配置HQoS示例.docx

1、配置HQoS示例配置HQoS示例组网需求如图1所示，VLAN10和VLAN20是企业分支的两个部门，VLAN30是企业总部。企业分支通过交换机连接到Router，并通过Router的GE3/0/0接口上的两个子接口与总部连接。每个部门有各自的业务流，包括语音、视频和数据，企业内部还有网管的控制报文。各类报文被Switch打上不同的DSCP优先级，语音、网管控制、视频和数据分别为ef、cs6、af21和af11，现要求各部门有各自的保证带宽，并且能共享端口的最大带宽；对于不同的业务流，语音报文要保证低延时优先发送，网管控制报文要保证优先发送，视频、数据报文要保证带宽。图1配置HQoS组网图配置思

2、路采用流策略嵌套的方式配置HQoS，实现对不同业务的差分服务，具体思路如下：创建VLAN、VLANIF，并配置各接口，使企业用户能通过Router访问WAN侧网络。在Router上配置VLAN10和VLAN20的子流策略，基于DSCP优先级进行流分类，语音报文入LLQ队列，网管控制报文进入EF队列，视频和数据报文进入AF队列，并绑定丢弃模板。在Router上配置父流策略，基于VLAN ID进行流分类，对来自不同VLAN的报文进行流量整形，并为其绑定相应的子流策略。在Router与WAN侧网络连接的接口出方向上应用父流策略，实现对不同用户的不同业务流量的区分，提供更为精细化的服务质量。操作步骤创

3、建VLAN并配置各接口# 在Router上创建VLAN10和VLAN20。 system-viewHuawei sysname RouterRouter vlan batch 10 20# 配置接口Eth2/0/0为Trunk类型端口，并将Eth2/0/0加入VLAN10。Router interface ethernet 2/0/0Router-Ethernet2/0/0 port link-type trunkRouter-Ethernet2/0/0 port trunk allow-pass vlan 10Router-Ethernet2/0/0 quit# 配置接口Eth2/0/1为T

4、runk类型端口，并将Eth2/0/1加入VLAN20。Router interface ethernet 2/0/1Router-Ethernet2/0/1 port link-type trunkRouter-Ethernet2/0/1 port trunk allow-pass vlan 20Router-Ethernet2/0/1 quit说明：请配置Switch与Router对接的接口为Trunk类型接口，并分别加入VLAN10、VLAN20。# 创建VLANIF10和VLANIF20，并为VLANIF10配置IP地址192.168.1.1/24，为VLANIF20配置IP地址192

5、.168.2.1/24。Router interface vlanif 10Router-Vlanif10 ip address 192.168.1.1 24Router-Vlanif10 quitRouter interface vlanif 20Router-Vlanif20 ip address 192.168.2.1 24Router-Vlanif20 quit# 配置GE3/0/0的IP地址为192.168.3.1/24。Router interface gigabitethernet 3/0/0Router-GigabitEthernet3/0/0 ip address 192.1

6、68.3.1 24Router-GigabitEthernet3/0/0 quit# 配置GE3/0/0.1的控制VLAN为10，封装方式为dot1q，IP地址为192.168.4.1/24，配置GE3/0/0.2的控制VLAN为20，封装方式为dot1q，IP地址为192.168.5.1/24。Router interface gigabitethernet 3/0/0.1Router-GigabitEthernet3/0/0.1 ip address 192.168.4.1 24Router-GigabitEthernet3/0/0.1 dot1q termination vid 10Ro

7、uter-GigabitEthernet3/0/0.1 quitRouter interface gigabitethernet 3/0/0.2Router-GigabitEthernet3/0/0.2 ip address 192.168.5.1 24Router-GigabitEthernet3/0/0.2 dot1q termination vid 20Router-GigabitEthernet3/0/0.2 quit配置groupa和groupb的子流策略# 在Router上创建流分类data、video、control和voice，对来自企业的不同业务流按照其DSCP优先级进行分类

8、。Router traffic classifier dataRouter-classifier-data if-match dscp af11Router-classifier-data quitRouter traffic classifier videoRouter-classifier-video if-match dscp af21Router-classifier-video quitRouter traffic classifier controlRouter-classifier-control if-match dscp cs6Router-classifier-contro

