Purpose
This procedure provides the steps to configure QoS.
Procedure
Proceed as follows to configure QoS:
1 Configure general QoS parameters (if necessary):
i Configure the ATM overhead factor, the EFM overhead factor, and the CAC mode with the following command:
configure qos
(no) atm-overhead-fact <Qos::AtmFactor> (no) eth-efm-fact <Qos::EthEfmFactor> (no) enable-alignment
(no) cac-mode <Qos::CacMode>
ii Configure the upstream QoS DSL Control Packet Policer for incoming packets with the following command:
configure qos dsl-ctrl-pkt-policer (no) sustained-rate <Qos::SustainedRate> (no) burst-size <Qos::DslCtrlBurstSize>
Note — In case of S+C VLAN CC, both the S-VLAN and the C-VLAN P-bits are set by the P-bit contract table, port default P-bit, or by the policy action. Note that in this case downstream traffic segregation relies on the P-bits in the C-VLAN tag.
DLP 1134 — Configure QoS
DLP 1134-2 December 2011 Alcatel-Lucent 7302 | 7330 | 7356 R4.3.02
Operations and Maintenance Using CLI for FD 24 NT Edition 02 Released 3HH-10104-AAAA-TQZZA
iii Configure the police rate and burst rate per protocol with the following command:
configure qos trl-pkt-policer (protocol-id) (no) sustained-rate <Qos::SustainedRate> (no) burst-size <Qos::DslCtrlBurstSize>
iv If required, configure the DSCP to Dot1P Alignment Table for layer 3 forwarded traffic with the following command:
configure qos dscp-map-dot1p (index) dot1p-value <Qos::DscpToDot1PAlign>
v Configure the downstream traffic class mapping table (if needed) defining the relationship between the traffic class and the queue and queue drop color, with the following command:
configure qos tc-map-dot1p (index) queue <Qos::Queues>
dpcolor <Qos::Color>
vi Configure the QoS priority bit handling, which is a system-level VLAN-specific parameter, via the command “configure vlan” (parameter prority-policy) as described in DLP 1187.
2 Configure the QoS policer profiles with the following command: configure qos profiles policer (name)
committed-info-rate <Qos::CommittedInfoRate> committed-burst-size <Qos::CommittedBurstSize> (no) policer-type <QoS::PolicerType>
[excess-info-rate <Qos::ExcessInfoRate>] [excess-burst-size <Qos::ExcessBurstSize>] [coupling-flag <Qos::CouplingFlag>] [color-mode <Qos::ColorMode>] [yellow-action <Qos::YellowAction>] [red-action <Qos::RedAction>] [green-action <Qos::GreenAction>]
3 Create a QoS marker profile :
i Configure a marker for single dot-1P with the following command: configure qos profiles marker d1p (name)
default-dot1p <Qos::ExtVlanSysPrio>
ii Configure a marker for single DSCP with the following command: configure qos profiles marker dscp (name)
default-dscp <Qos::DscpToDot1PAlignmentDscpIndex> (no) alignment
Note — For more information on configured and actual values for Committed Info Rate (CIR) and Committed Burst size (CBS), see “QoS Policer Profile” in TNG 2101.
DLP 1134 — Configure QoS
iii Configure a marker for a DSCP contract table with the following command: configure qos profiles marker dscp-contract (name)
(no) alignment
iv Configure a codepoint for a DSCP contract table with the following command: configure qos profiles marker dscp-contract (name)
codepoint (codepoint)
(on) dscp-value <Qos::DscpToDot1PAlignmentDscpIndex>
v Configure a marker for Dot1P and the DSCP contract table with the following command:
configure qos profiles marker d1p-dscp-contract (name) dot1p-value <Qos::ExtVlanSysPrio>
vi Configure a codepoint for Dot1P and the DSCP contract table with the following command:
configure qos profiles marker d1p-dscp-contract (name) codepoint (codepoint)
(no) dscp-value <Qos::DscpToDot1PAlignmentDscpIndex>
vii Configure a marker for Dot1P and single DSCP with the following command: configure qos profiles marker d1p-dscp (name)
default-dscp <Qos::DscpToDot1PAlignmentDscpIndex> default-dot1p <Qos::ExtVlanSysPrio>
viii Configure a marker for Dot1P alignment with the following command:
configure qos profiles marker d1p-alignment (name) (alignment) enable
ix Configure a marker for dot1p remark table with the following command: configure qos profiles marker dot1p-remark (name)
dot1p-value < Qos::ExtVlanSysPrio> remark-value <Qos::ExtVlanSysPrio >
4 Configure a scheduler node profile with the following command: configure qos profiles scheduler-node (name)
priority <Qos::QosPriority> weight <Qos::QosWeight>
shaper-profile <Qos::QosShaperProfileName>
(no) mcast-inc-shape <Qos::QosMulticastInclShaping>
Note — DSCP-to-pbit alignment is only supported on VLAN ports that correspond to the configured pvid and only for untagged IPoE traffic.
