NESTA PÁGINA
Exemplo: habilitar uma classe de serviço de oito filas em interfaces Ethernet redundantes em firewalls da Série SRX em um cluster de chassis
Este exemplo mostra como habilitar CoS de oito filas em interfaces Ethernet redundantes em firewalls da Série SRX em um cluster de chassi. Este exemplo é aplicável a SRX1600, SRX2300, SRX4100, SRX4200, SRX4300, SRX4600, SRX5400, SRX5600 e SRX5800. O CoS de oito filas também é suportado em interfaces Ethernet redundantes para firewalls da Série SRX em um cluster de chassi. A Série SRX para a filial oferece suporte a oito filas, mas apenas quatro filas são habilitadas por padrão.
Requisitos
Este exemplo usa os seguintes componentes de hardware e software:
Dois gateways de serviço SRX5600 em um cluster de chassi
Junos OS Versão 11.4R4 ou posterior para firewalls da Série SRX
Antes de começar:
Entenda a configuração do cluster do chassi. Veja exemplo: configuração de um cluster de chassi ativo/passivo em dispositivos SRX5800.
Entenda a configuração de interface redundante de cluster do chassi. Veja exemplo: Configuração de interfaces de ethernet redundantes de cluster de chassi.
Visão geral
Os firewalls da Série SRX oferecem suporte a oito filas, mas apenas quatro filas são habilitadas por padrão. Use o set chassis fpc x pic y max-queues-per-interface 8 comando para habilitar oito filas explicitamente no nível do chassi. Os valores e y depende da x localização do IOC e do número PIC onde a interface está localizada no dispositivo no qual a CoS precisa ser implementada. Para encontrar a localização do IOC, use os comandos ou show chassis hardware os show chassis fpc pic-status comandos.
Você deve reiniciar o controle do chassi para que a configuração surtisse efeito.
Em firewalls da Série SRX, oito filas de QoS são suportadas por interface ae.
A Figura 1 mostra como configurar CoS de oito filas em interfaces Ethernet redundantes em firewalls da Série SRX em um cluster de chassi.
Topologia
ethernet redundantes
Configuração
Procedimento
Configuração rápida da CLI
Para configurar rapidamente este exemplo, copie os seguintes comandos, cole-os em um arquivo de texto, remova quaisquer quebras de linha, altere todos os detalhes necessários para combinar com a configuração da sua rede, copiar e colar os comandos na CLI no nível de [edit] hierarquia e, em seguida, entrar no commit modo de configuração.
set chassis fpc 5 pic 1 max-queues-per-interface 8 set chassis fpc 5 pic 1 max-queues-per-interface 8 set chassis cluster reth-count 2 set chassis cluster control-ports fpc 4 port 0 set chassis cluster control-ports fpc 10 port 0 set chassis cluster redundancy-group 0 node 0 priority 254 set chassis cluster redundancy-group 0 node 1 priority 1 set chassis cluster redundancy-group 1 node 0 priority 200 set chassis cluster redundancy-group 1 node 1 priority 100 set interfaces ge-5/1/14 gigether-options redundant-parent reth0 set interfaces ge-5/1/15 gigether-options redundant-parent reth1 set interfaces ge-11/1/14 gigether-options redundant-parent reth0 set interfaces ge-11/1/15 gigether-options redundant-parent reth1 set interfaces reth0 vlan-tagging set interfaces reth0 redundant-ether-options redundancy-group 1 set interfaces reth0 unit 0 vlan-id 1350 set interfaces reth0 unit 0 family inet address 192.0.2.1/24 set interfaces reth1 hierarchical-scheduler set interfaces reth1 vlan-tagging set interfaces reth1 redundant-ether-options redundancy-group 2 set interfaces reth1 unit 0 vlan-id 1351 set interfaces reth1 unit 0 family inet address 192.0.2.2/24 set interfaces reth1 unit 1 vlan-id 1352 set interfaces reth1 unit 1 family inet address 192.0.2.3/24 set interfaces reth1 unit 2 vlan-id 1353 set interfaces reth1 unit 2 family inet address 192.0.2.4/24 set interfaces reth1 unit 3 vlan-id 1354 set interfaces reth1 unit 3 family inet address 192.0.2.5/24 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q0 loss-priority low code-points 000 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q2 loss-priority low code-points 010 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q3 loss-priority low code-points 011 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q1 loss-priority low code-points 001 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q4 loss-priority low code-points 100 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q5 loss-priority low code-points 101 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q6 loss-priority low code-points 110 set class-of-service classifiers inet-precedence inet_prec_4 forwarding-class q7 loss-priority low code-points 111 set class-of-service forwarding-classes queue 0 q0 set class-of-service forwarding-classes queue 1 q1 set class-of-service forwarding-classes queue 2 q2 set class-of-service forwarding-classes queue 3 q3 set class-of-service forwarding-classes queue 4 q4 set class-of-service forwarding-classes queue 5 q5 set class-of-service forwarding-classes queue 6 q6 set