Home » HP Manuals » Bridges & Routers » HP 7102dl » Manual Viewer

HP 7102dl Owners Manual - Page 397

Marking Traffic According to Fields in the IP Header., to DSCP 46. Enter

UPC - 829160731391

Add to My Manuals
Save this manual to your list of manuals

Page 397 highlights

Setting Up Quality of Service Marking Packets with a ToS value The specific type of service granted to packets with different ToS values has only been loosely standardized. Devices in your network might use different values than devices in an external network to which the router is forwarding traffic. You can match the local network values and map them to values in the external network that guarantee equivalent service. For an example, your devices only support IP precedence. However, your ISP allows you to mark packets for Expedited Forwarding. You could match the QoS map entry to packets with an IP precedence of 5 and then set the value to DSCP 46. Enter: ProCurve(config-qos-map)# match precedence 5 Valid DiffServ (DSCP) values are from 0 to 63; valid IP precedence values are from 0 to 7. You will learn how to set the new value in "Setting the ToS Value" on page 8-50. You can only match the entry to one value. If you want to map more than one value to the new value, you must configure a QoS map entry for each original value. (You should assign the QoS map the same name, but a different sequence number.) Marking Traffic According to Fields in the IP Header. You can mark packets according to the source and/or destination IP addresses in IP headers. For example, you could place mission-critical traffic from a specific network into the AF31 class (DSCP 26). If your service provider has agreed to support this DiffServ, it would grant these packets relatively more bandwidth and drop them only after other packets are dropped. You can also select traffic according to source and/or destination TCP or UDP ports. For example, if your network uses a VoIP application that does not automatically mark its signaling traffic, you could configure a QoS map entry to match and mark packets destined to the port specified by your application. You select the traffic to be marked by matching the QoS map entry to an extended ACL. The ACL actually selects the traffic. An extended ACL can define traffic according to its source and destination IP address as well as a variety of fields in the IP, TCP, or UDP header. You also use extended ACLs to mark traffic destined to a specific TCP or UDP protocol port. 8-47

