Nortel Ethernet Routing Switch 3510-24T + EU Power Cord AL1001B08-E5 用户手册

产品代码
AL1001B08-E5
下载
页码 8
QoS and policy management
DiffServ QoS enables networks to read,
alter, prioritize, tag or mark IP packets
based upon information embedded in
the Type of Service (ToS) field. The level
of service can be marked in the embedded
information inside the ToS field of each
IP packet. DiffServ is based on the ToS
field. Ethernet Routing Switch 3510 has
application-specific integrated circuits
(ASICs) to enable the DiffServ Code
Point (DSCP) to be mapped to the
IEEE 802.1p user priority bits to provide
consistent QoS at Layer 3 (IP) and
Layer 2 (Ethernet). The QoS policies can
be configured via the switch’s built-in
Web-based management tools to facilitate
QoS. Alternatively, Enterprise Policy
Manager (formerly known as Optivity*
Policy Services) can be utilized for
dynamic end-to-end enterprise-wide
policy and QoS management.
Simplified QoS
Ethernet Routing Switch 3510 supports
Network Service Classes (NSCs) which
provide simplified QoS provisioning.
NSC provides factory-default QoS
configurations, eliminating the complex-
ities often associated with QoS-enabled
network deployments.
NSC provides default settings such as:
> DSCP marking per class
> DiffServ forwarding behavior (PHB)
per class
> DSCP to queue mapping
> DSCP to 802.1p mapping
> Default scheduler per class
By classifying the traffic and placing it
into an NSC, complex QoS configura-
tions are eliminated. NSC simplifies the
deployment of a QoS-enabled network
with Nortel switching solutions, using 
a Web-based interface. This not only
saves on provisioning time but, most
importantly, ensures that the QoS func-
tions are provisioned consistently across
the network.
Queuing function
Ethernet Routing Switch 3510 provides
network availability for mission-critical
applications, devices and users by classi-
fying, prioritizing and marking LAN IP
traffic using up to eight hardware-based
queues on every port. This is based on
the following parameters:
> MAC address-based filtering
> IP ToS/DSCP marking
> IP source address/destination address
or subnets
> TCP/UDP source/destination
port/port range
> IEEE 802.1p user priority bits
> Ingress source port
> IP Protocol ID (e.g., TCP, UDP,
IGMP)
> EtherType (e.g., IP, IPX)
> IEEE 802.1Q VLAN ID
Ethernet Routing Switch 3510 also has
the ability to read packets that have been
marked from other devices such as the
Ethernet Routing Switch 8600 (formerly
known as the Passport* 8600). Addition-
ally, weighted round robin prevents
normal priority traffic from being starved
by expedited traffic (on a per-packet
basis). Ethernet Routing Switch 3510
also supports strict priority queuing.
Quality of Service provisioning
With Enterprise Policy Manager soft-
ware, policies can be created through a
simple and intuitive drag-and-drop
workflow. Enterprise Policy Manager
software is the Policy Decision Point in
a DiffServ QoS implementation.
Further benefits include:
> Simple intuitive policy creation
> Ability to re-use common filter sets
> Provision of a network-wide view of
policies currently in use
> Ability to avoid QoS provisioning
errors
> Centrally managed DSCP and 
802.1p queue mapping tables
> Saved time in provisioning the
network — as thousands of CLI or
Web transactions are reduced to a 
few simple actions
Traffic policing
Traffic policing enables provisioning of
different levels of service by limiting
traffic throughput at the ingress
(incoming) port of the Ethernet Routing
Switch 3510. For example, if a port is set
to a certain speed, such as 10 Mbps, all
traffic under 10 Mbps on that port will
pass, and traffic that exceeds 10 Mbps
on that same port is dropped. Service
providers will find this especially useful
to control bandwidth to their customers.
Up to 64 traffic meters per port are
provided and yield higher resolution 
for control.
Enhanced security
The Ethernet Routing Switch 3510
offers the highest level of security with
features including IEEE 802.1x-based
security (also known as Extensible
Authentication Protocol [EAP]), assign-
ment of proper VLAN and priority,
Simple Network Management Protocol
(SNMPv3), IP Manager List, MAC-
address-based security and Remote
Authentication Dial-In User Service
(RADIUS) authentication.
The IEEE 802.1x-based security feature
limits access to the network based on
user credentials. A user is required to
“login” to the network using a user-
name/password; the user database is
maintained on the authentication server
(not the switch). Network connectivity
without password authorization is
prevented. This feature is useful where
the network is not 100 percent physi-
cally secure or where physical security
needs enhancement; for example, banks,
trading rooms or classroom training
facilities. This feature supports client
access to the network and interoperates
with Microsoft Windows XP and other
3