How to configure Assured Forwarding (AF) for packets of a certain type on an AR

2

On AR routers, you can run the queue af command to configure Assured Forwarding (AF) for packets of a certain type and set the minimum bandwidth.
AF ensures a low drop probability of packets when the rate of outgoing service traffic does not exceed the minimum bandwidth. It is applied to services of heavy traffic whose bandwidth need to be ensured.
Configuration example: Set the minimum bandwidth for the traffic of network segment 192.168.100.0 to 3000 kbit/s.
[Huawei] acl 3022 //Configure an ACL to match traffic for which traffic is to be assured.
[Huawei-acl-adv-3022] rule permit ip source 192.168.100.0 0.0.0.255
[Huawei-acl-adv-3022] quit
[Huawei] traffic classifier c
[Huawei-classifier-c] if-match acl 3022 //Create a traffic classifier to protect the traffic matching the ACL rule.
[Huawei-classifier-c] quit
[Huawei] traffic behavior b
[Huawei-behavior-b] queue af bandwidth 3000 //Create a traffic behavior and set the minimum bandwidth to 3000 kbit/s.
[Huawei-behavior-b] quit
[Huawei] traffic policy p
[Huawei-trafficpolicy-p] classifier c behavior b //Create a traffic policy and bind the traffic classifier and traffic behavior to the traffic policy.
[Huawei-trafficpolicy-p] quit
[Huawei] interface Ethernet 0/0/0
[Huawei-Ethernet0/0/0] traffic-policy p outbound //Apply the traffic policy on the interface.

Other related questions:
How to assure forwarding of IPSec data flows on an AR
Configure the QoS function for IPSec packets first, and then configure assured forwarding (AF) for IPSec data flows through MQC. system-view [Huawei]ipsec policy huawei 1 manual //Create an IPSec policy, set the SA creation mode to manual, and enter the IPSec policy view. Alternatively, you can complete the following configurations in the ISAKMP policy view, IPSec policy template view, IPSec profile view, Efficient VPN policy view, or GDOI policy view. [Huawei-ipsec-policy-manual-huawei-1]qos group 10 //Configure the QoS group to which IPSec packets belong. [Huawei-ipsec-policy-manual-huawei-1]quit [Huawei]traffic classifier c1 //Create a traffic classifier and enter the traffic classifier view. [Huawei-classifier-c1]if-match qos-group 10 //Configure a matching rule based on QoS group 10. [Huawei-classifier-c1]quit [Huawei]traffic behavior b1 //Create a traffic behavior and enter the traffic behavior view. [Huawei-behavior-b1]queue af bandwidth 3000 //Configure AF for the matched data flow. [Huawei-behavior-b1]quit [Huawei]traffic policy p1 //Create a traffic policy and enter the traffic policy view. [Huawei-trafficpolicy-p1]classifier c1 behavior b1 //Bind the traffic classifier to the traffic behavior. [Huawei-trafficpolicy-p1]quit [Huawei]interface GigabitEthernet 0/0/0 [Huawei-GigabitEthernet0/0/0]traffic-policy p1 outbound //Apply the traffic policy on the interface.

Which status do MSTP interfaces of an AR router have and how do they process packets
MSTP interface status: - Forwarding: In this state, an interface forwards user traffic. Only the root interface or a specified interface can be in this state. - Learning: This is a transitional state. In this state, a switch will build a MAC address table according to the user traffic it receives (but not forward the user traffic). That is why this state is referred to as a learning state. - Discarding: In this state, an interface blocks packets and does not learn MAC addresses.

The packets sent to an IP address in a configured NAT address pool are discarded
Q: The packets sent to an IP address in a configured NAT address pool are discarded. You can run the ip route-static command to configure a static route to the IP address. The default priority of a static route is 60, which is higher than that of the UNR. This prevents packets sent to an IP address in the address pool from being discarded. The causes are as follows: After a NAT address pool is configured on an interface, a 32-bit local user network route (UNR) is automatically generated, and its priority is 64. When a packet to be sent to an IP address in the address pool passes the router, it matches the 32-bit local UNR and is sent to the protocol stack. However, the router cannot forward the packet because it does not have the protocol stack of the IP address. The packet is discarded. Therefore, you need to configure a static route with the default priority higher than that of the UNR.

How can the AR router forward RSVP-TE Path packets on the MPLS network
Generally, Path messages of RSVP-TE are forwarded based on IP routes on the MPLS network. In the scenario where FRR is used, when the primary CR-LSP is faulty, the system starts the TE FRR bypass tunnel. Path messages are forwarded over the TE tunnel.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top