DynagenでCCIEを目指す

INE Workbook Volume I QoS 確認トラフィックの生成 (2)

最終更新：2011年08月15日 12:41

it_certification

- view

管理者のみ編集可

10.33 MQC Classfication and Marking
10.34 MQC Bandwidth Reservations and CBWFQ
10.35 Bandwidth Percent
10.37 MQC WRED
10.38 MQC Dynamic Flows and WRED
10.39 MQC WRED with ECN
10.40 MQC Class-Based Generic Traffic Shaping
10.41 MQC Class-Based GTS and CBWFQ
10.42 MQC Single-Rate Three-Color Policer
10.43 MQC Hierarchical Policers
10.44 MQC Two-Rate Three-Color Policer
10.45 MQC Peak Shaping

10.33 MQC Classfication and Marking

以下のトラフィックを発生させ、想定通りのClassificationおよびMarkingがされている事を確認します。

src	dst	Prec, DSCP
R6	R5	Prec 0	udp-jitter codec g729a
R5	R6	Prec 0	HTTP
R6	R5	Prec 0	ping size 1000
R6	R5	Prec 0	ping size 1001
R6	R5	Prec 3	ping
R4	R5	Prec 0	ping

まず、トラフィックがR4, R5間のsrial linkを経由するように以下のI/Fをshutdownさせます。

 R1:
interface Serial 0/0
 shutdown
!
interface Serial 0/1
 shutdown

 R4:
interface Serial 0/0/0
 shutdown

60byte upd packetは、codecがg729aであるupd-jitterを使用する事で生成できます。また、R6をHTTPサーバー

 R5:
ip sla responder
ip http client password cisco

 R6:
ip sla 1
 udp-jitter 155.8.45.5 16384 source-ip 155.8.146.6 source-port 16384 codec g729a
 frequency 30
ip sla schedule 1 life forever start-time now

R6からR5へのHTTP通信を発生させます。

 R6:
ip http server
ip http path flash:

 R5:
ip http client password cisco
copy http://155.8.146.6/c1841-adventerprisek9-mz.124-24.T.bin null:

R6からR5へ1000byteのpingを送信します。このパケットは、CMAP_SCAVENGERに分類され、precedence 1にマークされる事を確認するためです。

Rack8R6#ping 155.8.45.5 size 1000

Type escape sequence to abort.
Sending 5, 1000-byte ICMP Echos to 155.8.45.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 316/326/360 ms
Rack8R6#

R6からR5へ1001byteのpingを送信し、dropされる事を確認します。このパケットは、CMAP_ICMP_LARGEに分類されdropされる事を確認するためです。

Rack8R6#ping 155.8.45.5 size 1001 timeout 1 repeat 3

Type escape sequence to abort.
Sending 3, 1001-byte ICMP Echos to 155.8.45.5, timeout is 1 seconds:
...
Success rate is 0 percent (0/3)
Rack8R6#

R6からR5へprecedence 3のpingを送信します。このパケットは、いずれのクラスにも分類されない(class-defalutに分類される)事を確認するためです。

Rack8R6#ping
Protocol [ip]:
Target IP address: 155.8.45.5
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]: 1
Extended commands [n]: y
Source address or interface:
Type of service [0]: 96
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 155.8.45.5, timeout is 1 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 36/36/60 ms
Rack8R6#

R4からR5へpingを送信します。このパケットは、いずれのクラスにも分類されない(class-defalutに分類される)事を確認するためです。

Rack8R4#ping 155.8.45.5 repeat 100

Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 155.8.45.5, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 12/14/16 ms
Rack8R4#

想定通りの分類がされているかを確認するため、show policy-map interfaceコマンドを入力します。パケットカウンタの増分から想定通りの分類がなされているかどうかを推測します。