Section	Page
Copyright and Disclaimers	4
Contents	5
Overview	35
Contents	35
Using This Guide	37
Understanding Command Syntax Statements	38
CLI Prompt Convention	38
IP Address Convention	39
Interface Numbering Convention	39
Quick Start Sections	40
Obtaining Additional Information	40
Downloading Software Updates	41
Interface Management Options	43
CLI	43
Web Browser Interface	43
Accessing the Web Browser Interface	44
Using the ProCurve Web Browser Interface	45
CLI Tools	47
Help Tools	47
CLI Help Commands	47
Editing Commands	48
Basic Commands	49
no	49
do	49
exit	49
File Management Commands	50
copy	50
erase	53
write	53
autosynch	53
Troubleshooting Commands	54
reload in	54
show	55
show tech	55
safe-mode	56
Managing Configuration Files Using a Text Editor	59
Using Error Messages to Repair a Configuration	59
Quick Start	62
Accessing the Secure Router OS	62
Configuring the Enable Mode Password	63
Configuring the Ethernet Interface	63
Configuring Telnet Access	64
Configuring SSH Access	64
Configuring HTTP Access	65
Increasing Bandwidth	67
Contents	67
Overview	68
Configuring MLPPP	70
PPP	70
MLPPP	71
LCP Options	71
MLPPP Header	72
MLPPP Configuration Concerns	72
Enabling MLPPP	72
Binding Multiple Carrier Lines to a PPP Interface	73
Configuring MLFR	74
Enabling MLFR	75
Binding Multiple Carrier Lines to a Frame Relay Interface	76
Configuring the Bundle ID	77
Troubleshooting Multilinks	78
Standard Procedure	78
Physical Layer	78
Data Link Layer	78
Troubleshooting MLPPP	81
MRRU	81
ED	82
Troubleshooting MLFR	82
Quick Start	85
MLPPP Configuration	86
MLFR Configuration	87
Configuring Backup WAN Connections	89
Contents	89
Backing Up Primary WAN Connections	93
Analog Backup Connections	93
ISDN-Backup Connections	94
BRI ISDN	95
Electrical Specifications for BRI ISDN	97
Backup Modules for the ProCurve Secure Router	97
Standards	98
Data Link Layer Protocols	99
Determining a Backup Method	99
Using Demand Routing for Backup Connections	100
Using Persistent Backup Connections	102
Comparing Demand Routing and Persistent Backup Connections	102
Configuring Demand Routing for Backup Connections	106
Define the Traffic That Triggers the Connection	106
Specifying a Protocol	107
Defining the Source and Destination Addresses	107
Configuring the Demand Interface	108
Creating the Demand Interface	110
Configuring an IP Address	110
Matching the Interesting Traffic	112
Specifying the connect-mode Option	115
Associating a Resource Pool with the Demand Interface	116
Defining a Connect Sequence	116
Specify the Order in Which Connect Sequences Are Used	118
Configure the Number of Connect Sequence Attempts	118
Configure the connect-sequence interface-recovery Option	119
Understanding How the connect-sequence Commands Work	121
Configuring the idle-timeout Option	124
Configuring the fast-idle Option	124
Defining the caller-number	125
Defining the called-number	125
Configuring the Hold Queue	125
Configuring the BRI or Modem Interface	126
Accessing the BRI or Modem Interface	127
Configuring the ISDN Signaling (Switch) Type	127
Configuring an LDN for ISDN BRI S/T Modules	128
Configuring a SPID and LDN for ISDN BRI U Modules	129
Setting the Country for the Modem Interface	129
Assigning BRI or Modem Interface to the Resource Pool	130
Activating the Interface	130
Caller ID Options for ISDN BRI Backup Modules (Optional)	131
Configuring a Floating Static Route for the Demand Interface	131
Configuring PPP Authentication for an ISDN Connection	132
Enabling PPP Authentication for All Demand Interfaces	133
Configuring PAP Authentication for a Demand Interface	133
Configuring CHAP Authentication for a Demand Interface	133
Configuring the Username and Password That the Router Expects to Receive	134
Example of Demand Routing with PAP Authentication for a Backup Connection	134
Configuring Peer IP Address	135
Setting the MTU for Demand Interfaces	136
Configuring a Persistent Backup Connection	137
Configuring the Physical Interface for a Persistent Backup Connection	137
Configuring a BRI Interface (ISDN Only)	137
Configuring a Modem Interface (Analog Only)	141
Using the Modem for Console Dial-In	143
Replacing Incoming Caller ID for BRI and Modem Interfaces	143
Configuring a Logical Interface for a Persistent Backup Connection	144
Creating a Backup PPP Interface	145
Activating the Interface	145
Setting an IP Address	146
Enabling PPP Authentication	146
