Qos典型配置之基于Vlan限速配置

本实验案例及过程来自Huawei官方技术文档《S1720S2700S3700S5700S6700S7700S7900S9700系列交换机典型配置案例》，本篇文章仅作学习使用。

拓扑如下：

配置步骤如下：

创建Vlan并配置接口：

Switch：

<Huawei>sys
[Huawei]sysname Switch
[Switch]un in en
[Switch]vlan batch 100 110 120

[Switch]int GigabitEthernet 0/0/1
[Switch-GigabitEthernet0/0/1]port link-type trunk
[Switch-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 110 120
[Switch-GigabitEthernet0/0/1]qu

[Switch]int GigabitEthernet 0/0/2
[Switch-GigabitEthernet0/0/2]port link-type trunk 
[Switch-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 110 120
[Switch-GigabitEthernet0/0/2]qu

配置流分类：

[Switch]traffic classifier c1 operator and
[Switch-classifier-c1]if-match vlan-id 120 //匹配vlan id为120的报文
[Switch-classifier-c1]qu

[Switch]traffic classifier c2 operator and
[Switch-classifier-c2]if-match vlan-id 110 //匹配vlan id为110的报文
[Switch-classifier-c2]quit

[Switch]traffic classifier c3 operator and
[Switch-classifier-c3]if-match vlan-id 100 //匹配vlan id为100的报文
[Switch-classifier-c3]quit

配置流量监管行为：

在Switch上创建流行为b1～b3，对不同业务流进行流量监管以及重标记优先级，并配
置流量统计功能。

[Switch]traffic behavior b1
[Switch-behavior-b1]car cir 2000 pir 10000 green pass 
//对vlan id为120的报文限速为2000kbit/s
[Switch-behavior-b1]remark dscp 46
//对vlan id为120的报文重标记其DSCP优先级为46（值越高越优先）
[Switch-behavior-b1]statistic enable 
//配置流量统计功能
[Switch-behavior-b1]quit

[Switch]traffic behavior b2
[Switch-behavior-b2]car cir 4000 pir 10000 green pass
[Switch-behavior-b2]remark dscp 30
[Switch-behavior-b2]statistic enable 
[Switch-behavior-b2]quit

[Switch]traffic behavior b3
[Switch-behavior-b3]car cir 4000 pir 10000 green pass
[Switch-behavior-b3]remark dscp 14
[Switch-behavior-b3]statistic enable 
[Switch-behavior-b3]quit

配置流量监管策略并应用到接口上：

在Switch上创建流策略p1，将流分类和对应的流行为进行绑定并将流策略应用到接口
GE0/0/1入方向上，对来自企业的报文进行流量监管和重标记。

[Switch]traffic policy p1
[Switch-trafficpolicy-p1]classifier c1 behavior b1
[Switch-trafficpolicy-p1]classifier c2 behavior b2
[Switch-trafficpolicy-p1]classifier c3 behavior b3
[Switch-trafficpolicy-p1]qu

[Switch]int GigabitEthernet 0/0/1
[Switch-GigabitEthernet0/0/1]traffic-policy p1 inbound 
[Switch-GigabitEthernet0/0/1]quit

验证配置结果：

查看流分类的配置信息。

[Switch]display traffic classifier user-defined
--------
  User Defined Classifier Information:
   Classifier: c2
    Operator: AND
    Rule(s) : if-match vlan-id 110
             
   Classifier: c3
    Operator: AND
    Rule(s) : if-match vlan-id 100
             
   Classifier: c1
    Operator: AND
    Rule(s) : if-match vlan-id 120
             
Total classifier number is 3 
--------

查看流策略的配置信息。

[Switch]display traffic policy user-defined p1
--------
  User Defined Traffic Policy Information:
  Policy: p1
   Classifier: c1
    Operator: AND
     Behavior: b1
      Committed Access Rate:                         
        CIR 2000 (Kbps), CBS 250000 (Byte) 
        PIR 10000 (Kbps), PBS 1250000 (Byte) 
        Green Action   : pass
        Yellow Action  : pass
        Red Action     : discard
      Marking:                            
        Remark DSCP ef
      Statistic: enable
   Classifier: c2
    Operator: AND
     Behavior: b2
      Committed Access Rate:                         
        CIR 4000 (Kbps), CBS 500000 (Byte) 
        PIR 10000 (Kbps), PBS 1250000 (Byte) 
        Green Action   : pass
        Yellow Action  : pass
        Red Action     : discard
      Marking:                            
        Remark DSCP af33
      Statistic: enable
   Classifier: c3
    Operator: AND
     Behavior: b3
      Committed Access Rate:                         
        CIR 4000 (Kbps), CBS 500000 (Byte) 
        PIR 10000 (Kbps), PBS 1250000 (Byte) 
        Green Action   : pass
        Yellow Action  : pass
        Red Action     : discard
      Marking:                            
        Remark DSCP af13
      Statistic: enable
--------

查看在接口上应用的流策略信息。以接口GE0/0/1上的语音业务报文为例，当报文速
率大于10000kbit/s时会出现丢包，语音业务报文的速率被限制在10000kbit/s。

[Switch]display traffic policy statistics int GigabitEthernet 0/0/1 inbound verb
ose classifier-base class c1

 Interface: GigabitEthernet0/0/1
 Traffic policy inbound: p1
 Rule number: 3
 Current status: OK!
---------------------------------------------------------------------
 Classifier: c1 operator and
 Behavior: b1
 Board : 0
Item                              Packets                       Bytes
---------------------------------------------------------------------
Matched                                 0                           0
  +--Passed                             0                           0
  +--Dropped                            0                           0
    +--Filter                           0                           0
    +--URPF                             -                           -
    +--CAR                              0                           0

配置文件：

#
sysname Switch
#
undo info-center enable
#
vlan batch 100 110 120
#
traffic classifier c1 operator and
 if-match vlan-id 120
traffic classifier c2 operator and
 if-match vlan-id 110
traffic classifier c3 operator and
 if-match vlan-id 100
#
traffic behavior b1
 car cir 2000 pir 10000 cbs 250000 pbs 1250000 green pass yellow pass red discar
d
 remark dscp ef
 statistic enable
traffic behavior b2
 car cir 4000 pir 10000 cbs 500000 pbs 1250000 green pass yellow pass red discar
d
 remark dscp af33
 statistic enable
traffic behavior b3
 car cir 4000 pir 10000 cbs 500000 pbs 1250000 green pass yellow pass red discar
d
 remark dscp af13
 statistic enable
#
traffic policy p1
 classifier c1 behavior b1
 classifier c2 behavior b2
 classifier c3 behavior b3
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 110 120
 traffic-policy p1 inbound
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 110 120
#
return