Users Guide
Table Of Contents
- OS10 Enterprise Edition User Guide Release 10.3.2E(R2)
- Getting Started
- Download OS10 image and license
- Installation
- Log into OS10
- Install OS10 license
- Remote access
- Upgrade OS10
- CLI Basics
- User accounts
- Key CLI features
- CLI command modes
- CLI command hierarchy
- CLI command categories
- CONFIGURATION Mode
- Command help
- Check device status
- Candidate configuration
- Change to transaction-based configuration
- Back up or restore configuration
- Reload system image
- Filter show commands
- Alias command
- Batch mode commands
- Linux shell commands
- SSH commands
- OS9 environment commands
- Common commands
- alias
- batch
- boot
- commit
- configure
- copy
- delete
- dir
- discard
- do
- feature config-os9-style
- exit
- license
- lock
- management route
- move
- no
- reload
- show alias
- show boot
- show candidate-configuration
- show environment
- show inventory
- show ip management-route
- show ipv6 management-route
- show license status
- show running-configuration
- show startup-configuration
- show system
- show version
- start
- system
- system identifier
- terminal
- traceroute
- unlock
- write
- Interfaces
- Ethernet interfaces
- L2 mode configuration
- L3 mode configuration
- Management interface
- VLAN interfaces
- Loopback interfaces
- Port-channel interfaces
- Create port-channel
- Add port member
- Minimum links
- Assign Port Channel IP Address
- Remove or disable port-channel
- Load balance traffic
- Change hash algorithm
- Configure interface ranges
- Forward error correction
- View interface configuration
- Interface commands
- channel-group
- description (Interface)
- duplex
- fec
- interface breakout
- interface ethernet
- interface loopback
- interface mgmt
- interface null
- interface port-channel
- interface range
- interface vlan
- link-bundle-utilization
- mgmt
- mtu
- show interface
- show link-bundle-utilization
- show port-channel summary
- show vlan
- shutdown
- speed (Management)
- switchport access vlan
- switchport mode
- switchport trunk allowed vlan
- Layer 2
- 802.1X
- Link aggregation control protocol
- Link layer discovery protocol
- Protocol data units
- Optional TLVs
- Organizationally-specific TLVs
- Media endpoint discovery
- Network connectivity device
- LLDP-MED capabilities TLV
- Network policies TLVs
- Define network policies
- Packet timer values
- Disable and re-enable LLDP
- Advertise TLVs
- Network policy advertisement
- Fast start repeat count
- View LLDP configuration
- Adjacent agent advertisements
- Time to live
- LLDP commands
- Media Access Control
- Multiple spanning-tree protocol
- Rapid per-VLAN spanning-tree plus
- Rapid spanning-tree protocol
- Virtual LANs
- Port monitoring
- Layer 3
- Border gateway protocol
- Sessions and peers
- Route reflectors
- Multiprotocol BGP
- Attributes
- Selection criteria
- Weight and local preference
- Multiexit discriminators
- Origin
- AS path and next-hop
- Best path selection
- More path support
- Advertise cost
- 4-Byte AS numbers
- AS number migration
- Configure border gateway protocol
- Enable BGP
- Configure Dual Stack
- Peer templates
- Neighbor fall-over
- Fast external fallover
- Passive peering
- Local AS
- AS number limit
- Redistribute routes
- Additional paths
- MED attributes
- Local preference attribute
- Weight attribute
- Enable multipath
- Route-map filters
- Route reflector clusters
- Aggregate routes
- Confederations
- Route dampening
- Timers
- Neighbor soft-reconfiguration
- BGP commands
- Equal cost multi-path
- IPv4 routing
- IPv6 routing
- Open shortest path first
- Object tracking manager
- Policy-based routing
- Virtual router redundancy protocol
- Border gateway protocol
- System management
- Access Control Lists
- IP ACLs
- MAC ACLs
- IP fragment handling
- L3 ACL rules
- Assign sequence number to filter
- L2 and L3 ACLs
- Assign and apply ACL filters
- Ingress ACL filters
- Egress ACL filters
- Clear access-list counters
- IP prefix-lists
- Route-maps
- Match routes
- Set conditions
- continue Clause
- ACL flow-based monitoring
- Enable flow-based monitoring
- ACL commands
- clear ip access-list counters
- clear ipv6 access-list counters
- clear mac access-list counters
- deny
- deny (IPv6)
- deny (MAC)
- deny icmp
- deny icmp (IPv6)
- deny ip
- deny ipv6
- deny tcp
- deny tcp (IPv6)
- deny udp
- deny udp (IPv6)
- description
- ip access-group
- ip access-list
- ip as-path deny
- ip as-path permit
- ip community-list standard deny
- ip community–list standard permit
- ip extcommunity-list standard deny
- ip extcommunity-list standard permit
- ip prefix-list description
- ip prefix-list deny
- ip prefix-list permit
- ip prefix-list seq deny
- ip prefix-list seq permit
- ipv6 access-group
- ipv6 access-list
- ipv6 prefix-list deny
- ipv6 prefix-list description
- ipv6 prefix-list permit
- ipv6 prefix-list seq deny
- ipv6 prefix-list seq permit
- mac access-group
- mac access-list
- permit
- permit (IPv6)
- permit (MAC)
- permit icmp
- permit icmp (IPv6)
- permit ip
- permit ipv6
- permit tcp
- permit tcp (IPv6)
- permit udp
- permit udp (IPv6)
- remark
- seq deny
- seq deny (IPv6)
- seq deny (MAC)
- seq deny icmp
- seq deny icmp (IPv6)
- seq deny ip
- seq deny ipv6
- seq deny tcp
- seq deny tcp (IPv6)
- seq deny udp
- seq deny udp (IPv6)
- seq permit
- seq permit (IPv6)
- seq permit (MAC)
- seq permit icmp
- seq permit icmp (IPv6)
- seq permit ip
