Configuring External Parent Groups for JunosE Devices (SRC CLI)

Creating External Parent Groups in SRC Policies (SRC CLI)

You use external parent group folders to organize external parent groups. To create an external parent group, first create the external parent group folder (or use an existing folder), then create the external parent group. Use the following configuration statement to create an external parent group folder and external parent group:

To create an external parent group folder and external parent group:

1. From configuration mode, enter the edit external-parent-group-folder statement. For example, to create an external parent group called epg1-folder and a group called epg1:
   user@host# edit policies external-parent-group-folder epg1-folder external-parent-group epg1
2. (Optional) Enter a description for the external parent group.
   [edit policies external-parent-group-folder epg1-folder external-parent-group epg1]user@host# set description description
3. (Optional) Verify your external parent group configuration.

   [edit policies external-parent-group-folder epg1-folder external-parent-group epg1]
   user@host#show 
   description "External parent group for JunosE routers";

Configuring Rate-Limit Actions for External Parent Groups (SRC CLI)

Use the following statement to configure rate-limit profiles for external parent groups:

1. From configuration mode, specify the name of the external parent group for which you want to configure the rate-limit profile. For example, to configure the rate-limit profile for an external parent group called epg1:
   user@host# edit policies external-parent-group-folder external parent group epg1 rate-limit

   Specify the rate-limit options:

   • Specify that the rate-limit is either one rate or two rate. The rate-limit type determines the options that you can configure for a rate-limit action.
     [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set type type
   • (Optional) Configure the target rate for the traffic that the policy covers.
     [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-rate committed-rate
   • (Optional) Configure the amount of bandwidth allocated to burst traffic in bytes.
     [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-burst committed-burst
   • (Optional) For two-rate rate-limit profiles, specify the amount of bandwidth allocated to excess traffic flow over the committed rate.
     [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set peak-rate peak-rate
   • (Optional) For two-rate rate-limit profiles, specify the amount of bandwidth allocated to burst traffic in excess of the peak rate.
     [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set peak-burst peak-burst
   • (Optional) Set the rate-limit to color aware for the rate-limit to process color values set in the TOS byte of the packet header.
     [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set color-aware
2. (Optional) Verify your configuration.

   [edit policies external-parent-group-folder epg1-folder external-parent-group epg1]
   user@host#show 
   committed-burst 16384;
   committed-rate 0;
   excess-burst 0;
   type one_rate;
   

Configuring Hierarchical Rate-Limit Actions (SRC CLI)

The type of action that you can create depends on the type of policy rule. See Policy Information Model.

Use the following configuration statements to configure rate-limit actions:

To configure a parent group:

1. From configuration mode, create a parent group in a policy list—for example, PGShared.
   [edit policies group parentGroupDefault list twoRate]user@host# edit parent-group PGShared
2. Configure a rate limit for the parent group.
   [edit policies group parentGroupDefault list twoRate parent-group PGShared]user@host# edit rate-limit
   • Specify that the rate limit is either one rate or two rate. The rate-limit type determines the options that you can configure for a rate-limit action.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set type type
   • (Optional) Configure the target rate for the traffic that the policy covers.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set committed-rate committed-rate
   • (Optional) Configure the amount of bandwidth allocated to burst traffic in bytes.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set committed-burst committed-burst
   • (Optional) For two-rate rate-limit profiles, specify the amount of bandwidth allocated to excess traffic flow over the committed rate.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set peak-rate peak-rate
   • (Optional) For two-rate rate limit profiles, specify the amount of bandwidth allocated to burst traffic in excess of the peak rate.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set peak-burst peak-burst
   • (Optional) For one-rate rate limit profiles, specify the amount of bandwidth allocated to accommodate burst traffic.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set excess-burst excess-burst
   • (Optional) Set the rate-limit to color aware for the rate-limit to process color values set in the TOS byte of the packet header.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# set color-aware
3. (Optional) Configure the rate-limit actions for traffic flows that:
   • Do not exceed the committed rate and burst size
   • Exceed the committed rate but remain below the peak burst size

   See Configuring Types of Actions for Rate-Limit Actions (SRC CLI).

4. Enter a description for the parent group.
   [edit policies group parentGroupDefault list twoRate parent-group PGShared]user@host# set description description
5. Step up one level in the edit hierarchy.
   [edit policies group parentGroupDefault list twoRate parent-group PGShared rate-limit]user@host# up [edit policies group parentGroupDefault list twoRate parent-group PGShared]
6. (Optional) Configure the parent group to reference an external parent group. For example, to add a reference called epg1-ref:
   [edit policies group parentGroupDefault list twoRate parent-group PGShared]user@host# edit external-parent-group-reference epg1-ref
   • Specify the name of the external parent group that you want to reference. For example, to reference the external parent group epg1:
     [edit policies group parentGroupDefault list twoRate parent-group PGShared external-parent-group-reference epg1-ref]user@host# set external-parent-group-name epg1
   • Specify the name of the hierarchical policy parameter for the external parent group. For example, to associate the hierarchical policy parameter called hpp1:
     [edit policies group parentGroupDefault list twoRate parent-group PGShared external-parent-group-reference epg1-ref]user@host# set hierarchical-policy-parameter hpp1
   • Specify the attributes of the hierarchical policy parameter that you are referencing.
     [edit policies group parentGroupDefault list twoRate parent-group PGShared external-parent-group-reference epg1-reference hierarchical-policy-parameter hpp1]user@host# set numeric-aggregation-node numeric-aggregation-node user@host# set level-aggregation-node level-aggregation-node user@host# set level-aggregation-node-id level-aggregation-node-id

     For information about configuring the attributes of the hierarchical policy parameter, see Configuring Hierarchical Policy Parameters for External Parent Groups (SRC CLI).

