NetEngine AR600, AR6100, AR6200, and AR6300 V300R021 Command Reference

Bandwidth Management Configuration Commands

Bandwidth Management Configuration Commands

Support for Bandwidth Management

Hardware Requirements

Table 22-31 Hardware requirements

Series

Feature Support

AR600&AR6100&AR6200&AR6300 Series

Only the AR600 series supports bandwidth management for user groups through the web.

bandlimit

Function

The bandlimit command enables user bandwidth limiting and sets user bandwidth limiting parameters.

The undo bandlimit command disables user bandwidth limiting and deletes user bandwidth limiting parameters.

By default, user bandwidth limiting is not enabled and user bandwidth limiting parameters are not configured.

Format

bandlimit interface { interface-type interface-number | interface-name } type { ip ip-address { { inbound cir in-cir-value | outbound cir out-cir-value } * } | user-set user-set-name { { inbound cir in-cir-value | outbound cir out-cir-value } * [ share ] } } [ time-range time-range-name ] [ description description ]

undo bandlimit interface { interface-type interface-number | interface-name } type { ip ip-address | user-set user-set-name }

Parameters

Parameter

Description

Value

interface interface-type interface-number

Specifies the type and number of an interface.

The value depends on the interface type and slot ID.

interface interface-name

Specifies the name of an interface.

The value depends on the interface type and slot ID.

type

Specifies the bandwidth limiting type.

-

ip ip-address

Specifies the IP address to which bandwidth limiting is applied.

The value is in dotted decimal notation.

inbound cir in-cir-value

Specifies the inbound committed information rate (CIR), that is, guaranteed average transmission rate in the inbound direction.

The value is an integer that ranges from 8 to 4294967295, in kbit/s.

outbound cir out-cir-value

Specifies the outbound CIR, that is, guaranteed average transmission rate in the outbound direction.

The value is an integer that ranges from 8 to 4294967295, in kbit/s.

user-set user-set-name

Specifies the name of a user group to which bandwidth limiting is applied.

The value is a string of 1 to 31 case-sensitive characters without spaces.

share

Specifies the bandwidth limiting mode.

NOTE:

When this parameter is specified, rate limiting is applied to all IP addresses of a user group. If this parameter is not specified, rate limiting is applied to each IP address of a user group.

-

time-range time-range-name

Specifies the time range during which bandwidth limiting is applied. The time range must have been configured using the time-range command; otherwise, the time range does not take effect after the bandlimit command is used.

The value is a string of 1 to 32 case-sensitive characters without spaces, starting with an upper-case or lower-case letter.

description description

Specifies the description of a function.

The value is a string of 1 to 31 case-sensitive characters. It can contain special characters excluding question marks (?) and spaces.

Views

Web view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Network resources are limited. When non-key services occupy much bandwidth, packets of core services may be discarded. To address this issue, perform bandwidth limiting for the non-key services. This command limits the maximum bandwidth for some IP addresses or user groups on a WAN interface and ensures the bandwidth of core services.

Prerequisites

A user group has been created using the user-set command when bandwidth limiting is enabled based on the user group.

Precautions

If you run the bandlimit command multiple times in the web view, only the latest configuration takes effect.

When the bandlimit command is executed in the web view, the device delivers the qos car command configuration to the interface. If bandwidth limiting is based on IP addresses in the inbound direction, the IP address in the web view is mapped to the destination IP address in the qos car command. If bandwidth limiting is based on IP addresses in the outbound direction, the IP address in the web view is mapped to the source IP address in the qos car command.

When time-range is configured and the current time is out of the range specified by time-range, the device deletes the qos car command configuration from the interface. However, the bandlimit command in the web view remains unchanged. If the current time is in the range specified by time-range, the device delivers the qos car command configuration to the interface.

Example

# On the GE1/0/0 in the inbound direction, set the CIR of packets with the IP address of 10.10.0.5 to 3000 kbit/s.

<Huawei> system-view
[Huawei] web
[Huawei-web] bandlimit interface GigabitEthernet 1/0/0 type ip 10.10.0.5 inbound cir 3000

# On the GE1/0/0 in the inbound direction, set the CIR of packets of the user group huawei to 3000 kbit/s.

<Huawei> system-view
[Huawei] web
[Huawei-web] user-set huawei
[Huawei-web-user-set-huawei] quit
[Huawei-web] bandlimit interface GigabitEthernet 1/0/0 type user-set huawei inbound cir 3000

bandguarantee

Function

The bandguarantee command enables user bandwidth guarantee and sets user bandwidth guarantee parameters.

The undo bandguarantee command disables user bandwidth guarantee and deletes user bandwidth guarantee parameters.