Rack8R4#show policy-map interface
 Serial0/1/0

  Service-policy output: PMAP_S010_OUT

    Class-map: CMAP_WWW (match-all)
      6119 packets, 3540789 bytes
      5 minute offered rate 23000 bps, drop rate 0 bps
      Match: access-group name ACL_VLAN146_WWW
      QoS Set
        precedence 2
          Packets marked 6119

    Class-map: CMAP_VOICE (match-all)
      23676 packets, 1515264 bytes
      5 minute offered rate 22000 bps, drop rate 0 bps
      Match: access-group name ACL_VOICE
      Match: packet length min 60 max 60
      QoS Set
        dscp ef
          Packets marked 23676

    Class-map: CMAP_ICMP_LARGE (match-all)
      9 packets, 9045 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol icmp
      Match: packet length min 1001
      drop

    Class-map: CMAP_SCAVENGER (match-all)
      42 packets, 8328 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip precedence 0
      Match: input-interface FastEthernet0/1
      QoS Set
        precedence 1
          Packets marked 42

    Class-map: class-default (match-any)
      413 packets, 109907 bytes
      5 minute offered rate 1000 bps, drop rate 0 bps
      Match: any
Rack8R4#

上記確認は分類のみの確認です。MQCは設定量が多いので、想定通りにきちんと分類できるかどうかが一番の肝であると思います。従って、時間に余裕がない場合は上記のように分類のみの確認が有効と思われますが、時間に余裕がある場合はMarkingの確認も行いましょう。
以下のようにip precedenceに基づくACLを作成します。

 R5:
ip access-list extended ACL_VERIFY_MARK
 permit ip any any precedence routine
 permit ip any any precedence priority
 permit ip any any precedence immediate
 permit ip any any precedence flash
 permit ip any any precedence flash-override
 permit ip any any precedence critical
 permit ip any any precedence internet
 permit ip any any precedence network
 permit ip any any
!
interface Serial0/1/0
 ip access-group ACL_VERIFY_MARK in

ACLのカウンタから想定通りのMarkingがなされているかどうかを確認します。なお、DSCP EFはip precedence 5(critical)に分類されます。

Rack8R5#show access-lists
Extended IP access list ACL_VERIFY_MARK
    10 permit ip any any precedence routine (100 matches)
    20 permit ip any any precedence priority (28 matches)
    30 permit ip any any precedence immediate (214 matches)
    40 permit ip any any precedence flash (144 matches)
    50 permit ip any any precedence flash-override
    60 permit ip any any precedence critical (18148 matches)
    70 permit ip any any precedence internet (116 matches)
    80 permit ip any any precedence network
    999 permit ip any any
Rack8R5#

10.34 MQC Bandwidth Reservations and CBWFQ

以下のトラフィックを発生させ、設定通りの帯域が保証されている事を確認します。

src	dst	Prec, DSCP
R5	R6	Prec 0	HTTP
R6	R5	Prec 0	udp-jitter codec g729a
R6	R5	Prec 0	ping size 1000
R4	R5	Prec 0	ping size 1000 timeout 0

HTTPとudp-jitterは前問と全く同じ設定ですので、説明を省略します。
R6からR5へ, R4からR5へのpingは以下の通りです。

Rack8R6#ping 155.8.45.5 size 1000 repeat 99999999

Type escape sequence to abort.
Sending 99999999, 1000-byte ICMP Echos to 155.8.45.5, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!


Rack8R4#ping 155.8.45.5 size 1000 repeat 99999999 timeout 0

Type escape sequence to abort.
Sending 99999999, 1000-byte ICMP Echos to 155.8.45.5, timeout is 0 seconds:
......................................................................
......................................................................

