map-class*** and ***policy-map*** changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the ***policy-map-class*** commands for the specified class
|
|||
|
|
assignment from the policy map. The class is removed from the policy map if it is a
|
|||
|
|
dynamic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (control plane) configuration accessed through **policy-map type
|
|||
|
|
copp** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **class_name** name of the class.
|
|||
|
|
|
|||
|
|
- **PLACEMENT** Specifies the classs map placement.
|
|||
|
|
Configurable only for dynamic classes.
|
|||
|
|
|
|||
|
|
- **no parameter** New classes are placed between the dynamic and
|
|||
|
|
static classes. Previously defined classes retain their current
|
|||
|
|
policy map placement.
|
|||
|
|
|
|||
|
|
- **insert-before**
|
|||
|
|
**dynamic_class** Class is inserted in front
|
|||
|
|
of the specified dynamic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident switches provide the following static control plane classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog copp-system-ipmcmiss copp-system-lldp
|
|||
|
|
|
|||
|
|
- copp-system-arp copp-system-ipmcrsvd copp-system-selfip
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver copp-system-l3destmiss
|
|||
|
|
copp-system-selfip-tc6to7
|
|||
|
|
|
|||
|
|
- copp-system-bpdu copp-system-l3slowpath copp-system-sflow
|
|||
|
|
|
|||
|
|
- copp-system-glean copp-system-l3ttl1 copp-system-tc3to5
|
|||
|
|
|
|||
|
|
- copp-system-igmp copp-system-lacp copp-system-tc6to7
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (control plane) Configuration Mode**
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident)
|
|||
|
|
|
|||
|
|
- shape (policy-map-class (control-plane) Trident)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type copp places
|
|||
|
|
switch in the ***class-map*** (control-plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- policy-map type copp places
|
|||
|
|
switch in the ***policy-map*** (control plane) configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add **CM-1** class to the
|
|||
|
|
**copp-system-policy** policy
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class CM-1**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-CM-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (pbr)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class (policy-map (pbr)** command places the switch in
|
|||
|
|
***policy-map-class (pbr)*** configuration mode, which is a group
|
|||
|
|
change mode that modifies the specified class of the configuration mode Policy-Based
|
|||
|
|
Routing (PBR) policy map. The command adds the class to the policy map if it was not
|
|||
|
|
previously included in the policy map. All changes in a group change mode edit
|
|||
|
|
session are pending until the mode is exited, and can be canceled by using the
|
|||
|
|
**abort** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A PBR policy map is an ordered list of classes. Each class contains an eponymous
|
|||
|
|
class map and can contain set commands to specify next hop. Classes without set
|
|||
|
|
commands translate to no action being performed on that class of packets.
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream through ACLs. Class maps are
|
|||
|
|
configured in the ***class-map*** (pbr) configuration mode.
|
|||
|
|
|
|||
|
|
- **Set** commands can be used to specify the next hop
|
|||
|
|
for a given class. **Set** commands are configured in
|
|||
|
|
***policy-map-class*** (pbr) configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
PBR policy maps can also contain one or more raw match statements which filter
|
|||
|
|
incoming traffic without using ACLs. Data packets are managed by commands of the
|
|||
|
|
first class or raw match statement matching the packets contents.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***policy-map*** (pbr) configuration mode. However, saving the
|
|||
|
|
policy-map-class changes also requires an exit from ***policy-map*** (pbr)
|
|||
|
|
configuration mode. This saves all the pending policy map and policy-map-class
|
|||
|
|
changes to ***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the class assignment from the configuration mode policy map by
|
|||
|
|
deleting the corresponding **class** configuration from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (pbr) Configuration accessed through **policy-map type
|
|||
|
|
pbr**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
[sequence_number] class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no [sequence_number] class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default [sequence_number]
|
|||
|
|
class
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no [sequence_number]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default [sequence_number]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **sequence_number** Sequence number
|
|||
|
|
(**1** to
|
|||
|
|
**4294967295**) assigned to the rule. If no number is
|
|||
|
|
entered, the number is derived by adding **10** to the
|
|||
|
|
number of the policy maps last numbered line. To increase the distance
|
|||
|
|
between existing entries, use the **resequence**
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
- **class_name** name of the class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (pbr) Configuration Mode**
|
|||
|
|
|
|||
|
|
- set
|
|||
|
|
nexthop (policy-map-class pbr) sets next hop for the class.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class changes and returns
|
|||
|
|
switch to ***policy-map (pbr)*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class changes and returns
|
|||
|
|
switch to ***policy-map (pbr)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type pbr places
|
|||
|
|
switch in the ***class-map*** (pbr) configuration mode.
|
|||
|
|
|
|||
|
|
- policy-map type pbr places
|
|||
|
|
switch in the ***policy-map (pbr)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the **CMAP1** class map to the
|
|||
|
|
**PMAP1** policy map, then place the switch in
|
|||
|
|
***policy-map-class*** configuration mode where the next hops can be
|
|||
|
|
assigned to the class. Changes will not take effect until both modes are
|
|||
|
|
exited.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (qos)
|
|||
|
|
FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in
|
|||
|
|
***policy-map-class*** (qos) configuration mode, which is a group
|
|||
|
|
change mode that modifies the specified class of the configuration mode policy map.
|
|||
|
|
The command adds the class to the policy map if it was not previously included in
|
|||
|
|
the policy map. All changes in a group change mode edit session are pending until
|
|||
|
|
the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. Each class contains an eponymous class
|
|||
|
|
map and at least one set command:
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream through an ACL. Class maps are
|
|||
|
|
configured in the ***class-map*** (qos) configuration mode.
|
|||
|
|
|
|||
|
|
- **Set** commands either modify a packets content (CoS
|
|||
|
|
or DSCP fields) or assigns it to a traffic class queue.
|
|||
|
|
**Set** commands are configured in the
|
|||
|
|
***policy-map-class***(qos) configuration mode.
|
|||
|
|
Data
|
|||
|
|
packets are managed by commands of the first class whose map matches the
|
|||
|
|
packets content.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***policy-map*** configuration mode. However, saving
|
|||
|
|
policy-map-class changes also require an exit from the ***policy-map***
|
|||
|
|
mode. This saves all pending policy map and policy-map-class changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the class assignment from the configuration mode policy map by
|
|||
|
|
deleting the corresponding **class** configuration from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (qos) Configuration accessed through **policy-map type
|
|||
|
|
quality-of-service**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **class_name** name of the class.
|
|||
|
|
|
|||
|
|
- **PLACEMENT** Specifies the map placement within the
|
|||
|
|
list of class maps.
|
|||
|
|
|
|||
|
|
- **no parameter** Class is placed at the top of the list.
|
|||
|
|
|
|||
|
|
- **insert-before**
|
|||
|
|
**existing_class** Class is inserted in front
|
|||
|
|
of the specified class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (qos) Configuration Mode**
|
|||
|
|
|
|||
|
|
- set
|
|||
|
|
(policy-map-class (qos) FM6000)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- class-map type qos
|
|||
|
|
places switch in the***class-map*** (QoS) configuration mode.
|
|||
|
|
|
|||
|
|
- policy-map type quality-of-service places switch in the
|
|||
|
|
***policy-map*** (QoS) configuration mode
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the **CMAP_1** class map to the
|
|||
|
|
**PMAP_1** policy map, then places the switch in the
|
|||
|
|
***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (qos)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in the
|
|||
|
|
***policy-map-class*** (QoS) configuration mode, which is a group
|
|||
|
|
change mode that modifies the specified class of the configuration mode policy map.
|
|||
|
|
The command adds the class to the policy map if it was not previously included in
|
|||
|
|
the policy map. All changes in a group change mode edit session are pending until
|
|||
|
|
the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. Each class contains an eponymous class
|
|||
|
|
map and at least one set command:
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream through an ACL. Class maps are
|
|||
|
|
configured in the ***class-map*** (qos) configuration mode.
|
|||
|
|
|
|||
|
|
- **Set** commands either modify a packets content (CoS
|
|||
|
|
or DSCP fields) or assigns it to a traffic class queue.
|
|||
|
|
**Set** commands are configured in the
|
|||
|
|
***policy-map-class*** (qos) configuration mode.
|
|||
|
|
Data
|
|||
|
|
packets are managed by commands of the first class whose map matches the
|
|||
|
|
packets content.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***policy-map*** configuration mode. However, saving
|
|||
|
|
policy-map-class changes also require an exit from the ***policy-map***
|
|||
|
|
mode. This saves all the pending policy map and policy-map-class changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the class assignment from the configuration mode policy map by
|
|||
|
|
deleting the corresponding **class** configuration from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (qos) Configuration accessed through **policy-map type
|
|||
|
|
quality-of-service** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **class_name** name of the class.
|
|||
|
|
|
|||
|
|
- **PLACEMENT** Specifies the map placement within the
|
|||
|
|
list of class maps.
|
|||
|
|
|
|||
|
|
- **no parameter** Class is placed at the top of
|
|||
|
|
the list.
|
|||
|
|
|
|||
|
|
- **insert-before**
|
|||
|
|
**existing_class** Class is inserted in front
|
|||
|
|
of the specified class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (QoS) Configuration Mode**
|
|||
|
|
|
|||
|
|
- set
|
|||
|
|
(policy-map-class (qos) Helix)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places
|
|||
|
|
switch in the ***class-map*** (qos) configuration mode.
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service places switch in the ***policy-map***
|
|||
|
|
(QoS) configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the **CMAP_1** class map to the
|
|||
|
|
**PMAP_1** policy map, then places the switch in
|
|||
|
|
***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (qos)
|
|||
|
|
Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in the
|
|||
|
|
***policy-map-class*** (QoS) configuration mode, which is a group
|
|||
|
|
change mode that modifies the specified class of the configuration mode policy map.
|
|||
|
|
The command adds the class to the policy map if it was not previously included in
|
|||
|
|
the policy map. All changes in a group change mode edit session are pending until
|
|||
|
|
the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. Each class contains an eponymous class
|
|||
|
|
map and at least one set command:
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream through an ACL. Class maps are
|
|||
|
|
configured in ***class-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- **Set** commands either modify a packets content (CoS
|
|||
|
|
or DSCP fields) or assigns it to a traffic class queue.
|
|||
|
|
**Set** commands are configured in
|
|||
|
|
***policy-map-class (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Data packets are managed by commands of the first class whose map matches the packets
|
|||
|
|
content.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to the
|
|||
|
|
***policy-map*** configuration mode. However, saving the
|
|||
|
|
policy-map-class changes also require an exit from the ***policy-map***
|
|||
|
|
mode. This saves all the pending policy map and policy-map-class changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. The **abort**
|
|||
|
|
command discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the class assignment from the configuration mode policy map by
|
|||
|
|
deleting the corresponding **class** configuration from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (qos) Configuration accessed through **policy-map type
|
|||
|
|
quality-of-service** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **class_name** name of the class.
|
|||
|
|
|
|||
|
|
- **PLACEMENT** Specifies the map placement within the
|
|||
|
|
list of class maps.
|
|||
|
|
|
|||
|
|
- **no parameter** Class is placed at the top of
|
|||
|
|
the list.
|
|||
|
|
|
|||
|
|
- **insert-before**
|
|||
|
|
**existing_class** Class is inserted in front
|
|||
|
|
of the specified class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (qos) Configuration Mode**
|
|||
|
|
|
|||
|
|
- set (policy-map-class (qos) Trident
|
|||
|
|
II)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places
|
|||
|
|
switch in ***class-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service places switch in ***policy-map
|
|||
|
|
(qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the **CMAP_1** class map to the
|
|||
|
|
**PMAP_1** policy map, then places the switch in
|
|||
|
|
***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class (policy-map (qos)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class** command places the switch in
|
|||
|
|
**policy-map-class (qos)** configuration mode, which
|
|||
|
|
is a group change mode that modifies the specified class of the configuration mode
|
|||
|
|
policy map. The command adds the class to the policy map if it was not previously
|
|||
|
|
included in the policy map. All changes in a group change mode edit session are
|
|||
|
|
pending until the end of the session.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map is an ordered list of classes. Each class contains an eponymous class
|
|||
|
|
map and at least one set command:
|
|||
|
|
|
|||
|
|
- The class map identifies a data stream through an ACL. Class maps are
|
|||
|
|
configured in **class-map (qos)** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- **Set** commands either modify a packets content (CoS
|
|||
|
|
or DSCP fields) or assigns it to a traffic class queue.
|
|||
|
|
**Set** commands are configured in
|
|||
|
|
***policy-map-class (qos)*** configuration mode.
|
|||
|
|
Data
|
|||
|
|
packets are managed by commands of the first class whose map matches the
|
|||
|
|
packets content.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command returns the switch to
|
|||
|
|
***policy-map*** configuration mode. However, saving policy-map-class
|
|||
|
|
changes also require an exit from ***policy-map*** mode. This saves all the
|
|||
|
|
pending policy map and policy-map-class changes to ***running-config*** and
|
|||
|
|
returns the switch to the ***global*** configuration mode. The
|
|||
|
|
**abort** command discards pending changes, returning
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class** and **default class**
|
|||
|
|
commands remove the class assignment from the configuration mode policy map by
|
|||
|
|
deleting the corresponding **class** configuration from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (qos) Configuration accessed through **policy-map type
|
|||
|
|
quality-of-service** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class
|
|||
|
|
class_name [PLACEMENT]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **class_name** name of the class.