7. (Optional) Return to the rate-limit action configuration and verify the configuration.

   [edit policies group parentGroupDefault list twoRate parent-group PGShared]
   user@host# show 
   

8. (Optional) Create another parent group within this parent group. For example:
   [edit policies group parentgroupDefault list twoRate parent-group PGShared]user@host# edit parent-group parent-group-name
9. (Optional) Follow the instructions in this procedure for configuring the parent group.

Configuring Types of Actions for Rate-Limit Actions for External Parent Groups (SRC CLI)

Before you configure the various types of actions, configure the rate limit or parent group (for rate-limit hierarchies) that is to include the actions. See:

• Configuring Rate-Limit Actions for External Parent Groups (SRC CLI)
• Configuring Hierarchical Rate-Limit Actions (SRC CLI)

Use the following configuration statements to configure rate-limit actions from the [edit policies external-parent-group-folder name external-parent-group name ] hierarchy level:

• Specify an action for a rate-limit action or a rate-limit hierarchy:

  Note: The following examples show the configuration for a committed action. You can configure the same actions for committed actions, conformed actions, and exceed actions.

  • Filter (drop packet).
    [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-action filter
  • Forward.
    [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-action forward
  • (For rate-limit hierarchies only) Forward conditionally.
    [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-action forward-conditional
  • (Rate-limit hierarchies only for committed and conformed actions) Forward unconditionally.
    [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-action forward-unconditional
  • (For rate-limit hierarchies only) Forward and exit from the rate-limit hierarchy.
    [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# set committed-action forward-final
  • Mark. If you select mark, enter the mark values.
    [edit policies external-parent-group-folder external parent group epg1 rate-limit]user@host# edit committed-action mark mark-info [edit policies external-parent-group-folder external parent group epg1 rate-limit committed-action mark mark-info]user@host# set value value [edit policies external-parent-group-folder external parent group epg1 rate-limit committed-action mark mark-info]user@host# set mask mask

    Make sure that masks configured with a rate-limit action are the same for different mark actions.

  • Parameter. Before you assign a parameter, you must create a parameter of the packetOperation type and commit the parameter configuration.
    [edit policies external-parent-group-folder external parent group epg1 rate-limit committed-action]user@host# set committed-action parameter action action

Configuring Hierarchical Policy Parameters for External Parent Groups (SRC CLI)

Use the following statement to configure hierarchical policy parameters for external parent groups:

To configure hierarchical policy parameters for external parent groups:

The hierarchical policy parameter consists of three possible attributes:

• numeric-aggregation-node—Specifies the JunosE aggregation node numerically in the range of 0 through 65,535. The default value of 0 indicates that the numeric-aggregation-node is not configured.
• level-aggregation-node—Specifies the level where the specified external parent group needs to be grouped. Set this attribute to one of the values listed in Table 1.

  Table 1: Supported Values for the level-aggregation-node Attribute

  level-aggregation-node	Notes
  (Default) The level-aggregation-node is not configured.
  Forwarding
  Vlan
  Atm
  Svlan	When svlan is chosen as the level-aggregation-node, you must also configure the value for the level-aggregation-node-id, which represents the svlanID. The range is from 0 through 4095.
  atm-vc
  atm_vp	When atm-vp is chosen as the level-aggregation-node, you must also configure the value for the level-aggregation-node-id attribute, which represents the atm-vpId. The range is from 0 through 255.
  Ethernet
  fr-vc
  ppp-interface

  Note: Set the hierarchical policy parameter to either numeric-aggregation-node or level-aggregation-node. You should configure only one value for this policy parameter; if you configure both values, the level-aggregation-node takes higher priority.

  Note: Values for the numeric-aggregation-node and level-aggregation-node attributes can be set in the SRC software as global parameters or configured as values directly in an internal parent group or classify-traffic condition.

• level-aggregation-node-id—Specifies the JunosE aggregation node ID. You specify this parameter only if the level-aggregation-node option is set to svlan or atm-vp. In this case, it is mandatory to set this parameter.
  • When you specify svlan as the level-aggregation-node, this parameter represents the svlanID in the range of 0 through 4095.
  • When you specify atm-vp as the level-aggregation-node, this parameter represents the atm-vpId in the range of 0 through 255.

1. From configuration mode, specify the name of the external parent group for which you want to configure the hierarchical policy parameter. For example, to configure the hierarchical policy parameter for an external parent group called epg1:
   user@host# edit policies external-parent-group-folder external parent group epg1 hierarchical-policy-parameter
2. Configure the value for the level-aggregation-node option. For example, to configure the level-aggregation-node for vlan:
   [edit policies external-parent-group-folder external parent group epg1 hierarchical-policy-parameter]user@host# set level-aggregation-node vlan
3. (Optional) Configure the value for the level-aggregation-node-id option. For example, to configure the level-aggregation-node-id for 10:
   [edit policies external-parent-group-folder external parent group epg1 hierarchical-policy-parameter]user@host# set level-aggregation-node-id 10
4. (Optional) Configure the value for the numeric-aggregation-node option. For example, to configure the numeric-aggregation-node for 5:
   [edit policies external-parent-group-folder external parent group epg1 hierarchical-policy-parameter]user@host# set numeric-aggregation-node 5
5. (Optional) Verify the configuration for the hierarchical policy parameter.

   [edit policies external-parent-group-folder external parent group epg1 hierarchical-policy-parameter]
   user@host#show 
   level-aggregation-node vlan;
   level-aggregation-node-id 9;
   numeric-aggregation-node 5;