By default, user bandwidth guarantee is not enabled and user bandwidth guarantee parameters are not configured.

Format

bandguarantee interface { interface-type interface-number | interface-name } type { ip ip-address | user-set user-set-name } cir cir-value [ time-range time-range-name ] [ description description ]

undo bandguarantee interface { interface-type interface-number | interface-name } type { ip ip-address | user-set user-set-name }

Parameters

Parameter

Description

Value

interface interface-type interface-number

Specifies the type and number of an interface.

The value depends on the interface type and slot ID.

interface interface-name

Specifies the name of an interface.

The value depends on the interface type and slot ID.

type

Specifies the bandwidth guarantee mode.

-

ip ip-address

Specifies the IP address to which guaranteed bandwidth is applied.

The value is in dotted decimal notation.

user-set user-set-name

Specifies the name of a user group to which bandwidth guarantee is applied.

The value is a string of 1 to 32 case-sensitive characters without spaces.

cir cir-value

Specifies the committed information rate (CIR), that is, guaranteed average transmission rate.

The value is an integer that ranges from 8 to 4294967295, in kbit/s.

time-range time-range-name

Specifies the time range during which bandwidth guarantee is applied. The time range must have been configured using the time-range command; otherwise, the time range does not take effect after the bandguarantee command is used.

The value is a string of 1 to 32 case-sensitive characters without spaces, starting with an upper-case or lower-case letter.

description description

Specifies the description of a function.

The value is a string of 1 to 31 case-sensitive characters. It can contain special characters excluding question marks (?) and spaces.

Views

Web view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When congestion occurs on a network, to prevent packet loss of core services due to insufficient bandwidth, enable bandwidth guarantee for core services. This command guarantees the minimum bandwidth for some IP addresses or user groups on a WAN interface and ensures that core services are processed preferentially when congestion occurs.

Prerequisites

A user group has been created using the user-set command when bandwidth guarantee is enabled based on the user group.

Precautions

If you run the bandguarantee command multiple times in the web view, only the latest configuration takes effect.

When the bandguarantee command is executed in the web view, the device delivers the configuration of a traffic classifier and a traffic behavior and applies a traffic policy to an interface. If bandwidth guarantee is performed based on IP addresses, if-match acl is delivered in the traffic classifier view and the queue af and statistic enable are delivered in the traffic behavior view. If bandwidth guarantee is performed based on user groups, if-match user-set is delivered in the traffic classifier view and the queue af and statistic enable are delivered in the traffic behavior view.

Example

# On the GE1/0/0, set the CIR of packets with the IP address of 10.10.0.5 to 1000 kbit/s and configure the description as huawei.

<Huawei> system-view
[Huawei] web
[Huawei-web] bandguarantee interface GigabitEthernet 1/0/0 type ip 10.10.0.5 cir 1000 description huawei

# On the GE1/0/0, set the CIR of packets of the user group vip to 1000 kbit/s and configure the description as huawei.

<Huawei> system-view
[Huawei] web
[Huawei-web] user-set vip
[Huawei-web-user-set-vip] quit
[Huawei-web] bandguarantee interface GigabitEthernet 1/0/0 type user-set vip cir 1000 description huawei

enable bandlimit

Function

The enable bandlimit command enables user bandwidth limiting.

The disable bandlimit command disables user bandwidth limiting.

By default, user bandwidth limiting is enabled.

Format

enable bandlimit interface { interface-type interface-number | interface-name } type { ip ip-address | user-set user-set-name }

disable bandlimit interface { interface-type interface-number | interface-name } type ip ip-address [ { inbound cir in-cir-value | outbound cir out-cir-value } * [ time-range time-range-name ] [ description description ] ]

disable bandlimit interface { interface-type interface-number | interface-name } type user-set user-set-name [ { inbound cir in-cir-value | outbound cir out-cir-value } * [ share ] [ time-range time-range-name ] [ description description ] ]

Parameters

Parameter

Description

Value

enable

Enables user bandwidth limiting.

-

disable

Disables user bandwidth limiting.

-

interface-type interface-number

Specifies the type and number of an interface.

The value depends on the interface type and slot ID.

interface-name

Specifies the name of an interface.

The value depends on the interface type and slot ID.

type

Specifies the bandwidth limiting type.

-

ip ip-address

Specifies the IP address to which bandwidth limiting is applied.

The value is in dotted decimal notation.

inbound

Enables bandwidth limiting in the inbound direction.

-

outbound

Enables bandwidth limiting in the outbound direction.

-

cir in-cir-value

Specifies the inbound committed information rate (CIR), that is, guaranteed average transmission rate in the inbound direction.

