No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S1720GFR, S2700, S5700, and S6720 V200R010C00 Web-based Configuration Guide

This document describes the configuration and maintenance of device through the web network management system. The web network management system provides the functions of viewing device information and managing the entire system, interfaces, services, ACL, QoS, routes, security, and tools.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Using Layer 2 ACLs in QoS to Implement Traffic Policing

Example for Using Layer 2 ACLs in QoS to Implement Traffic Policing

Networking Requirements

An enterprise allocates the voice, video, and data services to VLAN 120, VLAN 110, and VLAN 100 respectively.

The Switch performs traffic policing on different services to limit traffic rate within a proper range and provide bandwidth guarantee for services.As shown in Figure 2-336.

Figure 2-336  Networking diagram for configuring traffic policing

Table 2-143 lists the configuration requirements.

Table 2-143  CAR values on Switch

Traffic Type

CIR (kbit/s)

PIR (kbit/s)

Voice

2000

10000

Video

4000

10000

Data

4000

10000

Procedure

  1. Create VLANs 100, 110 and 120 on the Switch.
    1. Choose Service Management > VLAN > VLAN in the navigation tree to open the VLAN page, as shown in Figure 2-337.

      Figure 2-337  VLAN

    2. Click Create to open the Create VLAN, as shown in Figure 2-338.
    3. Enter 100,110,120 in VLAN ID.

      Figure 2-338  Create VLAN

    4. Click OK.
  2. Set the link types of GE0/0/1 and GE0/0/2 to trunk and add GE0/0/1 and GE0/0/2 to VLANs 100, 110, and 120.
    1. Choose Service Management > VLAN > Trunk Interface in the navigation tree to open the Trunk Interface page, as shown in Figure 2-339.

      Figure 2-339  Trunk Interface
      NOTE:

      If the link types of GE0/0/1 and GE0/0/2 are not trunk, change their types to trunk first.

    2. On the Trunk Interface page, click behind GigabitEthernet0/0/1 to open the Modify VLAN configuration on interface page, as shown in Figure 2-340.
    3. Enter 1,100,110,120 in Allowed VLAN.

      Figure 2-340  Modify VLAN configuration on interface

    4. Click OK.
    5. On the Trunk Interface page, click behind GigabitEthernet0/0/2 to open the Modify VLAN configuration on interface page.
    6. Enter 1,100,110,120 in Allowed VLAN. The configuration is similar to that on GE0/0/1.
    7. Click OK.
  3. Configure ACL and traffic policing.

    • Create Layer 2 ACL 4001 on the Switch to permit the packets from VLAN 120. Configure traffic policing for incoming traffic on GE0/0/1 to limit the rate of packets from VLAN 120. Set the CIR to 2000 and PIR to 10000.

      1. Choose ACL > ACL in the navigation tree to open the ACL page, as shown in Figure 2-341.
        Figure 2-341  ACL
      2. Click Create to open the Create ACL page, as shown in Figure 2-342.
      3. Select L2 ACL for ACL type, enter 4001 in ACL number, and click Apply.
        Figure 2-342  Create ACL
      4. Click the Rules tab. As shown in Figure 2-343, enter 1 in Rule number, select Allowed for Action, and enter 120 for Source VLAN ID. Click Add and then Apply.
        Figure 2-343  Configure rules
      5. Click the Action tab. As shown in Figure 2-344, select Configure Traffic Policing, enter 2000 in CIR, enter 10000 in PIR, and click Apply.
        Figure 2-344  Configure action
      6. Click the Apply tab. As shown in Figure 2-345, select Interface for Target, select Inbound for GigabitEthernet0/0/1, and click OK.
        Figure 2-345  Apply the configuration
    • Create Layer 2 ACL 4002 on the Switch to permit the packets from VLAN 110. Configure traffic policing for incoming traffic on GE0/0/1 to limit the rate of packets from VLAN 110. Set the CIR to 4000 and PIR to 10000. The configuration is similar to that of Layer 2 ACL 4001.

    • Create Layer 2 ACL 4003 on the Switch to permit the packets from VLAN 100. Configure traffic policing for incoming traffic on GE0/0/1 to limit the rate of packets from VLAN 100. Set the CIR to 4000 and PIR to 10000. The configuration is similar to that of Layer 2 ACL 4001.

Result

On the ACL page, select L2 ACL for ACL Type and click Query. Information about created Layer 2 ACLs is displayed, as shown in Figure 2-346.
Figure 2-346  Query Layer 2 ACLs
Translation
Download
Updated: 2019-08-21

Document ID: EDOC1000114003

Views: 50083

Downloads: 1057

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next