設定通りの32Kbpsにはなっていませんが、ある程度の帯域が保証されている事を確認します。

Rack8R4#show policy-map interface
 Serial0/1/0

  Service-policy output: PMAP_S010_OUT

    Class-map: CMAP_WWW (match-all)
      12333 packets, 7134251 bytes
      30 second offered rate 38000 bps, drop rate 0 bps
      Match: access-group name ACL_VLAN146_WWW
      Queueing
      queue limit 16 packets
      (queue depth/total drops/no-buffer drops) 6/0/0
      (pkts output/bytes output) 6000/3476815
      QoS Set
        precedence 2
          Packets marked 12333
      bandwidth 32 kbps

    Class-map: CMAP_VOICE (match-all)
      92258 packets, 5904512 bytes
      30 second offered rate 12000 bps, drop rate 0 bps
      Match: access-group name ACL_VOICE
      Match: packet length min 60 max 60
      QoS Set
        dscp ef
          Packets marked 92258

    Class-map: CMAP_ICMP_LARGE (match-all)
      9 packets, 9045 bytes
      30 second offered rate 0 bps, drop rate 0 bps
      Match: protocol icmp
      Match: packet length min 1001
      drop

    Class-map: CMAP_SCAVENGER (match-all)
      950 packets, 840064 bytes
      30 second offered rate 10000 bps, drop rate 0 bps
      Match: ip precedence 0
      Match: input-interface FastEthernet0/1
      Queueing
      queue limit 24 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 857/827252
      QoS Set
        precedence 1
          Packets marked 950
      bandwidth 32 kbps

    Class-map: class-default (match-any)
      202405 packets, 49756721 bytes
      30 second offered rate 4499000 bps, drop rate 4459000 bps
      Match: any
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops/flowdrops) 17/183471/0/183471
      (pkts output/bytes output) 47364/4141740
      Fair-queue: per-flow queue limit 16
Rack8R4#

10.35 Bandwidth Percent

確認方法は前問と同じです。

10.37 MQC WRED

"10.33 MQC Classfication and Marking"と同様のHTTP通信を発生させ、想定通りのカウンタが上昇している事を確認します。

Rack8R4#show policy-map interface
 Serial0/1/0

  Service-policy output: PMAP_S010_OUT

    queue stats for all priority classes:
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 0/104/0
      (pkts output/bytes output) 16351/1046464

    Class-map: CMAP_WWW (match-all)
      12428 packets, 7203457 bytes
      30 second offered rate 44000 bps, drop rate 0 bps
      Match: access-group name ACL_VLAN146_WWW
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 2/0/0
      (pkts output/bytes output) 4573/2652340
      QoS Set
        precedence 2
          Packets marked 12428
      bandwidth remaining 33% (33 kbps)
        Exp-weight-constant: 9 (1/512)
        Mean queue depth: 2 packets
        class     Transmitted       Random drop      Tail drop          Minimum        Maximum     Mark
                  pkts/bytes     pkts/bytes       pkts/bytes          thresh         thresh     prob

        0               0/0               0/0              0/0                 20            40  1/10
        1               0/0               0/0              0/0                 22            40  1/10
        2            2716/1575280         0/0              0/0                  4            16  1/4
        3               0/0               0/0              0/0                 26            40  1/10
        4               0/0               0/0              0/0                 28            40  1/10
        5               0/0               0/0              0/0                 30            40  1/10
        6               0/0               0/0              0/0                 32            40  1/10
        7               0/0               0/0              0/0                 34            40  1/10

    omitted

Rack8R4#

10.38 MQC Dynamic Flows and WRED

以下のping stormを発せさせ、想定通りのdropが発生している事を確認します。

 R6:
Rack8R6#ping
Protocol [ip]:
Target IP address: 155.8.45.5
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]: 0
Extended commands [n]: y
Source address or interface:
Type of service [0]: 96
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 155.8.45.5, timeout is 0 seconds:
......................................................................
......................................................................

