Huawei Quidway S5000 Series User manual

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 ACL Configuration.......................................................................................................1-1
1.1 Brief Introduction to ACL....................................................................................................1-1
1.1.1 ACL Overview .........................................................................................................1-1
1.1.2 ACL Supported by Ethernet Switch.........................................................................1-2
1.2 Configure ACL ...................................................................................................................1-3
1.2.1 Configure Time-Range............................................................................................1-3
1.2.2 Define ACL..............................................................................................................1-3
1.2.3 Activate ACL............................................................................................................1-6
1.2.4 Display and Debug ACL..........................................................................................1-6
1.3 ACL Configuration Example ..............................................................................................1-7
1.3.1 Advanced ACL Configuration Example...................................................................1-7
1.3.2 Basic ACL Configuration Example..........................................................................1-8
1.3.3 Link ACL Configuration Example............................................................................1-9
Chapter 2 QoS configuration .......................................................................................................2-1
2.1 QoS Overview....................................................................................................................2-1
2.1.1 Traffic ......................................................................................................................2-1
2.1.2 Traffic Classification................................................................................................2-1
2.1.3 Packet Filter ............................................................................................................2-2
2.1.4 Traffic Policing.........................................................................................................2-2
2.1.5 Port traffic limit.........................................................................................................2-2
2.1.6 Redirection..............................................................................................................2-2
2.1.7 Traffic Priority..........................................................................................................2-2
2.1.8 Queue Scheduling...................................................................................................2-2
2.1.9 Traffic Mirroring.......................................................................................................2-4
2.1.10 Traffic Counting.....................................................................................................2-4
2.2 QoS Configuratoin .............................................................................................................2-4
2.2.1 Setting Priority Level...............................................................................................2-5
2.2.2 Setting Traffic Limit .................................................................................................2-5
2.2.3 Setting Line Limit.....................................................................................................2-6
2.2.4 Setting Traffic Redirection.......................................................................................2-6
2.2.5 Setting Priority Label...............................................................................................2-7
2.2.6 Setting Queue Scheduling ......................................................................................2-7
2.2.7 Setting Traffic Mirroring...........................................................................................2-8
2.2.8 Setting Port Mirroring..............................................................................................2-9
2.2.9 Setting Traffic Statistics.........................................................................................2-10
2.2.10 Displaying and Debugging QoS Configuration ...................................................2-10
2.3 QoS Configuration Example............................................................................................2-11

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Table of Contents
ii
Chapter 3 Logon User ACL Control Configuration.................................................................... 3-1
3.1 Overview............................................................................................................................3-1
3.2 Configure ACL Control over the TELNET User.................................................................3-1
3.2.1 Define ACL..............................................................................................................3-1
3.2.2 Call ACL to Control TELNET User..........................................................................3-2
3.2.3 Configuration Example............................................................................................3-2
3.3 Configure ACL Control over the SNMP Users...................................................................3-3
3.3.1 Define an ACL.........................................................................................................3-4
3.3.2 Call ACL to Control SNMP User .............................................................................3-4
3.3.3 Configuration Example............................................................................................3-5
3.4 Configure ACL Control over the HTTP Users....................................................................3-6
3.4.1 Define an ACL.........................................................................................................3-6
3.4.2 Call ACL to Control HTTP User ..............................................................................3-6
3.4.3 Configuration Example............................................................................................3-7

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-1
Chapter 1 ACL Configuration
1.1 Brief Introduction to ACL
1.1.1 ACL Overview
Aseries of matching rules are required forthe network devices to identify the packets to
be filtered. After identifying the packets, the switch can permit or deny them to pass
through according to the defined policy. Access Control List (ACL) is used to implement
such functions.
ACL classifies the data packets with a series of matching rules, including source
address, destination address and port number, etc. The switch verifies the data packets
with the rules in ACL and determines to forward or discard them.
The data packet matching rules defined by ACLcan also be called in some othercases
requiring traffic classification, such as defining traffic classification for QoS.
An access control rule includes several statements. Different statements specify
different ranges of packets. When matching a data packet with the access control rule,
the issue of match-order arises.
I. The case of filter or classify the data transmitted by the hardware
ACL can be used to filter or classify the data transmitted by the hardware of switch. In
this case, the match order of ACL’s sub-rules is determined by the switch hardware.
The match order defined by the user can’t be effective.
