S5700接口限速不生效

发布时间:  2017-03-02 浏览次数:  316 下载次数:  0
问题描述

S5700设备对接口入方向的qos lr限速不生效,接口上的信息显示当前入方向的接口速率和接口历史峰值速率都超过了CIR限速:

#
acl name input_22 2028 
 rule 5 permit source 172.16.17.0 0.0.0.255
#
interface GigabitEthernet0/0/12
description 4Mbps
port link-type access
port default vlan 1701
traffic-filter inbound acl name input_22
qos lr outbound cir 4096 cbs 512000
qos lr inbound cir 4096 cbs 512000
#

[huawei]display interface GigabitEthernet0/0/12
GigabitEthernet0/0/12 current state : UP
Line protocol current state : UP
Description:4Mbps
Switch Port, Link-type : access(configured),
PVID : 1701, TPID : 8100(Hex), The Maximum Frame Length is 1600
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 68a8-282f-2d60
Current system time: 2017-02-27 14:27:54+08:00
Port Mode: COMMON COPPER
Speed : 100,    Loopback: NONE
Duplex: FULL,   Negotiation: ENABLE
Mdi   : AUTO,   Flow-control: DISABLE
Last 300 seconds input rate 16111528 bits/sec, 1786 packets/sec
Last 300 seconds output rate 430744 bits/sec, 385 packets/sec
Input peak rate 99993296 bits/sec, Record time: 2017-02-25 01:28:27
Output peak rate 7864144 bits/sec, Record time: 2017-02-25 15:28:01
Input:  1386469324 packets, 1148979462018 bytes
  Unicast:                 1386432732,  Multicast:                        3806
  Broadcast:                    32764,  Jumbo:                               0
  Discard:                          0,  Pause:                              22
  Frames:                           0

处理过程

G0/0/12进来在流量源ip都是172.16.17.0/24网段,这样流量先命中了traffic-filter inbound,而traffic-filter inbound优先级比qos lr inbound高,会使得qos lr inbound限速不生效。
这样情况使用traffic-limit而不用qos lr inbound,可以达到限速效果:
如下配置:
[huawei]interface GigabitEthernet0/0/12
[huawei-GigabitEthernet0/0/12]traffic-limit inbound acl name input_22 cir 4096 cbs 512000

END