- Table of Contents
-
- H3C S7500 Series Command Manual(Release 3100 Series)-(V1.04)
- 00-1Cover
- 01-CLI Commands
- 02-Login Commands
- 03-Configuration File Management Commands
- 04-VLAN Commands
- 05-Extended VLAN Application Commands
- 06-IP Address-IP Performance-IPX Commands
- 07-GVRP Commands
- 08-QinQ Commands
- 09-Port Basic Configuration Commands
- 10-Link Aggregation Commands
- 11-Port Isolation Commands
- 12-Port Binding Commands
- 13-DLDP Commands
- 14-MAC Address Table Commands
- 15-MSTP Commands
- 16-Routing Protocol Commands
- 17-Multicast Commands
- 18-802.1x Commands
- 19-AAA-RADIUS-HWTACACS-EAD Commands
- 20-Traffic Accounting Commands
- 21-VRRP-HA Commands
- 22-ARP Commands
- 23-DHCP Commands
- 24-ACL Commands
- 25-QoS Commands
- 26-Mirroring Commands
- 27-Cluster Commands
- 28-PoE Commands
- 29-UDP-Helper Commands
- 30-SNMP-RMON Commands
- 31-NTP Commands
- 32-SSH Terminal Service Commands
- 33-File System Management Commands
- 34-FTP and TFTP Commands
- 35-Information Center Commands
- 36-DNS Commands
- 37-System Maintenance and Debugging Commands
- 38-HWPing Commands
- 39-RRPP Commands
- 40-NAT-Netstream-Policy Routing Commands
- 41-Telnet Protection Commands
- 42-Hardware-Dependent Software Configuration Commands
- 43-Appendix
- Related Documents
-
Title | Size | Download |
---|---|---|
25-QoS Commands | 224 KB |
Table of Contents
1.1.2 display qos cos-local-precedence-map
1.1.3 display qos-interface all
1.1.4 display qos-interface line-rate
1.1.5 display qos-interface queue-scheduler
1.1.6 display qos-interface traffic-bandwidth
1.1.7 display qos-interface traffic-limit
1.1.8 display qos-interface traffic-priority
1.1.9 display qos-interface traffic-red
1.1.10 display qos-interface traffic-redirect
1.1.11 display qos-interface traffic-remark-vlanid
1.1.12 display qos-interface traffic-statistic
1.1.18 qos cos-local-precedence-map
1.1.20 reset traffic-statistic
Chapter 1 QoS Commands
& Note:
Type A line processing units (LPUs) include LS81FT48A, LS81FM24A, LS81FS24A, LS81GB8UA, LS81GT8UA, LS81FT48, LS81FM24, LS81FS24, LS81GB8U and LS81GT8U.
1.1 QoS Commands
1.1.1 display priority-trust
Syntax
display priority-trust
View
Any view
Parameters
None
Description
Use the display priority-trust command to display the priority type according to which the switch puts a packet into an output queue on a port.
Related command: priority-trust.
Examples
# Display the queue scheduling mode and the related parameters.
<H3C> display priority-trust
Priority trust mode: local-precedence
The information above shows that the switch puts a packet into an output queue on a port according to the local precedence of the packet.
1.1.2 display qos cos-local-precedence-map
Syntax
display qos cos-local-precedence-map
View
Any view
Parameters
None
Description
Use the display qos cos-local-precedence-map command to view the COS-to-local-precedence mapping table.
Examples
# Display the COS-to-local-precedence mapping table.
<H3C> display qos cos-local-precedence-map
cos-local-precedence-map:
cos : 0 1 2 3 4 5 6 7
--------------------------------------------------------------------
local-precedence : 2 0 1 3 4 5 6 7
1.1.3 display qos-interface all
Syntax
display qos-interface [ interface-type interface-number ] all
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface all command to view all the QoS settings of the specific port or all the ports. If you do not provide the interface-type interface-number argument, this command will display the QoS settings of all the ports on the switch; if you provide the interface-type interface-number argument, this command will display QoS settings on the specified port.
Examples
# Display the QoS settings on all the ports.
<H3C> display qos-interface all
GigabitEthernet0/0/1:
Queue scheduling mode: strict-priority
COS configuration:
Config (max queues): 8
Schedule mode: strict
Egress port queue statistics(in bytes):
Priority CosQ Threshold Count Used(%):
0 2 18432 0 0
1 3 2560 0 0
2 4 2560 0 0
3 1 2560 0 0
4 7 2560 0 0
5 0 2560 0 0
6 5 2560 0 0
7 6 2560 0 0
common queue statistics(in bytes):
49152 0 0
GigabitEthernet0/0/2:
Queue scheduling mode: strict-priority
COS configuration:
---- More ----
1.1.4 display qos-interface line-rate
Syntax
display qos-interface [ interface-type interface-number ] line-rate
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface line-rate command to view the rate limiting configuration (including the outbound port and the limit rate for the port) for the outbound direction of a port or all the ports on a switch. If you do not provide the interface-type interface-number argument, you will view the rate limiting configuration for the outbound direction of all the ports on a switch; if you provide this argument, you will view the rate limiting configuration for the outbound direction of the specified port.
