8. Capitulo Reflexiones y Aprendizajes de la Experiencia
8.3 Diseñar una cartilla en la búsqueda de llegar a otros
524288 (512K), 1048576 (1024K), 2097152 (2048K), 4194304 (4096K), 8388608 (8192K), and in the case of the 5600 Series switch, 16777216 (16384K).
Note: On 5530-24TFD, 5520-24T/48T 10/100/1000 Mbps ports and 5600 Series ports, the minimum value and granularity for the committed rate is 64 Kbps. On the 10 Gbps ports the maximum value for the committed rate is 10230000 Kbps.
Trusted, untrusted, and unrestricted interfaces
Nortel Ethernet Routing Switch 5000 Series ports are classified into three categories:
•
trusted•
untrusted•
unrestrictedThe classifications of trusted, untrusted, and unrestricted actually apply to groups of ports (interface groups). These three categories are also referred to as interface classes. In your network, trusted ports are usually connected to the core of the DiffServ network, and untrusted ports are typically access links that are connected to end stations. Unrestricted ports can be either access links or connected to the core network.
At factory default, all ports are considered untrusted. However, for those interface groups created, the default is unrestricted.
Because a port can belong to only one interface group, a port is classified as trusted, untrusted, or unrestricted. These types are also referred to as interface classes.
Trusted and untrusted ports are automatically associated with policies that initiate default traffic processing. This default processing occurs if:
•
no actions are initiated based on user-defined policy criteria that matches the traffic.OR
•
the actions associated with the user-defined policy do not conflict with the default processing actions.The default processing of trusted and untrusted interfaces is as follows:
•
Trusted interfaces — IPv4 traffic received on trusted interfaces isre-marked at the layer 2 level, that is, the 802.1p user priority value is updated based on the DSCP value in the packet at ingress and the installed DSCP-to-CoS mapping data. The DSCP value is not
updated. On the 5500 Series switch, remapping occurs, by default, only for standardized DSCP values (for example, EF, AFXX) and any proprietary Nortel values. On the 5600 Series switch, remapping occurs for all DSCP values. The DSCP values that are remapped are associated with a zero 802.1p user priority value in the DSCP-to-COS Mapping Table. The 5600 Series switch uses a hardware based DSCP table to support Trusted processing. No policies or filters are consumed by the 5600 Series.
•
Untrusted interfaces — IPv4 traffic received on untrusted interfaces is re-marked at the layer 3 level—that is, the DSCP value is updated. The new DSCP value is determined differently depending on whether the packet is untagged or tagged:— Untagged frames
The DSCP value is derived using the default port priority of the interface receiving the ingressing packet. This default port priority is used to perform a lookup in the installed CoS-to-DSCP mapping table.
The 802.1p user priority value is unchanged—that is, the default port priority determines this value.
(Thus, the DSCP value on untagged frames on untrusted interfaces is updated using the default port priority of the ingress interface; the user sets the default port priority).
— Tagged frames
The DSCP value is re-marked to indicate best-effort treatment is all that is required for this traffic.
The 802.1p user priority value is updated based on the
DSCP-to-CoS mapping data associated with the best effort DSCP, which is 0.
Table 4 "Default QoS fields by class of interface—IPv4 only" (page 37)shows the default guidelines the switch uses to re-mark various fields of IPv4 traffic (and layer 2 traffic matching IPv4) based on the class of the interface. These actions occur if the user does not intervene at all; they are the default actions of the switch.
Trusted, untrusted, and unrestricted interfaces 37
Table 4
Default QoS fields by class of interface—IPv4 only Type of
filter Action Trusted Untrusted
Unrestrict ed DSCP Does not change
•
Tagged—Updates to 0 (Standard)•
Untagged—Updatesusing mapping table and port’s default value
Does not change IPv4 filter criteria or Layer 2 filter criteria matching IPv4 IEEE 802.1p Updates based on DSCP mapping table value
•
Tagged—Dependent on DCSP-to-COS setting.•
Untagged—Priority is unchanged. Does not changeNote: The default for layer 2 non-IP traffic is to pass the traffic through all interfaces classes with the QoS values for 802.1p and drop precedence unchanged.
The Nortel Ethernet Routing Switch 5000 Series does not trust the DSCP of IPv4 traffic received from an untrusted port, however, it does trust the DSCP of IPv4 traffic received from a trusted port.
By default, L2 non-IP traffic received on either a trusted port or an untrusted port traverses the switch with no change.
IPv4 traffic, received on a trusted port, has the 802.1p user priority value re-marked and the drop precedence set, based on the DSCP in the received IP packet.
If an IPv4 packet is received from a trusted port, and either it does not match any of the classifier elements installed by the user on this port or it does match a classifier element but may be dropped, the 5500 Series switch uses default system classifiers to change the packet IEEE 802.1p and drop precedence based on the DSCP of the packet. The 5600 Series switch uses a hardware based DSCP table for this purpose.
If an IPv4 packet is received from an untrusted port and it does not match any one of the classifier elements installed by the user on the port, the Nortel Ethernet Routing Switch 5000 Series uses default system classifiers to change the packet DSCP, IEEE 802.1p priority, and drop precedence as follows:
•
If the packet is tagged, the 802.1p user priority value is derived from the DSCP-to-CoS mapping table using the best effort DSCP, which is 0.•
If an IPv4 packet is untagged, the Nortel Ethernet Routing Switch 5000 Series uses the default classifier to change the DSCP based on the default IEEE 802.1p priority of the ingress untrusted port to index into the CoS-to-DSCP mapping table to determine the DSCP value. Table 5 "Default mapping of DSCP to QoS class and IEEE 802.1p" (page 38)describes the default DSCP, QoS class, IEEE 802.1p, and egress queue assignment for packets in each traffic class.Table 5
Default mapping of DSCP to QoS class and IEEE 802.1p Incoming or re-marked
DSCP (hex values) QoS class
Number of queues (8) Outgoing IEEE 802.1p user priority CS7 (0x38) Critical 1 CS6 (0x30) Network 1 7 EF(0x2E), CS5(0x28) Premium 2 6 AF41(0x22), AF42( 0x24), AF43(0x26), CS4(0x20) Platinum 3 5 AF31(0x1A), AF32( 0x1C), AF33(0x1E), CS3(0x18) Gold 4 4 AF21(0x12), AF22( 0x14), AF23(0x16), CS2(0x10) Silver 5 3 AF11(0xA), AF12(0xC), AF13(0xE), CS1(0x8) Bronze 6 2 DE(0x0), CS0(0x0), all undefined DSCPs Standard 7 0
As displayed in Table 5 "Default mapping of DSCP to QoS class and IEEE 802.1p" (page 38), the traffic service class determines the IEEE 802.1p priority that determines the egress queue of the traffic. Non-IP traffic can be in the same IP service class if the non-IP packets are assigned the same IEEE 802.1p priority.
Note: Default policies for trusted interfaces are not used on the 5600 Series switch. This task is addressed by the hardware.