The case includes: ACL cited by QoS function, ACL used for filter the packet
transmitted by the hardware. etc.
II. The case of filter or classify the data transmitted by the software
ACL can be used to filter or classify the data treated by the software of switch. In this
case, the match order of ACL’s sub-rules can be determined by the user. There are two
match-orders: config (by following the user-defined configuration order when matching
the rule) and auto (according to the system sorting automatically when matching the
rule, i.e. in depth-first order). Once the user specifies the match-order of an access
control rule, he cannot modify it later, unless he deletes all the content and specifies the
match-order again.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-2
The case includes:ACL cited by route policy function, ACL used for control logon user,
etc.
Note:
The depth-first principle is to put the statement specifying the smallest range of packets on the top of the
list.This canbe implemented through comparing the wildcards of the addresses. The smaller thewildcard
is, the less hosts it can specify. For example, 129.102.1.1 0.0.0.0 specifies a host, while 129.102.1.1
0.0.255.255 specifies a network segment, 129.102.0.1 through 129.102.255.255. Obviously, the former
one is listed ahead in the access control list.
The specific standard is as follows.
For basic access control list statements, comparing the source address wildcards directly. If the wildcards
are same, follow the configuration sequence.
For the access control list based on the interface filter, the rule that is configured with any is listed in the
end, while others follow the configuration sequence.
For the advanced access control list, comparing the source address wildcards first. If they are the same,
then comparing the destination address wildcards. For the same destination address wildcards,
comparingtherangesofportnumber,theonewith smallerrangeis listedahead. Iftheportnumbersarein
the same range, follow the configuration sequence.
1.1.2 ACL Supported by Ethernet Switch
For Ethernet Switch, ACLs are divided into the following categories:
zNumbered basic ACL.
zNamed basic ACL.
zNumbered advanced ACL.
zNamed advanced ACL.
zNumbered Layer-2 ACL.
zNamed Layer-2 ACL.
The table below lists the limits to the numbers of different ACL on a switch.
Table 1-1 Quantitative limitation to the ACL
Item Value range
Numbered basic ACL. 2000 and 2999
Numbered advanced ACL. 3000 and 3999
Numbered Layer-2 ACL. 4000 and 4999
Named basic ACL. -
Named advanced ACL. -
Named Layer-2 ACL. -
The sub items of an ACL 0 to 127
Maximum sub items for all ACL(sum of all ACL’s sub items) -

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-3
1.2 Configure ACL
ACL configuration includes:
zConfigure time range
zDefine ACL
zActivate ACL
The above three steps had better be taken in sequence. Configure time range first and
then define ACL(using the defined time range in the definition), followed activating ACL
to validate it.
1.2.1 Configure Time-Range
The process of configuring a time-range includes the steps of configuring the
hour-minute range, date ranges and period range. The hour-minute range is expressed
in the units of minute, hour. Date range is expressed in the units of minute, hour, date,
month and year. The periodic time range is expressed in the day of the week.
You can use the following command to set the time range by performing the following
configuration in the system view.
Table 1-2 Set the absolute time range
Operation Command
Set the absolute
time range time-range time-name { start-time to end-time days-of-the-week [ from start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time end-date ] }
Delete the absolute
time range undo time-range time-name [ start-time to end-time days-of-the-week [ from start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time end-date ] ]
When the start-time and end-time are not configured, it will be all the time for one day.
The end time shall be later than the start time.
When end-time end-date is not configured, it will be all the time from now to the date
which can be displayed by the system. The end time shall be later than the start time.
1.2.2 Define ACL
Huawei Switches support several kinds of ACLs. Here we will introduce how to define
these ACLs.
Defining ACL by following the steps below:
1) enter the corresponding ACL view
2) add a rule to the ACL
You can add multiple rules to oneACL.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-4
Note:
1) If a specific time rang is not defined, the ACL will always function after activated.
2) During the process of defining the ACL, you can use the rule command for several times to define
multiple rules for an ACL.
3) If ACL is used for filter or classify the data transmitted by the hardware of switch, the match order
defined in the acl command will not be effective. If ACL is used for filter or classify the data treated by the
software of switch, the match order of ACL’s sub-rules will be effective. Besides, once the user specifies
the match-order of an ACL rule, he cannot modify it later.
4) The default matching-order of ACL is config, i.e. following the order as that configured by the user.