Examples
# Display the rate limiting configuration of a specific port.
<H3C> display qos-interface line-rate
GigabitEthernet1/0/2: line-rate
Line rate: 3072 kbps
E GigabitEthernet1/0/4: line-rate
Line rate: 5120 kbps
Table 1-1 Description on the fields of the display qos-interface line-rate command
Field |
Description |
GigabitEthernet1/0/2: line-rate Line rate: 3072 kbps |
Rate limiting configuration on GigabitEthernet1/0/2 is: The maximum rate on GigabitEthernet1/0/2 is 3,072 kbps. |
1.1.5 display qos-interface queue-scheduler
Syntax
display qos-interface [ interface-type interface-number ] queue-scheduler
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface queue-scheduler command to display the queue scheduling mode settings of the specified port or all ports. If the interface-type interface-number argument is not provided, you will view the queue scheduling mode settings of all the ports. If you provide the interface-type interface-number argument, you will view the queue scheduling mode settings of the specified port.
Examples
# Display the queue scheduling mode settings of GigabitEthernet 2/0/1.
<H3C> display qos-interface Gigabitethernet 2/0/1 queue-scheduler
GigabitEthernet2/0/1:
Queue scheduling mode: weighted round robin
weight of queue 1: 10
weight of queue 2: 5
weight of queue 3: 10
weight of queue 4: 10
weight of queue 5: 5
weight of queue 6: 10
weight of queue 7: 5
weight of queue 8: 10
COS configuration:
Config (max queues): 8
Schedule mode: weighted round-robin
Weighting (in packets):
COSQ 0 = 10 packets
COSQ 1 = 5 packets
COSQ 2 = 10 packets
COSQ 3 = 10 packets
COSQ 4 = 5 packets
COSQ 5 = 10 packets
COSQ 6 = 5 packets
COSQ 7 = 10 packets
Egress port queue statistics(in bytes):
Priority CosQ Threshold Count Used(%):
0 2 18432 0 0
1 0 2560 0 0
2 1 2560 0 0
3 3 2560 0 0
4 4 2560 0 0
5 5 2560 0 0
6 6 2560 0 0
7 7 2560 0 0
common queue statistics(in bytes):
49152 0 0
1.1.6 display qos-interface traffic-bandwidth
Syntax
display qos-interface [ interface-type interface-number ] traffic-bandwidth
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-bandwidth command to view the configuration information about the guaranteed bandwidth.
Related command: traffic-bandwidth.
Examples
# Display the guaranteed bandwidth settings.
<H3C> display qos-interface traffic-bandwidth
Ethernet2/0/1: traffic-bandwidth
Outbound:
Matches: Acl 2000 rule 0 running
Minimum guaranteed bandwidth: 64 Kbps
Maximum available bandwidth: 128 Kbps
Bandwidth weight: 20
1.1.7 display qos-interface traffic-limit
Syntax
display qos-interface [ interface-type interface-number ] traffic-limit
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-limit command to view the traffic limit settings of a port or all the ports on a switch, including the applied ACLs for traffic limit, committed average rate (CAR), and the corresponding actions.
Related command: traffic-limit.
Examples
# Display the traffic limit settings.
<H3C> display qos-interface traffic-limit
GigabitEthernet2/0/1: traffic-limit
Inbound:
Matches: Acl 3000 rule 1 running
Target rate: 20480 Kbps
Exceed action: remark-dscp 4
1.1.8 display qos-interface traffic-priority
Syntax
display qos-interface [ interface-type interface-number ] traffic-priority
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-priority command to view the priority marking settings. The displayed information includes the ACL applied to the traffic involved in priority marking, priority type and priority value.
Related command: traffic-priority.
Examples
# Display the priority marking settings.
<H3C> display qos-interface traffic-priority
Ethernet2/0/1: traffic-priority
Outbound:
Matches: Acl 2000 rule 0 running
Priority action: dscp be
1.1.9 display qos-interface traffic-red
Syntax
display qos-interface [ interface-type interface-number ] traffic-red
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-red command to view the configuration information of the random early detection (RED) operation.
Related command: traffic-red.
Examples
# Display the configuration information of the RED operation.
<H3C> display qos-interface traffic-red
Ethernet2/0/1: traffic-red
Outbound:
Matches: Acl 2000 rule 0 running
Queue length of start random discarding: 16 Kbyte
Queue length of stop random discarding: 32 Kbyte
Max probability of discarding: 20
1.1.10 display qos-interface traffic-redirect
Syntax
display qos-interface [ interface-type interface-number ] traffic-redirect
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-redirect command to view the configuration of traffic redirect. The displayed information includes the ACL applied to the traffic to be redirected, and the port to which the traffic is to be redirected.
Related command: traffic-redirect.
Examples
# Display the configuration of traffic redirect.
<H3C> display qos-interface traffic-redirect
GigabitEthernet2/0/1: traffic-redirect
Inbound:
Matches: Acl 2002 rule 0 running
Redirected to: interface GigabitEthernet1/0/8
1.1.11 display qos-interface traffic-remark-vlanid
Syntax
display qos-interface [ interface-type interface-number ] traffic-remark-vlanid
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-remark-vlanid command to display the configuration of the traffic-based selective QinQ feature. The displayed information includes the ACL rule used for traffic identifying and the ID of the outer VLAN tag.
Related command: traffic-remark-vlanid.
Examples
# Display the configuration of the traffic-based selective QinQ feature.
<H3C> display qos-interface traffic-remark-vlanid
Ethernet2/0/1: traffic-remark-vlanid
Inbound:
Matches: Acl 3000 rule 3 running
RemarkVlanId action: remark-vlan 25
1.1.12 display qos-interface traffic-statistic
Syntax
display qos-interface [ interface-type interface-number ] traffic-statistic
View
Any view
Parameters
interface-type interface-number: Port index.