Configuring Persistent Backup Settings for a Primary Connection	148
Accessing the Primary Connection’s Logical Interface	148
Setting the Backup Call Mode	149
Adding a Number to a Backup Dial List	153
Controlling When a Backup Connection Can Be Established	154
Setting Backup Timers	156
Configuring a Floating Static Route for a Persistent Backup Connection	157
Configuring Persistent Backup for Multiple Connections	159
Viewing Backup Configurations and Troubleshooting Backup Connections	160
Viewing Information about BRI and Modem Interfaces and Troubleshooting Problems	160
Viewing the Status and Configuration of Backup Interfaces	161
Viewing Information about Demand Routing and Troubleshooting Problems	165
Viewing the Status of the Demand Interface	165
Viewing a Summary of Information about the Demand Interface	167
Viewing Demand Sessions	168
Viewing the Resource Pool	168
Show the Running-Config for the Demand Interface	169
Troubleshooting Demand Routing	169
Checking the Demand Interface	169
Checking the ACL That Defines the Interesting Traffic	170
Troubleshooting the Backup Connection	171
Test Calls for ISDN Lines	173
Troubleshooting PPP for a Demand Routing Backup Connection	174
Viewing Information about Persistent Backup Connections and Troubleshooting Problems	174
Viewing Backup Settings	175
Viewing the Backup PPP Interface	177
Monitoring the Dial-Up Process	177
Troubleshooting Persistent Backup Connections	179
Standard Procedures	179
Quick Start	184
Configuring Demand Routing for Backup Connections	185
Configuring a Persistent Backup Connection	192
Backing up a Connection with an ISDN BRI S/T Backup Module	196
Backing up a Connection with an Analog Module	198
ProCurve Secure Router OS Firewall- Protecting the Internal, Trusted Network	201
Contents	201
Overview	203
Advantages of an Integrated Firewall	203
Stateful-Inspection Firewalls	204
Packet-Filtering Firewall	204
Circuit-level Gateway	206
Application-level Gateway	207
Attack Checking	209
SYN-flood Attacks	210
WinNuke Attacks	211
Reflexive Traffic	212
Event Logging	212
Configuring Attack Checking	214
Enabling the Secure Router OS Firewall	214
Enabling and Disabling Optional Attack Checks	215
Checking Reflexive Traffic	216
Configuring Stealth Mode	217
Configuring ALGs	218
Enabling the FTP ALG	219
Enabling the H.323 ALG for Voice and Videoconferencing	219
Enabling the SIP ALG for Voice over IP	219
Enabling the PPTP ALG for VPNs	220
Enabling Firewall Traversal	220
Configuring Timeouts for Sessions	221
Setting the Timeout for a Protocol	221
Setting Timeouts for Specific TCP and UDP Applications	222
Configuring Logging	224
Specifying the Priority Level for Logged Events	224
Specifying How Many Attacks Generate a Log	226
Specifying How Many Policy Matches Generate a Log	227
Forwarding Logs to a Syslog Server	227
Forwarding Logs to an Email Address	229
Quick Start	231
Applying Access Control to Router Interfaces	233
Contents	233
Access Control for Interfaces on the ProCurve Secure Router	235
Access Control Mechanisms	236
Using ACLs Alone to Configure Access Control	238
Configure ACLs	238
ACL Entries	238
Types of ACLs	239
Creating an ACL	241
Creating a Standard ACL	241
Creating an Extended ACL	243
Entry Order	248
Adding a Descriptive Tag to an ACL	249
Editing an Existing ACL	250
Deleting an Existing ACL	250
Applying the ACL to an Interface	251
Selecting the Packet and Controlling the Action	252
Controlling FTP, HTTP, and Telnet Access to the Router	253
Restricting FTP Access	254
Restricting HTTP Access	254
Restricting Telnet Access	255
Examples of Applying ACLs	255
Using ACPs to Control Access to Router Interfaces	258
Enable the Firewall	258
Configure ACLs	259
Types of ACLs	259
Creating an ACL	261
Creating a Standard ACL	261
Creating an Extended ACL	264
Configure ACPs	267
Action	267
Selector	268
Creating an ACP	268
Creating Entries in the ACP	269
Editing ACPs	269
Deleting an ACP	269
Assigning the ACP to an Interface	270
Using the reload Command	270
Processing ACPs	271
ACP Action Summary	274
Traffic Flow through Interfaces with ACPs	276
Inbound Interface Has an ACP; Outbound Interface Does Not Have an ACP	277
Inbound Interface Has an ACP; Outbound Interface Has a Different ACP	277
Inbound Interface Does Not Have an ACP; Outbound Interface Has an ACP	278
Traffic in and out Through a Single Interface	279
Examples of ACPs	279