class-of-service forwarding-classes queue 7 q7 set class-of-service traffic-control-profiles 1 scheduler-map sched_map set class-of-service traffic-control-profiles 1 shaping-rate 200m set class-of-service interfaces reth0 unit 0 classifiers inet-precedence inet_prec_4 set class-of-service interfaces reth1 unit 0 output-traffic-control-profile 1 set class-of-service scheduler-maps sched_map forwarding-class q0 scheduler S0 set class-of-service scheduler-maps sched_map forwarding-class q1 scheduler S1 set class-of-service scheduler-maps sched_map forwarding-class q2 scheduler S2 set class-of-service scheduler-maps sched_map forwarding-class q3 scheduler S3 set class-of-service scheduler-maps sched_map forwarding-class q4 scheduler S4 set class-of-service scheduler-maps sched_map forwarding-class q5 scheduler S5 set class-of-service scheduler-maps sched_map forwarding-class q6 scheduler S6 set class-of-service scheduler-maps sched_map forwarding-class q7 scheduler S7 set class-of-service schedulers S0 transmit-rate percent 20 set class-of-service schedulers S1 transmit-rate percent 5 set class-of-service schedulers S2 transmit-rate percent 5 set class-of-service schedulers S3 transmit-rate percent 10 set class-of-service schedulers S4 transmit-rate percent 10 set class-of-service schedulers S5 transmit-rate percent 10 set class-of-service schedulers S6 transmit-rate percent 10 set class-of-service schedulers S7 transmit-rate percent 30
Procedimento passo a passo
O exemplo a seguir exige que você navegue por vários níveis na hierarquia de configuração. Para obter instruções sobre como fazer isso, veja Usando o Editor de CLI no modo de configuração no Guia do usuário da CLI.
Para habilitar CoS de oito filas em interfaces Ethernet redundantes:
Configure no máximo oito filas nas interfaces no nó 0 e no nó 1.
[edit chassis] user@host# set fpc 5 pic 1 max-queues-per-interface 8
Além de configurar oito filas no nível de
[edit chassis]hierarquia, a configuração no nível de[edit class-of-service]hierarquia deve suportar oito filas por interface.Especifique o número de interfaces Ethernet redundantes.
[edit chassis cluster] user@host# set reth-count 2
Configure as portas de controle.
[edit chassis cluster] user@host# set control-ports fpc 4 port 0 user@host# set control-ports fpc 10 port 0
Configure grupos de redundância.
[edit chassis cluster] user@host# set redundancy-group 0 node 0 priority 254 user@host# set redundancy-group 0 node 1 priority 1 user@host# set redundancy-group 1 node 0 priority 200 user@host# set redundancy-group 1 node 1 priority 100
Configure as interfaces Ethernet redundantes.
[edit interfaces] user@host# set ge-5/1/14 gigether-options redundant-parent reth0 user@host# set ge-11/1/14 gigether-options redundant-parent reth0 user@host# set ge-5/1/15 gigether-options redundant-parent reth1 user@host# set ge-11/1/15 gigether-options redundant-parent reth1 user@host# set reth0 redundant-ether-options redundancy-group 1 user@host# set reth0 vlan-tagging user@host# set reth0 unit 0 vlan-id 1350 user@host# set reth0 unit 0 family inet address 192.0.2.1/24 user@host# set reth1 hierarchical-scheduler user@host# set reth1 vlan-tagging user@host# set reth1 redundant-ether-options redundancy-group 2 user@host# set reth1 unit 0 vlan-id 1351 user@host# set reth1 unit 0 family inet address 192.0.2.2/24 user@host# set reth1 unit 1 vlan-id 1352 user@host# set reth1 unit 1 family inet address 192.0.2.3/24 user@host# set reth1 unit 2 vlan-id 1353 user@host# set reth1 unit 2 family inet address 192.0.2.4/24 user@host# set reth1 unit 3 vlan-id 1354 user@host# set reth1 unit 3 family inet address 192.0.2.5/24
Definir um classificador e aplicá-lo a uma interface lógica.
[edit class-of-service] user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q0 loss-priority low code-points 000 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q2 loss-priority low code-points 010 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q3 loss-priority low code-points 011 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q1 loss-priority low code-points 001 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q4 loss-priority low code-points 100 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q5 loss-priority low code-points 101 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q6 loss-priority low code-points 110 user@host# set classifiers inet-precedence inet_prec_4 forwarding-class q7 loss-priority low code-points 111
Mapeie as aulas de encaminhamento para filas de CoS.
[edit class-of-service] user@host# set forwarding-classes queue 0 q0 user@host# set forwarding-classes queue 1 q1 user@host# set forwarding-classes queue 2 q2 user@host# set forwarding-classes queue 3 q3 user@host# set forwarding-classes queue 4 q4 user@host# set forwarding-classes queue 5 q5 user@host# set forwarding-classes queue 6 q6 user@host# set forwarding-classes queue 7 q7
Configure perfis de controle de tráfego.