Description
Use the display qos-interface traffic-statistic command to display the traffic statistics information. The displayed information includes the ACL applied to the traffic to be counted and the number of packets.
Related command: traffic-statistic.
Examples
# Display the traffic statistics information.
<H3C> display qos-interface traffic-statistic
Ethernet2/0/1: traffic-statistic
Inbound:
Matches: Acl 2000 rule 0 running
105 packets
1.1.13 inboundcar
Syntax
inboundcar { enable | disable }
View
System view
Parameters
enable: Enables the inbound CAR feature.
disable: Disables the inbound CAR feature.
Description
Use the inboundcar enable command to enable the inbound CAR feature.
Use the inboundcar disable command to disable the inbound CAR feature.
By default, the inbound CAR feature is disabled.
& Note:
This command is only applicable to A-type LPUs and can take effect only after you restart the switch.
When the inbound CAR feature is enabled, the same ACL rule applied to different ports is treated as different rules, thus seizing multiple entries. If you enable the CAR feature for the traffic matching the same rule on multiple ports, the switch provides guaranteed bandwidth to the traffic matching the CAR rule on each port.
When the inbound CAR feature is disabled, the same ACL rule applied to different ports is treated as the same one, thus seizing one entry only. If you enable the CAR feature for the traffic matching the same rule on multiple ports, the switch provides guaranteed bandwidth to the traffic matching the CAR rule on these ports.
For example, if you want to set the CAR bandwidth of 2 M for the traffic matching ACL rule 0 on the switch, use the traffic-limit command to enable the CAR feature on two ports.
l If the inbound CAR feature is enabled, the two ports provides guaranteed bandwidth of 2 M for the traffic matching ACL rule 0 on each port.
l If the inbound CAR feature is disabled, the two ports provide the total guaranteed bandwidth of 2M for the traffic matching ACL rule 0 on the two ports.
Examples
# Enable the inbound CAR feature on the switch.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] inboundcar enable
1.1.14 line-rate
Syntax
line-rate [ kbps ] target-rate
undo line-rate
View
QoS view
Parameters
kbps: Specifies the limit rate to be measured (in kbps).
target-rate: Total limit rate of all the packets sent by the port. If the kbps keyword is specified, the rate is measured in kbps, in the range of 64 to 1,024,000 with the granularity being 64. If the number you input is in the range of N*64 to (N+1)*64 (N is a natural number), the switch will set the value to (N+1)*64 kbps automatically. If the kbps keyword is not specified, the rate is in the range of 1 to 1,000 in mbps.
Description
Use the line-rate command to limit the rate of the packets on the port.
Use the undo line-rate command to remove the rate limit configuration on the port.
& Note:
Only type-A LPUs support the rate limit configuration.
Examples
# Limit the rate of packets on GigabitEthernet 2/0/1 to 10 Mbps.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface GigabitEthernet2/0/1
[H3C-GigabitEthernet2/0/1] qos
[H3C-qosb-GigabitEthernet2/0/1] line-rate 10
1.1.15 priority
Syntax
priority priority-level
undo priority
View
Ethernet port view
Parameters
priority-level: Priority value of the port, ranging from 0 to 7.
Description
Use the priority command to configure the priority of the Ethernet port.
Use the undo priority command to restore the default priority of the Ethernet port.
By default, the priority of a port is 0.
If the switch receives a VLAN-tagged frame, the switch will tag the frame with the default VLAN tag of the port receiving the frame. In this case the switch assigns the port priority of the port receiving the frame to the 802.1p priority of the VLAN tag in the frame.
The switch does not perform the operation above if it receives a VLAN-tagged frame.
Examples
# Set the local precedence of Ethernet 2/0/1 to 7.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] priority 7
1.1.16 priority trust
Syntax
priority-trust { dscp | ip-precedence | cos | local-precedence }
View
System view
Parameters
dscp: Puts a packet into the corresponding output queue on a port according to the DSCP precedence of the packet.
ip-precedence: Puts a packet into the corresponding output queue on a port according to the IP precedence of the packet.
cos: Puts a packet into the corresponding output queue on a port according to the CoS precedence of the packet.
local-precedence: Puts a packet into the corresponding output queue on a port according to the local precedence of the packet.
Description
Use the priority trust command to specify the priority type according to which the switch puts a packet into the output queue on a port.
By default, the switch puts a packet into the output queue on a port according to the local precedence of the packet.
A port supports eight output queues with different precedence levels. The packets in an output queue with a higher precedence will be delivered preferentially. The switch puts a packet into an output queue on a port according to the precedence of the packet.
l DSCP precedence ranges from 0 to 63. The packets with precedence value from 0 to 7 are put into queue 0, and those with precedence value from 8 to 15 are put into queue 1, and so on.
l IP precedence ranges from 0 to 7, the packets with precedence value 0 are put into queue 0, and those with precedence value 1 are put into queue 1, and so on.
l CoS precedence ranges from 0 to 7, the packets with precedence value 0 are put into queue 2, the packets with precedence value 1 are put into queue 0, and the packets with precedence value 2 are put into queue 1. As for the left precedence values, the queue number is equal to the precedence value. For example, the packets whose precedence value is 3 are put into queue 3.
l Local precedence ranges from 0 to 7. The packets with precedence value 0 are put into queue 0, and so on.