I. Define basic ACL
The rules of the basicACLare defined on the basis of the Layer-3 source IP address to
analyze the data packets.
You can use the following command to define basicACL.
Perform the following configuration in corresponding view.
Table 1-3 Define basic ACL
Operation Command
Enter basic ACL view(from system view) acl {number acl-number | name acl-name basic }
[ match-order { config | auto } ]
add a sub-item to the ACL(from basic ACL view) rule [ rule-id ] { permit | deny } [ source source-addr
wildcard | any ] [ fragment ] [ time-range name ]
delete a sub-item from the ACL(from basic ACL view) undo rule rule-id [ source ] [ fragment ] [ time-range ]
Delete one ACL or all the ACL(from system view) undo acl {number acl-number | name acl-name | all }
II. Define advanced ACL
The rules of the classification for advanced ACL are defined on the basis of the
attributes such as source and destination IP address, the TCP or UDP port number in
use and packet priority to process the data packets. The advanced ACL supports the
analyses of three kinds of packet priorities, ToS (Type of Service), IP and DSCP
priorities.
You can use the following command to define advancedACL.
Perform the following configuration in corresponding view.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-5
Table 1-4 Define advanced ACL
Operation Command
Enter advanced ACL view(from
system view) acl {number acl-number | name acl-name advanced } [match-order
{config |auto } ]
Add a sub-item to the ACL(from
advanced ACL view)
rule [ rule-id ] { permit | deny } protocol [ source source-addr wildcard |
any ] [ destination dest-addr wildcard | any ] [ source-port operator port1
[port2]][destination-port operator port1[ port2]][icmp-type typecode]
[ established ] [ [ precedence precedence | tos tos ]* | dscp dscp ]
[fragment ] [ time-range name ]
Delete a sub-item from the
ACL(from advanced ACL view)
undo rule rule-id [ source ] [ destination ] [ source-port ]
[destination-port ][ icmp-type ][precedence ][tos][dscp ] [ fragment]
[ time-range ]
Delete one ACL or all the
ACL(from system view) undo acl {number acl-number | name acl-name | all }
The advanced ACL is identified with the numbers ranging from 3000 and 3999.
Note that, the port1 and port2 in the above command specify the TCP or UDP ports
used by various high-layer applications. For some common port numbers, you can use
the mnemonic symbols as shortcut. For example, “bgp” can represent the TCPnumber
179 used by BGP.
III. Define Layer-2 ACL
The rules of Layer-2 ACL are defined on the basis of the Layer-2 information such as
source MAC address, source VLAN ID, Layer-2 protocol type, Layer-2 ports receiving
and forwarding the packet and destination MAC address to process the data packets.
You can use the following command to define the numbered Layer-2 ACL.
Perform the following configuration in corresponding view.
Table 1-5 Define Layer-2 ACL
Operation Command
Enter Layer-2 ACL view(from system view) acl {number acl-number | name acl-name link }
[match-order {config |auto } ]
Add a sub-item to the ACL(from Layer-2 ACL view)
rule [ rule-id ]{ permit | deny } [ protocol ] [ cos vlan-pri ]
[ ingress { { source-vlan-id | source-mac-addr
source-mac-wildcard }* | any } ] [ egress { dest-mac-addr
dest-mac-wildcard | any } ] [ time-range name ]
Delete a sub-item from the ACL(from Layer-2 ACL
view) undo rule rule-id
Delete one ACL or all the ACL(from system view) undo acl {number acl-number |name acl-name | all }
Layer-2 ACL can be identified with numbers ranging from 4000 and 4999.
The interface in the above command specifies the Layer-2 interface, such as the
Ethernet port of a switch.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-6
1.2.3 Activate ACL
The defined ACL can be active after activated globally on the switch. This function is
used to activate the ACL filtering or classify the data transmitted by the hardware of
switch.
You can use the following command to activate the definedACL.
Perform the following configuration in Ethernet port view.
Table 1-6 Activate ACL
Operation Command
Activate an ACL packet-filter inbound { ip-group {acl-number | acl-name } [ rule rule ] | link-group
{acl-number | acl-name } [ rule rule ] }*
Deactivate an ACL undo packet-filter inbound {ip-group {acl-number | acl-name } [ rule rule]|link-group
{acl-number | acl-name } [ rule rule ] }*
Note:
This command supports the process to activate the Layer-2 and IP ACLs at the same time(IP ACLs
include basic and advanced ACLs), however the actions of the combination items should be consistent. If
the actions conflict (one is permit and the other is deny), they cannot be activated.