|
|||
|
|
|
|||
|
|
- **PLACEMENT** Specifies the map placement within the
|
|||
|
|
list of class maps.
|
|||
|
|
|
|||
|
|
- **no parameter** Class is placed at the top of the list.
|
|||
|
|
|
|||
|
|
- **insert-before**
|
|||
|
|
**existing_class** Class is inserted in front
|
|||
|
|
of the specified class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-map-class (qos) Configuration Mode**
|
|||
|
|
|
|||
|
|
- set
|
|||
|
|
(policy-map-class (qos) Trident)
|
|||
|
|
|
|||
|
|
- **exit** saves pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class changes and returns
|
|||
|
|
switch to ***policy-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places
|
|||
|
|
switch in ***class-map (qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service places switch in ***policy-map
|
|||
|
|
(qos)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the **CMAP_1** class map to the
|
|||
|
|
**PMAP_1** policy map, then places the switch in
|
|||
|
|
***policy-map-class*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class-map type copp
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class-map type copp** command places the switch in
|
|||
|
|
***Class-Map*** (control plane)
|
|||
|
|
configuration mode, which is a group change mode that modifies a
|
|||
|
|
control-plane dynamic class map. A dynamic class map is a data
|
|||
|
|
structure that uses Access Control Lists (ACLs) to define a data
|
|||
|
|
stream by specifying characteristics of data packets that comprise
|
|||
|
|
that stream. Control-plane policy maps use class maps to specify
|
|||
|
|
which control plane traffic is controlled by policy map
|
|||
|
|
criteria.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command saves
|
|||
|
|
pending class map changes to ***running-config*** and
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
Class map changes are also saved by entering a different
|
|||
|
|
configuration mode. The **abort** command
|
|||
|
|
discards pending changes and returns the switch to the
|
|||
|
|
***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
**no class-map type copp** and
|
|||
|
|
**default class-map type
|
|||
|
|
copp** commands delete the specified class map
|
|||
|
|
by removing the corresponding **class-map type
|
|||
|
|
copp** command and its associated
|
|||
|
|
configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class-map type copp match-any
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class-map type copp
|
|||
|
|
[match-any]
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class-map type
|
|||
|
|
copp [match-any]
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**class_name** Name of class
|
|||
|
|
map.
|
|||
|
|
**Commands Available in Class-Map (Control
|
|||
|
|
Plane) Configuration Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
match (class-map (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map
|
|||
|
|
type copp
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
- class-map type
|
|||
|
|
qos
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command creates the
|
|||
|
|
control plane class map named
|
|||
|
|
***CP-MAP-1*** and places the
|
|||
|
|
switch in ***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type copp match-any CP-CMAP-1**
|
|||
|
|
switch(config-cmap-CP-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class-map type pbr
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class-map type pbr** command places the switch in the
|
|||
|
|
***class-map*** (pbr) configuration mode for the specified class
|
|||
|
|
map, and creates the class map if one does not already exist. The
|
|||
|
|
***class-map*** (PBR) configuration mode is a group change mode that
|
|||
|
|
modifies a class map for Policy-Based Routing (PBR). PBR class maps contain one or
|
|||
|
|
more **match** statements which filter incoming traffic using ACLs. PBRs can then
|
|||
|
|
use these class maps to set next-hop IP addresses for the traffic that matches them.
|
|||
|
|
(Classes without set commands translate to no action being performed on that class
|
|||
|
|
of packets.)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command saves pending class
|
|||
|
|
map changes to ***running-config***, then returns the switch to the
|
|||
|
|
***global*** configuration mode. Class map changes are also saved by
|
|||
|
|
directly entering a different configuration mode. The
|
|||
|
|
**abort** command discards pending changes and returns the
|
|||
|
|
switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no
|
|||
|
|
class-map type pbr** and **default class-map type
|
|||
|
|
pbr** commands delete the specified class map by removing the
|
|||
|
|
corresponding **class-map type pbr** command and its
|
|||
|
|
associated configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class-map type pbr match-any
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class-map type pbr match-any
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class-map type pbr
|
|||
|
|
match-any
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**map_name** Name of class map.**Commands Available in
|
|||
|
|
Class-Map (PBR) configuration mode**
|
|||
|
|
|
|||
|
|
- match (class-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
- resequence (class-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type pbr
|
|||
|
|
|
|||
|
|
- class (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command creates the PBR class map named
|
|||
|
|
**MAP1** and places the switch in ***class-map
|
|||
|
|
(pbr)*** configuration mode where match criteria can be configured for
|
|||
|
|
the
|
|||
|
|
class.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type pbrmatch-any MAP1**
|
|||
|
|
switch(config-cmap-MAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### class-map type qos
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **class-map type qos** command places the switch in the
|
|||
|
|
***class-map*** (QoS) configuration mode, which is a group change
|
|||
|
|
mode that modifies a QoS dynamic class map. A dynamic class map is a data structure
|
|||
|
|
that uses Access Control Lists (ACLs) to define a data stream by specifying
|
|||
|
|
characteristics of data packets that comprise that stream. QoS policy maps use class
|
|||
|
|
maps to specify the traffic (to which the policy map is assigned) that is
|
|||
|
|
transformed by policy map criteria.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command
|
|||
|
|
saves pending class map changes to ***running-config***, then returns the
|
|||
|
|
switch to the ***global*** configuration mode. Class map changes are also
|
|||
|
|
saved by entering a different configuration mode. The **abort** command discards
|
|||
|
|
pending changes and returns the switch to the ***global*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no class-map type qos** and
|
|||
|
|
**default class-map type qos** commands delete the
|
|||
|
|
specified class map by removing the corresponding **class-map type
|
|||
|
|
qos** command and its associated configuration. The
|
|||
|
|
**class-map** and **class-map type
|
|||
|
|
qos** commands are equivalent.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class-map
|
|||
|
|
type qos
|
|||
|
|
match-any
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no class-map type qos
|
|||
|
|
match-any
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default class-map type qos
|
|||
|
|
match-any
|
|||
|
|
class_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**class_name** Name of class
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
**Commands Available in Class-Map (QoS) Configuration
|
|||
|
|
Mode**
|
|||
|
|
|
|||
|
|
- match
|
|||
|
|
(class-map (qos) FM6000)
|
|||
|
|
|
|||
|
|
- match
|
|||
|
|
(class-map (qos) Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Conditions**
|
|||
|
|
**class-map**
|
|||
|
|
**map_name** and **class-map type qos**
|
|||
|
|
**map_name** are identical commands.
|
|||
|
|
|
|||
|
|
**Related
|
|||
|
|
Commands**
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) FM6000)
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command creates the QoS class map named
|
|||
|
|
**MAP-1** and places the switch in
|
|||
|
|
***class-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos match-any MAP-1**
|
|||
|
|
switch(config-cmap-MAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### clear policy-map counters
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **clear policy-map** command resets the specified policy
|
|||
|
|
map counters to zero. Policy map counters record the quantity of packets that are
|
|||
|
|
filtered by the ACLs that comprise a specified policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Privileged EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
clear policy-map
|
|||
|
|
INTERFACE_NAME
|
|||
|
|
counters
|
|||
|
|
MAP_NAME
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **INTERFACE_NAME** Interface for which command clears
|
|||
|
|
table counters. Options include:
|
|||
|
|
|
|||
|
|
- **interface control-plane** Control
|
|||
|
|
plane.
|
|||
|
|
|
|||
|
|
- MAP_NAME Policy map for which command clears counters.
|
|||
|
|
Options include:
|
|||
|
|
|
|||
|
|
- ***copp-system-policy*** Name of only policy map supported
|
|||
|
|
for the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
### feature pbr
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Based Routing (PBR) is a feature that is applied on IPv4 or IPv6
|
|||
|
|
routable ports, to preferentially route packets. Forwarding is based on a policy that is
|
|||
|
|
enforced at the ingress of the applied interface and overrides normal routing decisions.
|
|||
|
|
In addition to matches on regular ACLs, PBR policy-maps can also include “raw match”
|
|||
|
|
statements that look like a single entry of an ACL as a convenience for users.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Configuration Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IP:
|
|||
|
|
|
|||
|
|
|
|||
|
|
TCAM PBR profile set TTL configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IPv6:
|
|||
|
|
|
|||
|
|
|
|||
|
|
TCAM feature PBR IP configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IP:
|
|||
|
|
|
|||
|
|
|
|||
|
|
feature pbr
|
|||
|
|
ip [copy]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no feature pbr
|
|||
|
|
ip [copy]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default feature pbr
|
|||
|
|
ip [copy]
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IPv6:
|
|||
|
|
|
|||
|
|
|
|||
|
|
feature pbr
|
|||
|
|
ipv6 [copy | bank]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no feature pbr
|
|||
|
|
ipv6 [copy | bank]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default featue pbr
|
|||
|
|
ipv6 [copy | bank]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IP:
|
|||
|
|
|
|||
|
|
|
|||
|
|
**copy** Copy a feature from a TCAM profile.
|
|||
|
|
|
|||
|
|
|
|||
|
|
For IPv6:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **copy**Copy a feature from a TCAM profile.
|
|||
|
|
|
|||
|
|
- **bank**TCAM banks to reserve.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- In the following example, the PBR is configured on an IP routable port.
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`(config)# **hardware tcam**
|
|||
|
|
(config-tcam)# **profile pbr-set-ttl copy default**
|
|||
|
|
(config-tcam-profile-pbr-set-ttl)# **feature pbr ip**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- In the following example, the PBR is configured on an IPv6 routable port.
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`(config)# **hardware tcam**
|
|||
|
|
(config-tcam)# **profile pbr-set-ttl copy default**
|
|||
|
|
(config-tcam-profile-pbr-set-ttl)# **feature pbr ip**
|
|||
|
|
(config-tcam-feature-pbr-ip)# **feature pbr ipv6**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### feature traffic-policy cpu
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **feature traffic-policy cpu** command configures the CPU
|
|||
|
|
traffic policy features for the IPv4 and IPv6 traffic in user-defined TCAM
|
|||
|
|
profile.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no feature traffic-policy cpu** and **default
|
|||
|
|
feature traffic-policy cpu** commands remove the CPU policy
|
|||
|
|
configurations from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Hardware TCAM
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
feature traffic-policy cpu [ipv4 |
|
|||
|
|
ipv6]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no feature traffic-policy cpu [ipv4 |
|
|||
|
|
ipv6]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default feature traffic-policy cpu [ipv4 |
|
|||
|
|
ipv6]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **ipv4** CPU traffic policy for IPv4 traffic.
|
|||
|
|
|
|||
|
|
- **ipv6** CPU traffic policy for IPv6 traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands places the switch in the hardware TCAM profile mode and configures the
|
|||
|
|
CPU traffic policy features for IPv4 traffic in the TCAM profile
|
|||
|
|
test.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **hardware tcam**
|
|||
|
|
switch(config-hw-tcam)# **profile test**
|
|||
|
|
switch(config-hw-tcam-profile-test)# **feature traffic-policy cpu ipv4**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### feature traffic-policy port
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **feature traffic-policy port** command configures the
|
|||
|
|
port-related traffic policy features for the IPv4 and IPv6 traffic in user-defined
|
|||
|
|
TCAM profile.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no feature traffic-policy port** and **default
|
|||
|
|
feature traffic-policy port** commands remove the CPU policy
|
|||
|
|
configurations from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Hardware TCAM
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
feature traffic-policy port [ipv4 |
|
|||
|
|
ipv6]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no feature traffic-policy port [ipv4 |
|
|||
|
|
ipv6]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default feature traffic-policy port [ipv4 |
|
|||
|
|
ipv6]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **ipv4** port traffic policy for IPv4 traffic.
