No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE20E-S2 V800R010C10SPC500 Configuration Guide - Security 01

This is NE20E-S2 V800R010C10SPC500 Configuration Guide - Security

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Interface-related Traffic Suppression

Configuring Interface-related Traffic Suppression

This chapter describes how to configure interface-related traffic suppression.

Applicable Environment

It is necessary to manage user traffic and allocate bandwidth to users on Ethernet networks; To ensure unicast traffic forwarding, unknown unicast, as well as multicast and broadcast traffic, must be suppressed and network bandwidth used rationally.

The volume of unicast traffic is greater than the volume of broadcast traffic on most networks. If you do not suppress the broadcast traffic, the traffic mounts and consumes a great amount of network bandwidth, which degrades network performance or even interrupts communications.

Pre-configuration Tasks

Before you configure interface-related traffic suppression, complete the following tasks:

  • Configure the physical parameters for all interfaces.

  • Keep the physical layer status of all interfaces Up.

Configuration Procedures

Select one or more configuration tasks (excluding "Checking the Configuration").

Configuring Traffic Suppression on an Interface

This section describes how to configure traffic suppression on an interface to reduce the load that a large volume of traffic poses on the network.

Context

Traffic suppression can be configured only on Ethernet interfaces, GE interfaces, and Eth-Trunk interfaces that work in Layer 2 mode.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface { ethernet | gigabitethernet | eth-trunk } interface-number

    The interface view is displayed.

  3. Run portswitch

    The working mode of the interface is switched to Layer 2.

  4. Run broadcast-suppression { percent-value | value bw-value } { inbound | outbound }

    Broadcast traffic suppression is configured on the interface.

  5. Run multicast-suppression { percent-value | value bw-value } { inbound | outbound }

    Multicast traffic suppression is configured on the interface.

  6. Run unknown-unicast-suppression { percent-value | value bw-value } { inbound | outbound }

    Unknown unicast traffic suppression is configured on the interface.

  7. Run commit

    The configuration is committed.

Configuring Traffic Suppression on a Sub-Interface

This section describes how to configure traffic suppression on a sub-interface to reduce the load that a large volume of traffic poses on the network.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run vsi vsi-name [ static ]

    A VSI is created.

  3. Run suppression { inbound | outbound } enable

    Traffic suppression is enabled in the VSI.

  4. Run pwsignal ldp

    A signaling protocol is configured for the VSI.

  5. Run vsi-id vsi-id

    An ID is configured for the VSI.

  6. Run quit

    Return to the VSI view.

  7. Run quit

    Return to the system view.

  8. Run interface { ethernet | gigabitethernet | eth-trunk } interface-number.subinterface-number

    The sub-interface view is displayed.

  9. Run vlan-type dot1q vlan-id

    The sub-interface is associated with a VLAN, and the VLAN encapsulation mode for the sub-interface is configured.

  10. Run l2 binding vsi vsi-name [ access-port ]

    The sub-interface is bound to the VSI.

  11. Run broadcast-suppression cir cir-value [ cbs cbs-value ] { inbound | outbound }

    Broadcast traffic suppression is configured on the sub-interface.

  12. Run multicast-suppression cir cir-value [ cbs cbs-value ] { inbound | outbound }

    Multicast traffic suppression is configured on the sub-interface.

  13. Run unknown-unicast-suppression cir cir-value [ cbs cbs-value ] { inbound | outbound }

    Unknown unicast traffic suppression is configured on the sub-interface.

  14. Run commit

    The configuration is committed.

Configuring Traffic Suppression on a Specified Interface in a VLAN

This section describes how to configure traffic suppression on a specified interface in a VLAN to reduce the load that a large volume of traffic poses on the network.

Context

Traffic suppression can be configured only on Ethernet interfaces, GE interfaces, and Eth-Trunk interfaces that work in Layer 2 mode.

If you configure traffic suppression on an interface for several times, the last configuration overrides the previous ones. Before you reconfigure traffic suppression on an interface that is added to a VLAN, delete the first configuration.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface { ethernet | gigabitethernet | eth-trunk } interface-number

    The interface view is displayed.

  3. Run portswitch

    The working mode of the interface is switched to Layer 2.

  4. Run vlan batch { vlan-id1 [ to vlan-id2 ] } &<1-10>

    A VLAN is configured.

  5. Run port interface-type { interface-number1 [ to interface-number2 ] } & <1-10>

    The interface is added to the VLAN.

  6. Run suppression { inbound | outbound } enable

    Traffic suppression is enabled in the VLAN.

  7. Run unknown-multicast discard

    Interfaces in the VLAN are disabled from forwarding unknown multicast packets.

  8. Run unknown-unicast discard

    Interfaces in the VLAN are disabled from forwarding unknown unicast packets.

  9. Run quit

    Return to the system view.

  10. Run interface { ethernet | gigabitethernet | eth-trunk } interface-number

    The interface view is displayed.