DLP 1134 — Configure QoS
DLP 1134-4 December 2011 Alcatel-Lucent 7302 | 7330 | 7356 R4.3.02
Operations and Maintenance Using CLI for FD 24 NT Edition 02 Released 3HH-10104-AAAA-TQZZA
5 Configure a CAC profile with the following command: configure qos profiles cac (name)
res-voice-bandwidth <Qos::BandWidthKBPS> max-mcast-bandwidth <Qos::BandWidthKBPS> res-data-bandwidth <Qos::BandWidthKBPS>
6 Configure a queue profile (that is, the used algorithm (tail-drop or Random Early Detection (RED)) and threshold(s)) with the following command:
configure qos profiles queue (name) tail-drop:<Qos::MaxThreshold> | red:<Qos::MinThreshold>:<Qos::MaxThreshold>: <Qos::DiscardProbability> | twocolour-taildrop:<Qos::MaxThreshold>: <Qos::MaxThresholdYellow> | twocolourred:<Qos::MinThreshold>:<Qos::MaxThreshold>: <Qos::DiscardProbability>:<Qos::MinThresholdYellow>: <Qos::MaxThresholdYellow>:<Qos::DiscardProbYellow> | gpon-tail-drop:<Qos::MinThreshold>:<Qos::MaxThreshold> | threecolour-taildrop:<Qos::MaxThreshold>: <Qos::MaxThresholdYellow>:<Qos::MaxThresholdRed> | threecolour-red:<Qos::MinThreshold>: <Qos::MaxThreshold>:<Qos::DiscardProbability>: <Qos::MinThresholdYellow>:<Qos::MaxThresholdYellow>: <Qos::DiscardProbYellow>:<Qos::MaxThreshold>: <Qos::DiscardProbability>:<Qos::MinThresholdYellow>: <Qos::MaxThresholdYellow>:<Qos::DiscardProbYellow>: <Qos::MinThresholdRed>:<Qos::MaxThresholdRed>: <Qos::DiscardProbRed>:<Qos::MinQueueSize>:<Qos::MaxQueueSize> (no) unit <Qos::Units>
7 Use one of the following commands to configure a filter which can be used to build policy actions based on filtering criteria:
a To configure a filter using L2 filtering criteria (MAC address, Ethernet type,...), use the following command:
configure qos profiles l2-filter (name) (no) dst-mac-addr <Qos::MacAddrAndMask> (no) src-mac-addr <Qos::MacAddrAndMask> (no) ethertype <Qos::FilterEthernetType> (no) dot1p-priority <Qos::MatchDot1pValue> (no) canonical-format <Qos::FilterCfi> (no) vlan-id <Qos::FilterVlanId>
b To configure a filter using L3 filtering criteria (destination IP address, source IP address,...), use the following command:
configure qos profiles l3-filter (name) (no) dst-ip-addr <Ip::AddressAndMaskFull> (no) src-ip-addr <Ip::AddressAndMaskFull> (no) min-dst-port <Qos::L4PortNumber> (no) max-dst-port <Qos::L4PortNumber> (no) min-src-port <Qos::L4PortNumber> (no) max-src-port <Qos::L4PortNumber> (no) dscp-value <Qos::MatchDscpValue> (no) protocol <Qos::Protocol>
DLP 1134 — Configure QoS
8 Configure QoS policy action profiless, using the policer profiles created in step 2, with the following command:
configure qos profiles policy-action (name) (no) dscp-value <Qos::SetDscpValue>
(no) dot1p-value <Qos::SetDot1pValue> (no) discard-packet
(no) shared-policer
(no) policer-profile <Policer Profile name>
9 Configure QoS policy profiles with a set of associated actions. A policy rule contains:
•
Filter type•
L2 or L3 filter (see step 7)•
Precedence of this policy rule•
Policy action (see step 8).configure qos profiles policy (name) filter <Qos::PolicyFilter>
(no) precedence <Qos::PolicyPrecedence> (no) policy-action <Qos::QosProfileName>
10 Create the QoS session profile:
i Configure the session profile table (using policer profiles created in step 1
and marker profiles used in step 3) with the following command: configure qos profiles session (name)
logical-flow-type <Qos::LogicalFlowType>
(no) up-policer none | name:<Policer Profile name> (no) down-policer none | name:<Policer Profile name> (no) up-marker none | name:<Marker Profile name>
ii Configure a list of upstream policy profiles (minimum 2, maximum 16), using policy profiles created in step 9, with the following command:
configure qos profiles session (name) up-policy (Policy name)
iii Configure a list of downstream policy profiles (minimum 2, maximum 16), using policies created in step 9, with the following command:
configure qos profiles session (name) down-policy (Policy name)
11 Configure an upstream bandwidth profile with the following command:
configure qos profiles bandwidth (name)
committed-info-rate <Qos::BwCommittedInfoRate> assured-info-rate <Qos::BwAssuredInfoRate> excessive-info-rate <Qos::BwExcessiveInfoRate> delay-tolerance <Qos::DelayTolerance> )
DLP 1134 — Configure QoS
DLP 1134-6 December 2011 Alcatel-Lucent 7302 | 7330 | 7356 R4.3.02
Operations and Maintenance Using CLI for FD 24 NT Edition 02 Released 3HH-10104-AAAA-TQZZA
12 Configure a shaper profile with the following command:
configure qos profiles shaper (name)
committed-info-rate <Qos::ShaperCommittedInfoRate> committed-burst-size <Qos::ShaperCommittedBurstSizeNew> (no) excess-info-rate <Qos::ShaperExcessiveInfoRate> (no) type <Qos::ShaperType>
13 Attach the created session profile to a bridge port with the following command:
configure bridge port <Rack/Shelf/Slot/Port:VCI:VPI> (no) qos-profile <Session-profile>
14 Attach the created queue profile (see step 6) and shaper profile (see step 12) to an interface (can be a DSL port, an SHDSL interface, or an Ethernet link) with the next command:
configure qos interface (index) queue (queue) priority <Qos::QosPriority>
weight <Qos::QosWeight>
queue-profile <Qos::QosQueueProfileName> shaper-profile <Qos::QosShaperProfileName>]