|
|||
|
|
|
|||
|
|
- **ipv6** port traffic policy for IPv6 traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands places the switch in the hardware TCAM profile mode and configures the
|
|||
|
|
port traffic policy features for IPv4 traffic in the TCAM profile
|
|||
|
|
test.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **hardware tcam**
|
|||
|
|
switch(config-hw-tcam)# **profile test**
|
|||
|
|
switch(config-hw-tcam-profile-test)# **feature traffic-policy port ipv4**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (control-plane)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration
|
|||
|
|
mode class map. A class map can contain only one ACL. Class maps only use permit
|
|||
|
|
rules to filter data; deny rules are ignored. The command accepts IPv4 and IPv4
|
|||
|
|
standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map is assigned to a policy map by the **class (policy-map (control-plane)
|
|||
|
|
Helix)** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class map*** (control
|
|||
|
|
plane) configuration mode is a group change mode. **Match**
|
|||
|
|
statements are not saved to ***running-config*** until the edit session is
|
|||
|
|
completed by exiting the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and
|
|||
|
|
**default match** commands remove the
|
|||
|
|
**match** statement from the configuration mode class
|
|||
|
|
map by deleting the corresponding command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-Map (control plane) configuration accessed through **class-map type
|
|||
|
|
copp** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
match ip access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no match ip access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default match ip access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
**list_name** name of ACL assigned to class
|
|||
|
|
map.**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type copp places
|
|||
|
|
the switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Helix) assigns a ***class
|
|||
|
|
map*** to a ***policy map***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps cannot be modified by this
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Match** statements are saved to
|
|||
|
|
***running-config*** only upon exiting ***class-map (control
|
|||
|
|
plane)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
These
|
|||
|
|
commands add the IP ACL **list_1** to the
|
|||
|
|
**map_1** class map, then saves the command by exiting
|
|||
|
|
***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type copp map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (control-plane)
|
|||
|
|
Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration
|
|||
|
|
mode class map. A class map can contain only one ACL. Class maps only use permit
|
|||
|
|
rules to filter data; deny rules are ignored. The command accepts IPv4 and IPv4
|
|||
|
|
standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map is assigned to a policy map by the **class (policy-map (control-plane) Trident
|
|||
|
|
II)** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class map*** (control
|
|||
|
|
plane) configuration mode is a group change mode. **Match**
|
|||
|
|
statements are not saved to ***running-config*** until the edit session is
|
|||
|
|
completed by exiting the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and
|
|||
|
|
**default match** commands remove the
|
|||
|
|
**match** statement from the configuration mode class
|
|||
|
|
map by deleting the corresponding command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-Map (control plane) configuration accessed through **class-map type
|
|||
|
|
copp** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**list_name**
|
|||
|
|
name of ACL assigned to class map.**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type copp places
|
|||
|
|
the switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident II) assigns a class
|
|||
|
|
map to a ***policy map***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps cannot be modified by this
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Match** statements are saved to
|
|||
|
|
***running-config*** only upon exiting **class-map
|
|||
|
|
(control plane)** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
These commands add the IP ACL
|
|||
|
|
**list_1** to the **map_1**
|
|||
|
|
class map, then saves the command by exiting ***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type copp map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (control-plane)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration mode
|
|||
|
|
class map. A class map can contain only one ACL. Class maps only use permit rules to
|
|||
|
|
filter data; deny rules are ignored. The command accepts IPv4, IPv6, IPv4 standard,
|
|||
|
|
and IPv6 standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
A class map is assigned to a policy map by the **class (policy-map (control-plane)
|
|||
|
|
Trident)** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class map (control plane) configuration mode is a group change mode. **Match**
|
|||
|
|
statements are not saved to ***running-config*** until the edit session is
|
|||
|
|
completed by exiting the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match** statement from the configuration mode class map by
|
|||
|
|
deleting the corresponding command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-Map (control plane) configuration accessed through **class-map type
|
|||
|
|
copp** command
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **IP_VERSION** IP version of the specified ACL. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **ipv4** IPv4.
|
|||
|
|
|
|||
|
|
- **ipv6** IPv6.
|
|||
|
|
|
|||
|
|
- **list_name** name of ACL assigned to class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type copp places
|
|||
|
|
the switch in ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident) assigns a class map
|
|||
|
|
to a policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Static class maps cannot be modified by this command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Match** statements are saved to ***running-config***
|
|||
|
|
only upon exiting ***class-map (control plane)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the IPv4 ACL names **list_1** to the
|
|||
|
|
**map_1** class map, then saves the command by exiting
|
|||
|
|
**class-map**
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type copp map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns ACLs to the configuration mode
|
|||
|
|
Policy-Based Routing (PBR) class map. The command accepts IPv4, IPv4 standard, IPv6
|
|||
|
|
and IPv6 standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
***Class map (pbr)*** configuration mode is a group change mode.
|
|||
|
|
**Match** statements are not saved to
|
|||
|
|
***running-config*** until the edit session is completed by exiting
|
|||
|
|
the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match** statement from the configuration mode class map by
|
|||
|
|
deleting the corresponding command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Note: PBR ACLs use only permit rules to filter data; if there are deny rules in an ACL
|
|||
|
|
used by PBR, the configuration will be reverted.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-map (pbr) configuration accessed through **class-map type
|
|||
|
|
pbr** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
[sequence_number] match [ip
|
|||
|
|
| ipv6] access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no [sequence_number] match
|
|||
|
|
[ip | ipv6]
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default [sequence_number]
|
|||
|
|
[ip | ipv6]
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no [sequence_number]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default [sequence_number]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **sequence_number** Sequence number
|
|||
|
|
(**1** to **4294967295**)
|
|||
|
|
assigned to the rule. If no number is entered, the number is derived by adding
|
|||
|
|
**10** to the number of the class maps last
|
|||
|
|
numbered line. To increase the distance between existing entries, use the
|
|||
|
|
**resequence** command.
|
|||
|
|
|
|||
|
|
- **list_name** name of ACL assigned to class
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type pbr places the
|
|||
|
|
switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class (policy-map
|
|||
|
|
(pbr)) assigns a class map to a policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the IPv4 ACL named **list1** to the
|
|||
|
|
***map1*** class map, then save the change by
|
|||
|
|
exiting ***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type pbr map1**
|
|||
|
|
switch(config-cmap-map1)# **match ip access-group list1**
|
|||
|
|
switch(config-cmap-map1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (qos)
|
|||
|
|
FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration mode
|
|||
|
|
class map. A class map can contain only one ACL. Class maps only use permit rules to
|
|||
|
|
filter data; deny rules are ignored. The command accepts IPv4 and IPv4 standard
|
|||
|
|
ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class map (qos)*** configuration mode is a group change mode.
|
|||
|
|
**Match** statements are not saved to ***running-config*** until the
|
|||
|
|
edit session is completed by exiting the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match** statement from the configuration
|
|||
|
|
mode class map by deleting the corresponding command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-map (qos) configuration accessed through **class-map type
|
|||
|
|
qos** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **IP_VERSION** IP version of the specified ACL. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **ipv4** IPv4.
|
|||
|
|
|
|||
|
|
- **list_name** name of ACL assigned to class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places the
|
|||
|
|
switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) FM6000) assigns a ***class map*** to a
|
|||
|
|
***policy map***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the IPv4 ACL named ***list_1*** to the
|
|||
|
|
**map_1** class map, then saves the command by exiting
|
|||
|
|
***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (qos)
|
|||
|
|
Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration mode
|
|||
|
|
class map. A class map can contain only one ACL. Class maps only use permit rules to
|
|||
|
|
filter data; deny rules are ignored. The command accepts IPv4, IPv4 standard, IPv6,
|
|||
|
|
and IPv6 standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
the ***class map (QoS)*** configuration mode is a group change mode.
|
|||
|
|
**Match** statements are not saved to
|
|||
|
|
***running-config*** until the edit session is completed by exiting
|
|||
|
|
the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match** statement from the configuration mode class map by
|
|||
|
|
deleting the corresponding command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-Map (QoS) configuration accessed through **class-map type
|
|||
|
|
qos** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- IP_VERSION IP version of the specified ACL. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **ipv4** IPv4.
|
|||
|
|
|
|||
|
|
- **ipv6** IPv6.
|
|||
|
|
|
|||
|
|
- **list_name** name of ACL assigned to class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places the
|
|||
|
|
switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Helix) assigns a class map to a policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the IPv4 ACL named **list_1** to the
|
|||
|
|
**map_1** class map, then saves the command by exiting
|
|||
|
|
***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (qos)
|
|||
|
|
Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration mode
|
|||
|
|
class map. A class map can contain only one ACL. Class maps only use permit rules to
|
|||
|
|
filter data; deny rules are ignored. The command accepts IPv4, IPv4 standard, IPv6,
|
|||
|
|
and IPv6 standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class map (QoS)*** configuration mode is a group change mode.
|
|||
|
|
**Match** statements are not saved to
|
|||
|
|
***running-config*** until the edit session is completed by exiting
|
|||
|
|
the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match**statement from the configuration mode class map by
|
|||
|
|
deleting the corresponding command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***class-map (qos)*** configuration accessed through **class-map type
|
|||
|
|
qos** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**IP_VERSION
|
|||
|
|
list_name**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**IP_VERSION
|
|||
|
|
list_name**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**IP_VERSION
|
|||
|
|
list_name**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **IP_VERSION** IP version of the specified ACL. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **ipv4** IPv4.
|
|||
|
|
|
|||
|
|
- **ipv6** IPv6.
|
|||
|
|
|
|||
|
|
- **list_name** name of ACL assigned to class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places the
|
|||
|
|
switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Trident) assigns a class map to a policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the IPv4 ACL named **list_1** to the
|
|||
|
|
**map_1** class map, then saves the command by exiting
|
|||
|
|
***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (class-map (qos)
|
|||
|
|
Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command assigns an ACL to the configuration mode
|
|||
|
|
class map. A class map can contain only one ACL. Class maps only use permit rules to
|
|||
|
|
filter data; deny rules are ignored. The command accepts IPv4, IPv4 standard, IPv6,
|
|||
|
|
and IPv6 standard ACLs.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class map (QoS) configuration mode is a group change mode.
|
|||
|
|
**Match** statements are not saved to
|
|||
|
|
***running-config*** until the edit session is completed by exiting
|
|||
|
|
the mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match**statement from the configuration mode class map by
|
|||
|
|
deleting the corresponding command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-Map (qos) configuration accessed through **class-map type
|
|||
|
|
qos** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default match
|
|||
|
|
IP_VERSION
|
|||
|
|
access-group
|
|||
|
|
list_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **IP_VERSION** IP version of the specified ACL. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **ipv4** IPv4.
|
|||
|
|
|
|||
|
|
- **ipv6** IPv6.
|
|||
|
|
|
|||
|
|
- **list_name** name of ACL assigned to class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos places the
|
|||
|
|
switch in the ***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
- **exit** saves pending class map changes, then returns
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- **abort** discards pending class map changes, then
|
|||
|
|
returns the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Trident) assigns a ***class map*** to a
|
|||
|
|
***policy map***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands add the IPv4 ACL named **list_1** to the
|
|||
|
|
**map_1** class map, then saves the command by exiting
|
|||
|
|
***class-map***
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type qos map_1**
|
|||
|
|
switch(config-cmap-map_1)# **match ip access-group list_1**
|
|||
|
|
switch(config-cmap-map_1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### match (policy-map (pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **match** command creates a policy map clause entry that
|
|||
|
|
specifies one filtering condition. When a packet matches the filtering criteria, its
|
|||
|
|
next hop is set as specified. When a packets properties do not equal the statement
|
|||
|
|
parameters, the packet is evaluated against the next clause or class map in the
|
|||
|
|
policy map, as determined by sequence number. If all clauses fail to set a next hop
|
|||
|
|
for the packet, the packet is routed according to the FIB.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no match** and **default match**
|
|||
|
|
commands remove the **match** statement from the configuration mode policy map by
|
|||
|
|
deleting the corresponding command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (pbr) Configuration accessed through policy-map type pbr
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
[sequence_number] match ip
|
|||
|
|
SOURCE_ADDR
|
|||
|
|
DEST_ADDR [set nexthop [recursive]
|
|||
|
|
NH-addr_1 [NH-addr_2] ...
|
|||
|
|
[NH-addr_n]]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no match ip
|
|||
|
|
SOURCE_ADDR
|
|||
|
|
DEST_ADDR [set nexthop [recursive]
|
|||
|
|
NH-addr_1 [NH-addr_2] ...
|
|||
|
|
[NH-addr_n]]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default match match ip
|
|||
|
|
SOURCE_ADDR
|
|||
|
|
DEST_ADDR [set nexthop [recursive]
|
|||
|
|
NH-addr_1 [NH-addr_2] ...
|
|||
|
|
[NH-addr_n]]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no
|
|||
|
|
SEQ_NUM
|
|||
|
|
|
|||
|
|
|
|||
|
|
default
|
|||
|
|
SEQ_NUM
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **sequence_number** Sequence number assigned to the
|
|||
|
|
rule. If no number is entered, the number is derived by adding
|
|||
|
|
**10** to the number of the policy maps last
|
|||
|
|
numbered line. To increase the distance between existing entries, use the
|
|||
|
|
**resequence** command.
|
|||
|
|
|
|||
|
|
- **SOURCE_ADDR** and **DEST_ADDR**
|
|||
|
|
source and destination address filters. Options include:
|
|||
|
|
|
|||
|
|
- **network_addr** subnet address (CIDR or
|
|||
|
|
address-mask).
|
|||
|
|
|
|||
|
|
- **any** packets from or to all addresses are
|
|||
|
|
matched.
|
|||
|
|
|
|||
|
|
- **host**
|
|||
|
|
**ip_addr** IP address (dotted decimal
|
|||
|
|
notation).
|
|||
|
|
Source and destination subnet addresses support
|
|||
|
|
discontiguous masks.
|
|||
|
|
|
|||
|
|
- **recursive** enables recursive next hop resolution.
