S7500E交换机全局下发访问控制不生效问题

   S7500E交换机全局下发访问控制不生效问题

一、   简化组网：

 

二、   问题描述：

客户反馈S7500E交换机全局下发 QOS不生效问题，主要是未对6槽位无线板卡生效，单独在内联口下发是可以成功的。

三、   过程分析：

         1、查看当前关键配置

acl number 3000

hardware-count enable

rule 3 deny ip source 192.168.0.152 0.0.0.7 destination 192.168.0.192 0.0.0.63

rule 15 deny ip source 172.17.0.0 0.0.255.255 destination 192.168.0.192 0.0.0.63

rule 20 deny ip source 172.23.0.0 0.0.255.255 destination 192.168.0.192 0.0.0.63

acl number 3001

rule 0 permit ip source 192.168.0.0 0.0.0.255 destination 172.23.0.0 0.0.255.255

 

traffic classifier 2 operator and

if-match acl 3100

traffic classifier 1 operator and

if-match acl 3000

 

traffic behavior 2

 filter permit

traffic behavior 1

 filter deny

 

qos policy 1

 classifier 1 behavior 1

 classifier 2 behavior 2

 

qos apply policy 1 global inbound

2、收集全局下发情况下ACL资源的使用情况：

===============display device verbose===============

==========================================================

Slot No. Brd Type         Brd Status   Subslot Num  Sft Ver          Patch Ver

0       LSQ1SRPB         Master        0            S7500E-6703      None

1       NONE               Absent        0            NONE               None

2       LSQ1GP24SC      Normal       0            S7500E-6703      None

3       NONE               Absent        0            NONE               None

4       LSQ1GT24SC      Normal       0            S7500E-6703      None

5       NONE               Absent        0            NONE               None

6       LSQ1WCMB        Normal       0            S7500E-6703      None

7       LSQ1GT24SC      Normal       0            S7500E-6703      None

 

   [EL01-S7506E-center]dis acl resource

 Interface:

   GE2/0/1 to GE2/0/24

---------------------------------------------------------------------

Type          Total       Reserved    Configured  Remaining   Usage

---------------------------------------------------------------------

VFP ACL      1024        0             0              1024          0%

IFP ACL       4096        1024        9              3063          25%

IFP Meter     2048        512          0              1536          25%

IFP Counter   2048       512          0              1536          25%

EFP ACL       512         0            0               512            0%

EFP Meter     256         0            0               256            0%

EFP Counter  512         0            0                512           0%

 

Interface:

   GE4/0/1 to GE4/0/24

---------------------------------------------------------------------

Type          Total       Reserved    Configured  Remaining   Usage

---------------------------------------------------------------------

VFP ACL      1024        0             0             1024             0%

IFP ACL       4096        1024        9              3063            25%

IFP Meter     2048        512          0              1536            25%

IFP Counter   2048       512          0              1536             25%

EFP ACL       512         0             0              512              0%

EFP Counter  512          0             0              512               0%

 

Interface:

   XGE6/0/1 to XGE6/0/2

---------------------------------------------------------------------

Type          Total       Reserved    Configured  Remaining   Usage

---------------------------------------------------------------------

VFP ACL       1024        0            0              1024           0%

IFP ACL       4096        1024        0              3072           25%

IFP Meter     2048        512          0              1536           25%

IFP Counter   2048        512         0               1536          25%

EFP ACL       512          0            0              512             0%

EFP Meter     256          0            0              256             0%

EFP Counter   512         0            0               512             0%

 

Interface:

   GE7/0/1 to GE7/0/24

---------------------------------------------------------------------

Type          Total       Reserved    Configured  Remaining   Usage

---------------------------------------------------------------------

VFP ACL      1024        0             0              1024          0%

IFP ACL       4096        1024        10             3062          25%

IFP Counter   2048       512          0              1536          25%

EFP ACL       512         0             0              512            0%

EFP Meter     256         0             0              256            0%

EFP Counter    512         0             0              512            0%

从ACL资源使用情况看，全局ACL下发仅对6槽位无线插卡不生效。原因为OAA的板卡比较特殊，因为有的紧耦合的，有的是松耦合的，有的是HG互连，有的是XE互连，所以对于全局MQC和VLAN MQC都不在OAA板卡上下发。

四、   解决方法：

   可在无线板卡内联口下发该策略。