& Note:
For LPUs that are not of A-type, if you specify the trusted priority for adding packets to output queues by using the priority-trust dscp or priority-trust ip-precedence command, the switch will convert the DSCP precedence or IP precedence of the received packets to the corresponding CoS precedence according to the DSCP-CoS precedence mapping table or IP-CoS precedence mapping table and then add the packets to the corresponding queues by CoS priority. In this case, the precedence is converted as follows.
l DSCP precedence 0 through 7 are mapped to CoS precedence 2; 8 through 15 to CoS precedence 0; 16 through 23 to CoS precedence 1; 24 through 31 to CoS precedence 3; 32 through 39 to CoS precedence 4; 40 through 47 to CoS precedence 5, 48 through 55 to CoS precedence 6; 56 through 63 to CoS precedence 7.
l IP precedence 0 is mapped to CoS precedence 2; IP precedence 1 to CoS precedence 0; IP precedence 2 to CoS precedence 1; IP precedence 3 to CoS precedence 3. The values of other IP precedence values are the same as those of the corresponding CoS precedence.
You can choose the corresponding packet precedence as the basis for putting a packet into an output queue on a port as required.
Examples
# Configure the switch to put a packet into an output queue according to the DSCP precedence of the packet.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] priority-trust dscp
1.1.17 qos
Syntax
qos
View
Ethernet port view
Parameters
None
Description
Use the qos command to enter QoS view and perform the corresponding QoS configurations.
& Note:
Different LPUs of S7500 series switches support different QoS features. You can use “?” to query the supported QoS configurations after entering different QoS views.
Examples
# Enter QoS view of a non-type-A LPU and query the QoS configuration supported by the LPU.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface GigabitEthernet2/0/1
[H3C-GigabitEthernet2/0/1] qos
[H3C-qosb-GigabitEthernet2/0/1] ?
Qosb view commands:
display Display current system information
line-rate Limit the rate of the outbound packets of the
interface
mirrored-to Mirror the packets
msdp-tracert MSDP traceroute to source RP
packet-filter Filter packets based on acl
ping Send echo messages
queue-scheduler Specify queue scheduling mode and parameters
quit Exit from current command view
reset Reset operation
return Exit to User View
tracert Trace route function
traffic-limit Limit the rate of the packets
traffic-priority Specify new priority of the packets
traffic-redirect Redirect the packets
traffic-remark-vlanid Remark vlan ID of the packets
traffic-statistic Count the packets
undo Cancel current setting
# Enter QoS view of a type-A LPU and query the QoS configuration supported by the LPU.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1]?
Qoss view commands:
display Display current system information
msdp-tracert MSDP traceroute to source RP
packet-filter Filter packets based on acl
ping Send echo messages
quit Exit from current command view
reset Reset operation
return Exit to User View
tracert Trace route function
traffic-bandwidth Guarantee the bandwidth of the packets
traffic-limit Limit the rate of the packets
traffic-priority Specify new priority of the packets
traffic-red Random early detect the packets
traffic-remark-vlanid Remark vlan ID of the packets
traffic-statistic Count the packets
undo Cancel current setting
1.1.18 qos cos-local-precedence-map
Syntax
qos cos-local-precedence-map cos0-map-local-prec cos1-map-local-prec cos2-map-local-prec cos3-map-local-prec cos4-map-local-prec cos5-map-local-prec cos6-map-local-prec cos7-map-local-prec
undo qos cos-local-precedence-map
View
System view
Parameters
cos0-map-local-prec: Local precedence value to which CoS 0 is to be mapped, in the range of 0 to 7.
cos1-map-local-prec: Local precedence value to which CoS 1 is to be mapped, in the range of 0 to 7.
cos2-map-local-prec: Local precedence value to which CoS 2 is to be mapped, in the range of 0 to 7.
cos3-map-local-prec: Local precedence value to which CoS 3 is to be mapped, in the range of 0 to 7.
cos4-map-local-prec: Local precedence value to which CoS 4 is to be mapped, in the range of 0 to 7.
cos5-map-local-prec: Local precedence value to which CoS 5 is to be mapped, in the range of 0 to 7.
cos6-map-local-prec: Local precedence value to which CoS 6 is to be mapped, in the range of 0 to 7.
cos7-map-local-prec: Local precedence value to which CoS 7 is to be mapped, in the range of 0 to 7.
Description
Use the qos cos-local-precedence-map command to configure the “CoS-to-local-precedence” mapping table.
Use the undo qos cos-local-precedence-map command to restore the default values.
Table 1-2 lists the content of the default CoS-to-local-precedence mapping table.
Table 1-2 The default CoS-to-local-precedence mapping table
CoS value |
Local precedence |
0 |
2 |
1 |
0 |
2 |
1 |
3 |
3 |
4 |
4 |
5 |
5 |
6 |
6 |
7 |
7 |
Examples
# Configure the CoS-to-local-precedence mapping table.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] qos cos-local-precedence-map 0 1 2 3 4 5 6 7
Table 1-3 is the configured CoS-to-local-precedence mapping table.
