Document Updates, Conventions, Symbols, Text | Nortel Networks 5520

Filters and QoS Configuration for ERS 5500
Technical Configuration Guide	v2.0	NN48500-559

Document Updates

Added ACL, DHCP Snooping, APP Inspection, BPDU Filtering and IP Source Guard.

Conventions

This section describes the text, image, and command conventions used in this document.

Symbols:

&Tip – Highlights a configuration or technical tip.

Note – Highlights important information to the reader.

1Warning – Highlights important information about an action that may result in equipment damage, configuration or data loss.

Text:

Bold text indicates emphasis.

Italic text in a Courier New font indicates text the user must enter or select in a menu item, button or command:

ERS5520-48T#show running-config

Output examples from Nortel devices are displayed in a Lucinda Console font: ERS5520-48T# show running-config

!Embedded ASCII Configuration Generator Script

!Model = Ethernet Routing Switch 5520-24T-PWR

!Software version = v5.0.0.011

enable

configure terminal

___________________________________________________________________________________________________________________________

Nortel Confidential Information Copyright © 2008 Nortel Networks. All Rights Reserved.
External Distribution	5

Image 6

Nortel Networks 5520, 5530, 5510 manual Document Updates, Conventions, Symbols, Text

Contents

Ethernet Routing Switch NN48500-559 Abstract Table of Contents List of Figures List of Tables Conventions Document UpdatesSymbols Text Overview Ethernet Routing Switch 5500 QoS and Filtering Unrestricted Ports ClassificationUntrusted Ports ƒ Layer 2 Classifier Elements Actions Supported Statistics QoS Flow Chart Filter Functionality Overall Classification FunctionalityClassifier Block Functionality Port Range Functionality 7, 15, 31, 63 255, 511, 1025 4095, 8191 32762, or Min = Default Policy Drop Action Policies NN48500-559 5520-24T-PWRconfig#qos agent buffer large maximum regular 5520-24T-PWRconfig#default qos agent bufferQueue Sets Ethernet Routing Switch 5500 Egress CoS Queuing Egress CoS Queuing CoS 5520-24T-PWRconfig#show qos queue-set-assignment 5520-24T-PWRconfig#qos agent queue set 5520-24T-PWRconfig#default qos agent queue-set 5520-24T-PWRconfig#qos agent reset-defaultEgress Queue Recommendations Traffic Meter and Shaping Bucket Size Actual Bucket Size in Bytes Actual size in bytes Interface Actual Bucket SizePolicing Traffic Parameter Description Example Interface Shaper Meter Bucket Size and DurationBucket Size Max burst rate Committed rate Duration MSec 5530-24TFDconfig#show qos if-shaper port Binary Default Nortel Class of ServiceDefault Nortel CoS Markings Hex Decimal IP-ACL Configuration QoS Access Lists ACLACL Configuration Config#qos ip-acl name 1..16 character string ? ACL Configuration Example 2 L2-ACL ConfigurationACL-Assign Configuration Config#qos l2-acl name 1..16 character string ? Verification 5530H-24TFD#show qos acl-assign5530H-24TFD#show qos ip-acl 5530H-24TFD#show qos policy 5500config#no qos ip-acl 5500config#no qos acl-assign5500config#no qos acl-assign 1 port 1/19 Changing ACL Dynamic ARP Inspection Configuration IP Security FeaturesDhcp Snooping Configuration Dhcp Snooping IP Source Guard Configuration IP Source Guard Bpdu Filtering Configuration Bpdu Filtering QoS Applications Number of Classifiers Used Feature QoS Interface Applications Configuration Example ARP Spoofing Dhcp Attacks Dhcp Snooping 10.3 DoS Bpdu Blocking ERS5500-48T#show qos if-assign Configuration Steps Policy ConfigurationRole Combination ERS5500-48T#show qos if-group Adding IP and L2 Element ERS5500-48Tconfig#qos ip-element 1-64000?Classification IP Element Adding a Classifier Adding a Classifier Block Meters Parameters and variables Description Add a New Policy Configuration Examples Pre-defined ValuesQoS Action Configure the Interface Role Combination Configuration Example 1 Traffic Meter Using Policies12.2.1 ERS5500 Configuration Using Policies Configure the IP elements Configure Meters Configure the Classifier BlockERS5500 Create the classifier block ERS5500 Create the policy Configure the PolicyVerify Operations Verify the Role Combination Verify Classifier and Classifier Block Configuration Name m1 ERS5500-24T#show qos classifier-block Verify Policy Configuration Verify that the QoS Policy 12.3.1 ERS5500 Configuration IP ACL, Dhcp Snooping, ARP Inspection, and Source Guard ERS5500 Add IP address to Vlan 700 and enable Ospf ERS5500 Enable ARP-Inspection for VLAN’s 110 ERS5500 Assign the IP-ACL’s to ports Verify DHCP-Snooping Verify ARP Inspection VID Verify ACL Configuration Verify IP Source Guard NN48500-559 NN48500-559 ERS5500-24T#show qos acl-assign Configuration Example 3 Port Range Using ACL or Policy TCP Port Range Configuration Using Policies Configure the PoliciesERS5500 Create IP elements for UDP port range Configuration Using IP-ACL’s ERS5500 Remark all other traffic to Bronze 12.5.1 ERS5500 Configuration Using Policies Create Policy 12.5.2 ERS5500 Configuration Using IP-ACL’s ERS5500 Pass all other traffic with standard CoSERS5500 Assign the L2-ACL’s to ports Configuration Example 5 L2 and L3 Classification 12.6.1 ERS5500 Configuration Using Policies Configure Classifier and Classifier Blocks ERS5500 Add L2 elements for Vlan 110 12.7.1 ERS5500 Configuration Dscp Mapping via Un-restricted Port Role ACL Configuration Policy Configuration View the Queue Assignments ID ID Configuration Example 7 Interface Shaping Enable Shaping on PortVerify Shape Rate Configuration Software Baseline Reference Documentation Contact us