The value is an integer that ranges from 8 to 4294967295, in kbit/s.

cir out-cir-value

Specifies the outbound CIR, that is, guaranteed average transmission rate in the outbound direction.

The value is an integer that ranges from 8 to 4294967295, in kbit/s.

user-set user-set-name

Specifies the name of a user group to which bandwidth limiting is applied.

The value is a string of 1 to 31 case-sensitive characters without spaces.

share

Specifies the bandwidth limiting mode.

NOTE:

When this parameter is specified, bandwidth limiting is applied to all IP addresses of a user group. If this parameter is not specified, bandwidth limiting is applied to each IP address of a user group.

-

time-range time-range-name

Specifies the time range during which bandwidth limiting is applied. The time range must have been configured using the time-range command; otherwise, the time range does not take effect after the enable bandlimit command is used.

The value is a string of 1 to 32 case-sensitive characters without spaces, starting with an upper-case or lower-case letter.

description description

Specifies the description of a function.

The value is a string of 1 to 31 case-sensitive characters. It can contain special characters excluding question marks (?) and spaces.

Views

Web view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After maximum bandwidth guarantee is configured on a WAN interface, you can use the enable bandlimit or disable bandlimit command to enable or disable user bandwidth limiting.

Prerequisites

User bandwidth limiting has been enabled and user bandwidth limiting parameters have been configured using the bandlimit command.

Follow-up Procedure

After the disable bandlimit command is used to disable user bandwidth limiting, run the enable bandlimit command to enable bandwidth limiting configured by the bandlimit command.

Precautions

When the enable bandlimit command is executed in the web view, the device delivers the qos car command configuration to the interface. If bandwidth limiting is based on IP addresses in the inbound direction, the IP address in the web view is mapped to the destination IP address in the qos car command. If bandwidth limiting is based on IP addresses in the outbound direction, the IP address in the web view is mapped to the source IP address in the qos car command.

When the disable bandlimit command is executed in the web view, the device deletes the qos car command configuration from the interface.

When enable bandlimit is configured and time-range is specified, if the current time is out of the range specified by time-range, the device does not deliver the qos car command configuration to the interface. If the current time is in the range specified by time-range, the device delivers the qos car command configuration to the interface.

Example

# Disable bandwidth limiting based on IP addresses on the GE1/0/0.

<Huawei> system-view
[Huawei] web
[Huawei-web] bandlimit interface GigabitEthernet 1/0/0 type ip 10.10.0.5 inbound cir 3000
[Huawei-web] disable bandlimit interface GigabitEthernet 1/0/0 type ip 10.10.0.5 inbound cir 3000

# Disable bandwidth limiting based on user groups on the GE1/0/0.

<Huawei> system-view
[Huawei] web
[Huawei-web] user-set huawei
[Huawei-web-user-set-huawei] quit
[Huawei-web] bandlimit interface GigabitEthernet 1/0/0 type user-set huawei inbound cir 3000
[Huawei-web] disable bandlimit interface GigabitEthernet 1/0/0 type user-set huawei inbound cir 3000

enable bandguarantee

Function

The enable bandguarantee command enables user bandwidth guarantee.

The disable bandguarantee command disables user bandwidth guarantee.

By default, user bandwidth guarantee is enabled.

Format

enable bandguarantee interface { interface-type interface-number | interface-name } type { ip ip-address | user-set user-set-name } cir cir-value [ time-range time-range-name ] [ description description ]

disable bandguarantee interface { interface-type interface-number | interface-name } type { ip ip-address | user-set user-set-name } cir cir-value [ time-range time-range-name ] [ description description ]

Parameters

Parameter

Description

Value

enable

Enables user bandwidth guarantee.

-

disable

Disables user bandwidth guarantee.

-

interface-type interface-number

Specifies the type and number of an interface.

The value depends on the interface type and slot ID.

interface-name

Specifies the name of an interface.

The value depends on the interface type and slot ID.

type

Specifies the bandwidth guarantee mode.

-

ip ip-address

Specifies the IP address to which bandwidth guarantee is applied.

The value is in dotted decimal notation.

user-set user-set-name

Specifies the name of a user group to which bandwidth guarantee is applied.

The value is a string of 1 to 32 case-sensitive characters without spaces.

cir cir-value

Specifies the committed information rate (CIR), that is, guaranteed average transmission rate.

The value is an integer that ranges from 8 to 4294967295, in kbit/s.

time-range time-range-name

Specifies the time range during which bandwidth guarantee is applied. The time range must have been configured using the time-range command; otherwise, the time range does not take effect after the enable bandguarantee command is used.