Table 1-3 CoS-to-local-precedence mapping table
CoS value |
Local precedence |
0 |
0 |
1 |
1 |
2 |
2 |
3 |
3 |
4 |
4 |
5 |
5 |
6 |
6 |
7 |
7 |
1.1.19 queue-scheduler
Syntax
queue-scheduler { rr | strict-priority | wrr queue1-weight queue2-weight queue3-weight queue4-weight queue5-weight queue6-weight queue7-weight queue8-weight }
undo queue-scheduler
View
QoS view
Parameters
rr: Adopts the round robin (RR) queue scheduling algorithm.
strict-priority: Adopts the strict priority (SP) queue scheduling algorithm.
wrr queue1-weight queue2-weight queue3-weight queue4-weight queue5-weight queue6-weight queue7-weight queue8-weight: Adopts the weighted round robin (WRR) queue scheduling algorithm, with the weight value in the range of 0 to 15.
Description
Use the queue-scheduler command to configure the queue scheduling algorithm and related parameters.
Use the undo queue-scheduler command to restore the default queue scheduling algorithm.
By default, the SP queue scheduling algorithm is adopted.
Related command: display qos-interface queue-scheduler.
& Note:
Only non-type-A LPUs support the queue scheduling algorithm configuration.
Examples
# Adopt the WRR queue scheduling algorithm, and the weight value of each queue is 10, 5, 10, 10, 5, 10, 5, and 10.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface GigabitEthernet2/0/1
[H3C-GigabitEthernet2/0/1] qos
[H3C-qosb-GigabitEthernet2/0/1] queue-scheduler wrr 10 5 10 10 5 10 5 10
1.1.20 reset traffic-statistic
Syntax
I. For type-A LPUs:
reset traffic-statistic { inbound | outbound } acl-rule [ system-index ]
II. For non-type-A LPUs:
reset traffic-statistic inbound acl-rule [ system-index ]
& Note:
LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.
View
QoS view
Parameters
acl-rule: Applied ACL which can be the combination of various ACL rules. For the ways of type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6. For the ways of non-type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-5 and Table 1-6.
Table 1-4 Type-A LPUs’ ways of applying combined ACLs
ACL combination |
Form of the acl-rule argument |
Apply all the rules in an IP ACL separately |
ip-group { acl-number | acl-name } |
Apply a rule in an IP ACL separately |
ip-group { acl-number | acl-name } rule rule-id |
Apply all the rules in a Link ACL separately |
link-group { acl-number | acl-name } |
Apply a rule in a Link ACL separately |
link-group { acl-number | acl-name } rule rule-id |
Table 1-5 Non-type-A LPUs’ ways of applying combined ACLs
ACL combination |
Form of the acl-rule argument |
Apply all the rules in an IP ACL separately |
ip-group { acl-number | acl-name } |
Apply a rule in an IP ACL separately |
ip-group { acl-number | acl-name } rule rule-id |
Apply all the rules in a Link ACL separately |
link-group { acl-number | acl-name } |
Apply a rule in a Link ACL separately |
link-group { acl-number | acl-name } rule rule-id |
Apply all the rules in an user-defined ACL separately |
user-group { acl-number | acl-name } |
Apply a rule in an user-defined ACL separately |
user-group { acl-number | acl-name } rule rule-id |
Apply a rule in an IP ACL and a rule in a Link ACL at the same time |
ip-group { acl-number | acl-name } rule rule-id link-group { acl-number | acl-name } rule rule-id |
Table 1-6 Description on the parameters in the ACL combination
Parameter |
Description |
ip-group { acl-number | acl-name } |
Basic or advanced ACL acl-number: ACL number in the range of 2,000 to 3,999. acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive. |
link-group { acl-number | acl-name } |
Layer 2 ACL acl-number: ACL number in the range of 4,000 to 4,999. acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive. |
user-group { acl-number | acl-name } |
User-defined ACL acl-number: ACL number in the range of 5,000 to 5,999. acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive. |
rule-id |
ACL rule ID, in the range of 0 to 127. If the rule-id argument is not specified, the rule keyword refers to all the rules in the ACL. |
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
Description
Use the reset traffic-statistic command to clear the statistics of all or the specified traffic.
Table 1-7 The reset acl counter command vs the reset traffic-statistic command
Command |
Function |
reset acl counter |
Clear the ACL statistics. This command is applicable to ACLs used for filtering and classifying the traffic processed by software. ACLs are referenced by software in the following cases: l Referenced by routing policies l Referenced when login users are controlled In these cases, the ACL number is in the range of 2,000 to 3,999. Refer to the ACL module in this manual for the introduction to the reset acl counter command. |
reset traffic-statistic |
Clear the traffic statistics. This command is applicable to ACLs applied to the hardware of the switch for filtering and classifying traffic during data forwarding. Generally, this command is used to clear the statistics information obtained through the traffic-statistic command. |
Examples
# Clear the statistics about traffic matching ACL 2000.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1] reset traffic-statistic inbound ip-group 2000
1.1.21 traffic-bandwidth
Syntax
traffic-bandwidth outbound acl-rule [ system-index ] min-guaranteed-bandwidth max-guaranteed-bandwidth weight
undo traffic-bandwidth outbound acl-rule
View
QoS view
Parameters
outbound: Guarantees the bandwidth for the packets sent by the port.
acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4.
