CANOGA PERKINS 9175 Configuration Guide - Manual (Page 214)

CanogaOS Configuration Guide
31-8
Queue shaping
All the traffic in the egress queue can be shaped, and all the exceeding traffic will be
buffered. If no buffer, it is dropped.
The following shows creating a queue shaping to shape traffic. Follow these steps from
Privileged Exec mode.
• configure
terminal.
• interface IFNAME to specify the interface to match to the policy map. IFNAME =
name of interface
• queue <0-7> shape average percent <0-99> to specify a queue shaping.
Note: The no queue <0-7> shape command deletes a queue shaping.
The following example shows creating a queue shaping for queue 3. In this example, if
the traffic in queue 3 exceeds a 10 percent of the whole interface bandwidth, it is
buffered.
DUT(config)# interface eth-0-1
DUT(config-if)# queue 3 shape average percent 10
31.4.4 Configure Policy
To configure a QoS policy, the following is usually required:
• Categorize traffic into classes.
• Configure policies to apply to the traffic classes.
• Attach policies to interfaces.
Classify Traffic Using ACLs
IP traffic can be classified using IP ACLs.
The following shows creating an IP ACL for IP traffic. Follow these steps from Privileged
Exec mode.
• configure
terminal.
• ip access-list ACCESS-LIST-NAME. ACCESS-LIST-NAME = name of IP ACL
• create ACEs, Repeat this step as needed. For detail, please refer to ACL
configuration Guide
Note: The no ip-access-list command deletes an access list.
The following example shows allowing access only for hosts on three specified networks.
Wildcard bits correspond to the network address host portions. If a host has a source
address that does not match the access list statements, it is rejected.
DUT(config)# ip access-list ip-acl
DUT(config-ip-acl)# permit any 128.88.12.0 0.0.0.255 any
DUT(config-ip-acl)# permit any 28.88.0.0 0.0.255.255 any
DUT(config-ip-acl)# permit any 11.0.0.0 0.255.255.255 any
Create class-map
The following shows classifying IP traffic on a physical-port basis using class maps. This
involves creating a class map, and defining the match criterion.
• configure
terminal.
• ip access-list ACCESS-LIST-NAME. ACCESS-LIST-NAME = name of IP ACL
• create ACEs, Repeat this step as needed. For detail, please refer to ACL