1.2.4 Display and Debug ACL
After the above configuration, execute display command in any view to display the
running of the ACL configuration, and to verify the effect of the configuration. Execute
reset command in user view to clear the statistics of the ACL module.
Table 1-7 Display and Debug ACL
Operation Command
Display the status of the time range display time-range { all | name }
Display the detail information about the ACL display acl config { all | acl-number | acl-name }
Display the information about the ACL running state display acl running-packet-filter {all | interface
{ interface-name | interface-type interface-num } }
Clear ACL counters reset acl counter { all | acl-number | acl-name }
The matched information ofdisplay acl config command specifies the rules treated by
the switch’s CPU. The matched information of the transmitted data by switch can be
displayed by display qos-interface traffic-statistic command.
For syntax description, refer to the Command Manual.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-7
1.3 ACL Configuration Example
1.3.1 Advanced ACL Configuration Example
I. Networking requirements
The interconnection between different departments on a company network is
implemented through the 1000M ports of the Ethernet Switch. The Research Dept. is
accessed via GigabitEthernet0/1. The IP address of payment query server of the
Financial Dept. is 129.110.1.2. It is required to properly configure the ACL and limit the
research department access the payment query server between 8:00 and 18:00.
II. Networking diagram
Administration Department
subnet address
10.120.0.0
Financial Department
subnet address
10.110.0.0
Office of President
129.111.1.2 Pay query server
129.110.1.2
Switch
#1
#4
#3
#2
Connected to a router
Figure 1-1 Access control configuration example
III. Configuration precedure
Note:
In the following configurations, only the commands related to ACL configurations are listed.
1) Define the work time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei 8:00 to 18:00 working-day
2) Define the ACL to access the payment server.
# Enter the named advancedACL, named as traffic-of-payserver.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-8
[Quidway] acl name traffic-of-payserver advanced match-order config
# Define the rules for other department to access the payment server.
[Quidway-acl-adv-traffic-of-payserver] rule 1 deny ip source any destination
129.110.1.2 0.0.0.0 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-payserver .
[Quidway-GigabitEthernet0/1] packet-filter inbound ip-group traffic-of-payserver
1.3.2 Basic ACL Configuration Example
I. Networking requirements
Using basic ACL, filter the packet which source IP address is 10.1.1.1 during time
range 8:00 ~ 18:00 every day. The host is accessed through Gigabitethernet0/1.
II. Networking diagram
Switch
#1 connect to Router
Figure 1-2 Access control configuration example
III. Configuration precedure
Note:
In the following configurations, only the commands related to ACL configurations are listed.
1) Define the time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei 8:00 to 18:00 daily
2) Define the ACL for packet which source IP is 10.1.1.1.
# Enter the named basicACL, named as traffic-of-host.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-9
[Quidway] acl name traffic-of-host basic
# Define the rules for packet which source IP is 10.1.1.1.
[Quidway-acl-basic-traffic-of-host] rule 1 deny ip source 10.1.1.1 0 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-host .
[Quidway-GigabitEthernet0/1] packet-filter inbound ip-group traffic-of-host
1.3.3 Link ACL Configuration Example
I. Networking requirements
Using Link ACL, filter the packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303 during time range 8:00 ~ 18:00 every day.
The host is accessed through Gigabitethernet0/1.
II. Networking diagram
Switch
#1 connect to Router
Figure 1-3 Access control configuration example
III. Configuration precedure
Note:
In the following configurations, only the commands related to ACL configurations are listed.
1) Define the time range
# Define time range from 8:00 to 18:00.
[Quidway] time-range huawei 8:00 to 18:00 daily
2) Define the ACL for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
# Enter the named link ACL, named as traffic-of-link.
[Quidway] acl name traffic-of-link link

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 1 ACL Configuration
1-10
# Define the rules for packet which source MAC address is 00e0-fc01-0101 and
destination MAC address is 00e0-fc01-0303.
[Quidway-acl-link-traffic-of-link] rule 1 deny ip ingress 00e0-fc01-0101 0-0-0 egress
00e0-fc01-0303 0-0-0 time-range huawei
3) Activate ACL.
