配置HQoS示例.docx
《配置HQoS示例.docx》由会员分享,可在线阅读,更多相关《配置HQoS示例.docx(16页珍藏版)》请在冰豆网上搜索。
配置HQoS示例
配置HQoS示例
组网需求
如图1所示,VLAN10和VLAN20是企业分支的两个部门,VLAN30是企业总部。
企业分支通过交换机连接到Router,并通过Router的GE3/0/0接口上的两个子接口与总部连接。
每个部门有各自的业务流,包括语音、视频和数据,企业内部还有网管的控制报文。
各类报文被Switch打上不同的DSCP优先级,语音、网管控制、视频和数据分别为ef、cs6、af21和af11,现要求各部门有各自的保证带宽,并且能共享端口的最大带宽;对于不同的业务流,语音报文要保证低延时优先发送,网管控制报文要保证优先发送,视频、数据报文要保证带宽。
图1 配置HQoS组网图
配置思路
采用流策略嵌套的方式配置HQoS,实现对不同业务的差分服务,具体思路如下:
创建VLAN、VLANIF,并配置各接口,使企业用户能通过Router访问WAN侧网络。
在Router上配置VLAN10和VLAN20的子流策略,基于DSCP优先级进行流分类,语音报文入LLQ队列,网管控制报文进入EF队列,视频和数据报文进入AF队列,并绑定丢弃模板。
在Router上配置父流策略,基于VLANID进行流分类,对来自不同VLAN的报文进行流量整形,并为其绑定相应的子流策略。
在Router与WAN侧网络连接的接口出方向上应用父流策略,实现对不同用户的不同业务流量的区分,提供更为精细化的服务质量。
操作步骤
创建VLAN并配置各接口
#在Router上创建VLAN10和VLAN20。
system-view
[Huawei]sysnameRouter
[Router]vlanbatch1020
#配置接口Eth2/0/0为Trunk类型端口,并将Eth2/0/0加入VLAN10。
[Router]interfaceethernet2/0/0
[Router-Ethernet2/0/0]portlink-typetrunk
[Router-Ethernet2/0/0]porttrunkallow-passvlan10
[Router-Ethernet2/0/0]quit
#配置接口Eth2/0/1为Trunk类型端口,并将Eth2/0/1加入VLAN20。
[Router]interfaceethernet2/0/1
[Router-Ethernet2/0/1]portlink-typetrunk
[Router-Ethernet2/0/1]porttrunkallow-passvlan20
[Router-Ethernet2/0/1]quit
说明:
请配置Switch与Router对接的接口为Trunk类型接口,并分别加入VLAN10、VLAN20。
#创建VLANIF10和VLANIF20,并为VLANIF10配置IP地址192.168.1.1/24,为VLANIF20配置IP地址192.168.2.1/24。
[Router]interfacevlanif10
[Router-Vlanif10]ipaddress192.168.1.124
[Router-Vlanif10]quit
[Router]interfacevlanif20
[Router-Vlanif20]ipaddress192.168.2.124
[Router-Vlanif20]quit
#配置GE3/0/0的IP地址为192.168.3.1/24。
[Router]interfacegigabitethernet3/0/0
[Router-GigabitEthernet3/0/0]ipaddress192.168.3.124
[Router-GigabitEthernet3/0/0]quit
#配置GE3/0/0.1的控制VLAN为10,封装方式为dot1q,IP地址为192.168.4.1/24,配置GE3/0/0.2的控制VLAN为20,封装方式为dot1q,IP地址为192.168.5.1/24。
[Router]interfacegigabitethernet3/0/0.1
[Router-GigabitEthernet3/0/0.1]ipaddress192.168.4.124
[Router-GigabitEthernet3/0/0.1]dot1qterminationvid10
[Router-GigabitEthernet3/0/0.1]quit
[Router]interfacegigabitethernet3/0/0.2
[Router-GigabitEthernet3/0/0.2]ipaddress192.168.5.124
[Router-GigabitEthernet3/0/0.2]dot1qterminationvid20
[Router-GigabitEthernet3/0/0.2]quit
配置groupa和groupb的子流策略
#在Router上创建流分类data、video、control和voice,对来自企业的不同业务流按照其DSCP优先级进行分类。
[Router]trafficclassifierdata
[Router-classifier-data]if-matchdscpaf11
[Router-classifier-data]quit
[Router]trafficclassifiervideo
[Router-classifier-video]if-matchdscpaf21
[Router-classifier-video]quit
[Router]trafficclassifiercontrol
[Router-classifier-control]if-matchdscpcs6
[Router-classifier-control]quit
[Router]trafficclassifiervoice
[Router-classifier-voice]if-matchdscpef
[Router-classifier-voice]quit
#在Router上创建WRED丢弃模板data和video。
[Router]drop-profiledata
[Router-drop-profile-data]wreddscp
[Router-drop-profile-data]dscp10low-limit70high-limit85discard-percentage60
[Router-drop-profile-data]quit
[Router]drop-profilevideo
[Router-drop-profile-video]wreddscp
[Router-drop-profile-video]dscp18low-limit80high-limit95discard-percentage60
[Router-drop-profile-video]quit