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4294967295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
min-guaranteed-bandwidth: Minimum guaranteed bandwidth in kbps, in the range of 0 to 8,388,608. It must be a multiple of 64.
max-guaranteed-bandwidth: Maximum guaranteed bandwidth in kbps, in the range of 0 to 8,388,608. It must be the multiple(s) of 64.
weight: Bandwidth weight in the range of 1 to 100, in percentage. It is used in the situations when bandwidth guarantees are enabled for multiple flows respectively on the current port. For example, bandwidth guarantees are enabled for two flows on a port with 10 M of bandwidth. The minimum guaranteed bandwidth for each flow is 2 M, the maximum guaranteed bandwidth is 8 M, and the bandwidth weights are 40% and 80% respectively. After the port guarantees the minimum bandwidth for both flows (that is, 4 M), the remaining bandwidth (6M) cannot support the maximum bandwidth of both flows (16M). If the bandwidth occupied by the two flows exceeds the minimum guaranteed bandwidth, then the remaining bandwidth (6 M) will be allocated to each flow according to the bandwidth weights (40% : 80%).
& Note:
Assume there are N
flows on a port, the bandwidth of the port is Bp, the minimum guaranteed
bandwidth of the ith flow is Bimin, the maximum guaranteed bandwidth of
the ith flow is Bimax, and the weight is Wi. If the bandwidth occupied
by all the flows is greater than their minimum guaranteed bandwidth, and the
sum of maximum guaranteed bandwidth is greater than port bandwidth Bp, the
bandwidth allocated to the ith flow is Bi= Bimin+(Bp-)*Wi/
.
Description
Use the traffic-bandwidth command to activate the ACL for traffic identifying and provide guaranteed bandwidth for the corresponding traffic. This command is applicable to only the permit rules in ACLs).
Use the undo traffic-bandwidth command to remove this feature.
This configuration provides the minimum guaranteed bandwidth and maximum available bandwidth for the specific traffic. Note that the maximum available bandwidth must be no smaller than the minimum guaranteed bandwidth.
Related command: display qos-interface traffic-bandwidth.
& Note:
l Only type-A LPUs support this command.
l Only the permit rule can be referenced in this command and applied to hardware.
Examples
# Guarantee the bandwidth of the packets that match the permit rule in ACL 2000: The minimum guaranteed bandwidth is 64 k, the maximum available bandwidth is 128 k, and bandwidth weight is 50.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1] traffic-bandwidth outbound ip-group 2000 64 128 50
1.1.22 traffic-limit
Syntax
I. For type-A LPUs:
traffic-limit { inbound | outbound } acl-rule [ system-index ] target-rate
undo traffic-limit { inbound | outbound } acl-rule
II. For non-type-A LPUs:
traffic-limit inbound acl-rule [ system-index ] [ kbps ] target-rate [ exceed action ]
undo traffic-limit inbound acl-rule
& Note:
LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.
View
QoS view
Parameters
inbound: Performs traffic policing on the packets received by the port.
outbound: Performs traffic policing on the packets sent by the port.
acl-rule: Applied ACL which can be the combination of various ACL rules. For the ways of type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6. For the ways of non-type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-5 and Table 1-6.
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
kbps: Specifies the limit rate to be measured in kbps. If the kbps keyword is specified, the rate is measured in kbps, in the range of 64 to 1,024,000 with the granularity being 64. If the number you input is in the range of N*64 to (N+1)*64 (N is a natural number), the switch will set the value to (N+1)*64 kbps automatically.
target-rate: Total rate to limit all the packets sent on a port. For type-A LPUs, the target-rate argument is in the range of 64 to 8,388,608 in kbps with the granularity being 64. If the kbps keyword is not provided, the target-rate argument is expressed in mbps in the range of 1 to 1,000.
exceed action: Optional. The action is taken when the traffic exceeds the threshold. Only type-A LPUs support this keyword. The action argument can be:
l drop: Drops the packets.
l remark-dscp value: Sets a new DSCP value.
Description
Use the traffic-limit command to activate an ACL for traffic identifying and perform traffic policing.
Use the undo traffic-limit command to remove traffic policing.
This command performs traffic limit on the packets matching the permit rule in an ACL only.
& Note:
Only the permit rule can be referenced in this command and applied to hardware.
Examples
# Perform traffic limit on the packets matching the permit rule in ACL 2000 on Ethernet 2/0/1 of a type-A LPU. The maximum rate is 128 kbps.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1] traffic-limit inbound ip-group 2000 128
# Perform traffic limit on the packets matching the permit rule in ACL 2000 on GigabitEthernet 2/0/1 of a non-type-A LPU. The maximum rate is 128 kbps.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface GigabitEthernet2/0/1
[H3C-GigabitEthernet2/0/1] qos
[H3C-qosb-GigabitEthernet2/0/1] traffic-limit inbound ip-group 2000 kbps 128
1.1.23 traffic-priority
Syntax
I. For type-A LPUs:
traffic-priority { inbound | outbound } acl-rule [ system-index ] { { dscp dscp-value | ip-precedence pre-value } | local-precedence pre-value }*
undo traffic-priority { inbound | outbound } acl-rule
II. For non-type-A LPUs:
traffic-priority inbound acl-rule [ system-index ] { { dscp dscp-value | ip-precedence pre-value } | { cos cos | local-precedence pre-value } }*
undo traffic-priority inbound acl-rule
& Note:
LPUs that are not a type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.
View
QoS view
Parameters
inbound: Performs priority marking for the packets received by the port.
outbound: Performs priority marking for the packets sent by the port.
acl-rule: Applied ACL which can be the combination of various ACL rules. For the ways of type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6. For the ways of non-type-A LPUs to combine ACLs and the description on related parameters, refer to Table 1-5 and Table 1-6.