# Activate the ACL traffic-of-link .
[Quidway-GigabitEthernet0/1] packet-filter inbound link-group traffic-of-link

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-1
Chapter 2 QoS configuration
2.1 QoS Overview
In the traditional IP network, all the packets are treated equally without priority
difference. Every switch/router handles the packets following the First In First Out
(FIFO) policy. That is, they make best effort to transmit the packets to the destination,
not making any commitment or guarantee of the transmission reliability, delay or to
satisfy other performance requirements.
With the rapid development of computer network, people transfer more and more voice,
image and important data etc at real time which are sensitive to the bandwidth, delay
and jitter. This enriches the network sources. On the other hand, the network
congestion occurs more frequently, hence people require higher Quality of Service
(QoS) for the transmission over the network.
The Ethernet technology is the most widely used network technology nowadays.
Ethernet has been the dominant technology of various independent Local Area
Networks (LANs), and many LANs in the Ethernet form have been part of the Internet.
Moreover, along with the continuous development of the Ethernet technology, Ethernet
will become one of the major ways to access the common Internet users. In order to
implement the end-to-end QoS solution on the whole network, it is inevitable to
consider the question of how to guarantee the Ethernet QoS service. This requires the
Ethernet switching devices to apply the Ethernet QoS technology and deliver the QoS
guarantee at different levels to different types of signal transmissions over the networks,
especially those having requirements of shorter time delay and lower jitters.
2.1.1 Traffic
Traffic refers to all packets passing through a switch.
2.1.2 Traffic Classification
Traffic classification means identifying the packets with certain characteristics, using
the matching rule called classification rule, set by the configuration administrator based
on the actual requirements. The rule can be very simple. For example, the traffic with
different priorities can be identified according to the ToS field in IP packet header. There
are also some complex rules. For example, the information over the integrated link
layer (Layer-2), network layer (Layer-3) and transport layer (Layer-4), such as MAC
address, IP protocol, source IP address, destination IPaddress and the port number of

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-2
application etc can be used for traffic classification. Generally the classification
standards are encapsulated in the header of the packets. The packet content is seldom
used as the classification standard.
2.1.3 Packet Filter
Packet filter is to filter traffic. For example, the operation “deny” discards the traffic that
is matched with a traffic classification rule, while allowing other traffic to pass through.
With the complex traffic classification rules, Ethernet Switches enable the filtering of
various information carried in Layer 2 traffic to discards the useless, unreliable or
doubtful traffic, thereby enhancing the network security.
The two key steps of realizing the frame filtering are as follows.
Step 1: Classify the ingress traffic according to the classification rule;
Step 2: Filter the classified traffic, i.e. the “deny” operation, the default ACL operation.
2.1.4 Traffic Policing
In order to deliver better service with the limited network resources, QoS monitors the
traffic of the specific user on the ingress, so that it can make a better use of the
assigned resource.
2.1.5 Port traffic limit
The port traffic limit is the port-based traffic limit used for limiting the general speed of
packet output on the port.
2.1.6 Redirection
You can specify a new port to forward the packets according to your requirements on
the QoS policy.
2.1.7 Traffic Priority
The Ethernet Switch can deliver priority tag service for some special packets. The tags
include TOS, DSCP and 802.1p, etc., which can be used and defined in different QoS
modules.
2.1.8 Queue Scheduling
When congestion occurs, several packets will compete for the resources. Three kinds
of queue scheduling algorithms are used to overcome the problem. These three kinds

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-3
of queue scheduling algorithms are Strict-Priority Queue (SP), Round Robin (RR) and
Weighted Round Robin (WRR).
1) SP
Packets sent via this
interface
high priority
Low priority
Classify
Packets sent
Sending queueDequeue
queue 7
queue 6
queue 5
queue 4
queue 3
queue 2
queue 1
queue 0
Figure 2-1 SP
The SP is specially designed for the key service application.Asignificant feature of the
key service is requiring for priority to enjoy the service to reduce the responding delay
when congestion occurs. Take 8 egress queues for each port as example, SP divides
the queue of port into up to 8 kinds, from high-priority queue to low-priority queue
(which are shown as the Queue 7, 6, 5, 4, 3, 2, 1 and 0 in turn) with sequentially
reduced priority.