|
|||
|
|
|
|||
|
|
- **NH_addr** IP address of next hop. If multiple
|
|||
|
|
addresses are entered, they are treated as an ECMP group.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type pbr enters
|
|||
|
|
the policy-map (PBR) configuration mode.
|
|||
|
|
|
|||
|
|
- show policy-map type
|
|||
|
|
pbr displays the PBR policy maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands create a match rule in policy map **PMAP1**
|
|||
|
|
which sets the next hop to **192.168.3.5** for packets
|
|||
|
|
received from **172.16.0.0/12** regardless of their
|
|||
|
|
destination, then exit the mode to save the
|
|||
|
|
changes.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **match ip 172.16.0.0/12 any set nexthop 192.163.3.5**
|
|||
|
|
switch(config-pmap-PMAP1)# **exit**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### platform arad tcam counters
|
|||
|
|
feature
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **platform arad tcam counters feature** command enables
|
|||
|
|
incrementing PBR hardware counters corresponding to ACL. If counters for PBR are
|
|||
|
|
enabled, then counters for ACL will be automatically disabled in all cases. If
|
|||
|
|
counters for ACL are enabled, then counters for PBR will be automatically disabled
|
|||
|
|
in all cases.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no platform arad tcam counters feature** command disables
|
|||
|
|
PBR/ACL counters selection. The **default platform arad tcam counters
|
|||
|
|
feature** commands resets the default behavior.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
platform arad tcam counters feature
|
|||
|
|
[OPTIONS]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no platform arad tcam counters feature
|
|||
|
|
[OPTIONS]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default platform arad tcam counters feature
|
|||
|
|
[OPTIONS]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**OPTIONS** Assign the TCAM counters feature. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **pbr** assign the TCAM counters feature PBR hardware
|
|||
|
|
counters.
|
|||
|
|
|
|||
|
|
- **acl** assign the TCAM counters feature ACL hardware
|
|||
|
|
counters.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- This command enables incrementing ACL hardware counters
|
|||
|
|
selection.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **platform arad tcam counters feature acl**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- This command disables incrementing ACL hardware counters
|
|||
|
|
selection.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **no platform arad tcam counters feature acl**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### policy-map type copp
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **policy-map type copp** command places the switch in the
|
|||
|
|
***policy-map*** (control plane) configuration mode, which is a
|
|||
|
|
group change mode that modifies a ***control-plane*** policy map. A policy
|
|||
|
|
map is a data structure that consists of class maps that identify a specific data
|
|||
|
|
stream and specify bandwidth and shaping parameters that controls its transmission.
|
|||
|
|
Control plane policy maps are applied to the control plane to manage traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***copp-system-policy*** policy map is supplied with the switch and is
|
|||
|
|
always applied to the control plane. The ***copp-system-policy*** is the
|
|||
|
|
only valid control plane policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command saves pending policy map changes to
|
|||
|
|
***running-config*** and returns the switch to the
|
|||
|
|
***global*** configuration mode. Policy map changes are also saved by
|
|||
|
|
entering a different configuration mode. The **abort** command
|
|||
|
|
discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no policy-map type copp** and **default policy-map type copp** commands delete the specified policy map by removing the corresponding **policy-map type copp** command and its associated configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
policy-map type copp copp-system-policy
|
|||
|
|
|
|||
|
|
|
|||
|
|
no policy-map type copp copp-system-policy
|
|||
|
|
|
|||
|
|
|
|||
|
|
default policy-map type copp copp-system-policy
|
|||
|
|
|
|||
|
|
|
|||
|
|
The ***copp-system-policy*** is supplied with the switch and is the only
|
|||
|
|
valid control plane policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Commands Available in Policy-Map Configuration Mode**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) FM6000)
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
|
|||
|
|
class-map type copp enters the
|
|||
|
|
***control-plane class-map*** configuration mode for modifying a
|
|||
|
|
control-plane dynamic class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Only Helix and Trident platform switches support dynamic classes for control plane
|
|||
|
|
policing.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command places the switch in the ***policy-map*** configuration mode to
|
|||
|
|
edit the ***copp-system-policy*** policy
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### policy-map type pbr
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **policy-map type pbr** command places the switch in
|
|||
|
|
***policy-map (pbr)*** configuration mode, which is a group change
|
|||
|
|
mode that modifies a Policy-Based Routing (PBR) policy map. The command also creates
|
|||
|
|
the specified policy map if it does not already exist. A PBR policy map is a data
|
|||
|
|
structure that consists of class maps that identify specific packets and the next
|
|||
|
|
hops for those packets. Policy maps are applied to Ethernet or port channel
|
|||
|
|
interfaces to manage traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit** command saves
|
|||
|
|
pending policy map changes to ***running-config*** and returns the switch to
|
|||
|
|
the ***global*** configuration mode. Policy map changes are also saved by
|
|||
|
|
entering a different configuration mode. The **abort** command
|
|||
|
|
discards pending changes, returning the switch to the ***global***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no policy-map type pbr** and
|
|||
|
|
**default policy-map type pbr** commands delete the
|
|||
|
|
specified policy map by removing the corresponding **policy-map type
|
|||
|
|
pbr** command and its associated
|
|||
|
|
configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
policy-map
|
|||
|
|
type pbr
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no policy-map type pbr
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default policy-map type pbr
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**map_name** Name of policy map.**Commands Available
|
|||
|
|
in Policy-Map Configuration Mode**
|
|||
|
|
|
|||
|
|
- class (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
- match (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type pbr
|
|||
|
|
|
|||
|
|
- service-policy type pbr (Interface mode)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command creates the PBR policy map named
|
|||
|
|
**PMAP1** and places the switch in
|
|||
|
|
***policy-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### policy-map type quality-of-service
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **policy-map type quality-of-service** command places
|
|||
|
|
the switch in the ***policy-map (QoS)*** configuration mode, which is a
|
|||
|
|
group change mode that modifies a QoS policy map. A policy map is a data structure
|
|||
|
|
that consists of class maps that identify a specific data stream and shaping
|
|||
|
|
parameters that controls its transmission. Policy maps are applied to Ethernet or
|
|||
|
|
port channel interfaces to manage traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **exit**
|
|||
|
|
command saves pending policy map changes to ***running-config*** and returns
|
|||
|
|
the switch to the ***global*** configuration mode. Policy map changes are
|
|||
|
|
also saved by entering a different configuration mode. The
|
|||
|
|
**abort** command discards pending changes, returning
|
|||
|
|
the switch to the ***global*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no
|
|||
|
|
policy-map type quality-of-service** and **default
|
|||
|
|
policy-map type quality-of-service** commands delete the
|
|||
|
|
specified policy map by removing the corresponding **policy-map type
|
|||
|
|
quality-of-service** command and its associated configuration.
|
|||
|
|
The **policy-map** and **policy-map type
|
|||
|
|
quality-of-service** commands are
|
|||
|
|
equivalent.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
policy-map
|
|||
|
|
type quality-of-service
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**map_name** Name of policy map.**Commands Available
|
|||
|
|
in Policy-Map Configuration Mode**
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) FM6000)
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Conditions**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**policy-map**
|
|||
|
|
**map_name** and **policy-map type
|
|||
|
|
quality-of-service**
|
|||
|
|
**map_name** are identical commands.
|
|||
|
|
|
|||
|
|
**Related
|
|||
|
|
Commands**
|
|||
|
|
|
|||
|
|
- class-map type qos
|
|||
|
|
|
|||
|
|
- service-policy type qos (Interface mode)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command creates the QoS policy map named
|
|||
|
|
**PMAP-1** and places the switch in the
|
|||
|
|
***policy-map*** configuration
|
|||
|
|
mode.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### policy-map type quality-of-service counter
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **policy-map type quality-of-service counter** command in the Global Configuration Mode
|
|||
|
|
configures per interface counters for policy map and class map matches.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no | default** versions of the command disables the feature and removes it from the
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**policy-map type quality-of-service counter per-interface**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**no policy-map type quality-of-service counter per-interface**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**default policy-map type quality-of-service counter per-interface**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **policy-map type quality-of-service** - Specify the Policy Map as Quality of Service (QoS).
|
|||
|
|
|
|||
|
|
- **counter** - Change the counter settings.
|
|||
|
|
|
|||
|
|
- **per-interface - Specify using per-interface counters.**
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Use the following command to enable QoS per-interface counters:
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service counter per-interface**`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### policy-map type quality-of-service policer
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **policy-map type quality-of-service policer copy**
|
|||
|
|
command is used to copy an existing QoS policy map to the policy map
|
|||
|
|
**policer**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
**policy-map type quality-of-service
|
|||
|
|
policer drop counter** command is used
|
|||
|
|
to enable drop counters for the QoS policy map
|
|||
|
|
**policer**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The
|
|||
|
|
**no policy-map type quality-of-service
|
|||
|
|
policer** and **default
|
|||
|
|
policy-map type quality-of-service
|
|||
|
|
policer** commands delete the policy map
|
|||
|
|
**policer** by removing the
|
|||
|
|
corresponding **policy-map type quality-of-service
|
|||
|
|
policer** command and its associated
|
|||
|
|
configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no policy-map type
|
|||
|
|
quality-of-service policer drop
|
|||
|
|
counter** and **default policy-map
|
|||
|
|
type quality-of-service policer drop
|
|||
|
|
counter** commands disable drop counters
|
|||
|
|
for the policy map **policer**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Global Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
policy-map type quality-of-service
|
|||
|
|
policer copy
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
policy-map type
|
|||
|
|
quality-of-service policer drop
|
|||
|
|
counter
|
|||
|
|
|
|||
|
|
|
|||
|
|
no policy-map type
|
|||
|
|
quality-of-service policer
|
|||
|
|
|
|||
|
|
|
|||
|
|
default
|
|||
|
|
policy-map type quality-of-service
|
|||
|
|
policer
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
**map_name** Name of policy map to
|
|||
|
|
copy.**Related Commands**
|
|||
|
|
|
|||
|
|
- class-map type
|
|||
|
|
qos
|
|||
|
|
|
|||
|
|
- service-policy type qos (Interface
|
|||
|
|
mode)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- This command copies the QoS policy map named
|
|||
|
|
**PMAP-1** to the policy map
|
|||
|
|
**policer**.
|
|||
|
|
```
|
|||
|
|
`switch(config)#**policy-map type quality-of-service policer copy PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- This command enables drop counters for the QoS policy map
|
|||
|
|
**policer**.
|
|||
|
|
```
|
|||
|
|
`switch(config)#**policy-map type quality-of-service policer drop counter**
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### resequence (class-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **resequence** command assigns sequence numbers to
|
|||
|
|
rules in the configuration mode class map. Command parameters specify the number of
|
|||
|
|
the first rule and the numeric interval between consecutive rules. Once changed,
|
|||
|
|
rule numbers persist unless changed again using the
|
|||
|
|
**resequence** command, but the interval used for
|
|||
|
|
numbering new rules reverts to **10** on the exiting
|
|||
|
|
***class-map (pbr)*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Maximum rule
|
|||
|
|
sequence number is **4294967295**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Class-Map (PBR) Configuration accessed through **class-map type
|
|||
|
|
pbr** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
resequence [start_num
|
|||
|
|
[inc_num]]
|
|||
|
|
|
|||
|
|
******Parameters**
|
|||
|
|
|
|||
|
|
- **start_num** sequence number assigned to the first
|
|||
|
|
rule. Default is ***10***.
|
|||
|
|
|
|||
|
|
- **inc_num** numeric interval between consecutive
|
|||
|
|
rules. Default is ***10***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
The **resequence**
|
|||
|
|
command renumbers the rules in **CMAP1**, starting the first
|
|||
|
|
command at number **100** and incrementing subsequent lines by
|
|||
|
|
**20**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **class-map type pbr match-any CMAP1**
|
|||
|
|
switch(config-cmap-CMAP1)# **show active**
|
|||
|
|
class-map type pbr match-any CMAP1
|
|||
|
|
10 match ip access-group group1
|
|||
|
|
20 match ip access-group group2
|
|||
|
|
30 match ip access-group group3
|
|||
|
|
switch(config-cmap-CMAP1)# **resequence 100 20**
|
|||
|
|
switch(config-cmap-CMAP1)# **exit**
|
|||
|
|
switch(config)# **class-map type pbr match-any CMAP1**
|
|||
|
|
switch(config-cmap-CMAP1)# **show active**
|
|||
|
|
class-map type pbr match-any CMAP1
|
|||
|
|
100 match ip access-group group1
|
|||
|
|
120 match ip access-group group2
|
|||
|
|
140 match ip access-group group3`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### resequence (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **resequence** command assigns sequence numbers to rules in
|
|||
|
|
the configuration mode policy map. Command parameters specify the number of the
|
|||
|
|
first rule and the numeric interval between consecutive rules. Once changed, rule
|
|||
|
|
numbers persist unless changed again using the **resequence**
|
|||
|
|
command, but the interval used for numbering new rules reverts to
|
|||
|
|
**10** on the exiting ***policy-map (pbr)***
|
|||
|
|
configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Maximum rule sequence number is **4294967295**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-Map (PBR) Configuration accessed through **policy-map type
|
|||
|
|
pbr** command
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
resequence [start_num
|
|||
|
|
[inc_num]]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **start_num** sequence number assigned to the first
|
|||
|
|
rule. Default is **10**.