#在Router上创建流行为data、video、control和voice,为来自企业的不同业务流配置拥塞管理和拥塞避免。
[Router]trafficbehaviordata
[Router-behavior-data]queueafbandwidthpct45
[Router-behavior-data]drop-profiledata
[Router-behavior-data]quit
[Router]trafficbehaviorvideo
[Router-behavior-video]queueafbandwidthpct30
[Router-behavior-video]drop-profilevideo
[Router-behavior-video]quit
[Router]trafficbehaviorcontrol
[Router-behavior-control]queueefbandwidthpct5
[Router-behavior-control]quit
[Router]trafficbehaviorvoice
[Router-behavior-voice]queuellqbandwidthpct15
[Router-behavior-voice]quit
#在Router上定义groupa和groupb的子流策略。
[Router]trafficpolicygroupa-sub
[Router-trafficpolicy-groupa-sub]classifiervoicebehaviorvoice
[Router-trafficpolicy-groupa-sub]classifiercontrolbehaviorcontrol
[Router-trafficpolicy-groupa-sub]classifiervideobehaviorvideo
[Router-trafficpolicy-groupa-sub]classifierdatabehaviordata
[Router-trafficpolicy-groupa-sub]quit
[Router]trafficpolicygroupb-sub
[Router-trafficpolicy-groupb-sub]classifiervoicebehaviorvoice
[Router-trafficpolicy-groupb-sub]classifiercontrolbehaviorcontrol
[Router-trafficpolicy-groupb-sub]classifiervideobehaviorvideo
[Router-trafficpolicy-groupb-sub]classifierdatabehaviordata
[Router-trafficpolicy-groupb-sub]quit
配置父流策略
#在Router上创建流分类groupa和groupb,对来自企业的不同业务流按照其VLANID进行分类。
[Router]trafficclassifiergroupa
[Router-classifier-groupa]if-matchvlan-id10
[Router-classifier-groupa]quit
[Router]trafficclassifiergroupb
[Router-classifier-groupb]if-matchvlan-id20
[Router-classifier-groupb]quit
#在Router上创建流行为groupa和groupb,对来自不同VLAN的报文进行流量整形,并为其绑定相应的子流策略。
[Router]trafficbehaviorgroupa
[Router-behavior-groupa]gtscir20000cbs500000queue-length50
[Router-behavior-groupa]traffic-policygroupa-sub
[Router-behavior-groupa]quit
[Router]trafficbehaviorgroupb
[Router-behavior-groupb]gtscir30000cbs750000queue-length50
[Router-behavior-groupb]traffic-policygroupb-sub
[Router-behavior-groupb]quit
==============================================================================
【注意】
在父流策略中,绑定了子流策略,该子流策略中,绑定了两(多)个流行为,而且这两个流行为都是包括了queueaf动作(实际上queueef也是一样的道理),所以要么分配接口剩余可用带宽的百分比,要么分配接口实际可用带宽百分比。
【质疑】
下面截图来自于HedEx文档——
HuaweiAR100&AR120&AR150&AR160&AR200&AR1200&AR2200&AR3200&AR3600产品文档
上面定义的子流策略中,曾定义子流策略,其中还定义了(多)个流行为,其中有两个流行为进行了queueaf动作,但是这两个流行为所配置的带宽/带宽百分比并没有统一。
截图如下:
============================================================================
#在Router上定义父流策略。
[Router]trafficpolicyenterprise
[Router-trafficpolicy-enterprise]classifiergroupabehaviorgroupa
[Router-trafficpolicy-enterprise]classifiergroupbbehaviorgroupb
[Router-trafficpolicy-enterprise]quit
应用父流策略
#在Router的接口GE3/0/0出方向上应用父流策略。
[Router]interfacegigabitethernet3/0/0
[Router-GigabitEthernet3/0/0]traffic-policyenterpriseoutbound
验证配置结果
#查看Router接口的配置信息。
[Router-GigabitEthernet3/0/0]displaythis
#
interfaceGigabitEthernet3/0/0
ipaddress192.168.3.1255.255.255.0
traffic-policyenterpriseoutbound
#
return
#查看在接口上应用的流策略信息。
[Router-GigabitEthernet3/0/0]quit
[Router]displaytraffic-policyapplied-recordenterprise
