Filters and QoS Configuration for ERS 5500
Technical Configuration Guide v2.0 NN48500-559
___________________________________________________________________________________________________________________________
Nortel Confidential Information Copyright © 2008 Nortel Networks. All Rights Reserved.
ExternalDistribution
3
Table of Contents
DOCUMENT UPDATES..................................................................................................................5
CONVENTIONS...............................................................................................................................5
1. OVERVIEW: ETHERNET ROUTING SWITCH 5500 QOS AND FILTERING........................6
2. QOS FLOW CHART................................................................................................................9
3. FILTER FUNCTIONALITY ....................................................................................................10
3.1 OVERALL CLASSIFICATION FUNCTIONALITY........................................................................10
3.2 CLASSIFIER BLOCK FUNCTIONALITY ..................................................................................10
3.3 PORT RANGE FUNCTIONALITY...........................................................................................11
3.4 POLICIES .........................................................................................................................12
4. QUEUE SETS........................................................................................................................14
5. TRAFFIC METER AND SHAPING........................................................................................19
5.1 ACTUAL BUCKET SIZE.......................................................................................................20
5.2 POLICING TRAFFIC ...........................................................................................................20
5.3 INTERFACE SHAPER .........................................................................................................22
6. DEFAULT NORTEL CLASS OF SERVICE ..........................................................................24
7. QOS ACCESS LISTS (ACL).................................................................................................25
7.1 ACL CONFIGURATION.......................................................................................................25
8. IP SECURITY FEATURES....................................................................................................30
8.1 DHCP SNOOPING ............................................................................................................30
8.2 DYNAMIC ARP INSPECTION ..............................................................................................30
8.3 IP SOURCE GUARD ..........................................................................................................31
9. BPDU FILTERING.................................................................................................................32
9.1 BPDU FILTERING CONFIGURATION...................................................................................32
10. QOS INTERFACE APPLICATIONS..................................................................................33
10.1 ARP SPOOFING ...............................................................................................................34
10.2 DHCP ATTACKS ..............................................................................................................35
10.3 DOS................................................................................................................................36
10.4 BPDU BLOCKING.............................................................................................................37
11. CONFIGURATION STEPS – POLICY CONFIGURATION...............................................38
11.1 ROLE COMBINATION.........................................................................................................38
11.2 CLASSIFICATION...............................................................................................................39
11.3 METERS...........................................................................................................................41
11.4 ADD A NEW POLICY..........................................................................................................42
12. CONFIGURATION EXAMPLES........................................................................................43
12.1 PRE-DEFINED VALUES ......................................................................................................43
12.2 CONFIGURATION EXAMPLE 1–TRAFFIC METER USING POLICIES........................................44
12.3 CONFIGURATION EXAMPLE –IP ACL, DHCP SNOOPING,ARP INSPECTION,BPDU
FILTERING,AND SOURCE GUARD ..................................................................................................50
12.4 CONFIGURATION EXAMPLE 3: PORT RANGE USING ACL OR POLICY ...................................59
12.5 CONFIGURATION EXAMPLE 4–L2 CLASSIFICATION BASED ON MAC ADDRESS ...................62
12.6 CONFIGURATION EXAMPLE 5–L2 AND L3 CLASSIFICATION................................................64