During the progress of queue dispatching, strictly following the priority order from high
to low, the SP gives preference to and sends the packets in the higher-priority queue
first. When the higher-priority queue is empty it will send the packets in the
lower-priority group. In this way, put the packets of higher priority service in the
higher-priority queue and put the packets of lower priority, like e-mail, in the
lower-priority queue, can guarantee the key service packets of higher priority are
transmitted first, while the packets of lower service priority are transmitted during the
idling gap between transmitting the packets of higher service priorities.
The SP also has the drawback that when congestion occurs, if there are many packets
queuing in the higher-priority queue, it will require a long time to transmit these packets
of higher service priority while the messages in the lower-priority queue are
continuously set aside without service.
2) RR

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-4
The round robin scheduling ensures every queue gets some time of service of the
switch port. Take 8 egress queues for each port as example, WRR gives every queue a
same weight for resource obtaining. For example, you can configure RR algorithm for
100M port. Thus every queue can be guaranteed to get the minimum bandwidth of
12.5Mbps, avoiding the case in SP scheduling that the messages in the lower-priority
queues may not get any service for long time. Another advantage of RR queue is that
the service time is assigned to each queue flexibly, although it is the round multiple
queue scheduling. When a queue is empty, it will switch to the next queue immediately,
thereby making good used of the bandwidth resource.
3) WRR
The round scheduling ensures every queue getssome time of service of the switch port.
Take 8 egress queues for each port as example, WRR gives every queue a weight (w7,
w6, w5, w4, w3, w2, w1, and w0 respectively) for resource obtaining. For example, you
can configure the weight value of the WRR algorithm for 100M port as 50, 30, 10, 10,
50, 30, 10, 10 (corresponding to the w7, w6, w5, w4, w3, w2, w1, and w0 respectively).
Thus the low-priority queue can be guaranteed to get the minimumbandwidth of 5Mbps,
avoiding the case in SP scheduling that the messages in the lower-priority queues may
not get any service for long time. Another advantage of WRR queue is that the service
time is assigned to each queue flexibly, although it is the round multiple queue
scheduling. When a queue is empty, it will switch to the next queue immediately,
thereby making good used of the bandwidth resource.
2.1.9 Traffic Mirroring
The traffic mirroring function is carried out by copying the specified data packets to the
monitoring port for network diagnosis and troubleshooting.
2.1.10 Traffic Counting
With the flow-based traffic counting, you can request a traffic count to count and
analyze the packets.
2.2 QoS Configuratoin
QoS configuration tasks include:
zSet priority level
zSet packet filtering
zSet traffic limit
zSet line limit
zSet traffic redirection
zSet priority label

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-5
zSet queue scheduling
zSet traffic mirroring
zSet traffic statistics
You should first define an ACL before performing those QoS configurations. When the
ACL is enabled, packet filtering is available.
2.2.1 Setting Priority Level
The following commands are involved in setting priority level on a port. The switch
replaces the packets’ 802.1p priority label with the port priority, for purpose of QoS
control.
Please perform the following configurations in Ethernet port view.
Table 2-1 Setting priority level
Operation Command
Set priority level s priority priority-level
Restore the default priority levels undo priority
Eight priority levels can be set on the port of the switch as needed.
priority-level ranges from 0 to 7. By default, the port is at priority level 0.
2.2.2 Setting Traffic Limit
Traffic limit refers to rate limit based on traffic. If the traffic threshold is exceeded,
corresponding measures will be taken, for example, dropping the excessive packets or
re-defining their priority levels.
The following commands are involved in configuring traffic limit.
Please perform the following configurations in Ethernet port view. .
Table 2-2 Setting traffic limit
Operation Command
Set traffic limit traffic-limit inbound { ip-group {acl-number | acl-name } [ rule rule ] | link-group
{acl-number | acl-name } [ rule rule ] }* target-rate [ exceed action ]
Remove traffic limit undo traffic-limit inbound { ip-group {acl-number | acl-name } [ rule rule ] |
link-group {acl-number | acl-name } [ rule rule ] }*
You should first define anACL before performing this configuration task.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-6
This configuration achieves rate control for those packets to match the ACL. If the traffic
rate threshold is exceeded, corresponding measures will be taken, for example,
dropping excessive packets.
For more details about the commands, see the corresponding contents in the
Command Manual.