-------------------------------------------------
PolicyName:
enterprise
PolicyIndex:
2
Classifier:
groupaBehavior:
groupa
Classifier:
groupbBehavior:
groupb
-------------------------------------------------
*interfaceGigabitEthernet3/0/0
traffic-policyenterpriseoutbound
slot3:
success
nestPolicy:
groupa-sub
slot0:
success
nestPolicy:
groupb-sub
slot0:
success
Classifier:
groupa
Operator:
OR
Rule(s):
if-matchvlan-id10
Behavior:
groupa
GeneralTrafficShape:
CIR20000(Kbps),CBS500000(byte)
Queuelength50(Packets)
NestPolicy:
groupa-sub
Classifier:
voice
Operator:
OR
Rule(s):
if-matchdscpef
Behavior:
voice
Low-latency:
Bandwidth15(%)
Bandwidth3000(Kbps)CBS75000(Bytes)
Classifier:
control
Operator:
OR
Rule(s):
if-matchdscpcs6
Behavior:
control
ExpeditedForwarding:
Bandwidth5(%)
Bandwidth1000(Kbps)CBS25000(Bytes)
QueueLength:
64(Packets)131072(Bytes)
Classifier:
video
Operator:
OR
Rule(s):
if-matchdscpaf21
Behavior:
video
AssuredForwarding:
Bandwidth30(%)
Bandwidth6000(Kbps)
DropMethod:
WRED
Drop-profile:
video
Classifier:
data
Operator:
OR
Rule(s):
if-matchdscpaf11
Behavior:
data
AssuredForwarding:
Bandwidth45(%)
Bandwidth9000(Kbps)
DropMethod:
WRED
Drop-profile:
dataBehavior:
Be
AssuredForwarding:
Bandwidth50000(Kbps)Classifier:
groupb
Operator:
OR
Rule(s):
if-matchvlan-id20
Behavior:
groupb
GeneralTrafficShape:
CIR30000(Kbps),CBS750000(byte)
Queuelength50(Packets)
NestPolicy:
groupa-sub
NestPolicy:
groupb-sub
Classifier:
voice
Operator:
OR
Rule(s):
if-matchdscpef
Behavior:
voice
Low-latency:
Bandwidth15(%)
Bandwidth4500(Kbps)CBS112500(Bytes)
Classifier:
control
Operator:
OR
Rule(s):
if-matchdscpcs6
Behavior:
control
ExpeditedForwarding:
Bandwidth5(%)
Bandwidth1500(Kbps)CBS37500(Bytes)
QueueLength:
64(Packets)131072(Bytes)
Classifier:
video
Operator:
OR
Rule(s):
if-matchdscpaf21
Behavior:
video
AssuredForwarding:
Bandwidth30(%)
Bandwidth9000(Kbps)
DropMethod:
WRED
Drop-profile:
video
Classifier:
data
Operator:
OR
Rule(s):
if-matchdscpaf11
Behavior:
data
AssuredForwarding:
Bandwidth45(%)
Bandwidth13500(Kbps)
DropMethod:
WRED
Drop-profile:
dataBehavior:
Be
AssuredForwarding:
Bandwidth50000(Kbps)-------------------------------------------------
Policytotalappliedtimes:
1.
配置文件
Router的配置文件
#
sysnameRouter
#
vlanbatch1020
#
drop-profiledata
wreddscp
dscpaf11low-limit70high-limit85discard-percentage60
drop-profilevideo
wreddscp
dscpaf21low-limit80high-limit95discard-percentage60
#
trafficclassifiercontroloperatoror
if-matchdscpcs6
trafficclassifiergroupboperatoror
if-matchvlan-id20
trafficclassifiervideooperatoror
if-matchdscpaf21
trafficclassifiergroupaoperatoror
if-matchvlan-id10
trafficclassifierdataoperatoror
if-matchdscpaf11
trafficclassifiervoiceoperatoror
if-matchdscpef
#
trafficbehaviorcontrol
queueefbandwidthpct5
trafficbehaviorgroupb
gtscir30000cbs750000queue-length50
traffic-policygroupb-sub
trafficbehaviorvideo
queueafbandwidthpct30
drop-profilevideo
trafficbehaviorgroupa
gtscir20000cbs500000queue-length