Viewing ACLs and ACPs	283
Displaying ACLs	283
Displaying ACPs	284
Viewing Access Policy Sessions	285
Viewing Access Policy Statistics	286
Troubleshooting	288
show Commands	288
Monitoring Packets Matched to an ACP	288
Clearing Existing Policy Sessions	288
Clear ACL Counters	290
Debug ACLs	291
Quick Start	292
Enabling the Built-in Firewall	292
Configuring an ACL and Applying It Directly to an Interface	293
Configuring ACPs	295
Configuring Network Address Translation	299
Contents	299
NAT Services on the ProCurve Secure Router	300
Many-to-One NAT for Outbound Traffic	300
Using NAT with PAT	301
One-to-One NAT for Inbound Traffic	303
One-to-One NAT with Port Translation	304
Configuring NAT	306
Enabling the Firewall	306
Configuring an ACL	306
Types of ACLs	307
Configuring an ACP	311
Configuring Many-to-One NAT for Outbound Traffic	312
Configuring One-to-One NAT for Inbound Traffic	312
Configuring One-to-One NAT with Port Translation	313
Assigning the ACP to an Interface	314
Viewing ACLs and ACPs	315
Displaying ACLs	316
Displaying ACPs	316
Viewing Access Policy Sessions	317
Viewing Access Policy Statistics	318
Troubleshooting	319
Monitoring Packets Matched to an ACP	319
Clearing Existing Policy Sessions	320
Clearing ACL Counters	322
Debugging ACLs	322
Quick Start	323
Using the CLI to Configure Many-to-One NAT	323
Using the CLI to Configure One-to-One NAT	325
Content Filtering	329
Contents	329
Overview	330
Risks Posed by Non-Work-Related Use of the Internet	330
Web Content Filtering on the ProCurve Secure Router 7000dl Series	331
The Role of the Websense Enterprise Solution	331
The Role of the ProCurve Secure Router	332
Configuring Web Content Filtering	333
Creating a Filter on the ProCurve Secure Router	333
Specifying the Websense Server’s IP Address	334
Applying a Filter to a Router Interface	334
Specifying Behavior When the Server Is Unreachable	336
Defining Exclusive Domains-Domains the Router Automatically Allows or Blocks	336
Specifying the Maximum Number of Outstanding Requests to the Websense Server	338
Specifying the Maximum Number of Buffered Web Server Responses	338
Troubleshooting Web Content Filtering	339
Troubleshooting Tools-show, debug, and clear Commands	339
Troubleshooting Common Problems	342
Web Content Filtering Does Not Take Effect	342
Users Cannot Access the Web Sites They Need	345
The Router Cannot Connect to the Websense Server	346
Web Sites Do Not Load, Load Slowly, or Load Incompletely	348
Quick Start	349
Setting Up Quality of Service	351
Contents	351
Overview	354
Evaluating Traffic on Your Network	354
QoS Mechanisms on the ProCurve Secure Router	355
ToS Field	356
First In, First Out	360
WFQ	361
CBWFQ	361
LLQ	361
FRF.12	362
QoS Maps	362
Configuring WFQ	364
Overview	364
Conversations	364
Weight	365
Shortcomings	365
Packet Marking	366
Enabling WFQ	367
Setting the Queue Size	368
Configuring CBWFQ	369
Overview	369
Configuring Classes for CBWFQ	369
Creating a QoS Map Entry	370
Defining a Class	371
Allocating Bandwidth to a Class	376
Assigning the QoS Map to an Interface	378
Special Considerations for CBWFQ with Multilinks	379
CBWFQ Example Configuration	380
Configuring LLQ	382
Overview	382
Determining Bandwidth for the Queue	382
Determining Bandwidth for VoIP	383
Determining Bandwidth for Video Streaming	386
Placing Traffic in a Low-Latency Queue	387
Creating a QoS Map Entry	387
Selecting the Traffic to Be Placed in the Low-Latency Queue	387
Setting the Bandwidth Guaranteed the Queue	392
Marking Low Latency Packets with a ToS Value	394
Assigning the QoS Map to an Interface	394
Marking Packets with a ToS value	395
Creating a QoS Map Entry	395
Selecting the Traffic to Be Marked	396
Setting the ToS Value	400
Assigning the QoS Map to an Interface	401
Example Packet Marking Configuration	401
Configuring Rate Limiting for Frame Relay	403
Overview	403
Rate Limiting	403
FRF.12	403
Configuring Rate Limiting	404
Setting the Committed Burst Rate	405
Setting the Excessive Burst Rate	405
Configuring Frame Relay Fragmentation	406
Example Frame Relay QoS Configuration	407
Configuring QoS for Ethernet	408
Overview	408
Rate Limiting	408
Configuring Rate Limiting on an Ethernet Interface	408
Configuring QoS Policies on an Ethernet Interface	409
Example: Configuring QoS for VoIP	411
Enabling Application-Level Gateways for Applications with Special Needs	412
Enabling SIP Services	412