2.2.3 Setting Line Limit
Line limit refers to rate limit based on the port, that is, limiting the total rate at the port.
The following commands are involved in configuring line limit.
Please perform the following configurations in the Ethernet port view.
Table 2-3 Setting line limit
Operation Command
Set line limit line-rate target-rate
Remove line limit undo line-rate
You can set line limit at a single port.
For more details about the commands, see the corresponding contents in the
Command Manual.
2.2.4 Setting Traffic Redirection
Traffic redirection refers to changing packet forwarding direction, that is, forwarding
packets to CPU or other ports.
The following commands are involved in configuring traffic redirection.
Please perform the following configurations in the Ethernet port view.
Table 2-4 Setting packet redirection
Operation Command
Set traffic redirection traffic-redirect inbound { ip-group {acl-number | acl-name } [ rule rule ] |
link-group {acl-number | acl-name } [ rule rule ] }* { cpu | interface
{interface-name | interface-type interface-num } }
Remove traffic redirection undo traffic-redirect inbound { ip-group {acl-number | acl-name } [ rule rule ] |
link-group {acl-number | acl-name } [ rule rule ] }*
Note that the packets cannot be forwarded normally when they are redirected to CPU.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-7
Note:
Traffic redirection is only available to the permitted rules in ACL.
For more details about the commands, see the corresponding contents in the
Command Manual.
2.2.5 Setting Priority Label
This configuration re-labels priority level for the packets match ACL. The new priority
label can be put in the priority domain in the header.
The following commands are involved in configuring priority label.
Please perform the following configurations in Ethernet port view.
Table 2-5 Setting priority label
Operation Command
Label traffic priority
traffic-priorityinbound{ip-group {acl-number|acl-name}[rulerule]| link-group
{acl-number | acl-name } [ rule rule ] }* { { cos pre-value | { dscp dscp-value |
ip-precedence pre-value } | local-precedence pre-value }* | { { ip-precedence
from-cos | cos from-ipprec } | local-precedence pre-value }* }
Remove priority label undo traffic-priority inbound { ip-group {acl-number | acl-name } [ rule rule ] |
link-group {acl-number | acl-name } [ rule rule ] }*
The switch supports IPpriority scheme (specifying values for the ip-precedence in the
traffic-priority command), DSCPpriority scheme (specifying values for the dscp in the
traffic-priority command) and 802.1p priority scheme (specifying values for the cos in
the traffic-priority command) as needed. The switch puts the packets into the right
outbound queues according to their 802.1p priority levels,.
For more details about the commands, see the corresponding contents in the
Command Manual.
2.2.6 Setting Queue Scheduling
Queue scheduling is often used in solving the problem of resource contention during
network congestion. Table 2-6 shows the mapping between 802.1p priority levels and
inbound queues.

Operation Manual - QoS/ACL
Quidway S5000 Series Ethernet Switches Chapter 2 QoS configuration
2-8
Table 2-6 Relationship between priority and queue
CoS Value Queue ID
0 2
1 0
2 1
3 3
4 4
5 5
6 6
7 7
The following commands are involved in configuring queue scheduling.
Please perform the following configurations in system view.
Table 2-7 Setting queue scheduling algorithm
Operation Command
Set queue scheduling algorithm queue-scheduler { rr | strict-priority | wrr queue1-weight queue2-weight queue3-weight queue4-weight queue5-weight
queue6-weight queue7-weight queue8-weight }
Restore the default scheduling algorithm undo queue-scheduler
The switch supports three queue scheduling modes: Round Robin(RR), Strict Priority
(SP), and Weighted Round Robin (WRR).
By default, the switch adopts strict priority mode.
For more details about the commands, see the corresponding contents in the
Command Manual.
2.2.7 Setting Traffic Mirroring
Traffic mirroring means duplicating packets which match the ACLto the designated port,
for purpose of packet analysis and supervision.
The following commands are involved in configuring traffic mirroring.
Please perform the following configurations in Ethernet port view.
Table 2-8 Setting traffic mirroring
Operation Command
Setting traffic mirroring mirrored-to inbound { ip-group {acl-number | acl-name } [ rule rule ] |
link-group {acl-number | acl-name } [ rule rule ] }*
Remove traffic mirroring undo mirrored-to inbound { ip-group {acl-number | acl-name } [ rule rule ] |
link-group {acl-number | acl-name } [ rule rule ] }*