15 STOP. This procedure is complete.
Configuration example (Config#1):
configure qos profiles policer ppUsSap256k
committed-info-rate 256 committed-burst-size 32000
configure qos profiles policer ppDsSap3M committed-info-rate 3000 committed-burst-size 96000
configure qos profiles policer ppVoice100k committed-info-rate 100 committed-burst-size 3000
configure qos profiles marker d1p mpUsSap default-dot1p 0 configure qos profiles l3-filter f3pUsVoiceIp
src-ip-addr 192.170.0.0/16
configure qos profiles l3-filter f3pDsVoiceIp dst-ip-addr 192.170.0.0/16
configure qos profiles l3-filter l3pUsVodIp dst-ip-addr 192.180.2.2/0
configure qos profiles l3-filter l3pDsVodIp src-ip-addr 192.180.2.2/0
configure qos profiles policy-action apVoice dot1p-value 6 policer-profile name:ppVoice100k
configure qos profiles policy-action apVod dot1p-value 3 configure qos profiles policy pcyUpVoice
policy-action name:apVoice no precedence filter l3-name:f3pUsVoiceIp
DLP 1134 — Configure QoS
configure qos profiles policy pcyDnVoice policy-action name:apVoice no precedence filter l3-name:f3pDsVoiceIp
configure qos profiles policy pcyUpVod policy-action name:apVod filter l3-name:l3pUsVodIp
configure qos profiles policy pcyDnVod policy-action name:apVod filter l3-name:l3pDsVodIp
DLP 1134 — Configure QoS
DLP 1134-8 December 2011 Alcatel-Lucent 7302 | 7330 | 7356 R4.3.02
DLP 1134 — Configure QoS
DLP 1134-10 December 2011 Alcatel-Lucent 7302 | 7330 | 7356 R4.3.02
DLP 1145 — Configure 802.1x
Purpose
This procedure provides the steps to enable, disable, and configure parameters for 802.1x.
Procedure
Proceed as follows to configure 802.1x:
1 Enable 802.1x with the following command:
configure system security pae port-access
2 Configure the 802.1x parameters with the following command: configure system security pae authenticator (port) (no) controlled-port <Aaa::PaeControlledPortControl> (no) quiet-period <Aaa::paeQuitTime>
(no) tx-period <Aaa::paeTime> (no) supp-timeout <Aaa::paeTime> (no) server-timeout <Aaa::paeTime> (no) max-req <Aaa::paeMaxReq> (no) re-auth-enabled
(no) re-auth-period <Aaa::paeReauthPeriod>
3 Configure the remote authenticator and enable authentication and handshake with the following command:
configure system security pae ext-authenticator (port) (no) authentication
(no) init-authreq-off (no) handshake
DLP 1145 — Configure 802.1x
DLP 1145-2 December 2011 Alcatel-Lucent 7302 | 7330 | 7356 R4.3.02
Operations and Maintenance Using CLI for FD 24 NT Edition 02 Released 3HH-10104-AAAA-TQZZA
4 Enable initialization control for a port with the following command: configure system security pae port (port)
(no) initialize
5 Optionally, determine the behavior for 802.1x sessions in case authentication servers are down or unreachable with the following command:
configure system security (no) login-banner <Sec::Banner> (no) welcome-banner <Sec::Banner>
6 STOP. This procedure is complete.
Configuration example (Config#1):
configure system security pae port-access
configure system security pae authenticator 1/1/5/12:8:35 controlled-port force-unauthorized server-timeout 20 max-req 5 configure system security pae ext-authenticator 1/1/5/12:8:35 authentication handshake