|
|||
|
|
|
|||
|
|
- **inc_num** numeric interval between consecutive
|
|||
|
|
rules. Default is **10**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **resequence** command renumbers the rules in
|
|||
|
|
**PMAP1**, starting the first command at number
|
|||
|
|
**100** and incrementing subsequent lines by
|
|||
|
|
**20**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **show active**
|
|||
|
|
policy-map type pbr PMAP1
|
|||
|
|
10 class CMAP1
|
|||
|
|
set nexthop 172.16.1.1
|
|||
|
|
20 class CMAP2
|
|||
|
|
set nexthop 172.16.2.2
|
|||
|
|
30 class CMAP3
|
|||
|
|
set nexthop 172.16.3.3
|
|||
|
|
switch(config-pmap-PMAP1)# **resequence 100 20**
|
|||
|
|
switch(config-pmap-PMAP1)# **exit**
|
|||
|
|
switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **show active**
|
|||
|
|
class-map type pbr PMAP1
|
|||
|
|
100 class CMAP1
|
|||
|
|
set nexthop 172.16.1.1
|
|||
|
|
120 class CMAP2
|
|||
|
|
set nexthop 172.16.2.2
|
|||
|
|
140 class CMAP3
|
|||
|
|
set nexthop 172.16.3.3
|
|||
|
|
switch(config-pmap-PMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### service-policy type pbr
|
|||
|
|
(Interface mode)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **service-policy pbr** command applies the specified
|
|||
|
|
Policy-Based Routing (PBR) policy map to the configuration mode interface. A PBR
|
|||
|
|
policy map is a data structure that consists of class maps that identify specific
|
|||
|
|
packets and the next hops for those packets. Policy maps are applied to Ethernet or
|
|||
|
|
port channel interfaces to manage traffic. Only one service policy is supported per
|
|||
|
|
interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no service-policy pbr** and
|
|||
|
|
**default service-policy pbr** commands remove the
|
|||
|
|
service policy assignment from the configuration mode interface by deleting the
|
|||
|
|
corresponding **service-policy pbr** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Interface-Ethernet Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
Interface-Port-Channel Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
Interface-VLAN Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command
|
|||
|
|
Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
service-policy type pbr
|
|||
|
|
TRAFFIC_DIRECTION
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no service-policy type pbr
|
|||
|
|
TRAFFIC_DIRECTION
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default service-policy type pbr
|
|||
|
|
TRAFFIC_DIRECTION
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **TRAFFIC_DIRECTION** IP address or peer group name.
|
|||
|
|
Values include:
|
|||
|
|
|
|||
|
|
- **input** Policy map applies to inbound packet streams.
|
|||
|
|
|
|||
|
|
- **map_name** Name of policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map that is attached to a port channel interface takes precedence for
|
|||
|
|
member interfaces of the port channel over their individual interface Ethernet
|
|||
|
|
configuration. Members that are removed from a port channel revert to the policy map
|
|||
|
|
implementation specified by its interface Ethernet
|
|||
|
|
configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
policy-map type
|
|||
|
|
pbr
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command applies the PBR policy map
|
|||
|
|
**PMAP1** to **interface Ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch# **config**
|
|||
|
|
switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **service-policy type pbr input PMAP1**
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### service-policy type qos
|
|||
|
|
(Interface mode)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **service-policy** command applies a specified policy
|
|||
|
|
map to the configuration mode interface. A policy map is a data structure that
|
|||
|
|
identifies data traffic through class maps, then specifies actions to classify the
|
|||
|
|
traffic (by setting the traffic class), mark the traffic (by setting the cos and
|
|||
|
|
dscp values), and police the traffic (by setting the police rate) through data
|
|||
|
|
packet field modifications.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no service-policy**
|
|||
|
|
and **default service-policy** commands remove the service
|
|||
|
|
policy assignment from the configuration mode interface by deleting the
|
|||
|
|
corresponding **service-policy** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Interface-Ethernet Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
Interface-Port-Channel Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
Interface-VLAN Configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
service-policy [type qos]
|
|||
|
|
TRAFFIC_DIRECTION
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no service-policy [type qos]
|
|||
|
|
TRAFFIC_DIRECTION
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default service-policy [type
|
|||
|
|
qos]
|
|||
|
|
TRAFFIC_DIRECTION
|
|||
|
|
map_name
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **type qos** Parameter has no functional effect.
|
|||
|
|
|
|||
|
|
- **TRAFFIC_DIRECTION** Direction of data stream to which
|
|||
|
|
command applies. Options include:
|
|||
|
|
|
|||
|
|
- **input** Policy map applies to inbound packet
|
|||
|
|
streams.
|
|||
|
|
|
|||
|
|
- **map_name** Name of policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
A policy map that is attached to a port channel interface takes precedence for
|
|||
|
|
member interfaces of the port channel over their individual interface Ethernet
|
|||
|
|
configuration. Members that are removed from a port channel revert to the policy map
|
|||
|
|
implementation specified by its interface Ethernet configuration.
|
|||
|
|
|
|||
|
|
|
|||
|
|
DCS-7500E
|
|||
|
|
and DCS-7280E limitations:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- A maximum of **31** QoS service policies
|
|||
|
|
per chip may be applied on L3 interfaces.
|
|||
|
|
|
|||
|
|
- Applying different QoS service policies to an SVI and its member
|
|||
|
|
interfaces causes unpredictable behavior.
|
|||
|
|
|
|||
|
|
- When an SVI on which QoS service policies are applied experiences
|
|||
|
|
partial failure due to limited hardware resources, a forwarding agent restart
|
|||
|
|
causes unpredictable behavior.
|
|||
|
|
|
|||
|
|
- Policy-map programming may fail when QoS service policies are
|
|||
|
|
applied on two SVIs if an event causes a member interface to switch membership
|
|||
|
|
from one to the other. To change the VLAN membership of an interface in this
|
|||
|
|
case, remove the interface from one VLAN before adding it to the other.
|
|||
|
|
|
|||
|
|
- Outgoing COS rewrite is not supported.
|
|||
|
|
|
|||
|
|
- QoS policy-map counters are not supported.
|
|||
|
|
|
|||
|
|
|
|||
|
|
DCS-7010, DCS-7050, DCS-7050X, DCS-7250X, and DCS-7300X limitations:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- When the same policy map is applied to multiple SVIs, TCAM
|
|||
|
|
resources are not shared.
|
|||
|
|
|
|||
|
|
- A policy map applied to an SVI results in TCAM allocation on all
|
|||
|
|
chips whether SVI members are present or not.
|
|||
|
|
|
|||
|
|
- Applying different QoS service policies to an SVI and its member
|
|||
|
|
interfaces causes unpredictable behavior.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
This command applies the
|
|||
|
|
**PMAP-1** policy map to **interface
|
|||
|
|
ethernet
|
|||
|
|
8**.
|
|||
|
|
```
|
|||
|
|
`switch# **config**
|
|||
|
|
switch(config)# **interface ethernet 8**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
switch(config-if-Et8)# **service-policy input PMAP-1**
|
|||
|
|
switch(config-if-Et8)# **show active**
|
|||
|
|
interface Ethernet8
|
|||
|
|
service-policy type qos input PMAP-1
|
|||
|
|
switch(config-if-Et8)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### set (policy-map-class
|
|||
|
|
(qos)FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set** command specifies traffic resolution methods for
|
|||
|
|
traffic defined by its associated class map in its configuration mode policy map
|
|||
|
|
class. Three set statements are available for each class:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **cos** Sets the Layer 2 class of service
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **dscp** Sets the differentiated services
|
|||
|
|
code point value in the type of service (ToS) byte.
|
|||
|
|
|
|||
|
|
- **traffic-class** Sets the traffic class
|
|||
|
|
queue for data packets.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each type of set command can be assigned to a class, allowing for the simultaneous
|
|||
|
|
modification of both (cos, dscp) fields and assignment to a traffic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no set** and **default set**
|
|||
|
|
commands remove the specified data action from the class map by deleting the
|
|||
|
|
associated **set** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (qos) configuration
|
|||
|
|
|
|||
|
|
|
|||
|
|
accessed through **class (policy-map (qos) FM6000)**
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
set
|
|||
|
|
QOS_TYPE
|
|||
|
|
value
|
|||
|
|
|
|||
|
|
|
|||
|
|
no set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
default set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** Specifies the data stream resolution
|
|||
|
|
method. Valid options include:
|
|||
|
|
|
|||
|
|
- **cos** Layer 2 class of service field of
|
|||
|
|
outbound packet is modified.
|
|||
|
|
|
|||
|
|
- **dscp** Differentiated services code point
|
|||
|
|
value in the ToS byte is modified.
|
|||
|
|
|
|||
|
|
- **traffic-class** Data stream is assigned to a
|
|||
|
|
traffic class queue.
|
|||
|
|
|
|||
|
|
- **value** Specifies the data field value or traffic
|
|||
|
|
class queue. Valid data range depends on
|
|||
|
|
**QOS_TYPE**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **cos**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **dscp**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**63**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is
|
|||
|
|
**traffic-class** Value ranges from
|
|||
|
|
**0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set **CoS field 7**
|
|||
|
|
to data traffic specified by the class map **CMAP-1**, then
|
|||
|
|
assigns that data to traffic class **queue
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### set (policy-map-class
|
|||
|
|
(qos)Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set** command specifies traffic resolution methods for
|
|||
|
|
traffic defined by its associated class map in its configuration mode policy map
|
|||
|
|
class. Three set statements are available for each class:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **cos** Sets the Layer 2 class of service
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **dscp** Sets the differentiated services
|
|||
|
|
code point value in the type of service (ToS) byte.
|
|||
|
|
|
|||
|
|
- **traffic-class** Sets the traffic class
|
|||
|
|
queue for data packets.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each type of set command can be assigned to a class, allowing for the simultaneous
|
|||
|
|
modification of both (**cos**, **dscp**)
|
|||
|
|
fields and assignment to a traffic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no set** and **default set**
|
|||
|
|
commands remove the specified data action from the class map by deleting the
|
|||
|
|
associated **set** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (qos) configuration accessed through **class
|
|||
|
|
(policy-map (qos) Helix)** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
set
|
|||
|
|
QOS_TYPE
|
|||
|
|
value
|
|||
|
|
|
|||
|
|
|
|||
|
|
no set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
default set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** Specifies the data stream resolution
|
|||
|
|
method. Valid options include:
|
|||
|
|
|
|||
|
|
- **cos** Layer 2 class of service field of
|
|||
|
|
outbound packet is modified.
|
|||
|
|
|
|||
|
|
- **dscp** Differentiated services code point
|
|||
|
|
value in the ToS byte is modified.
|
|||
|
|
|
|||
|
|
- **traffic-class** Data stream is assigned to a
|
|||
|
|
traffic class queue.
|
|||
|
|
|
|||
|
|
- **value** Specifies the data field value or traffic
|
|||
|
|
class queue. Valid data range depends on QOS type.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **cos**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **dscp**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**63**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is
|
|||
|
|
**traffic-class** Value ranges from
|
|||
|
|
**0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set **CoS field 7**
|
|||
|
|
to data traffic specified by the class map **CMAP-1**, then
|
|||
|
|
assigns that data to **traffic class queue
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### set (policy-map-class
|
|||
|
|
(qos)Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set** command specifies traffic resolution methods for
|
|||
|
|
traffic defined by its associated class map in its configuration mode policy map
|
|||
|
|
class. Three set statements are available for each class:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **cos** Sets the Layer 2 class of service
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **dscp** Sets the differentiated services
|
|||
|
|
code point value in the type of service (ToS) byte.
|
|||
|
|
|
|||
|
|
- **traffic-class** Sets the traffic class
|
|||
|
|
queue for data packets.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each type of set command can be assigned to a class, allowing for the simultaneous
|
|||
|
|
modification of both (cos, dscp) fields and assignment to a traffic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no set** and **default set**
|
|||
|
|
commands remove the specified data action from the class map by deleting the
|
|||
|
|
associated **set** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (qos) configuration accessed through **class
|
|||
|
|
(policy-map (qos) Trident)** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
set
|
|||
|
|
QOS_TYPE
|
|||
|
|
value
|
|||
|
|
|
|||
|
|
|
|||
|
|
no set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
default set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** Specifies the data stream resolution
|
|||
|
|
method. Valid options include:
|
|||
|
|
|
|||
|
|
- **cos** Layer 2 class of service field of
|
|||
|
|
outbound packet is modified.
|
|||
|
|
|
|||
|
|
- **dscp** Differentiated services code point
|
|||
|
|
value in the ToS byte is modified.
|
|||
|
|
|
|||
|
|
- **traffic-class** Data stream is assigned to a
|
|||
|
|
traffic class queue.