The value is a string of 1 to 32 case-sensitive characters without spaces, starting with an upper-case or lower-case letter.

description description

Specifies the description of a function.

The value is a string of 1 to 31 case-sensitive characters. It can contain special characters excluding question marks (?) and spaces.

Views

Web view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After minimum bandwidth guarantee is configured on a WAN interface, you can use the enable bandguarantee or disable bandguarantee command to enable or disable user bandwidth guarantee.

Prerequisites

The bandguarantee command has been executed before you use the disable bandguarantee command.

Follow-up Procedure

After the disable bandguarantee command is used to disable user bandwidth guarantee, run the enable bandguarantee command to enable bandwidth guarantee configured by the bandguarantee command.

Precautions

When the enable bandguarantee command is executed in the web view, the device delivers the configuration of a traffic classifier and a traffic behavior and applies a traffic policy to an interface. If bandwidth guarantee is performed based on IP addresses, if-match acl is delivered in the traffic classifier view and the queue af and statistic enable are delivered in the traffic behavior view. If bandwidth guarantee is performed based on user groups, if-match user-set is delivered in the traffic classifier view and the queue af and statistic enable are delivered in the traffic behavior view.

When the disable bandguarantee command is executed in the web view, the configuration of the traffic classifier, traffic behavior, and traffic policy will be deleted.

Example

# Disable bandwidth guarantee based on IP addresses on the GE1/0/0.

<Huawei> system-view
[Huawei] web
[Huawei-web] bandguarantee interface GigabitEthernet 1/0/0 type ip 10.10.0.5 cir 1000 description huawei
[Huawei-web] disable bandguarantee interface GigabitEthernet 1/0/0 type ip 10.10.0.5 cir 1000 description huawei

# Disable bandwidth guarantee based on user groups on the GE1/0/0.

<Huawei> system-view
[Huawei] web
[Huawei-web] user-set vip
[Huawei-web-user-set-vip] quit
[Huawei-web] bandguarantee interface GigabitEthernet 1/0/0 type user-set vip cir 1000 description huawei
[Huawei-web] disable bandguarantee interface GigabitEthernet 1/0/0 type user-set vip cir 1000 description huawei

user-ip

Function

The user-ip command configures an IP network segment for users in a web user group.

The undo user-ip command deletes an IP network segment configured for users in a web user group.

By default, no IP network segment is configured for users in a web user group.

Format

user-ip from ip_addr1 to ip_addr2 [ description description ]

undo user-ip from ip_addr1 to ip_addr2

Parameters

Parameter Description Value

from ip_addr1

Specifies the start IP address of the IP network segment for users in a web user group.

The value is in dotted decimal notation.

to ip_addr2

Specifies the end IP address of the IP network segment for users in a web user group.

The value is in dotted decimal notation.

description description

Specifies description of the IP network segment for users in a web user group.

The value is a string of 1 to 31 case-sensitive characters. It can contain special characters excluding question marks (?) and spaces.

Views

user-set view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the user-ip command to configure an IP address segment for users in a web user group and add the description for the IP address segment.

Precautions

ip_addr1 and ip_addr2 must be LAN-side user IP addresses. If the values of ip_addr1 and ip_addr2 are the same, an IP address is configured for a user in a web user group.

A web user group supports a maximum of 30 IP address segments and 12K IP addresses.

Example

# Configure the IP address segment from 10.1.1.1 to 10.1.1.10 for users in the web user group leader and set the description to develop-leader.

<Huawei> system-view
[Huawei] web
[Huawei-web] user-set leader
[Huawei-web-user-set-leader] user-ip from 10.1.1.1 to 10.1.1.10 description develop-leader

user-set

Function

The user-set command creates a web user group and displays the web user group view, or displays the view of an existing web user group.

The undo user-set command deletes a created web user group.

By default, the device contains two web user groups named VIP and Default.

Format

user-set user-set-name

undo user-set user-set-name

Parameters

Parameter Description Value

user-set-name

Specifies the name of a web user group.

The value is a string of 1 to 31 case-sensitive characters. It can contain special characters excluding question marks (?) and spaces.

Views

Web view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the user-set command to create a web user group and enter the web user group view, or enter the view of an existing web user group.

Precautions

A traffic policy or traffic policing in which user-set is configured can be applied only to WAN interfaces.

Example

# Configure a web user group named leader.

<Huawei> system-view
[Huawei] web
[Huawei-web] user-set leader
[Huawei-web-user-set-leader]

web

Function

The web command displays the web view.

Format

web

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

To perform configurations related to the web system, enter the web view first. You can run this command in the system view to enter the web view.

Example

# Display the web view.

<Huawei> system-view
[Huawei] web
[Huawei-web]