[edit class-of-service] user@host# set traffic-control-profiles 1 scheduler-map sched_map user@host# set traffic-control-profiles 1 shaping-rate 200m
Definir o fluxo de pacotes pelos elementos CoS.
[edit class-of-service] user@host# set interfaces reth0 unit 0 classifiers inet-precedence inet_prec_4
Aplique um perfil de agendamento de tráfego na interface.
[edit class-of-service] user@host# set interfaces reth1 unit 0 output-traffic-control-profile 1
Configure os agendadores CoS.
[edit class-of-service] user@host# set scheduler-maps sched_map forwarding-class q0 scheduler S0 user@host# set scheduler-maps sched_map forwarding-class q1 scheduler S1 user@host# set scheduler-maps sched_map forwarding-class q2 scheduler S2 user@host# set scheduler-maps sched_map forwarding-class q3 scheduler S3 user@host# set scheduler-maps sched_map forwarding-class q4 scheduler S4 user@host# set scheduler-maps sched_map forwarding-class q5 scheduler S5 user@host# set scheduler-maps sched_map forwarding-class q6 scheduler S6 user@host# set scheduler-maps sched_map forwarding-class q7 scheduler S7 user@host# set schedulers S0 transmit-rate percent 20 user@host# set schedulers S1 transmit-rate percent 5 user@host# set schedulers S2 transmit-rate percent 5 user@host# set schedulers S3 transmit-rate percent 10 user@host# set schedulers S4 transmit-rate percent 10 user@host# set schedulers S5 transmit-rate percent 10 user@host# set schedulers S6 transmit-rate percent 10 user@host# set schedulers S7 transmit-rate percent 30
Resultados
A partir do modo de configuração, confirme sua configuração entrando no show class-of-service comando. Se a saída não exibir a configuração pretendida, repita as instruções de configuração neste exemplo para corrigi-la.
Para a brevidade, essa show saída de comando inclui apenas a configuração que é relevante para este exemplo. Qualquer outra configuração no sistema foi substituída por elipses (...).
[edit]
user@host# show class-of-service
classifiers {
inet-precedence inet_prec_4 {
forwarding-class q0 {
loss-priority low code-points 000;
}
forwarding-class q2 {
loss-priority low code-points 010;
}
forwarding-class q3 {
loss-priority low code-points 011;
}
forwarding-class q1 {
loss-priority low code-points 001;
}
forwarding-class q4 {
loss-priority low code-points 100;
}
forwarding-class q5 {
loss-priority low code-points 101;
}
forwarding-class q6 {
loss-priority low code-points 110;
}
forwarding-class q7 {
loss-priority low code-points 111;
}
}
}
forwarding-classes {
queue 0 q0;
queue 1 q1;
queue 2 q2;
queue 3 q3;
queue 4 q4;
queue 5 q5;
queue 6 q6;
queue 7 q7;
}
traffic-control-profiles {
1 {
scheduler-map sched_map;
shaping-rate 200m;
}
}
interfaces {
reth0 {
unit 0 {
classifiers {
inet-precedence inet_prec_4;
}
}
}
reth1 {
unit 0 {
output-traffic-control-profile 1;
}
}
}
scheduler-maps {
sched_map {
forwarding-class q0 scheduler S0;
forwarding-class q1 scheduler S1;
forwarding-class q2 scheduler S2;
forwarding-class q3 scheduler S3;
forwarding-class q4 scheduler S4;
forwarding-class q5 scheduler S5;
forwarding-class q6 scheduler S6;
forwarding-class q7 scheduler S7;
}
}
schedulers {
S0 {
transmit-rate percent 20;
}
S1 {
transmit-rate percent 5;
}
S2 {
transmit-rate percent 5;
}
S3 {
transmit-rate percent 10;
}
S4 {
transmit-rate percent 10;
}
S5 {
transmit-rate percent 10;
}
S6 {
transmit-rate percent 10;
}
S7 {
transmit-rate percent 30;
}
}
Se você terminar de configurar o dispositivo, entre no commit modo de configuração.
Para reiniciar o controle do chassi, insira restart chassis-control o comando do modo operacional.
Quando você executa o restart chassis-control comando, todas as placas FRU na caixa são reiniciadas, afetando assim o tráfego. A mudança no número de filas deve ser executada durante um tempo de inatividade programado. Leva de 5 a 10 minutos para que as placas entrem em operação após a execução do restart chassis-control comando.
Verificação
Verificando a configuração de COS de oito filas
Propósito
Verifique se o CoS de oito filas está habilitado corretamente.
Ação
A partir do modo operacional, insira os seguintes comandos:
show interfaces ge-5/1/14 extensiveshow interfaces queue ge-5/1/14show class-of-service forwarding-classshow class-of-service interface ge-5/1/14