To configure a SAP access ingress policy

Before you begin

A SAP access ingress policy defines forwarding for traffic entering from a service. The policy is assigned to L2 access interfaces on VPLS and VLL services, and to L3 access interfaces on IES and VPRN services. See the following procedures, according to the service type:

Steps
 
1 

Choose Policies→QoS→SROS QoS→Access Ingress→SAP Access Ingress from the NFM-P main menu. The SAP Access Ingress Policies form opens.

2 

Click Create or choose a policy and click Properties. The SAP Access Ingress Policy (Create|Edit) form opens.

3 

Configure the required general parameters.

If you are configuring a SAP access ingress policy for tagged IP/IPv6 match entry overrides, set the IP/IPv6 Criteria Type parameters to Tagged-Entries. Tag IDs are configured in Step 13. See Policy override.

If you are configuring a SAP access ingress policy for the 7250 IXR, select a 7250 SROS Ingress Classification policy in the Ingress Classification Policy panel; see To configure a 7250 SROS Ingress Classification policy. If you do not select a user-configured 7250 SROS Ingress Classification policy, a default policy is applied.

Note: For some of the general parameters, additional fields will be displayed when certain selections are made. For example, when setting the IP Criteria Type and IPv6 Criteria Type to VXLAN-VNI and then clicking Apply, the Match Criteria field is displayed, and shows a value of None.

Note: NEs that support next-generation CLI use the policy name as the key identifier for internal system reference. For policies on these NEs, you must configure a policy name (typically the service name or a numerical string). Policy IDs are also supported. You must configure a numerical range on the NE for auto-assigned policy IDs; see To configure an Auto-ID range for policies.

Note: For some of the following steps, the tabs are not available until after the policy is created. Click Apply if required to create the policy and make all tabs available.

4 

Enable the Policers HQoS Manageable parameter if the policers in this policy are to be managed by the Hierarchical QoS process.

5 

Configure access ingress queues.

  1. Click on the Queues tab.

    The NFM-P provides two default queues — a default unicast queue (ID 1) and a default multipoint queue (ID 11). You cannot delete the default queues.

    You can add queues up to a total of 32.

  2. Click Create or choose a queue and click Properties. The Queue (Create|Edit) form opens.

  3. Configure the required general parameters.

    Before you can configure the Pool Name parameter, you must create a Q1 pool; see To configure Q1 pools.

  4. Select a slope policy.

  5. Select an advanced configuration policy.

  6. Click on the CIR/PIR/FIR tab and configure the required parameters.

    You can configure the CIR, PIR, and FIR as a rate or as a percentage, depending on the option selected for the Rate Type parameter.

    Ensure that the CIR value is lower than the PIR value.

  7. Click on the Burst Size tab and configure the required parameters.

    Deselect the Default check box for each parameter that you need to configure.

    Ensure that the Committed Burst Size (kb) value is lower than the Maximum Burst Size (bytes) value.

  8. Save your changes and close the form.

6 

Configure a dynamic policer.

  1. Click on the Dynamic Policer tab and configure the required general parameters.

  2. Select a Parent Arbiter.

  3. Click on the Burst Size tab and configure the Committed Burst Size and Maximum Burst Size parameters.

    Deselect the Default check box for each parameter that you need to configure.

    Ensure that the Committed Burst Size value is lower than the Maximum Burst Size value.

7 

Configure ingress policers.

  1. Click on the Policer tab.

  2. Click Create or choose a policer and click Properties. The Access Ingress Policer (Create|Edit) form opens.

  3. Configure the required general parameters.

  4. Select a Parent Arbiter and an Advanced Configuration Policy.

  5. Select a Scheduler Parent if required, and then configure the parameters in the Scheduler Association panel.

  6. Click on the CIR/PIR tab and configure the required parameters.

    You can configure the CIR and PIR as a rate or as a percentage, depending on the option selected for the Rate Type parameter.

    Ensure that the CIR value is lower than the PIR value.