|
|||
|
|
|
|||
|
|
- **value** Specifies the data field value or traffic
|
|||
|
|
class queue. Valid data range depends on QOS type.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **cos**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **dscp**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**63**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is
|
|||
|
|
**traffic-class** Value ranges from
|
|||
|
|
**0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set **CoS field 7**
|
|||
|
|
to data traffic specified by the class map **CMAP-1**, then
|
|||
|
|
assigns that data to **traffic class queue
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### set (policy-map-class
|
|||
|
|
(qos)Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set** command specifies traffic resolution methods for
|
|||
|
|
traffic defined by its associated class map in its configuration mode policy map
|
|||
|
|
class. Three set statements are available for each class:
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **cos** Sets the Layer 2 class of service
|
|||
|
|
field.
|
|||
|
|
|
|||
|
|
- **dscp** Sets the differentiated services
|
|||
|
|
code point value in the type of service (ToS) byte.
|
|||
|
|
|
|||
|
|
- **traffic-class** Sets the traffic class
|
|||
|
|
queue for data packets.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Each type of set command can be assigned to a class, allowing for the simultaneous
|
|||
|
|
modification of both (cos, dscp) fields and assignment to a traffic class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no set** and **default set**
|
|||
|
|
commands remove the specified data action from the class map by deleting the
|
|||
|
|
associated **set** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (qos) configuration accessed through **class
|
|||
|
|
(policy-map (qos) Trident)** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
set
|
|||
|
|
QOS_TYPE
|
|||
|
|
value
|
|||
|
|
|
|||
|
|
|
|||
|
|
no set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
default set
|
|||
|
|
QOS_TYPE
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** Specifies the data stream resolution
|
|||
|
|
method. Valid options include:
|
|||
|
|
|
|||
|
|
- **cos** Layer 2 class of service field of
|
|||
|
|
outbound packet is modified.
|
|||
|
|
|
|||
|
|
- **dscp** Differentiated services code point
|
|||
|
|
value in the ToS byte is modified.
|
|||
|
|
|
|||
|
|
- **traffic-class** Data stream is assigned to a
|
|||
|
|
traffic class queue.
|
|||
|
|
|
|||
|
|
- **value** Specifies the data field value or traffic
|
|||
|
|
class queue. Valid data range depends on QOS type.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **cos**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is **dscp**
|
|||
|
|
Value ranges from **0** to
|
|||
|
|
**63**.
|
|||
|
|
|
|||
|
|
- **QOS_TYPE** is
|
|||
|
|
**traffic-class** Value ranges from
|
|||
|
|
**0** to
|
|||
|
|
**7**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type
|
|||
|
|
quality-of-service
|
|||
|
|
|
|||
|
|
- class
|
|||
|
|
(policy-map (qos) Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map to set **CoS field 7**
|
|||
|
|
to data traffic specified by the **class map CMAP-1**, then
|
|||
|
|
assigns that data to **traffic class queue
|
|||
|
|
4**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type quality-of-service PMAP-1**
|
|||
|
|
switch(config-pmap-PMAP-1)# **class CMAP-1**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set cos 7**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)# **set traffic-class 4**
|
|||
|
|
switch(config-pmap-c-PMAP-1-CMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### set nexthop (policy-map-class
|
|||
|
|
pbr)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set nexthop** command specifies the next hop for traffic
|
|||
|
|
defined by its associated class map in its configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no set nexthop** and **default set
|
|||
|
|
nexthop** commands remove the specified action from the class
|
|||
|
|
map by deleting the associated **set nexthop** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (pbr) configuration accessed through **class (policy-map
|
|||
|
|
(pbr))** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
set nexthop [recursive]
|
|||
|
|
NH-addr_1 [NH-addr_2] ...
|
|||
|
|
[NH-addr_n]
|
|||
|
|
|
|||
|
|
|
|||
|
|
no set nexthop [recursive]
|
|||
|
|
|
|||
|
|
|
|||
|
|
default set nexthop [recursive]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **recursive** enables recursive next hop resolution.
|
|||
|
|
|
|||
|
|
- **NH_addr** IP address of next hop. If multiple
|
|||
|
|
addresses are entered, they are treated as an ECMP group.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type pbr
|
|||
|
|
|
|||
|
|
- class (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These **192.168.5.3** commands configure the policy map
|
|||
|
|
**PMAP1** to set the next hop to for traffic defined
|
|||
|
|
by class map
|
|||
|
|
**CMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)# **set nexthop 192.168.5.3**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### set nexthop-group (policy-map-class(pbr)
|
|||
|
|
Arad)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **set nexthop-group** command specifies a nexthop group as
|
|||
|
|
the next hop for traffic defined by its associated class map in its configuration
|
|||
|
|
mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no set nexthop-group** and **default set
|
|||
|
|
nexthop-group** commands remove the specified action from the
|
|||
|
|
class map by deleting the associated **set nexthop-group**
|
|||
|
|
command from ***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (pbr) configuration accessed through **class (policy-map
|
|||
|
|
(pbr))** command.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
set nexthop-group
|
|||
|
|
group_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
no set nexthop-group
|
|||
|
|
group_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
default set nexthop-group
|
|||
|
|
group_name
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**group_name** name of ECMP group to use as next hop.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- policy-map type pbr
|
|||
|
|
|
|||
|
|
- class (policy-map
|
|||
|
|
(pbr))
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the policy map **PMAP1** to set the
|
|||
|
|
next hop to a nexthop group named **GROUP1** for traffic
|
|||
|
|
defined by class map
|
|||
|
|
**CMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type pbr PMAP1**
|
|||
|
|
switch(config-pmap-PMAP1)# **class CMAP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)# **set nexthop-group GROUP1**
|
|||
|
|
switch(config-pmap-c-PMAP1-CMAP1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### shape (policy-map-class
|
|||
|
|
(control-plane)Arad)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **shape** command specifies the maximum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no shape** and **default shape**
|
|||
|
|
commands remove the maximum bandwidth restriction for the configuration mode class
|
|||
|
|
by deleting the corresponding **bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration accessed through **class (policy-map (control-plane)
|
|||
|
|
Arad)**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
****
|
|||
|
|
****
|
|||
|
|
|
|||
|
|
|
|||
|
|
****
|
|||
|
|
|
|||
|
|
|
|||
|
|
****
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**kilobits** Maximum data rate in kilobits per second. Value
|
|||
|
|
ranges from 1 to 10000000.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Arad) places the switch in the
|
|||
|
|
***policy-map-class (control plane)*** configuration
|
|||
|
|
mode.
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Arad) specifies the
|
|||
|
|
minimum bandwidth for traffic defined by its associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Arad platform switches define these default shapes for static classes:
|
|||
|
|
|
|||
|
|
- copp-system-bgp 2500 copp-system-l3lpmoverflow 2500
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 2500 copp-system-l3slowpath 2500
|
|||
|
|
|
|||
|
|
- copp-system-default 2500 copp-system-l3ttl1 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipbroadcast 2500 copp-system-lacp 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipmc 2500 copp-system-linklocal 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 2500 copp-system-lldp 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipunicast NO LIMIT copp-system-mlag 2500
|
|||
|
|
|
|||
|
|
- copp-system-l2broadcast 2500 copp-system-multicastsnoop 2500
|
|||
|
|
|
|||
|
|
- copp-system-l2unicast NO LIMIT copp-system-OspfIsis 2500
|
|||
|
|
|
|||
|
|
- copp-system-l3destmiss 2500 copp-system-sflow 2500
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the maximum bandwidth of **2000** kbps
|
|||
|
|
for data traffic specified by the class map ***copp-system-lldp*** of the
|
|||
|
|
default ***control-plane policy
|
|||
|
|
map***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **shape kbps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 2000 kbps
|
|||
|
|
bandwidth : 250 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### shape (policy-map-class
|
|||
|
|
(control-plane)FM6000)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **shape** command specifies the maximum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no shape** and **default shape**
|
|||
|
|
commands remove the maximum bandwidth restriction for the configuration mode class
|
|||
|
|
by deleting the corresponding **bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration accessed through class (policy-map (control-plane) FM6000).
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**shape pps**
|
|||
|
|
**packets**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**no shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**default shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Maximum data rate in packets per second. Value
|
|||
|
|
ranges from 1 to 100000.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) FM6000) places the switch in
|
|||
|
|
the ***policy-map-class (control plane)*** configuration mode.
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) FM6000) specifies
|
|||
|
|
the minimum bandwidth for traffic defined by its associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
FM6000 platform switches define these default shapes for static classes:
|
|||
|
|
|
|||
|
|
- copp-system-arp 10000 copp-system-l3slowpath 10000
|
|||
|
|
|
|||
|
|
- copp-system-default 8000 copp-system-pim-ptp 10000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 10000 copp-system-ospf-isis 10000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 10000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-igmp 10000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-l2rsvd 10000 copp-system-sflow 25000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a maximum bandwidth of **5000**
|
|||
|
|
packets per second for data traffic specified by the class map
|
|||
|
|
**PMAP-1** in the policy map named
|
|||
|
|
***copp-system-policy***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class PMAP-1**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)# **shape pps 5000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### shape (policy-map-class
|
|||
|
|
(control-plane)Helix)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **shape** command specifies the maximum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no shape** and **default shape**
|
|||
|
|
commands remove the maximum bandwidth restriction for the configuration mode class
|
|||
|
|
by deleting the corresponding **bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration accessed through **class (policy-map (control-plane)
|
|||
|
|
Helix)**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
shape pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
default shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Maximum data rate in packets per second. Value
|
|||
|
|
ranges from **1** to **100000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident platform switches define these default shapes for static classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog 10000 copp-system-l3ttl1 10000
|
|||
|
|
|
|||
|
|
- copp-system-arp 10000 copp-system-lacp 5000
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver 10000 copp-system-lldp 10000
|
|||
|
|
|
|||
|
|
- copp-system-bfd 10000 copp-system-mlag 5000
|
|||
|
|
|
|||
|
|
- copp-system-bgp 5000 copp-system-OspfIsis 10000
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 5000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-default 8000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-glean 10000 copp-system-sflow 25024
|
|||
|
|
|
|||
|
|
- copp-system-igmp 10000 copp-system-tc3to5 10000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 10000 copp-system-tc6to7 10000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 10000 copp-system-urm 10000
|
|||
|
|
|
|||
|
|
- copp-system-l3destmiss 10000 copp-system-vrrp 5000
|
|||
|
|
|
|||
|
|
- copp-system-l3slowpath 10000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Helix) places the switch in
|
|||
|
|
the ***policy-map-class (control plane)*** configuration mode.
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Helix) specifies the
|
|||
|
|
minimum bandwidth for traffic defined by its associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a maximum bandwidth of **5000**
|
|||
|
|
packets per second for data traffic specified by the ***copp-system-lldp***
|
|||
|
|
of the default control-plane policy
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type control-plan copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **shape pps 5000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 5000 pps
|
|||
|
|
bandwidth : 500 pps
|
|||
|
|
Out Packets : 305961
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### shape (policy-map-class
|
|||
|
|
(control-plane)Petra)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **shape** command specifies the maximum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no shape** and **default shape**
|
|||
|
|
commands remove the maximum bandwidth restriction for the configuration mode class
|
|||
|
|
by deleting the corresponding **bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration accessed through **class (policy-map (control-plane)
|
|||
|
|
Petra)**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
shape kbps
|
|||
|
|
kilobits
|
|||
|
|
|
|||
|
|
|
|||
|
|
no shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
default shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**kilobits** Maximum data rate in kilobits per second. Value
|
|||
|
|
ranges from **1** to **10000000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Petra) places the switch in
|
|||
|
|
policy-map-class (control plane) configuration mode.
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Petra) specifies the
|
|||
|
|
minimum bandwidth for traffic defined by its associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Petra platform switches define these default shapes for static classes:
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 2500 copp-system-l3destmiss 2500
|
|||
|
|
|
|||
|
|
- copp-system-default 2500 copp-system-l3slowpath 2500
|
|||
|
|
|
|||
|
|
- copp-system-igmp 2500 copp-system-l3ttl0 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipbroadcast 2500 copp-system-l3ttl1 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipmc 2500 copp-system-lacp 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 2500 copp-system-lldp 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 2500 copp-system-unicast-arp 2500
|
|||
|
|
|
|||
|
|
- copp-system-ipunicast No Limit
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Guidelines**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Petra does not support all discrete rate values. When a specified discrete value is
|
|||
|
|
not supported, the switch converts the rate to the next highest discrete value that
|
|||
|
|
it supports. The **show** command displays the converted rate
|
|||
|
|
and not the user-configured rate.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure the maximum bandwidth of **2000** kbps
|
|||
|
|
for data traffic specified by the class map ***copp-system-lldp*** of the
|
|||
|
|
**default control-plane** policy map. Because the
|
|||
|
|
switch does not support the discrete value of **2000** kbps,
|
|||
|
|
it converts the bandwidth up to **2115**
|
|||
|
|
kbps.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **shape kbps 2000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 2115 kbps
|
|||
|
|
bandwidth : 325 kbps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### shape (policy-map-class
|
|||
|
|
(control-plane)Trident II)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **shape** command specifies the maximum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no shape** and **default shape**
|
|||
|
|
commands remove the maximum bandwidth restriction for the configuration mode class
|
|||
|
|
by deleting the corresponding **bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration accessed through **class (policy-map (control-plane) Trident
|
|||
|
|
II)**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
shape pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
default shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameter**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Maximum data rate in packets per second. Value
|
|||
|
|
ranges from **1** to **100000**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident II platform switches define these default shapes for static classes:
|
|||
|
|
|
|||
|
|
- copp-system-acllog 10000 copp-system-l3slowpath 10000
|
|||
|
|
|
|||
|
|
- copp-system-arp 10000 copp-system-l3ttl1 10000
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver 10000 copp-system-lacp 5000
|
|||
|
|
|
|||
|
|
- copp-system-bfd 10000 copp-system-lldp 10000
|
|||
|
|
|
|||
|
|
- copp-system-bgp 5000 copp-system-mlag 5000
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 5000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-default 8000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-glean 10000 copp-system-sflow 25024
|
|||
|
|
|
|||
|
|
- copp-system-igmp 10000 copp-system-tc3to5 10000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 10000 copp-system-tc6to7 10000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 10000 copp-system-urm 10000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident II) places the switch
|
|||
|
|
in ***policy-map-class (control plane)*** configuration mode.
