Configuring ACL-based QoS

Owned by Tracy Yang
Nov 28, 2023

NOTE:

On Trident and Trident+ based switches, known unicast packets can be assigned to a specific queue between queues from 0 to 7, while unknown unicast packets, multicast packets, and broadcast packets can be assigned to a specific queue between queues from 0 to 3.

Procedure

Step1         Configure firewall filter rule for traffic classification.

                  set firewall filter <filter-name> sequence <number> from destination-mac-address <mac-address>             

NOTE:

  • The matching fields of firewall filter rule could be destination-mac-address, source-mac-address, destination-address-ipv4 (for IPv4 matching rule), destination-address-ipv6 (for IPv6 matching rule), source-address-ipv4 (for IPv4 matching rule), source-address-ipv6 (for IPv6 matching rule), protocol, destination-port, source-port, ether-type, vlan, ip trust-mode, ip value.
  • and is the logical operator between the matching fields with the same sequence number, that is, packets must match all of the matching fields with the same sequence number to be included in one class.

Step2         Configure queue mapping between firewall filter and forwarding class.

                   set firewall filter <filter-name> sequence <number> then forwarding-class <forwarding-class-name>

Step3         Configure DSCP remark.

                   set firewall filter <filter-name> sequence <number> then dscp <dscp-value>

Step4         Apply firewall filter to a switch physical interface.

           set firewall filter <filter-name> input interface <interface-name>

Step5         Configure mapping between forwarding class and local priority.

           set class-of-service forwarding-class <forwarding-class-name> local-priority <int>

Step6         Configure queue scheduler weight.

           set class-of-service scheduler <scheduler-name> weight <int>

Step7         Configure WRR scheduling algorithm for queue scheduling.

                   set class-of-service scheduler <scheduler-name> mode <SP | WFQ | WRR>

Step8         Configure guaranteed-rate for queue.

                   set class-of-service scheduler <scheduler-name> guaranteed-rate <value>       

Step9         Configure scheduler profile.

                   set class-of-service scheduler-profile <scheduler-profile-name> forwarding-class <forwarding-class-name> scheduler <scheduler-name>

Step10         Apply scheduler profile to a switch physical interface.

                   set class-of–service interface <interface-name> scheduler-profile <scheduler-profile-name>

Step11      Commit the configuration.

   commit

Configuration Example

The following example configures ACL-based QoS policy for NTP protocol, and applies it to the interface ge-1/1/1.

Procedure

Step1         Configure destination-port, protocol and ether-type to classify NTP (Network Time Protocol) flow, and mapping to forwarding class class1.

admin@Xorplus# set firewall filter f1 sequence 91 from destination-port 123
admin@Xorplus# set firewall filter f1 sequence 91 from protocol udp
admin@Xorplus# set firewall filter f1 sequence 91 then forwarding-class class1

admin@Xorplus# set firewall filter f1 sequence 92 from destination-port 123
admin@Xorplus# set firewall filter f1 sequence 92 from ether-type 34525
admin@Xorplus# set firewall filter f1 sequence 92 from protocol udp
admin@Xorplus# set firewall filter f1 sequence 92 then forwarding-class class1


Step2         Configure CoPP queue mapping, scheduling weight, scheduling algorithm and queue guaranteed-rate.

admin@Xorplus# set class-of-service scheduler scheduler180 mode WFQ
admin@Xorplus# set class-of-service scheduler scheduler180 guaranteed-rate 10000
admin@Xorplus# set class-of-service scheduler scheduler180 weight 5
admin@Xorplus# set class-of-service scheduler-profile s1 forwarding-class class1 scheduler scheduler180

##Configure mapping between forwarding class and local priority.
admin@Xorplus# set class-of-service forwarding-class class1 local-priority 1

 

Step3         Apply firewall filter to a switch physical interface.            

  admin@XorPlus# set firewall filter f1 input interface ge-1/1/1


Step4         Apply scheduler profile to a switch physical interface.

admin@XorPlus# set class-of-service interface ge-1/1/1 scheduler-profile s1


Step5         Commit the configuration.

admin@XorPlus# commit

Verify the Configuration

  •   You can use the run show filter command to view the configuration information of all firewall filter rules.
admin@XorPlus# run show filter
Filter: f1
    Description:
    Sequence: 91
        Description:
        match counter:  0 packets
        match-condition:
            destination-port:         123..123
            protocol:                 udp
        action: forward
        forwarding_class: classs1
    Sequence: 92
        Description:
        match counter:  0 packets
        match-condition:
            destination-port:         123..123
            ether-type:               0x86dd
            protocol:                 udp
        action: forward
        forwarding_class: classs1
    Input interface: ge-1/1/1

 

  •     You can use the run show class-of-service command to view the information of ACL-based QoS configuration information.
admin@XorPlus# run show class-of-service interface ge-1/1/1
Interface : ge-1/1/1

trust mode : no-trust
Default ieee-802.1 : 0
Default dscp : 0
Default inet-precedence : 0
Local-priority   Queue-Schedule         Code-points
--------------   ---------------------------   -------------------------
0                SP,0kbps                                                 
1                WFQ,5,10000kbps                                           
2                SP,0kbps                                                 
3                SP,0kbps                                                 
4                SP,0kbps                                                 
5                SP,0kbps                                                 
6                SP,0kbps                                                 
7                SP,0kbps

Copyright © 2024 Pica8 Inc. All Rights Reserved.