9、l quitRouter traffic classifier voiceRouter-classifier-voice if-match dscp efRouter-classifier-voice quit# 在Router上创建WRED丢弃模板data和video。Router drop-profile dataRouter-drop-profile-data wred dscpRouter-drop-profile-data dscp 10 low-limit 70 high-limit 85 discard-percentage 60Router-drop-profile-data

10、quitRouter drop-profile videoRouter-drop-profile-video wred dscpRouter-drop-profile-video dscp 18 low-limit 80 high-limit 95 discard-percentage 60Router-drop-profile-video quit# 在Router上创建流行为data、video、control和voice，为来自企业的不同业务流配置拥塞管理和拥塞避免。Router traffic behavior dataRouter-behavior-data queue af ban

11、dwidth pct 45Router-behavior-data drop-profile dataRouter-behavior-data quitRouter traffic behavior videoRouter-behavior-video queue af bandwidth pct 30Router-behavior-video drop-profile videoRouter-behavior-video quitRouter traffic behavior controlRouter-behavior-control queue ef bandwidth pct 5Rou

12、ter-behavior-control quitRouter traffic behavior voiceRouter-behavior-voice queue llq bandwidth pct 15Router-behavior-voice quit# 在Router上定义groupa和groupb的子流策略。Router traffic policy groupa-subRouter-trafficpolicy-groupa-sub classifier voice behavior voiceRouter-trafficpolicy-groupa-sub classifier con

13、trol behavior controlRouter-trafficpolicy-groupa-sub classifier video behavior videoRouter-trafficpolicy-groupa-sub classifier data behavior dataRouter-trafficpolicy-groupa-sub quitRouter traffic policy groupb-subRouter-trafficpolicy-groupb-sub classifier voice behavior voiceRouter-trafficpolicy-gro

14、upb-sub classifier control behavior controlRouter-trafficpolicy-groupb-sub classifier video behavior videoRouter-trafficpolicy-groupb-sub classifier data behavior dataRouter-trafficpolicy-groupb-sub quit配置父流策略# 在Router上创建流分类groupa和groupb，对来自企业的不同业务流按照其VLAN ID进行分类。Router traffic classifier groupaRout

15、er-classifier-groupa if-match vlan-id 10Router-classifier-groupa quitRouter traffic classifier groupbRouter-classifier-groupb if-match vlan-id 20Router-classifier-groupb quit# 在Router上创建流行为groupa和groupb，对来自不同VLAN的报文进行流量整形，并为其绑定相应的子流策略。Router traffic behavior groupaRouter-behavior-groupa gts cir 2000

16、0 cbs 500000 queue-length 50Router-behavior-groupa traffic-policy groupa-subRouter-behavior-groupa quitRouter traffic behavior groupbRouter-behavior-groupb gts cir 30000 cbs 750000 queue-length 50Router-behavior-groupb traffic-policy groupb-subRouter-behavior-groupb quit=【注意】在父流策略中，绑定了子流策略，该子流策略中，绑定

17、了两(多)个流行为，而且这两个流行为都是包括了queue af动作（实际上queue ef也是一样的道理），所以要么分配接口剩余可用带宽的百分比，要么分配接口实际可用带宽百分比。【质疑】下面截图来自于HedEx文档Huawei AR100&AR120&AR150&AR160&AR200&AR1200&AR2200&AR3200&AR3600 产品文档上面定义的子流策略中，曾定义子流策略，其中还定义了(多)个流行为，其中有两个流行为进行了queue af动作，但是这两个流行为所配置的带宽/带宽百分比并没有统一。截图如下：=# 在Router上定义父流策略。Router traffic polic

18、y enterpriseRouter-trafficpolicy-enterprise classifier groupa behavior groupaRouter-trafficpolicy-enterprise classifier groupb behavior groupbRouter-trafficpolicy-enterprise quit应用父流策略# 在Router的接口GE3/0/0出方向上应用父流策略。Router interface gigabitethernet 3/0/0Router-GigabitEthernet3/0/0 traffic-policy enter