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4294967295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
dscp dscp-value: Sets DSCP precedence, ranging from 0 to 63. You can also enter the keywords in Table 1-8.
Table 1-8 Description on DSCP precedence values
Keyword |
DSCP value (decimal) |
DSCP value (binary) |
ef |
46 |
101110 |
af11 |
10 |
001010 |
af12 |
12 |
001100 |
af13 |
14 |
001110 |
af21 |
18 |
010010 |
af22 |
20 |
010100 |
af23 |
22 |
010110 |
af31 |
26 |
011010 |
af32 |
28 |
011100 |
af33 |
30 |
011110 |
af41 |
34 |
100010 |
af42 |
36 |
100100 |
af43 |
38 |
100110 |
cs1 |
8 |
001000 |
cs2 |
16 |
010000 |
cs3 |
24 |
011000 |
cs4 |
32 |
100000 |
cs5 |
40 |
101000 |
cs6 |
48 |
110000 |
cs7 |
56 |
111000 |
be (default) |
0 |
000000 |
ip-precedence pre-value: Sets IP precedence. The pre-value argument ranges from 0 to 7. You can also enter the keywords in Table 1-9.
Table 1-9 Description on IP precedence values
Keyword |
IP Precedence (decimal) |
IP Precedence (binary) |
routine |
0 |
000 |
priority |
1 |
001 |
immediate |
2 |
010 |
flash |
3 |
011 |
flash-override |
4 |
100 |
critical |
5 |
101 |
internet |
6 |
110 |
network |
7 |
111 |
cos cos: Sets 802.1p priority. The pre-value argument ranges from 0 to 7. You can also enter the keywords in Table 1-10.
Table 1-10 Description on 802.1p priority values
Keyword |
802.1p priority (decimal) |
802.1p priority value (binary) |
best-effort |
0 |
000 |
background |
1 |
001 |
spare |
2 |
010 |
excellent-effort |
3 |
011 |
controlled-load |
4 |
100 |
video |
5 |
101 |
voice |
6 |
110 |
network-management |
7 |
111 |
& Note:
If you have redirected the packets to CPU, it is not recommended to set the 802.1p priority to 7, and vice versa.
local-precedence pre-value: Sets local precedence. The pre-value argument ranges from 0 to 7.
Description
Use the traffic-priority command to enable ACLs for priority marking.
Use the undo traffic-priority command to remove the priority marking feature.
Related command: display qos-interface traffic-priority.
& Note:
Only the permit rule can be referenced in this command and applied to hardware.
Examples
# Mark the local precedence of the packets matching the permit rule in ACL 2000 as 0.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1] traffic-priority outbound ip-group 2000 local-precedence 0
1.1.24 traffic-red
Syntax
traffic-red outbound acl-rule [ system-index ] qstart qstop probability
undo traffic-red outbound acl-rule
View
QoS view
Parameters
outbound: Performs the RED operation on the sent packets.
acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6.
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4294967295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
qstart: Queue length where the system starts to drop packets at random, in the range of 0 to 262,128 in kbyte. The packets in the queue whose length is less than the qstart argument will not be dropped. The value must be the multiples of 16 KB.
qstop: Queue length where the system stops dropping packets at random, in the range of 0 to 262,128 in kbyte. All the packets in the queue whose length is greater than the qstop argument will be dropped. The value must be the multiples of 16 KB.
probability: Drop probability when the qstop argument is reached, in the range of 0% to 100%.
Description
Use the traffic-red command to enable the RED operation and set RED relevant parameters.
Use the undo traffic-red command to remove the RED configuration.
Note that the qstop argument in this command must be no smaller than the qstart argument.
Related command: display qos-interface traffic-red.
& Note:
l Only type-A LPUs support this command.
l Only the permit rule can be referenced in this command and applied to hardware.
Examples
# Perform the RED operation on the packets matching the permit rule in ACL 2000. RED parameters can be set as follows: the qstart argument is 64 KB, the qstop argument is 128 KB, and the probability argument is 20%.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1] traffic-red outbound ip-group 2000 64 128 20
1.1.25 traffic-redirect
Syntax
traffic-redirect inbound acl-rule [ system-index ] { cpu | interface interface-type interface-number }
undo traffic-redirect inbound acl-rule
View
QoS view
Parameters
inbound: Performs traffic redirect on the packets received by the port.
acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6.
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
cpu: Redirects the traffic to the CPU.
interface { interface-type interface-number }: Redirects the packets to the specified Ethernet port. The interface-type argument refers to the port type, and the interface-number argument refers to the port number.
Description
Use the traffic-redirect command to enable the ACL to identify and redirect the traffic. This command is applicable to the permit rules in an ACL only.
Use the undo traffic-redirect command to disable the traffic redirect feature.
Related command: display qos-global traffic-redirect.
& Note:
l Only type-A LPUs support this command.
l In a traffic redirect configuration, the source port and the destination port must be on the same LPU.
l Only the permit rule can be referenced in this command and applied to hardware.
Examples
# Redirect the packets matching the permit rule in ACL 2000 to GigabitEthernet 2/0/2.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface GigabitEthernet2/0/1
[H3C-GigabitEthernet2/0/1] qos
[H3C-qosb-GigabitEthernet2/0/1] traffic-redirect inbound ip-group 2000 interface gigabitethernet2/0/2
1.1.26 traffic-remark-vlanid
Syntax
traffic-remark-vlanid inbound acl-rule [ system-index ] remark-vlan vlan-id
undo traffic-remark-vlanid inbound acl-rule
& Note:
LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.
