HP 6125G HP 6125G & 6125G/XG Blade Switches ACL and QoS Configuration - Page 27

Defining a policy, Configuration restrictions and guidelines, Configuration procedure, Applying

Page 27 highlights

Defining a policy You associate a behavior with a class in a QoS policy to perform the actions defined in the behavior for the class of packets. Configuration restrictions and guidelines • If an ACL is referenced by a QoS policy for defining traffic match criteria, packets matching the ACL are organized as a class and the behavior defined in the QoS policy applies to the class regardless of whether the action in the rule is deny or permit. • In a QoS policy with multiple class-to-traffic-behavior associations, if the action of creating an outer VLAN tag, setting customer network VLAN ID, or setting service provider network VLAN ID is configured in a traffic behavior, do not configure any other action in this traffic behavior; otherwise, the QoS policy may not function as expected after it is applied. For more information about the action of setting customer network VLAN ID or service provider network VLAN ID, see Layer 2-LAN Switching Configuration Guide. Configuration procedure To associate a class with a behavior in a policy: Step 1. Enter system view. 2. Create a policy and enter policy view. 3. Associate a class with a behavior in the policy. Command system-view qos policy policy-name classifier tcl-name behavior behavior-name [ mode dot1q-tag-manipulation ] Remarks N/A N/A Repeat this step to create more class-behavior associations. The dot1q-tag-manipulation keyword is only for VLAN mapping purposes. For more information about VLAN mapping, see Layer 2-LAN Switching Configuration Guide. Applying the QoS policy You can apply a QoS policy to the following occasions: • An interface-The policy takes effect on the traffic sent or received on the interface. • A user profile-The policy takes effect on the traffic sent or received by the online users of the user profile. • A VLAN-The policy takes effect on the traffic sent or received on all ports in the VLAN. • Globally-The policy takes effect on the traffic sent or received on all ports. The QoS policies applied to ports, to VLANs, and globally are in the descending priority order. If the system finds a matching QoS policy for the incoming/outgoing traffic, the system stops matching the traffic against QoS policies. You can modify classes, behaviors, and class-behavior associations in a QoS policy applied to an interface, VLAN, or inactive user profile, or globally. If a class references an ACL for traffic classification, you can delete or modify the ACL (such as add rules to, delete rules from, and modify rules of the ACL). 21

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84

21
Defining a policy
You associate a behavior with a class in a QoS policy to perform the actions defined in the behavior for
the class of packets.
Configuration restrictions and guidelines
If an ACL is referenced by a QoS policy for defining traffic match criteria, packets matching the ACL
are organized as a class and the behavior defined in the QoS policy applies to the class regardless
of whether the action in the rule is
deny
or
permit
.
In a QoS policy with multiple class-to-traffic-behavior associations, if the action of creating an outer
VLAN tag, setting customer network VLAN ID, or setting service provider network VLAN ID is
configured in a traffic behavior, do not configure any other action in this traffic behavior; otherwise,
the QoS policy may not function as expected after it is applied. For more information about the
action of setting customer network VLAN ID or service provider network VLAN ID, see
Layer
2—LAN Switching Configuration Guide
.
Configuration procedure
To associate a class with a behavior in a policy:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a policy and enter
policy view.
qos policy
policy-name
N/A
3.
Associate a class with a
behavior in the policy.
classifier
tcl-name
behavior
behavior-name
[
mode
dot1q-tag-manipulation
]
Repeat this step to create more
class-behavior associations.
The
dot1q-tag-manipulation
keyword is only for VLAN mapping purposes. For more information about
VLAN mapping, see
Layer 2—LAN Switching Configuration Guide
.
Applying the QoS policy
You can apply a QoS policy to the following occasions:
An interface
—The policy takes effect on the traffic sent or received on the interface.
A user profile
—The policy takes effect on the traffic sent or received by the online users of the user
profile.
A VLAN
—The policy takes effect on the traffic sent or received on all ports in the VLAN.
Globally
—The policy takes effect on the traffic sent or received on all ports.
The QoS policies applied to ports, to VLANs, and globally are in the descending priority order. If the
system finds a matching QoS policy for the incoming/outgoing traffic, the system stops matching the
traffic against QoS policies.
You can modify classes, behaviors, and class-behavior associations in a QoS policy applied to an
interface, VLAN, or inactive user profile, or globally. If a class references an ACL for traffic classification,
you can delete or modify the ACL (such as add rules to, delete rules from, and modify rules of the ACL).