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident II)
|
|||
|
|
specifies the minimum bandwidth for traffic defined by its associated class
|
|||
|
|
map in its configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a maximum bandwidth of **5000**
|
|||
|
|
packets per second for data traffic specified by the ***copp-system-lldp***
|
|||
|
|
of the **default control-plane policy**
|
|||
|
|
map.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type control-plan copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class copp-system-lldp**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **shape pps 5000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-copp-system-lldp)# **exit**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **exit**
|
|||
|
|
switch(config)# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
shape : 5000 pps
|
|||
|
|
bandwidth : 500 pps
|
|||
|
|
Out Packets : 305961
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch(config)#`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### shape (policy-map-class
|
|||
|
|
(control-plane)Trident)
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **shape** command specifies the maximum bandwidth for
|
|||
|
|
traffic filtered by the configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **no shape** and **default shape**
|
|||
|
|
commands remove the maximum bandwidth restriction for the configuration mode class
|
|||
|
|
by deleting the corresponding **bandwidth** command from
|
|||
|
|
***running-config***.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Policy-map-class (control plane) configuration accessed through **class (policy-map (control-plane)
|
|||
|
|
Trident)**.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
shape pps
|
|||
|
|
packets
|
|||
|
|
|
|||
|
|
|
|||
|
|
no shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
default shape
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**packets** Maximum data rate in packets per second. Value
|
|||
|
|
ranges from 1 to 100000.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Static Classes Default Shape**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Trident platform switches define these default shapes for static classes:
|
|||
|
|
|
|||
|
|
- copp-system-arp 10000 copp-system-lldp 10000
|
|||
|
|
|
|||
|
|
- copp-system-arpresolver 10000 copp-system-l3destmiss 10000
|
|||
|
|
|
|||
|
|
- copp-system-bpdu 5000 copp-system-l3slowpath 10000
|
|||
|
|
|
|||
|
|
- copp-system-default 8000 copp-system-l3ttl1 10000
|
|||
|
|
|
|||
|
|
- copp-system-glean 10000 copp-system-selfip 5000
|
|||
|
|
|
|||
|
|
- copp-system-igmp 10000 copp-system-selfip-tc6to7 5000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcmiss 10000 copp-system-sflow 25000
|
|||
|
|
|
|||
|
|
- copp-system-ipmcrsvd 10000 copp-system-tc3to5 10000
|
|||
|
|
|
|||
|
|
- copp-system-lacp 5000 copp-system-tc6to7 10000
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Commands**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- class (policy-map (control-plane) Trident) places the switch in
|
|||
|
|
the ***policy-map-class (control plane)*** configuration mode.
|
|||
|
|
|
|||
|
|
- bandwidth (policy-map-class (control-plane) Trident) specifies
|
|||
|
|
the minimum bandwidth for traffic defined by its associated class map in its
|
|||
|
|
configuration mode policy map class.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
These commands configure a maximum bandwidth of **5000**
|
|||
|
|
packets per second for data traffic specified by the class map
|
|||
|
|
**PMAP-1** in the policy map named
|
|||
|
|
***copp-system-policy***.
|
|||
|
|
```
|
|||
|
|
`switch(config)# **policy-map type copp copp-system-policy**
|
|||
|
|
switch(config-pmap-copp-system-policy)# **class PMAP-1**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)# **shape pps 5000**
|
|||
|
|
switch(config-pmap-c-copp-system-policy-PMAP-1)`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show class-map type control-plane
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show class-map** command displays contents of available
|
|||
|
|
control-plane class maps. **Control-plane** class maps can be added to the
|
|||
|
|
***copp-system-policy*** policy map. ***Control-plane***
|
|||
|
|
class maps can be static class maps defined by the system or dynamic maps created in
|
|||
|
|
***class-map*** configuration mode.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Dynamic class maps are composed of statements that match IPv4 access control lists.
|
|||
|
|
Static class maps are defined by the switch and cannot be altered.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**show class-map type control-plane
|
|||
|
|
[MAP_NAME]**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
MAP_NAME Name of class map displayed by the command. Options
|
|||
|
|
include:
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all control plane
|
|||
|
|
class maps.
|
|||
|
|
|
|||
|
|
- **name_text** Command displays specified control-plane
|
|||
|
|
class maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Command**
|
|||
|
|
|
|||
|
|
- **show class-map** command displays QoS class
|
|||
|
|
maps.
|
|||
|
|
|
|||
|
|
- show class-map type
|
|||
|
|
qos displays control plane class maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the available control plane class
|
|||
|
|
maps.
|
|||
|
|
```
|
|||
|
|
`switch# **show class-map type control-plane**
|
|||
|
|
Class-map: CM-CP1 (match-any)
|
|||
|
|
Match: ip access-group name LIST-CP1
|
|||
|
|
Class-map: copp-system-acllog (match-any)
|
|||
|
|
Class-map: copp-system-arp (match-any)
|
|||
|
|
Class-map: copp-system-arpresolver (match-any)
|
|||
|
|
Class-map: copp-system-bpdu (match-any)
|
|||
|
|
Class-map: copp-system-glean (match-any)
|
|||
|
|
Class-map: copp-system-igmp (match-any)
|
|||
|
|
Class-map: copp-system-ipmcmiss (match-any)
|
|||
|
|
Class-map: copp-system-ipmcrsvd (match-any)
|
|||
|
|
Class-map: copp-system-l3destmiss (match-any)
|
|||
|
|
Class-map: copp-system-l3slowpath (match-any)
|
|||
|
|
Class-map: copp-system-l3ttl1 (match-any)
|
|||
|
|
Class-map: copp-system-lacp (match-any)
|
|||
|
|
Class-map: copp-system-lldp (match-any)
|
|||
|
|
Class-map: copp-system-selfip (match-any)
|
|||
|
|
Class-map: copp-system-selfip-tc6to7 (match-any)
|
|||
|
|
Class-map: copp-system-sflow (match-any)
|
|||
|
|
Class-map: copp-system-tc3to5 (match-any)
|
|||
|
|
Class-map: copp-system-tc6to7 (match-any)
|
|||
|
|
switch>`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show class-map type pbr
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show class-map** command displays contents of all
|
|||
|
|
available Policy-Based Routing (PBR) class maps, or of a specified PBR class map.
|
|||
|
|
PBR class maps are used by PBR policy maps. PBR class maps are dynamic maps that are
|
|||
|
|
created in class-map-configuration mode. Dynamic class maps are composed of
|
|||
|
|
statements that match IPv4 or IPv6 access control lists.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show class-map type pbr [map_name]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**map_name** Name of class map displayed by the command. If no
|
|||
|
|
parameter is entered, command show all available PBR class maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Command**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map type pbr
|
|||
|
|
displays PBR policy maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the contents of the PBR class map
|
|||
|
|
**CMAP1**.
|
|||
|
|
```
|
|||
|
|
`switch# **show class-map type pbr CMAP1**
|
|||
|
|
Class-map: CMAP1 (match-any)
|
|||
|
|
Match: 10 ip access-group PBRgroup1
|
|||
|
|
Match: 20 ip access-group PBRgroup2
|
|||
|
|
Match: 30 ip access-group PBRgroup3
|
|||
|
|
switch>`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show class-map type qos
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show class-map**command displays contents of all
|
|||
|
|
available QoS class maps. QoS class maps are used by QoS policy maps. QoS class maps
|
|||
|
|
are dynamic maps that are created in ***class-map*** configuration mode.
|
|||
|
|
Dynamic class maps are composed of statements that match IPv4 or IPv6 access control
|
|||
|
|
lists.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show class-map type qos [MAP_NAME]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
MAP_NAME Name of class map displayed by the command.
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all QoS class maps.
|
|||
|
|
|
|||
|
|
- **name_text** Command displays specified QoS class
|
|||
|
|
maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**show class-map** and **show class-map type
|
|||
|
|
qos** are identical commands.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Related Command**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show class-map type
|
|||
|
|
control-plane displays control plane class maps.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the available QoS class
|
|||
|
|
maps.
|
|||
|
|
```
|
|||
|
|
`switch# **show class-map type qos**
|
|||
|
|
Class-map: CM-Q1 (match-any)
|
|||
|
|
Match: ipv6 access-group name LIST-1
|
|||
|
|
Class-map: CM-Q2 (match-any)
|
|||
|
|
Match: ip access-group name LIST-2`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map copp
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map copp** command displays contents of the
|
|||
|
|
control-plane policy map. Control-plane policy maps are applied to the control
|
|||
|
|
plane, and copp-system-policy is the only supported policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**show policy-map copp
|
|||
|
|
copp-system-policy**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the contents and throughput of the policy map applied to the
|
|||
|
|
control
|
|||
|
|
plane.
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map copp copp-system-policy**
|
|||
|
|
Service-policy input: copp-system-policy
|
|||
|
|
Number of units programmed: 1
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: copp-system-bpdu (match-any)
|
|||
|
|
shape : 5000 pps
|
|||
|
|
bandwidth : 5000 pps
|
|||
|
|
Out Packets : 2
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
Class-map: copp-system-lacp (match-any)
|
|||
|
|
shape : 5000 pps
|
|||
|
|
bandwidth : 5000 pps
|
|||
|
|
Out Packets : 0
|
|||
|
|
Drop Packets : 0
|
|||
|
|
|
|||
|
|
switch>`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map interface
|
|||
|
|
type qos counters
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map interface** command displays the quantity
|
|||
|
|
of packets that are filtered by ACLs applied to a interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map [INTERFACE_NAME][type
|
|||
|
|
qos][TRAFFIC] counters
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **INTERFACE_NAME** Filters policy map list by
|
|||
|
|
interfaces. Options include:
|
|||
|
|
|
|||
|
|
- **no parameter** Displays data for all configured
|
|||
|
|
interfaces.
|
|||
|
|
|
|||
|
|
- **interface ethernet**
|
|||
|
|
**e_range** Ethernet ports for which command
|
|||
|
|
displays policy maps.
|
|||
|
|
|
|||
|
|
- **interface port-channel**
|
|||
|
|
**p_range** Port channels for which command
|
|||
|
|
displays policy maps.
|
|||
|
|
|
|||
|
|
- **TRAFFIC** Filters policy maps by the traffic they
|
|||
|
|
manage. Options include:
|
|||
|
|
|
|||
|
|
- **no parameter** Policy maps that manage interfaces ingress
|
|||
|
|
traffic (same as **input** option).
|
|||
|
|
|
|||
|
|
- **input** Policy maps that manage interfaces
|
|||
|
|
ingress traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the policy maps applied to interfaces Ethernet
|
|||
|
|
**7** and
|
|||
|
|
**8**.
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map interface ethernet 7-8**
|
|||
|
|
Service-policy input: PMAP-1
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: cmap-1 (match-any)
|
|||
|
|
Match: ip access-group name LIST-2
|
|||
|
|
set cos 6
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
|
|||
|
|
Service-policy input: PMAP-2
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: cmap-2 (match-any)
|
|||
|
|
Match: ip access-group name LIST-2
|
|||
|
|
set dscp 10
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map interface
|
|||
|
|
type qos
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map interface** command displays contents of
|
|||
|
|
the policy maps applied to specified interfaces or to the control plane.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map interface
|
|||
|
|
INTERFACE_NAME [type qos]
|
|||
|
|
[TRAFFIC]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **INTERFACE_NAME** Filters policy map list by
|
|||
|
|
interfaces. Options include:
|
|||
|
|
|
|||
|
|
- **ethernet**
|
|||
|
|
**e_range** Ethernet ports for which command
|
|||
|
|
displays policy maps.
|
|||
|
|
|
|||
|
|
- **port-channel**
|
|||
|
|
**p_range** Port channels for which command
|
|||
|
|
displays policy maps.
|
|||
|
|
|
|||
|
|
- **TRAFFIC** Filters policy maps by the traffic they
|
|||
|
|
manage. Options include:
|
|||
|
|
|
|||
|
|
- **no parameter** Policy maps that manage interfaces ingress
|
|||
|
|
traffic (same as **input** option).
|
|||
|
|
|
|||
|
|
- **input** Policy maps that manage interfaces
|
|||
|
|
ingress traffic.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the policy maps applied to interfaces Ethernet
|
|||
|
|
**7** and
|
|||
|
|
**8**.
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map interface ethernet 7-8**
|
|||
|
|
Service-policy input: PMAP-1
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: cmap-1 (match-any)
|
|||
|
|
Match: ip access-group name LIST-2
|
|||
|
|
set cos 6
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
|
|||
|
|
Service-policy input: PMAP-2
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: cmap-2 (match-any)
|
|||
|
|
Match: ip access-group name LIST-2
|
|||
|
|
set dscp 10
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map type
|
|||
|
|
copp
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map type copp** command displays contents of
|
|||
|
|
control plane policy maps. Control-plane policy maps are applied to the control
|
|||
|
|
plane; copp-system-policy is the only supported policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Command options filter the output to display
|
|||
|
|
contents of all policy maps, contents of a specified policy map, or contents
|
|||
|
|
of a single class map within a specified policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map type
|
|||
|
|
copp
|
|||
|
|
copp-system-policy [CMAP_NAME]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**CMAP_NAME** Name of class map displayed by the command.