Defining VoIP Traffic	414
Determining the Required Bandwidth	415
Marking Signaling Traffic for Special Treatment	416
Configuring Frame Relay Rate Limiting	417
Monitoring QoS	418
Viewing QoS Maps	419
Managing Queues	420
Troubleshooting Common Configuration Problems	421
A Map Becoming Inactive	421
An Ethernet Interface Refusing to Take a QoS-Policy	422
Quick Start	422
Configuring WFQ	422
Configuring CBWFQ	423
Configuring a Low-Latency Queue	425
Marking Packets	426
Configuring Frame Relay Fragmentation	427
Configuring QoS on an Ethernet Interface	428
Network Monitoring	429
Contents	429
Overview	431
Network Monitor Probes	431
Probe Characteristics	432
Probe States	433
Network Monitor Tracks	433
Track Characteristics	433
Track States	433
Track Actions	433
Purposes of Network Monitoring	434
Testing Static Routes	434
Monitoring Network Performance	437
Routing Probe Traffic using Policy-Based Routing (PBR)	437
Configuring Network Monitoring	438
Configuring Probes	439
Creating a Probe and Selecting Its Type	439
Specifying the Probe’s Destination	440
Specifying the Test’s Timeout	442
Specifying the Probe’s Tolerance	442
Specifying the Probe’s Period	444
Setting the Source Address for Probe Packets	445
Setting the Source Port for Probe Packets	445
Special Considerations for Configuring Probes	446
Special Considerations for ICMP Echo Probes	446
Special Considerations for TCP Connect Probes	448
Special Considerations for HTTP Request Probes	448
Activating and Shutting Down the Probe	453
Configuring Tracks	454
Creating a Track	454
Specifying the Track’s Probes	455
Configuring a Dampening Interval	456
Enabling a Track to Log Changes	457
Activating and Shutting Down a Track	458
Configuring the Track’s Action-Associating the Track with a Route	459
Associating a Track with a Static Route	459
Associating a Track with a DHCP Default Route	460
Associating a Track with a Default Route Received with a Negotiated Address	461
Implementing PBR to Route Probe Traffic	462
Using NAT with Network Monitoring	465
Overview	465
Configuration Steps	466
Example	467
Disabling the RPF Check	468
Examples of Network Monitoring	470
Monitor Connectivity to the Internet	470
Monitor Static Routes to Remote Networks	473
Monitor Connectivity to a Mission-Critical TCP Server	475
Monitor Network Congestion and the Performance of Servers	478
Submit Information to a Remote Web Server	479
Viewing Network Monitor Tracks and Probes	483
Viewing Network Monitor Tracks	483
Debugging Network Monitor Tracks	484
Viewing Network Monitor Probes	484
Debugging Network Monitor Probes	485
Clearing Statistics	485
Troubleshooting Network Monitoring	486
Track Fails to Take Action	486
Track Takes an Inappropriate Action	487
Backup Route Fails to Be Added	488
Failed Primary Route Periodically Reappears in the Routing Table	489
Quick Start	490
Virtual Private Networks	495
Contents	495
Overview	498
VPN Tunnels	498
IP Security (IPSec)	498
IPSec Headers	499
Hash and Encryption Algorithms	500
IPSec VPN Tunnels	501
Security Associations (SAs)	501
IKE	502
VPN Overlay	507
Physical Setup	508
Configuring a VPN Using IPSec	509
Configuring IPSec with IKE	509
Configuring IPSec with Manual Keying	513
How the ProCurve Secure Router Processes IKE Policies and Crypto Maps	514
Configuration Tasks	517
Enabling Crypto Commands	517
Configuring IKE Policies	517
Peer ID	518
Initiate and Response Mode	520
Attribute Policy	522
Enabling NAT-Traversal (NAT-T) for a Client-to-Site VPN	525
Configuring a Peer’s Remote ID and Preshared Key	526
Site-to-Site Configuration	527
Client-to-Site Configuration	528
Configuring a Remote ID List for a VPN that Uses Digital Certificates	528
Mapping the Remote ID to an IKE Policy and Crypto Map Entry	529
Defining Traffic Allowed over the VPN Tunnel	529
Restricting Specified Hosts	530
Permitting Local and Remote Networks	531
Applying the ACL to a Crypto Map	532
Example Configuration	533
Enabling Router Traffic to Servers at a Remote VPN Site	533
Configuring IPSec SA Parameters	534
Transform Sets	534
Crypto Maps	536
Applying a Crypto Map to an Interface	540
Granting Remote Users a Private Network Address with IKE Mode Config (Required for Client-to-Site VPNs)	541
IKE Mode Config	541
Configuring an IKE Client Configuration Pool	542
Applying the Pool to an IKE Policy	543
Using Extended Authentication (Xauth) (Optional)	543
Configuring an Xauth Server	544

