不涉及
在接口下配置IPV6
PBR时显示资源不足,于是又尝试了下IPV6 QOS发现却可以正常配置,也能生效
查看acl资源发现还有剩余
1.该问题是同时下发ipv4/ipv6 PBR导致,PBR所在的goup single->double,需要占用双倍的acl资源,需申请新的slice资源。Single模式下PBR占用了四个slice,则变为double后至少占用8个slice(实际占用的slice个数需根据group实际占用slice的大小决定,该单板slice0-3:512,slice4-11:256),slice资源不足,没有下发成功,PBR还是维持了原来的占用资源。
2.MQC实际下发的资源较少,只有一个slice,single->double后占用的slice为两个,新占用的acl资源也不多,资源足够,可以成功下发。
3.看了下现网使用了IPV6的 MQC替代ipv6 PBR,实际的效果一致,该方案可行
MQC:
traffic classifier FS-CT-IPV6-PBR operator and
if-match acl ipv6 2020
traffic behavior FS-CT-IPV6-PBR
car cir 102400 cbs 6400000 ebs 0 green pass red discard yellow pass
redirect next-hop 240E:FF:A004::3C
qos policy FS-CT-IPV6-PBR
classifier FS-CT-IPV6-PBR behavior FS-CT-IPV6-PBR
PBR:
ipv6 policy-based-route TO-OTHER-ISP permit node 10
if-match acl 2020
apply next-hop 240E:FF:A004::3C
#
资源资源占用情况:
------------------------------------------------------
Acl Hw Resource: IFP, Pipe:0
------------------------------------------------------
Pri 5, Group 6,usedEntries 20 ,mode Double, physlice 10/11/
=========================================
acl type usedEntries[20]
=========================================
[148]PDT LOW INITIAL 1
[23 ]RX Low 13
[25 ]Super_RX Low 1
[89 ]RX PRIO LLOW 4
[27 ]TCP_RX_MISS_LOWEST 1
======================================
------------------------------------------------------
Pri 7, Group 7,usedEntries 8 ,mode Double, physlice 4/5/ MQC方式本身只占用一个slice,single->double后占用的slice为两个
=========================================
acl type usedEntries[8]
=========================================
[122]MQC L3 Port 8
======================================
------------------------------------------------------
Pri 9, Group 5,usedEntries 1476,mode Single, physlice 2/3/6/7/ PBR已经占用了2/3/6/7 slice了,没有空余的slice来double
=========================================
acl type usedEntries[1476]
=========================================
[116]Policy Based Routing V4 1476
======================================
------------------------------------------------------
Pri 10, Group 1,usedEntries 68 ,mode Double, physlice 8/9/
=========================================
acl type usedEntries[68]
=========================================
[147]PDT HIGH INITIAL 1
[91 ]STMVLAN_PERMIT 2
[92 ]STM_DENYALL 1
[7 ]RX IPv4 Super High 2
[8 ]RX IPv4 High 17
[9 ]RX IPv4 Middle High 5
[10 ]RX IPv4 Middle 26
[13 ]RX IPv6 High 7
[14 ]RX IPv6 Middle_High 3
[15 ]RX IPv6 Middle 3
[64 ]Zero-Mac-Deny 1
======================================
------------------------------------------------------
可以采用MQC方式来实现包过滤的需求