SNR S2989G-48TX-DC — настройка функций безопасности и QoS для сетевых устройств [394/553]

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-121

switch(config)#mls qos map dscp-dscp green 1 to 10

switch(config)#mls qos map dscp-dscp yellow 1 to 9

Set Egress remark to take effect for green packets

switch(config)#mls qos egress green remark

Set trust dscp mode on ingress

switch(config-if-port-range)#mls qos trust dscp

Bind policy to egress of port1

switch(config-if-ethernet1/0/1)#service-policy output p1

6.14.4

Egress QoS Troubleshooting Help

 Not all equipments support Egress QoS presently, so please make sure the current

device supports this function.

 If the policy configured cannot bind to the port or VLAN, please check whether the

match option in classification table is supported by the current device.

 If terminal printing suggests lack of resource, please make sure there is enough

resource to send the current policy.

 If the policy with match acl configured cannot bind to the port or VLAN, please make

sure rules including permit exist in ACL.

 If modifying QoS attribute is invalid by Egress QoS remark, please ensure whether

ingress sets the correspondsing QoS attribute with trust.

 If egress set QoS attributes (set cos/ip dscp) for modifying all packets, and it uses

Egress remark to modify QoS attributes for packets of different colors, previous

modification is preferential for modifying packets.

6.15

Flexible QinQ

6.15.1

Introduction to Flexible QinQ

6.15.1.1 QinQ Technique

Dot1q-tunnel is also called QinQ (802.1Q-in-802.1Q), which is an expansion of

802.1Q. Its dominating idea is encapsulating the customer VLAN tag (CVLAN tag) to the

service provider VLAN tag (SPVLAN tag). The packet with two VLAN tags is transmitted

through the backbone network of the ISP internet to provide a simple layer-2 tunnel for the

users. It is simple and easy to manage, applicable only by static configuration, and