Configuring MQC to Implement Traffic Policing
Context
To control a specific type of traffic in the inbound or outbound direction on an interface, configure MQC-based traffic policing. MQC-based traffic policing implements differentiated services using complex traffic classification. When the receive or transmit rate of packets matching traffic classification rules exceeds the limit, the device discards the packets.
Procedure
- Configure a traffic classifier.
Run system-view
The system view is displayed.
- Run traffic classifier classifier-name [ type { and | or } ]
A traffic classifier is created and the traffic classifier view is displayed, or the view of an existing traffic classifier is displayed.
and is the logical operator between rules in a traffic classifier, which means that:If a traffic classifier contains ACL rules, packets match the traffic classifier only if they match one ACL rule and all the non-ACL rules.
If a traffic classifier does not contain any ACL rules, packets match the traffic classifier only if they match all the rules in the classifier.
By default, the relationship between rules in a traffic classifier is or.
Run if-match
Matching rules are defined for the traffic classifier.
For details about matching rules in a traffic classifier, see "Configuring a Traffic Classifier" in "MQC Configuration" of the CloudEngine 12800 and 12800E Series Switches Configuration Guide - QoS Configuration Guide.
Run commit
The configuration is committed.
Run quit
Exit from the traffic classifier view.
- Configure a traffic behavior.
- For CE12800 switches, the traffic policy containing traffic policing actions can be applied only to the inbound direction of the system, an LPU, an interface, or a VLAN.
(Optional) Run qos car ifg disable
The device is configured not to count the inter-frame gap and preamble of packets when calculating the traffic policing rate.
Run traffic behavior behavior-name
A traffic behavior is created and the traffic behavior view is displayed, or the view of an existing traffic behavior is displayed.
(For CE12800E) Run car cir cir-value [ kbps | mbps | gbps ] [ pir pir-value [ kbps | mbps | gbps ] ] [ cbs cbs-value [ bytes | kbytes | mbytes ] pbs pbs-value [ bytes | kbytes | mbytes ] ] [ share ] [ mode { color-blind | color-aware } ] [ green pass [ service-class class color color-value ] | yellow { discard | pass [ service-class class color color-value ] } | red { discard | pass [ service-class class color color-value ] } ] *
The CAR action is configured.
(For CE12800) Run car cir cir-value [ kbps | mbps | gbps ] [ pir pir-value [ kbps | mbps | gbps ] ] [ cbs cbs-value [ bytes | kbytes | mbytes ] pbs pbs-value [ bytes | kbytes | mbytes ] ] [ share ] [ mode { color-blind | color-aware } ]
The CAR action is configured.
Run commit
The configuration is committed.
Run quit
Exit from the traffic behavior view.
Run quit
Exit from the system view.
- Configure a traffic policy.
Run system-view
The system view is displayed.
Run traffic policy policy-name
A traffic policy is created and the traffic policy view is displayed, or the view of an existing traffic policy is displayed.
Run classifier classifier-name behavior behavior-name [ precedence precedence-value ]
A traffic behavior is bound to a traffic classifier in the traffic policy.
Run commit
The configuration is committed.
Run quit
Exit from the traffic policy view.
Run quit
Exit from the system view.
- Apply the traffic policy.
For details about the configuration guidelines of applying traffic policies in different views on the CE12800, see Licensing Requirements and Limitations for MQC (CE12800).
For details about the configuration guidelines of applying traffic policies in different views on the CE12800E, see Licensing Requirements and Limitations for MQC (CE12800E).
For the CE12800 and the CE12800E equipped with FD-X series cards, run the display traffic-policy pre-state { global [ slot slot-id ] | interface { interface-type interface-number } | vlan vlan-id | bridge-domain bd-id } policy-name { inbound | outbound } command before committing the configuration to check the information about resources occupied by the traffic policy to be applied and determine whether the traffic policy can be successfully applied based on the information.
- If a traffic policy needs to be applied to multiple VLANs and interfaces or multiple traffic classifiers for matching packets from different source IP addresses need to be bound to the same traffic policy, you are advised to add these VLANs, source IP addresses, and interfaces to the same QoS group and apply the traffic policy to the QoS group.
- Applying a traffic policy to an interface
Run system-view
The system view is displayed.
Run interface interface-type interface-number
The interface view is displayed.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the interface.
Run commit
The configuration is committed.
- Applying a traffic policy to a VLAN
Run system-view
The system view is displayed.
Run vlan vlan-id
The VLAN view is displayed.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the VLAN.
The system applies traffic policing to the packets that belong to the VLAN and match traffic classification rules in the inbound or outbound direction.
Run commit
The configuration is committed.
- Applying a traffic policy to the system or an LPU
Run system-view
The system view is displayed.
Run traffic-policy policy-name global [ slot slot-id ] { inbound | outbound }
A traffic policy is applied to the system or an LPU.
Run commit
The configuration is committed.
- (For CE12800) Applying a traffic policy to a VSI
Run system-view
The system view is displayed.
Run vsi vsi-name
The VSI view is displayed.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the VSI.
Run commit
The configuration is committed.
- Applying a traffic policy to a BD
Run system-view
The system view is displayed.
Run bridge-domain bd-id
The BD view is displayed.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the BD.
Run commit
The configuration is committed.
- Applying a traffic policy to a QoS group
Run system-view
The system view is displayed.
Run qos group group-name
The QoS group view is displayed.
Run the following commands as required:
Run the group-member interface { interface-type interface-number1 [ to interface-type interface-number2 ] } &<1-8> command to add interfaces to the QoS group.
Run the group-member vlan { vlan-id1 [ to vlan-id2 ] } &<1-8> command to add VLANs to the QoS group.
(For CE12800E) Run the group-member ip source ip-address { mask | mask-length } command to add source IP addresses to the QoS group.
Run traffic-policy policy-name { inbound | outbound }
A traffic policy is applied to the QoS group.
Run commit
The configuration is committed.