19、prise outbound验证配置结果# 查看Router接口的配置信息。Router-GigabitEthernet3/0/0 display this# interface GigabitEthernet3/0/0 ip address 192.168.3.1 255.255.255.0 traffic-policy enterprise outbound # return # 查看在接口上应用的流策略信息。Router-GigabitEthernet3/0/0 quitRouter display traffic-policy applied-record enterprise- Po

20、licy Name: enterprise Policy Index: 2 Classifier:groupa Behavior:groupa Classifier:groupb Behavior:groupb - *interface GigabitEthernet3/0/0 traffic-policy enterprise outbound slot 3 : success nest Policy : groupa-sub slot 0 : success nest Policy : groupb-sub slot 0 : success Classifier: groupa Opera

21、tor: OR Rule(s) : if-match vlan-id 10 Behavior: groupa General Traffic Shape: CIR 20000 (Kbps), CBS 500000 (byte) Queue length 50 (Packets) Nest Policy : groupa-sub Classifier: voice Operator: OR Rule(s) : if-match dscp ef Behavior: voice Low-latency: Bandwidth 15 (%) Bandwidth 3000 (Kbps) CBS 75000

22、 (Bytes) Classifier: control Operator: OR Rule(s) : if-match dscp cs6 Behavior: control Expedited Forwarding: Bandwidth 5 (%) Bandwidth 1000 (Kbps) CBS 25000 (Bytes) Queue Length: 64 (Packets) 131072 (Bytes) Classifier: video Operator: OR Rule(s) : if-match dscp af21 Behavior: video Assured Forwardi

23、ng: Bandwidth 30 (%) Bandwidth 6000 (Kbps) Drop Method: WRED Drop-profile: video Classifier: data Operator: OR Rule(s) : if-match dscp af11 Behavior: data Assured Forwarding: Bandwidth 45 (%) Bandwidth 9000 (Kbps) Drop Method: WRED Drop-profile: data Behavior: Be Assured Forwarding: Bandwidth 50000

24、(Kbps) Classifier: groupb Operator: OR Rule(s) : if-match vlan-id 20 Behavior: groupb General Traffic Shape: CIR 30000 (Kbps), CBS 750000 (byte) Queue length 50 (Packets) Nest Policy : groupa-sub Nest Policy : groupb-sub Classifier: voice Operator: OR Rule(s) : if-match dscp ef Behavior: voice Low-l

25、atency: Bandwidth 15 (%) Bandwidth 4500 (Kbps) CBS 112500 (Bytes) Classifier: control Operator: OR Rule(s) : if-match dscp cs6 Behavior: control Expedited Forwarding: Bandwidth 5 (%) Bandwidth 1500 (Kbps) CBS 37500 (Bytes) Queue Length: 64 (Packets) 131072 (Bytes) Classifier: video Operator: OR Rule

26、(s) : if-match dscp af21 Behavior: video Assured Forwarding: Bandwidth 30 (%) Bandwidth 9000 (Kbps) Drop Method: WRED Drop-profile: video Classifier: data Operator: OR Rule(s) : if-match dscp af11 Behavior: data Assured Forwarding: Bandwidth 45 (%) Bandwidth 13500 (Kbps) Drop Method: WRED Drop-profi

27、le: data Behavior: Be Assured Forwarding: Bandwidth 50000 (Kbps) - Policy total applied times: 1. 配置文件Router的配置文件# sysname Router# vlan batch 10 20 # drop-profile data wred dscp dscp af11 low-limit 70 high-limit 85 discard-percentage 60 drop-profile video wred dscp dscp af21 low-limit 80 high-limit

28、95 discard-percentage 60 # traffic classifier control operator or if-match dscp cs6 traffic classifier groupb operator or if-match vlan-id 20 traffic classifier video operator or if-match dscp af21 traffic classifier groupa operator or if-match vlan-id 10 traffic classifier data operator or if-match

29、 dscp af11 traffic classifier voice operator or if-match dscp ef # traffic behavior control queue ef bandwidth pct 5 traffic behavior groupb gts cir 30000 cbs 750000 queue-length 50 traffic-policy groupb-sub traffic behavior video queue af bandwidth pct 30 drop-profile video traffic behavior groupa gts cir 20000 cbs 500000 queue-length