View
QoS view
Parameters
inbound: Tags the packets received by the port with outer VLAN tags.
acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-11 and Table 1-12.
Table 1-11 Ways of applying combined ACL rules
ACL combination |
Form of the acl-rule argument |
Apply all the rules in an IP ACL separately |
ip-group { acl-number | acl-name } |
Apply a rule in an IP ACL separately |
ip-group { acl-number | acl-name } rule rule-id |
Apply all the rules in a Link ACL separately |
link-group { acl-number | acl-name } |
Apply a rule in a Link ACL separately |
link-group { acl-number | acl-name } rule rule-id |
Apply a rule in an IP ACL and a rule in a Link ACL at the same time |
ip-group { acl-number | acl-name } rule rule-id link-group { acl-number | acl-name } rule rule-id |
Table 1-12 Description on the parameters in the ACL combination
Parameter |
Description |
ip-group { acl-number | acl-name } |
Basic or advanced ACL acl-number: ACL number in the range of 2,000 to 3,999. acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive. |
link-group { acl-number | acl-name } |
Layer 2 ACL acl-number: ACL number in the range of 4,000 to 4,999. acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive. |
user-group { acl-number | acl-name } |
User-defined ACL acl-number: ACL number in the range of 5,000 to 5,999. acl-name: ACL name which contains up to 32 characters. It must start with an English letter (a to z or A to Z) and cannot contain spaces or quotation marks. It is not capital sensitive. |
rule-id |
ACL rule ID, in the range of 0 to 127. If the rule-id argument is not specified, the rule keyword refers to all the rules in the ACL. |
vlan-id: ID of the outer VLAN tag which is tagged to the packet, in the range of 1 to 4094.
Description
Use the traffic-remark-vlanid command to enable the ACL for traffic identifying and tag the packet matching the ACL with the outer VLAN tag to implement the traffic-based selective QinQ feature.
Use the undo traffic-remark-vlanid command to disable the configuration.
This command is applicable to only the permit rules in the ACL.
Refer to the selective QinQ module in this manual for the detailed information about the selective QinQ feature.
Caution:
l A-type LPUs, LS82GT20, and LS82GP20 do not support traffic-based selective QinQ.
l Execute the vlan-vpn enable command in the corresponding port view before executing the traffic-remark-vlanid command.
l The QinQ feature cannot be enabled on a port with Voice VLAN function enabled.
Examples
# Tag the packets matching the permit rule in ACL 2000 with an outer VLAN tag on Ethernet 2/0/1, thus implementing the traffic-based selective QinQ feature.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] vlan 25
[H3C-vlan25] quit
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[H3C-acl-basic-2000] quit
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] port link-type hybrid
[H3C-Ethernet2/0/1] port hybrid vlan 25 untagged
[H3C-Ethernet2/0/1] vlan-vpn enable
[H3C-Ethernet2/0/1] qos
[H3C-qosb-Ethernet2/0/1] traffic-remark-vlanid inbound ip-group 2000 remark-vlan 25
1.1.27 traffic-statistic
Syntax
I. For type-A LPUs:
traffic-statistic { inbound | outbound } acl-rule [ system-index ]
undo traffic-statistic { inbound | outbound } acl-rule
II. For non-type-A LPUs:
traffic-statistic inbound acl-rule [ system-index ]
undo traffic-statistic inbound acl-rule
& Note:
LPUs that are not A-type support applying the combination of IP ACL rules and link ACL rules. However, the field defined by the IP ACL rules and link ACL rules cannot be of more than 32 characters. Otherwise, the combination cannot be applied successfully.
View
QoS view
Parameters
inbound: Performs traffic statistic on the packets received by the port.
outbound: Performs traffic statistic on the packets sent by the port.
acl-rule: Applied ACL rules which can be the combination of various ACL rules. For the ways of combining ACLs and the description on related parameters, refer to Table 1-4 and Table 1-6.
system-index: Specifies an interior index value which is used when an ACL rule is applied to the port. The index value ranges from 0 to 4,294,967,295. This keyword is only available when the ACL rule number is specified in the command. After the specified ACL takes effect, there are three scenarios when you input the index value:
l If you do not input an index value or the index value you input is 0, the system will automatically assign an index whose value is greater than 0;
l If the input index value is not 0 and does not conflict with the interior index used by the system, the system will adopt the index value input by you;
l If the input index value is not 0 but conflicts with the interior index used by the system, the system will reassign an index value.
When the specified ACL rule is not effective, the system will adopt the index value input by you.
Description
Use the traffic-statistic command to activate the ACL for traffic identifying and count the traffic. This command is applicable to only the permit rules in the ACL.
Use the undo traffic-statistic command to cancel the traffic statistics.
The statistics information of the traffic-statistic command includes the times of ACL matches on the hardware. You can use display qos-interface traffic-statistic command to display the statistics information.
Related command: display qos-interface traffic-statistic.
& Note:
Only the permit rule can be referenced in this command and applied to hardware.
Examples
# Perform traffic statistics on the packets matching the permit rule in ACL 2000.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] interface Ethernet2/0/1
[H3C-Ethernet2/0/1] qos
[H3C-qoss-Ethernet2/0/1] traffic-statistic inbound ip-group 2000