 R4:
Rack8R4#show policy-map interface

    omitted

    Class-map: class-default (match-any)
      2019234 packets, 2018629186 bytes
      30 second offered rate 6900000 bps, drop rate 6874000 bps
      Match: any
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops/flowdrops) 46/2000342/0/1881407
      (pkts output/bytes output) 74236/22446634
      Fair-queue: per-flow queue limit 16
        Exp-weight-constant: 9 (1/512)
        Mean queue depth: 47 packets
        class     Transmitted       Random drop      Tail/Flow drop Minimum Maximum Mark
                  pkts/bytes    pkts/bytes       pkts/bytes    thresh  thresh  prob

        0              14/336             0/0              3/984                1            40  1/4
        1               0/0               0/0              0/0                  1            40  1/4
        2               0/0               0/0              0/0                  1            40  1/4
        3             906/909624         84/84336     118722/119196888          1            40  1/4
        4               0/0               0/0              0/0                  1            40  1/4
        5               0/0               0/0              0/0                  1            40  1/4
        6               0/0               0/0             30/11280              1            40  1/4
        7               0/0               0/0              0/0                  1            40  1/4
Rack8R4#

10.39 MQC WRED with ECN

TCP ECNが発生するほどの大量のHTTP通信を発生させる事は困難です。確認は省略します。

10.40 MQC Class-Based Generic Traffic Shaping

以下のトラフィックを発生させ、想定通りの帯域に制限されている事を確認します。

src	dst	Prec, DSCP
R6	R4	Prec 0	ping size 1500
R6	SW1	Prec 0	ping size 1500

R6からVLAN146へのトラフィックを発生させ、その帯域が384Kbpsに制限されている事を確認します。

 R4:
interface FastEthernet 0/1
 load-interval 30

 R6:
Rack8R6#ping 155.8.146.4 size 1500 repeat 99999999

Type escape sequence to abort.
Sending 99999999, 1500-byte ICMP Echos to 155.8.146.4, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

 R4:
Rack8R4#show interfaces FastEthernet 0/1 | include rate
  Queueing strategy: fifo
  30 second input rate 383000 bits/sec, 60 packets/sec
  30 second output rate 382000 bits/sec, 59 packets/sec
Rack8R4#

R6からVLAN67へのトラフィックを発生させ、その帯域が512Kbpsに制限されている事を確認します。

 SW1:
interface Vlan 67
 load-interval 30

 R6:
Rack8R6#ping 155.8.67.7 size 1500 repeat 99999999

Type escape sequence to abort.
Sending 99999999, 1500-byte ICMP Echos to 155.8.67.7, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

 SW1:
Rack8SW1#show interfaces Vlan 67 | include rate
  Queueing strategy: fifo
  30 second input rate 511000 bits/sec, 42 packets/sec
  30 second output rate 512000 bits/sec, 42 packets/sec
Rack8SW1#

10.41 MQC Class-Based GTS and CBWFQ

以下の通信を発生させます。ping stormが発生しているのにも関わらず、HTTPに帯域が保証されている事を確認します。

src	dst	Prec, DSCP
R6	R4	Prec 0	HTTP
R6	R4	Prec 0	ping size 1500 timeout 0

以下のHTTP通信を発生させます。

 R6:
ip http server
ip http path flash:

 R4:
ip http client password cisco

Rack8R4#
Aug 12 18:10:33.039: %SYS-5-CONFIG_I: Configured from console by console
Rack8R4#copy http://155.8.146.6/c1841-adventerprisek9-mz.124-24.T.bin null:
Loading http://155.8.146.6/c1841-adventerprisek9-mz.124-24.T.bin !!!!

ping stormを発生させます。

 R6:
Rack8R6#ping 155.8.146.4 size 1500 repeat 99999999 timeout 0

Type escape sequence to abort.
Sending 99999999, 1500-byte ICMP Echos to 155.8.146.4, timeout is 0 seconds:
......................................................................
......................................................................