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all class maps in specified policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
- **class_name** Command displays specified class
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the contents of the copp-system-bpdu class map in the
|
|||
|
|
copp-system-policy policy
|
|||
|
|
maps.
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map type copp copp-system-policy class copp-system-bpdu**
|
|||
|
|
Class-map: copp-system-bpdu (match-any)
|
|||
|
|
shape : 5000 pps
|
|||
|
|
bandwidth : 5000 pps`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map type
|
|||
|
|
pbr
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map pbr** command displays contents of
|
|||
|
|
Policy-Based Routing (PBR) policy maps. PBR policy maps are applied to Ethernet
|
|||
|
|
interfaces, port channel interfaces or switch virtual interfaces (SVIs).
|
|||
|
|
|
|||
|
|
|
|||
|
|
Command options filter the output to either
|
|||
|
|
display contents of all policy maps, contents of a specified policy map,
|
|||
|
|
or summary contents of all or a specified policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map type pbr
|
|||
|
|
[PMAP_NAME][DATA_LEVEL]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **PMAP_NAME** Name of policy map displayed by the
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all policy maps.
|
|||
|
|
|
|||
|
|
- **policy_map** Command displays specified
|
|||
|
|
policy map.
|
|||
|
|
|
|||
|
|
- **DATA_LEVEL** Type of information the command displays.
|
|||
|
|
Values include:
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all class maps in specified
|
|||
|
|
policy map.
|
|||
|
|
|
|||
|
|
- **summary** Command displays summary data for
|
|||
|
|
the specified policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the contents of all PBR policy maps in
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map type pbr**
|
|||
|
|
Service policy PMAP1
|
|||
|
|
Configured on:
|
|||
|
|
Applied on:
|
|||
|
|
10: Class-map: CMAP1 (match-any)
|
|||
|
|
Match: 10 ip access-group PBRgroup1
|
|||
|
|
Match: 20 ip access-group PBRgroup2
|
|||
|
|
Match: 30 ip access-group PBRgroup3
|
|||
|
|
Configured actions: set nexthop 172.16.10.12
|
|||
|
|
20: Class-map: CMAP2 (match-any)
|
|||
|
|
Match: 10 ip access-group PBRgroup1
|
|||
|
|
Match: 10 ip access-group PBRgroup4
|
|||
|
|
Match: 20 ip access-group PBRgroup5
|
|||
|
|
Configured actions: set nexthop 192.168.15.15`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map type
|
|||
|
|
qos counters
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map counters** command displays the quantity
|
|||
|
|
of packets that are filtered by the ACLs that comprise a specified QoS policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map type qos
|
|||
|
|
pmap_name [TRAFFIC] counters
|
|||
|
|
[INFO_LEVEL]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
- **pmap_name** Name of policy map displayed by the
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
- **TRAFFIC** Filters policy maps by the traffic they
|
|||
|
|
manage. Options include:
|
|||
|
|
|
|||
|
|
- **no parameter** Policy maps that manage interfaces ingress
|
|||
|
|
traffic (same as **input** option).
|
|||
|
|
|
|||
|
|
- **input** Policy maps that manage interfaces
|
|||
|
|
ingress traffic.
|
|||
|
|
|
|||
|
|
- **INFO_LEVEL** amount of information that is displayed.
|
|||
|
|
Options include:
|
|||
|
|
|
|||
|
|
- **no parameter** displays summarized information about the policy
|
|||
|
|
map.
|
|||
|
|
|
|||
|
|
- **detail** displays detailed policy map
|
|||
|
|
information.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
Use the following command to display counters for policy map, p1, enabled for per-interface
|
|||
|
|
counters:
|
|||
|
|
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map p1 counters**
|
|||
|
|
Service-policy input: p1
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: c1 (match-any)
|
|||
|
|
Match: vlan 100 0xfff
|
|||
|
|
set dscp 7
|
|||
|
|
Matched Packets: 7
|
|||
|
|
Interface: Ethernet1/1
|
|||
|
|
Matched Packets: 1
|
|||
|
|
Interface: Ethernet2/1
|
|||
|
|
Matched Packets: 2
|
|||
|
|
Interface: Ethernet3/1
|
|||
|
|
Matched Packets: 4
|
|||
|
|
|
|||
|
|
Class-map: c2 (match-any)
|
|||
|
|
Match: ip access-group name acl1
|
|||
|
|
set cos 6
|
|||
|
|
Matched Packets: 6
|
|||
|
|
Interface: Ethernet1/1
|
|||
|
|
Matched Packets: 2
|
|||
|
|
Interface: Ethernet2/1
|
|||
|
|
Matched Packets: 0
|
|||
|
|
Interface: Ethernet3/1
|
|||
|
|
Matched Packets: 4
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
Matched Packets: 0
|
|||
|
|
Interface: Ethernet1/1
|
|||
|
|
Matched Packets: 0
|
|||
|
|
Interface: Ethernet2/1
|
|||
|
|
Matched Packets: 0
|
|||
|
|
Interface: Ethernet3/1
|
|||
|
|
Matched Packets: 0`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show policy-map type
|
|||
|
|
qos
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show policy-map qos** command displays contents of QoS
|
|||
|
|
policy maps. QoS policy maps are applied to Ethernet or port channel interfaces.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Command options filter the output to either
|
|||
|
|
display contents of all policy maps, contents of a specified policy map,
|
|||
|
|
or contents of a single class map within a specified policy map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show policy-map [type
|
|||
|
|
qos][PMAP_NAME [CMAP_NAME]]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
- **PMAP_NAME** Name of policy map displayed by the
|
|||
|
|
command.
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all policy maps.
|
|||
|
|
|
|||
|
|
- **policy_map** Command displays specified
|
|||
|
|
policy map.
|
|||
|
|
|
|||
|
|
- **CMAP_NAME** Name of class map displayed by the
|
|||
|
|
command. This option is available only when the command includes a policy
|
|||
|
|
map name.
|
|||
|
|
|
|||
|
|
- **no parameter** Command displays all class maps in specified
|
|||
|
|
policy map.
|
|||
|
|
|
|||
|
|
- **class_name** Command displays specified
|
|||
|
|
class map.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Example**
|
|||
|
|
|
|||
|
|
|
|||
|
|
This command displays the contents of all QoS policy maps in
|
|||
|
|
***running-config***.
|
|||
|
|
```
|
|||
|
|
`switch# **show policy-map type qos**
|
|||
|
|
Service-policy input: PMAP-1
|
|||
|
|
Hardware programming status: Successful
|
|||
|
|
|
|||
|
|
Class-map: xeter (match-any)
|
|||
|
|
Match: ip access-group name LIST-1
|
|||
|
|
set cos 6
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)
|
|||
|
|
|
|||
|
|
Service-policy PMAP-2
|
|||
|
|
|
|||
|
|
Class-map: class-default (match-any)`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
### show traffic-policy
|
|||
|
|
|
|||
|
|
|
|||
|
|
The **show traffic-policy** command displays traffic policy
|
|||
|
|
information on the interface.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Mode**
|
|||
|
|
|
|||
|
|
|
|||
|
|
EXEC
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Command Syntax**
|
|||
|
|
|
|||
|
|
|
|||
|
|
show traffic-policy
|
|||
|
|
NAME
|
|||
|
|
interface
|
|||
|
|
|
|||
|
|
|
|||
|
|
show traffic-policy
|
|||
|
|
interface [DETAILS]
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Parameters**
|
|||
|
|
|
|||
|
|
|
|||
|
|
**DETAILS** Details requested. Options include:
|
|||
|
|
|
|||
|
|
- **summary** Display summary information about the
|
|||
|
|
policy.
|
|||
|
|
|
|||
|
|
- **errors** Display all configured remote
|
|||
|
|
grantees, associated profile name and latest update.
|
|||
|
|
|
|||
|
|
- **details** Display all interfaces on which
|
|||
|
|
the policy has been configured.
|
|||
|
|
|
|||
|
|
|
|||
|
|
**Examples**
|
|||
|
|
|
|||
|
|
- This command displays the summary information configured on the switch
|
|||
|
|
interfaces.
|
|||
|
|
```
|
|||
|
|
`switch(config-traffic-policies)# **show traffic-policy interface summary**
|
|||
|
|
Traffic policy samplePolicy
|
|||
|
|
Configured on interfaces: Ethernet1/1, Ethernet2/1, Ethernet3/1, ...
|
|||
|
|
Applied on interfaces for IPv4 traffic: Ethernet1/1, Ethernet2/1, Ethernet3/1, ...
|
|||
|
|
Applied on interfaces for IPv6 traffic:
|
|||
|
|
Total number of rules configured: 3
|
|||
|
|
match SIMPLE ipv4
|
|||
|
|
match ipv4-all-default ipv4
|
|||
|
|
match ipv6-all-default ipv6`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- This command displays information about the traffic policy named
|
|||
|
|
**samplePolicy**.
|
|||
|
|
```
|
|||
|
|
`switch(config-traffic-policies)# **show traffic-policy samplePolicy interface**
|
|||
|
|
Traffic policy samplePolicy
|
|||
|
|
Configured on interfaces: Ethernet1/1, Ethernet2/1, Ethernet3/1, ...
|
|||
|
|
Applied on interfaces for IPv4 traffic: Ethernet1/1, Ethernet2/1, Ethernet3/1, ...
|
|||
|
|
Applied on interfaces for IPv6 traffic:
|
|||
|
|
Total number of rules configured: 3
|
|||
|
|
match SIMPLE ipv4
|
|||
|
|
Source prefix: 192.0.2.0/24
|
|||
|
|
198.51.100.0/24
|
|||
|
|
Destination prefix: 203.0.113.0/24
|
|||
|
|
Protocol: tcp
|
|||
|
|
Source port: 50-100
|
|||
|
|
110-200
|
|||
|
|
Actions: Drop
|
|||
|
|
match ipv4-all-default ipv4
|
|||
|
|
match ipv6-all-default ipv6`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- This command displays all interfaces on which
|
|||
|
|
**samplePolicy** has been
|
|||
|
|
configured.
|
|||
|
|
```
|
|||
|
|
`switch(config-traffic-policies)# **show traffic-policy interface detail**
|
|||
|
|
Traffic policy samplePolicy
|
|||
|
|
Configured on interfaces: Ethernet1/1, Ethernet2/1, Ethernet3/1, Ethernet4/1
|
|||
|
|
Applied on interfaces for IPv4 traffic: Ethernet1/1, Ethernet2/1, Ethernet3/1, Ethernet4/1
|
|||
|
|
Applied on interfaces for IPv6 traffic:
|
|||
|
|
Total number of rules configured: 3
|
|||
|
|
match SIMPLE ipv4
|
|||
|
|
Source prefix: 192.0.2.0/24
|
|||
|
|
198.51.100.0/24
|
|||
|
|
Destination prefix: 203.0.113.0/24
|
|||
|
|
Protocol: tcp
|
|||
|
|
Source port: 50-100
|
|||
|
|
110-200
|
|||
|
|
Actions: Drop
|
|||
|
|
match ipv4-all-default ipv4
|
|||
|
|
match ipv6-all-default ipv6`
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- This command displays installation errors for a match statement. The
|
|||
|
|
example has no
|
|||
|
|
errors.
|
|||
|
|
```
|
|||
|
|
`switch(config-traffic-policies)# **show traffic-policy interface errors**
|
|||
|
|
Traffic policy samplePolicy
|
|||
|
|
Failed on interface for IPv4 traffic:
|
|||
|
|
Failed on interface for IPv6 traffic:`
|
|||
|
|
```
|