- seq permit ipv6
- seq permit tcp
- seq permit tcp (IPv6)
- seq permit udp
- seq permit udp (IPv6)
- show access-group
- show access-lists
- show ip as-path-access-list
- show ip community-list
- show ip extcommunity-list
- show ip prefix-list
- Route-map commands
- continue
- match as-path
- match community
- match extcommunity
- match interface
- match ip address
- match ip next-hop
- match ipv6 address
- match ipv6 next-hop
- match metric
- match origin
- match route-type
- match tag
- route-map
- set comm-list delete
- set community
- set extcomm-list delete
- set extcommunity
- set local-preference
- set metric
- set metric-type
- set next-hop
- set origin
- set tag
- set weight
- show route-map
- Quality of service
- Configure quality of service
- Class-map configuration
- Policy-map configuration
- Ingress traffic classification
- Queue selection
- Strict priority queuing
- Class of service or dot1p classification
- Mark traffic
- Traffic metering
- Bandwidth allocation
- Service-policy rate-shaping
- Policy-based rate-policing
- Storm control
- Control-plane policing
- Queue management
- Verify configuration
- Egress queue statistics
- QoS commands
- bandwidth
- class
- class-map
- clear interface
- clear qos statistics
- clear qos statistics type
- control-plane
- flowcontrol
- match
- match cos
- match dscp
- match precedence
- match queue
- match vlan
- pause
- police
- policy-map
- priority
- qos-group dot1p
- qos-group dscp
- queue qos-group
- random-detect
- service-policy
- set cos
- set dscp
- set qos-group
- shape
- show class-map
- show control-plane info
- show control-plane statistics
- show qos interface
- show policy-map
- show qos control-plane
- show qos egress bufffers interface
- show egress buffer-stats interface
- show qos ingress buffers interface
- show ingress buffer-stats interface
- show qos system
- show qos system buffers
- show qos maps
- system qos
- trust
- trust dot1p-map
- trust dscp-map
- qos-map traffic-class
- trust-map
- Virtual link trunking
- Converged data center services
- sFlow
- Troubleshoot OS10
- Support resources
• 0 to 40000000—kilobits per second (kbps)
• 0 to 40000 — megabits per second (mbps)
In S5148F-ON, consider the following guidelines for providing the bandwidth rates:
• Queue level shaping
– Set the bandwidth rate of shaping in multiples of 11 Mbps, with the minimum bandwidth rate starting from 11 Mbps. If you congure
a value other than the multiples of 11, the rate is mapped to the previous multiple of 11. For example, if you set the bandwidth rate to
12 Mbps, the value is congured as 11 Mbps in the system.
– Congure the burst size for buer allocation as 256*(8n-1), where the value of n ranges from 1 to 256 bytes.
• Interface Level
– When you apply shaping on interfaces, congure the peak rate in multiples of 25 Mbps, starting from 25 Mbps. If you congure a
value other than the multiples of 25, the rate is mapped to the previous multiple of 25. For example, if you set the bandwidth rate to
42 Mbps, the value is congured as 25 Mbps in the system.
NOTE: In the S5148F-ON platform, only peak rate and peak burst size are applied to the Hardware.
Policy-based shaping
OS10(config)# policy-map type queuing master
OS10(conf-pmap-queuing)# class first
OS10(conf-pmap-c-que)# shape min mbps 11 max mbps 44
View policy-map
OS10(conf-pmap-c-que)# do show policy-map
Service-policy(queuing) output: master
Class-map (queuing): first
shape min mbps 11 max mbps 44
Policy-based rate-policing
You can congure trac rate-limiting in packets per second (pps) for a QoS input policy, and a rate policing value in kilobits per second
(kbps) or pps. Committed rate guarantees bandwidth for trac entering or leaving the interface under normal network conditions.
When trac propagates at an average rate that is greater than or equal to the committed rate and less than peak-rate, it is green colored
or coded. The trac rate above the congured peak-rate is dropped to guarantee a bandwidth limit for an ingress trac ow.
For a system that does not have ingress buers, OS10 performs rate-limiting on the incoming trac stream. The trac rate above the
congured committed rate is tail dropped (which means if the queue is full the packets are dropped) to guarantee a xed bandwidth for an
ingress trac ow.
When the transmitted trac falls below the committed rate, the unused bandwidth aggregates to a maximum, this forms the committed
burst size. Trac is green-coded up to the point it does not exceed the committed burst size.
Peak rate is the maximum rate for trac arriving or exiting an interface under normal trac conditions. Peak burst size indicates the
maximum size of unused peak bandwidth that is aggregated. This aggregated bandwidth enables brief durations of burst trac that
exceeds the peak rate.
NOTE
: In S5148F-ON, the rate-limit includes inter-frame gap and preamble bytes as part of policer calculation. As a result, there
might be a deviation from the congured policer rate-limit and the policer output.
1 Create the policy-map type as qos and congure a name for the policy-map in CONFIGURATION mode.
policy-map type qos policy-map-name
2 Enter a class name to apply the shape rate in POLICY-MAP mode.
class class-map-name
3 Congure trac policing on incoming trac in POLICY-MAP-CLASS-MAP mode.
police {cir committed-rate [bc committed-burst-size]} {pir peak-rate [be peak-burst-size]}
Quality of service
453