HTTP通信に256Kbpsの帯域が保証されている事を確認します。R6のconsole lineはping stormを発生されていると途中ですので、他の機器からtelnet等でR6にログインし、以下の操作を実施します。

 R6:
interface FastEthernet0/0
 load-interval 30

Rack8R6#show policy-map interface
 FastEthernet0/0.67

  Service-policy output: PMAP_VLAN67_OUT

    Class-map: class-default (match-any)
      25708 packets, 37590037 bytes
      30 second offered rate 0 bps, drop rate 0 bps
      Match: any
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 25708/37933091
      shape (average) cir 512000, bc 10240, be 10240
      target shape rate 512000
 FastEthernet0/0.146

  Service-policy output: PMAP_VLAN146_OUT

    Class-map: class-default (match-any)
      228019 packets, 224767149 bytes
      30 second offered rate 9846000 bps, drop rate 9591000 bps
      Match: any
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 20/109704/0
      (pkts output/bytes output) 30234/22747248
      shape (average) cir 384000, bc 7680, be 7680
      target shape rate 384000

      Service-policy : PMAP_VLAN146_OUT_CBWFQ

        queue stats for all priority classes:
          Queueing
          queue limit 64 packets
          (queue depth/total drops/no-buffer drops) 0/452/0
          (pkts output/bytes output) 15539/1212042

        Class-map: CMAP_VOICE (match-all)
          15991 packets, 511712 bytes
          30 second offered rate 12000 bps, drop rate 0 bps
          Match: packet length min 60 max 60
          Priority: 32 kbps, burst bytes 400, b/w exceed drops: 452


        Class-map: CMAP_HTTP (match-all)
          10248 packets, 15203147 bytes
          30 second offered rate 261000 bps, drop rate 0 bps
          Match: protocol http
          Queueing
          queue limit 64 packets
          (queue depth/total drops/no-buffer drops) 1/0/0
          (pkts output/bytes output) 10248/14893700
          bandwidth 256 kbps

        Class-map: class-default (match-any)
          113699 packets, 170440846 bytes
          30 second offered rate 9576000 bps, drop rate 9590000 bps
          Match: any
          Queueing
          queue limit 64 packets
          (queue depth/total drops/no-buffer drops/flowdrops) 17/109252/0/109252
          (pkts output/bytes output) 4447/6641506
          Fair-queue: per-flow queue limit 16
Rack8R6#

10.42 MQC Single-Rate Three-Color Policer

R6からR4へのHTTP通信を発生させます。

 R6:
ip http server
ip http flash:

 R4:
interface FastEthernet0/1
 load-interval 30

ip http client passwod cisco
copy http://155.8.146.6/c1841-adventerprisek9-mz.124-24.T.bin null:

想定通りのMarkingがなされている事を確認します。

 R4:
Rack8R4#show policy-map interface FastEthernet 0/1
 FastEthernet0/1

  Service-policy input: PMAP_F01_IN

    Class-map: CMAP_HTTP (match-all)
      1053 packets, 1355143 bytes
      30 second offered rate 137000 bps, drop rate 28000 bps
      Match: protocol http
      police:
          cir 128000 bps, bc 3200 bytes, be 4800 bytes
        conformed 665 packets, 798957 bytes; actions:
          set-prec-transmit 1
        exceeded 209 packets, 296267 bytes; actions:
          set-prec-transmit 0
        violated 179 packets, 259919 bytes; actions:
          drop
        conformed 82000 bps, exceed 31000 bps, violate 28000 bps

    Class-map: class-default (match-any)
      5076 packets, 380786 bytes
      30 second offered rate 23000 bps, drop rate 0 bps
      Match: any
Rack8R4#

10.43 MQC Hierarchical Policers

R4, R5間で以下の通信を発生させ、想定通りのpolicingがなされているかを確認します。

src	dst	Prec, DSCP
R6	R4	Prec 0	HTTP
R1	R5	Prec 0	HTTP

上記HTTP通信がR4, R5間を通過するよう、I/Fをshutdownさせます。

 R1:
interface Serial 0/0
 shutdown

interface Serial 0/1
 shutdown

 R4:
interface Serial 0/0/0
 shutdown

HTTP通信を発生させます。

 R1:
ip http server
ip http path flash:

