No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - QoS

CloudEngine 8800, 7800, 6800, and 5800 V200R002C50

This document describes the configurations of QoS functions, including MQC, priority mapping, traffic policing, traffic shaping, interface-based rate limiting, congestion avoidance, congestion management, packet filtering, redirection, traffic statistics, and ACL-based simplified traffic policy.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for ACL-based Simplified Traffic Policies

Licensing Requirements and Limitations for ACL-based Simplified Traffic Policies

Involved Network Elements

Other network elements are not required.

Licensing Requirements

The ACL-based simplified traffic policy is a basic feature of a switch and is not under license control.

Version Requirements

Table 12-1 Products and minimum version supporting the ACL-based simplified traffic policy

Product Model

Minimum Version Required

CE5810EI

V100R005C00

CE5850EI

V100R005C00

CE5850HI

V100R005C00

CE5855EI

V100R005C10

CE6810EI

V100R005C00

CE6810-48S4Q-LI, CE6810-48S-LI

V100R005C00

CE6810-32T16S4Q-LI, CE6810-24S2Q-LI

V100R005C10

CE6850EI

V100R005C00

CE6850-48S6Q-HI

V100R005C00

CE6850-48T6Q-HI, CE6850U-HI, CE6851HI

V100R005C10

CE6855HI

V200R001C00

CE6856HI

V200R002C50

CE6857EI

V200R005C10

CE6860EI

V200R002C50

CE6865EI

V200R005C00

CE6870-24S6CQ-EI, CE6870-48S6CQ-EI

V200R001C00

CE6870-48T6CQ-EI

V200R002C50

CE6875-48S4CQ-EI

V200R003C00

CE7850EI

V100R005C00

CE7855EI

V200R001C00

CE8850-32CQ-EI

V200R002C50

CE8850-64CQ-EI

V200R005C00

CE8860EI

V100R006C00

CE8861EI

V200R005C10

CE8868EI

V200R005C10

Feature Limitations

  • In versions earlier than V200R002C50, simplified ACL-based traffic policies do not support IPv6. In V200R002C50 and later versions, simplified ACL-based traffic policies support IPv6.
  • If packets match multiple simplified ACL-based traffic policies, you can run the display traffic-policy apply-information command in the diagnostic view to check the priorities of the simplified ACL-based traffic policies that take effect. The command output displays the traffic policies that take effect in descending order of priority.
  • When an ACL-based simplified traffic policy is configured on a VLANIF interface:
    • In versions earlier than V200R005C00, the device can only define matching rules based on the IPv4 address type, source IPv4 address, destination IPv4 address, protocol type, source port number, destination port number, and IP fragment flag.
    • In V200R005C00 and later versions, the device can only define matching rules based on the IPv4 address type, source IPv4 address, destination IPv4 address, IPv6 address type, source IP address, destination IP address, protocol type, source port number, destination port number, and IP fragment flag.
  • When an ACL-based simplified traffic policy is configured on a VBDIF interface:
    • In versions earlier than V200R002C50, an ACL rule can only match the source IPv4 address, destination IPv4 address, protocol type, source port number, and destination port number.
    • In V200R002C50 and later versions, an ACL rule can only match the source IPv4 address, destination IPv4 address, source IPv6 address, destination IPv6 address, protocol type, source port number, and destination port number.
  • When an ACL-based simplified traffic policy is configured for a QoS group:
    • In versions earlier than V200R005C00, an ACL-based simplified traffic policy can be configured only for the inbound direction of a QoS group.

      In V200R005C00, an ACL-based simplified traffic policy can be configured for the outbound direction of a QoS group containing Ethernet or Eth-Trunk member interfaces only on the CE6870EI and CE6875EI.

      In V200R005C10 and later versions, an ACL-based simplified traffic policy can be configured for the outbound direction of a QoS group containing Ethernet or Eth-Trunk member interfaces on all device models.

    • In versions earlier than V200R003C00, the ACL rule can only match the source IPv4 address, destination IPv4 address, protocol type, source port number, and destination port number.

      In V200R003C00, the ACL rule can only match the source MAC address, destination MAC address, Ethernet type, source IPv4 address, destination IPv4 address, protocol type, source port number, and destination port number.

      In V200R005C00 and later versions, the ACL rule can match the source MAC address, destination MAC address, Ethernet type, source IPv4 address, destination IPv4 address, source IPv6 address, destination IPv6 address, protocol type, source port number, and destination port number.

    • A traffic behavior can define only packet filtering and traffic statistics collection if an ACL-based simplified traffic policy is configured for the outbound direction on the CE6870EI and CE6875EI.

      A traffic behavior can define only packet filtering if an ACL-based simplified traffic policy is configured for the outbound direction on the other device models excluding the CE6870EI and CE6875EI.

    • For other device models excluding the CE6870EI and CE6875EI, applying an ACL-based simplified traffic policy to a QoS group in the outbound direction is mutually exclusive with the following functions:
      • Adding Eth-Trunk interfaces to an FCoE interface and enabling the traffic statistics collection function in the FCoE interface
      • Applying a traffic policy in the outbound direction of an Eth-Trunk interface
      • Configuring an ACL-based simplified traffic policy in the outbound direction of an Eth-Trunk interface
      • Configuring the traffic statistics collection function on a Layer 3 sub-interface in an Eth-Trunk
  • In V200R001C00 and later versions, the ACL-based traffic statistics collection function can be configured on a Layer 2 sub-interface.

    In an SVF, if the parent switch is the CE6850HI, CE6850U-HI, CE6851HI, CE6855HI, CE6856HI, CE6857EI, CE6865EI, CE7850EI, or CE7855EI, the ACL-based traffic statistics collection function can be configured on Layer 2 sub-interfaces of leaf switches.

    When an ACL-based simplified traffic policy is configured on a Layer 2 sub-interface, the policy can be applied only in the inbound direction on the CE6870EI and CE6875EI. For the CE6850HI, CE6850U-HI, CE6851HI, CE6855HI, CE6856HI, CE6857EI, CE6860EI, CE6865EI, CE7850EI, CE7855EI, CE8850EI, CE8861EI, CE8868EI, and CE8860EI, the policy can be applied in both inbound and outbound directions. In versions earlier than V200R002C50, the bound traffic classifier can match only the destination MAC address, source MAC address, Ethernet type, source IPv4 address, destination IPv4 address, protocol type, source port number, and destination port number. In V200R002C50 and later versions, the bound traffic classifier can match only the destination MAC address, source MAC address, Ethernet type, source IP address, destination IP address, protocol type, source port number, and destination port number.

  • When the SVF uses centralized forwarding and an ACL-based simplified traffic policy is applied to a Layer 2 interface of a leaf switch in the outbound direction, the traffic policy cannot match VXLAN broadcast and multicast packets.
  • When multiple simplified traffic policies based on the same ACL are applied in the same view, only one ACL resource is occupied.
  • For the CE6870EI and CE6875EI, when an ACL-based simplified traffic policy is configured, a Layer 2 interface can only redirect Layer 2 packets and a VLANIF interface can redirect both Layer 2 and Layer 3 packets.

  • For the CE6860EI, CE8850EI, and CE8860EI, when the system resource mode is large-acl, the ACL-based simplified traffic policy is not supported.
Translation
Download
Updated: 2019-03-21

Document ID: EDOC1000166640

Views: 47750

Downloads: 219

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next