  7. Click on the Burst Size tab and configure the required parameters.

    Deselect the Default check box for each parameter that you need to configure.

  8. Save your changes and close the form.

8 

Configure forwarding classes.

  1. Click on the Forwarding Classes tab.

  2. Click Create or choose a forwarding class and click Properties. The Forwarding Class (Create|Edit) form opens.

  3. Configure the Forwarding Class parameter.

  4. Perform any of the following:

    • If you need to configure a queue group for one or more traffic types, complete substeps 5 and 6 .

    • If you need to configure queues for one or more traffic types, complete substep 6 .

    • If you need to configure policers for one or more traffic types, complete substeps 7, 8, and 9.

  5. In the Traffic Control panel, select the Use Queue Group option for any of the Unicast, Broadcast, Multicast, and Unknown traffic type parameters.

    In the Queues panel, select a queue group template policy.

    When the Use Queue Group option is selected in the global policy, the Queue ID, Multipoint Queue ID, Broadcast Queue ID, and Unknown Queue ID parameters, if selected, are validated against the specified Queue Group Template Policy. The Queue ID is validated against the local queues for each local policy instance.

  6. In the Queues panel, configure the parameters:

    • Queue ID

      The parameter must be set to a unicast ID. Set the parameter to 0 if you want the default queue ID to be used.

    • Multipoint Queue ID

      The parameter must be set to a multicast ID. Set the parameter to 0 if you want the default queue ID to be used.

    • Broadcast Queue ID

      The parameter must be set to a multicast ID. Set the parameter to 0 if you want the default queue ID to be used.

    • Unknown Queue ID

      The parameter must be set to a multicast ID. Set the parameter to 0 if you want the default queue ID to be used.

  7. In the Traffic Control panel, select the Use Policer option for any of the Unicast, Broadcast, Multicast, and Unknown traffic type parameters.

  8. In the Policers panel, for each traffic type configured with the Use Policer option, configure the corresponding Policer ID parameter.

    The FP Redirect Group, Multipoint FP Redirect Group, Broadcast FP Redirect Group, and Unknown FP Redirect Group parameters are displayed only when the associated traffic types in the Traffic Control panel are configured to use policers.

  9. Select a policer for each Policer ID parameter. The policer must exist in the SAP access ingress policy from Step 7 .

  10. Configure the required remaining parameters.

    The In Precedence parameter is configurable when the In Remark parameter is set to precedence.

    The Out Precedence parameter is configurable when the Out Remark parameter is set to precedence.

    The In DSCP parameter is configurable when the In Remark parameter is set to dscp.

    The Out DSCP parameter is configurable when the Out Remark parameter is set to dscp.

  11. Click on the Sub Classes tab to configure subclasses for the forwarding class.

  12. Click Create or choose a sub class and click Properties. The Forwarding Sub Class (Create|Edit) form opens.

  13. Configure the required parameters.

    The In Precedence parameter is configurable when the In Remark parameter is set to precedence.

    The Out Precedence parameter is configurable when the Out Remark parameter is set to precedence.

    The In DSCP parameter is configurable when the In Remark parameter is set to dscp.

    The Out DSCP parameter is configurable when the Out Remark parameter is set to dscp.

  14. Save your changes and close the forms.

9 

Map ingress dot1p bits.

  1. Click on the Dot1p tab.

  2. Click Create or choose a Dot1p entry and click Properties. The Dot1p (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Save your changes and close the form.

10 

Map ingress DSCP bits.

  1. Click on the DSCP tab.

  2. Click Create or choose a DSCP entry and click Properties. The Dscp (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Save your changes and close the form.

11 

Map ingress Precedence bits.

  1. Click on the Precedence tab.

  2. Click Create or choose a Precedence entry and click Properties. The Precedence (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Save your changes and close the form.

12 

Map ingress LSP EXP bits.