 R6:
ip http server
ip http path flash:

 R4:
ip http client password cisco
Rack8R4#copy http://155.8.146.6/c1841-adventerprisek9-mz.124-24.T.bin null:

 R5:
ip http client password cisco
Rack8R5#copy http://155.8.146.1/c2600-adventerprisek9-mz.124-10.bin null:

想定通りのpolicingがなされている事を確認します。

 R4:
Rack8R4#show policy-map interface FastEthernet 0/1
 FastEthernet0/1

  Service-policy input: PMAP_F01_IN

    Class-map: CMAP_HTTP (match-all)
      24693 packets, 31190384 bytes
      30 second offered rate 138000 bps, drop rate 21000 bps
      Match: protocol http
      police:
          cir 128000 bps, bc 3200 bytes, be 4800 bytes
        conformed 16193 packets, 19117949 bytes; actions:
          set-prec-transmit 1
        exceeded 4163 packets, 5802334 bytes; actions:
          set-prec-transmit 0
        violated 4337 packets, 6270101 bytes; actions:
          drop
        conformed 106000 bps, exceed 10000 bps, violate 21000 bps

      Service-policy : PMAP_F01_IN_SUB

        Class-map: CMAP_HTTP_R1 (match-all)
          1058 packets, 613243 bytes
          30 second offered rate 82000 bps, drop rate 0 bps
          Match: access-group name ACL_HTTP_R1
          police:
              cir 64000 bps, bc 3200 bytes, be 4800 bytes
            conformed 633 packets, 362763 bytes; actions:
              set-prec-transmit 1
            exceeded 26 packets, 15180 bytes; actions:
              set-prec-transmit 0
            violated 336 packets, 198240 bytes; actions:
              set-prec-transmit 0
            conformed 49000 bps, exceed 0 bps, violate 30000 bps

        Class-map: CMAP_HTTP_R6 (match-all)
          4297 packets, 5556885 bytes
          30 second offered rate 56000 bps, drop rate 0 bps
          Match: access-group name ACL_HTTP_R6
          police:
              cir 64000 bps, bc 3200 bytes, be 4800 bytes
            conformed 1948 packets, 2170159 bytes; actions:
              set-prec-transmit 1
            exceeded 78 packets, 94263 bytes; actions:
              set-prec-transmit 0
            violated 1467 packets, 2120810 bytes; actions:
              set-prec-transmit 0
            conformed 22000 bps, exceed 1000 bps, violate 13000 bps

        Class-map: class-default (match-any)
          0 packets, 0 bytes
          30 second offered rate 0 bps, drop rate 0 bps
          Match: any

    Class-map: class-default (match-any)
      55387 packets, 4156244 bytes
      30 second offered rate 21000 bps, drop rate 0 bps
      Match: any
Rack8R4#

10.44 MQC Two-Rate Three-Color Policer

前問と同じトラフィックを発生させ、想定通りのpolicingがされいる事を確認します。

 R4:
Rack8R4#show policy-map interface FastEthernet 0/1
 FastEthernet0/1

  Service-policy input: PMAP_F01_IN

    Class-map: CMAP_HTTP (match-all)
      51705 packets, 47243033 bytes
      30 second offered rate 157000 bps
      Match: protocol http

      Service-policy : PMAP_F01_IN_SUB

        Class-map: CMAP_HTTP_R1 (match-all)
          27758 packets, 16271291 bytes
          30 second offered rate 104000 bps, drop rate 8000 bps
          Match: access-group name ACL_HTTP_R1
          police:
              cir 64000 bps, bc 3200 bytes
              pir 128000 bps, be 3200 bytes
            conformed 3276 packets, 1853944 bytes; actions:
              set-prec-transmit 1
            exceeded 1407 packets, 830130 bytes; actions:
              set-prec-transmit 0
            violated 179 packets, 105610 bytes; actions:
              drop
            conformed 63000 bps, exceed 32000 bps, violate 8000 bps