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1,000
1,001
1,002
1,003
1,004
1,005
1,006
1,007
1,008
1,009
1,010
1,011
1,012
1,013
1,014
1,015
1,016
1,017
1,018
1,019
1,020
1,021
1,022
1,023
1,024
1,025
1,026
1,027
1,028
1,029
1,030
1,031
1,032
1,033
1,034
1,035
1,036
1,037
1,038
1,039
1,040
1,041
1,042
1,043
1,044
1,045
1,046
1,047
1,048
1,049
1,050
1,051
1,052
1,053
1,054
1,055
1,056
1,057
1,058
1,059
1,060
1,061
1,062
1,063
1,064
1,065
1,066
1,067
1,068
1,069
1,070
1,071
1,072
1,073
1,074
1,075
1,076
1,077
1,078
1,079
1,080
1,081
1,082
1,083
1,084
1,085
1,086
1,087
1,088
1,089
1,090
1,091
1,092
1,093
1,094
1,095
1,096
1,097
1,098
1,099
1,100
1,101
1,102
1,103
1,104
1,105
1,106
1,107
1,108
1,109
1,110
1,111
1,112
1,113
1,114

Match case Limit results 1 per page

8-47

Setting Up Quality of Service

Marking Packets with a ToS value

The specific type of service granted to packets with different ToS values has

only been loosely standardized. Devices in your network might use different

values than devices in an external network to which the router is forwarding

traffic. You can match the local network values and map them to values in the

external network that guarantee equivalent service.

For an example, your devices only support IP precedence. However, your ISP

allows you to mark packets for Expedited Forwarding. You could match the

QoS map entry to packets with an IP precedence of 5 and then set the value

to DSCP 46. Enter:

ProCurve(config-qos-map)# match precedence 5

Valid DiffServ (DSCP) values are from 0 to 63; valid IP precedence values are

from 0 to 7. You will learn how to set the new value in “Setting the ToS Value”

on page 8-50.

You can only match the entry to one value. If you want to map more than one

value to the new value, you must configure a QoS map entry for each original

value. (You should assign the QoS map the same name, but a different

sequence number.)

Marking Traffic According to Fields in the IP Header.

You can mark

packets according to the source and/or destination IP addresses in IP headers.

For example, you could place mission-critical traffic from a specific network

into the AF31 class (DSCP 26). If your service provider has agreed to support

this DiffServ, it would grant these packets relatively more bandwidth and drop

them only after other packets are dropped.

You can also select traffic according to source and/or destination TCP or UDP

ports. For example, if your network uses a VoIP application that does not

automatically mark its signaling traffic, you could configure a QoS map entry

to match and mark packets destined to the port specified by your application.

You select the traffic to be marked by matching the QoS map entry to an

extended ACL. The ACL actually selects the traffic. An extended ACL can

define traffic according to its source and destination IP address as well as a

variety of fields in the IP, TCP, or UDP header. You also use extended ACLs to

mark traffic destined to a specific TCP or UDP protocol port.