  1. Click on the LspExp tab.

  2. Click Create or select an LspExp entry and click Properties. The Lsp Exp (Create|Edit) form opens.

  3. Configure the required parameters.

  4. Save your changes and close the form.

13 

Configure match criteria. Perform any the following:

Note: If you configure MAC match criteria entries, you cannot configure IPv4 or IPv6 match criteria entries. Conversely, when no MAC match criteria entries are configured, you can configure both IPv4 and IPv6 entries.

  1. Configure IPv4 match criteria.

    1. Click on the IP Match Criteria tab.

    2. Click Create or choose an entry and click Properties. The IP Match (Create|Edit) form opens.

    3. Configure the required parameters.

      You can configure the Tag ID parameter only when the IP/IPv6 Criteria Type is set to Tagged-Entries in Step 3.

      If you set the IP/IPv6 Criteria Type to Tagged-Entries, you cannot enable the Destination Port parameter in the Port Properties panel.

      The Source Port and Destination Port parameters are available only when the Protocol parameter value is TCP, UDP, or UDPTCP (*).

      The VXLAN-VNI Properties panel is only displayed when the Protocol parameter value is set to UDP (17). You can then configure the required Operator parameter.

      To configure some parameters, you must select the check box for the parameter.

      The Src Mask and Src Net Mask parameters are mutually exclusive.

      The Source IP and Source IP Prefix parameters are mutually exclusive.

      The Dst Mask and Dst Net Mask parameters are mutually exclusive.

      The Destination IP and Destination IP Prefix parameters are mutually exclusive.

    4. In the IP Properties panel, select QoS IP Prefix List policies, as required.

      - For the Source IP Prefix and Destination IP Prefix parameters, enable the checkbox and click Select. The Select [Source|Destination] IP Prefix form opens.

      - Click Create, or click Search and choose an existing QoS IP Prefix list policy.

      See To configure a QoS prefix list policy.

    5. Select a bypass policer, if required.

      The bypass policer must be local to the SAP (that is, it cannot be part of a queue group), and it must already be created within the SAP ingress policy, as described in Step 7 .

    6. Save your changes and close the form.

  2. Configure MAC match criteria.

    1. Click on the MAC Match Criteria tab.

    2. Click Create or choose an entry and click Properties. The MAC Match (Create|Edit) form opens.

    3. Configure the required parameters.

      The parameters that are available vary depending on the option selected for the Frame Type parameter.

      To configure some parameters, you must select the check box for the parameter.

    4. Select a bypass policer, if required.

      The bypass policer must be local to the SAP (that is, it cannot be part of a queue group), and it must already be created within the SAP ingress policy, as described in Step 7 .

    5. Save your changes and close the form.

  3. Configure IPv6 match criteria.

    1. Click on the IPv6 Match Criteria tab.

    2. Click Create or choose an entry and click Properties. The IPv6 Match form opens.

    3. Configure the required parameters.

      The Source Port and Destination Port parameters appear only when the Protocol parameter value is TCP, UDP, or UDPTCP (*).

      The VXLAN-VNI Properties panel is only displayed when the Protocol parameter value is set to UDP (17). You can then configure the required Operator parameter.

      To configure some parameters, you must select the check box for the parameter.

      The Src Mask and Src Net Mask parameters are mutually exclusive.

      The Dst Mask and Dst Net Mask parameters are mutually exclusive.

    4. In the IP Properties panel, select QoS IP Prefix List policies, as required.

      - For the Source IPv6 Prefix and Destination IPv6 Prefix parameters, enable the checkbox and click Select. The Select [Source|Destination] IPv6 Prefix form opens.

      - Click Create, or click Search and choose an existing QoS IP Prefix list policy.

      See To configure a QoS prefix list policy.

    5. Select a bypass policer, if required.

      The bypass policer must be local to the SAP (that is, it cannot be part of a queue group), and it must already be created within the SAP ingress policy, as described in Step 7 .

    6. Save your changes and close the form.

14 

Click OK to save the policy and close the form, or click Apply to save the policy. See To release and distribute a policy to distribute the policy to NEs.

End of steps