Alcatel-Lucent 6850-48 网络指南
Configuring QoS
Policy Applications
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
page 40-61
• Policy based mirroring and the port-based mirroring feature can run simultaneously on the same port.
However, policy based mirroring is not supported on the OmniSwitch 6800.
• Rule precedence is applied to all mirroring policies that are configured for the same switch ASIC. If
traffic matches a mirror rule on one ASIC with a lower precedence than a non-mirroring rule on a
different ASIC, the traffic is mirrored in addition to the actions specified by the higher precedence rule.
different ASIC, the traffic is mirrored in addition to the actions specified by the higher precedence rule.
ICMP Policy Example
Policies may be configured for ICMP on a global basis on the switch. ICMP policies may be used for
security (for example, to drop traffic from the ICMP blaster virus).
security (for example, to drop traffic from the ICMP blaster virus).
In the following example, a condition called icmpCondition is created with no other condition parame-
ters:
ters:
-> policy condition icmpCondition ip protocol 1
-> policy action icmpAction disposition deny
-> policy rule icmpRule condition icmpCondition action icmpAction
This policy (icmpRule) drops all ICMP traffic. To limit the dropped traffic to ICMP echo requests (pings)
and/or replies, use the
and/or replies, use the
to specify the appropriate condition. For example,
-> policy condition echo icmptype 8
-> policy condition reply icmptype 0
802.1p and ToS/DSCP Marking and Mapping
802.1p values may be mapped to different 802.lp values on an individual basis or by using a map group. In
addition, ToS or DSCP values may be mapped to 802.1p on a case-by-case basis or via a map group.
(Note that any other mapping combination is not supported.)
addition, ToS or DSCP values may be mapped to 802.1p on a case-by-case basis or via a map group.
(Note that any other mapping combination is not supported.)
Marking is accomplished with the following commands:
policy action 802.1p
policy action tos
policy action dscp
policy action tos
policy action dscp
Mapping is accomplished through the following commands:
policy map group
policy action map
policy action map
Note the following:
• Priority for the flow is based on the policy action. The value specified for 802.1p, ToS, DSCP, or the
map group will determine how the flow is queued.
• The port on which the flow arrives (the ingress port) must be a trusted port. For more information
In this example, a policy rule (marking) is set up to mark flows from 10.10.3.0 with an 802.1p value of 5:
-> policy condition my_condition source ip 10.10.3.0 mask 255.255.255.0
-> policy action my_action 802.1p 5
-> policy rule marking condition my_condition action my_action