  11. Run broadcast-suppression cir cir-value [ cbs cbs-value ] { inbound | outbound } {vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> }

    Broadcast traffic suppression is configured on the interface in a VLAN.

  12. Run multicast-suppression cir cir-value [ cbs cbs-value ] { inbound | outbound } {vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> }

    Multicast traffic suppression is configured on the interface in a VLAN.

  13. Run unknown-unicast-suppression cir cir-value [ cbs cbs-value ] { inbound | outbound } {vlan { vlan-id1 [ to vlan-id2 ] } &<1-10> }

    Unknown unicast traffic suppression is configured on the interface in a VLAN.

  14. Run commit

    The configuration is committed.

Verifying the Configuration of Interface-related Traffic Suppression

You can check statistics about Layer 2 traffic suppression on an interface.

Procedure

  1. Run the display traffic-statistics suppression interface { interface-name | interface-type interface-number } vsi vsi-name command or display interface interface-type interface-number suppression vsi vsi-name command to check statistics about Layer 2 traffic suppression on a specific interface in a specific VPN instance.
  2. Run the display traffic-statistics suppression interface { interface-name | interface-type interface-number } [ vlan vlan-id | bd bd-id ] command or display interface interface-type interface-number suppression [ vlan vlan-id | bd bd-id ] command to check statistics about Layer 2 traffic suppression on a specific interface in a specific VLAN.
  3. Run the display traffic-statistics vsi vsi-name suppression peer peer-address [ negotiation-vc-id negotiation-vc-id ] command to check the traffic suppression statistics about a PW.

Example

# Run the display traffic-statistics suppression interface gigabitethernet 0/1/0.1 bd 1 command to check statistics about Layer 2 traffic suppression on GE 0/1/0 in the BDID named 1.

<HUAWEI> display traffic-statistics suppression interface gigabitethernet 0/1/0.1 bd 1
statistic start time:2016/12/10 10:35:25                                        
configured suppression traffic-statistics:                                      
unknown unicast suppression inbound:                                            
          pass packets: = 0, pass bytes: = 0;                                   
          drop packets: = 0, drop bytes: = 0;                                   
multicast suppression inbound:                                    
          pass packets: = 0, pass bytes: = 0;                                   
          drop packets: = 0, drop bytes: = 0;                                   
broadcast suppression inbound:                                    
          pass packets: = 0, pass bytes: = 0;                                   
          drop packets: = 0, drop bytes: = 0;    
                                                                                
configured suppression traffic-statistics:                                      
unknown unicast suppression outbound:                                           
          pass packets: = 0, pass bytes: = 0;                                   
          drop packets: = 0, drop bytes: = 0;                                   
multicast suppression outbound:                                   
          pass packets: = 0, pass bytes: = 0;                                   
          drop packets: = 0, drop bytes: = 0;
broadcast suppression outbound:                                   
          pass packets: = 0, pass bytes: = 0;                                   
          drop packets: = 0, drop bytes: = 0;
# Run the display traffic-statistics vsi vsi1 suppression peer 2.2.2.2 command to check statistics about the PW with the VSI name being vsi1 and peer IP address being 2.2.2.2.
<HUAWEI> display traffic-statistics vsi vsi1 suppression peer 2.2.2.2
VSI vsi1 Peer 2.2.2.2 VCID 1:                                                      
    Inbound broadcast-suppression statistics:                                   
    Committed Access Rate:                                                      
    CIR 200(Kbps), PIR 0(Kbps), CBS 37400(byte), PBS 0(byte)                      
    Passed: 0 packets, 0 bytes                                               
    Discard: 0 packets, 0 bytes                                              
    Last 30 seconds passed rate: 0 pps, 0 bps                                   
    Last 30 seconds discard rate: 0 pps, 0 bps                                  
                                                                                
    Inbound multicast-suppression statistics:                                   
    Committed Access Rate:                                                      
    CIR 300(Kbps), PIR 0(Kbps), CBS 56100(byte), PBS 0(byte)                      
    Passed: 0 packets, 0 bytes                                                 
    Discard: 0 packets, 0 bytes                                                
    Last 30 seconds passed rate: 0 pps, 0 bps                                   
    Last 30 seconds discard rate: 0 pps, 0 bps                                  
                                                                                
    Inbound unknown-unicast-suppression statistics:                             
    Committed Access Rate:                                                      
    CIR 100(Kbps), PIR 0(Kbps), CBS 18700(byte), PBS 0(byte)                        
    Passed: 0 packets, 0 bytes                                                 
    Discard: 0 packets, 0 bytes                                               
    Last 30 seconds passed rate: 0 pps, 0 bps                                   
    Last 30 seconds discard rate: 0 pps, 0 bps
Translation
Download
Updated: 2019-01-02

Document ID: EDOC1100055397

Views: 25719

Downloads: 52

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next