        Class-map: CMAP_HTTP_R6 (match-all)
          4609 packets, 5951486 bytes
          30 second offered rate 53000 bps, drop rate 16000 bps
          Match: access-group name ACL_HTTP_R6
          police:
              cir 64000 bps, bc 3200 bytes
              pir 128000 bps, be 3200 bytes
            conformed 171 packets, 194526 bytes; actions:
              set-prec-transmit 1
            exceeded 58 packets, 83557 bytes; actions:
              set-prec-transmit 0
            violated 83 packets, 116518 bytes; actions:
              drop
            conformed 26000 bps, exceed 12000 bps, violate 16000 bps

        Class-map: class-default (match-any)
          0 packets, 0 bytes
          30 second offered rate 0 bps, drop rate 0 bps
          Match: any

    Class-map: class-default (match-any)
      94921 packets, 7136366 bytes
      30 second offered rate 17000 bps, drop rate 0 bps
      Match: any
Rack8R4#

10.45 MQC Peak Shaping

以下の通信を発生させ、想定通りの帯域に制限されている事を確認します。

src	dst	Prec, DSCP
R6	R4	Prec 0	HTTP
R1	R5	Prec 0	HTTP

R6からR4への通信を発生されます。帯域が128Kbpsに制限されている事を確認します。

 R6:
interface FastEthernet0/0
 load-interval 30
!
ip http server
ip http path flash:

 R4:
ip http client password cisco
Rack8R4#copy http://155.8.146.6/c1841-adventerprisek9-mz.124-24.T.bin null:

 R6:
Rack8R6#show policy-map interface
 FastEthernet0/0.146

  Service-policy output: PMAP_F00VLAN146

    Class-map: CMAP_HTTP (match-all)
      1284 packets, 1794536 bytes
      30 second offered rate 118000 bps, drop rate 0 bps
      Match: protocol http
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 1/0/0
      (pkts output/bytes output) 1284/1862525
      shape (peak) cir 64000, bc 6400, be 6400
      target shape rate 128000

    Class-map: class-default (match-any)
      20 packets, 5448 bytes
      30 second offered rate 0 bps, drop rate 0 bps
      Match: any

      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 20/5462
Rack8R6#

R4からR1への通信を発生されます。帯域が128Kbpsに制限されている事を確認します。

 R1:
interface FastEthernet0/0
 load-interval 30
!
ip http server
ip http path flash:

 R4:
ip http client password cisco
Rack8R4#copy http://155.8.146.1/c2600-adventerprisek9-mz.124-10.bin null:

 R1:
Rack8R1#show policy-map interface
 FastEthernet0/0

  Service-policy output: PMAP_F00_OUT

    Class-map: CMAP_HTTP (match-all)
      1320 packets, 1573005 bytes
      30 second offered rate 123000 bps, drop rate 0 bps
      Match: protocol http
      Traffic Shaping
           Target/Average   Byte   Sustain   Excess    Interval  Increment
             Rate           Limit  bits/int  bits/int  (ms)      (bytes)
           256000/128000    1600   6400      6400      50        1600

        Adapt  Queue     Packets   Bytes     Packets   Bytes     Shaping
        Active Depth                         Delayed   Delayed   Active
        -      2         1318      1570021   695       949395    yes

    Class-map: class-default (match-any)
      23228 packets, 13214877 bytes
      30 second offered rate 0 bps, drop rate 0 bps
      Match: any
Rack8R1#

「INE Workbook Volume I QoS 確認トラフィックの生成 (2)」をウィキ内検索

人気記事ランキング

最近更新されたページ

新規Wikiランキング

最近作成されたWikiのアクセスランキングです。見るだけでなく加筆してみよう！

人気Wikiランキング

atwikiでよく見られているWikiのランキングです。新しい情報を発見してみよう！

全体ページランキング

最近アクセスの多かったページランキングです。話題のページを見に行こう！