7-27
Cisco SCE 8000 10GBE Software Configuration Guide
OL-30621-02
Chapter 7 Configuring Line Interfaces
Configuring Traffic Rules and Counters
Traffic Rules
A traffic rule specifies that a defined action should be taken on packets processed by the Cisco SCE
Platform that meet certain criteria. The maximum number of rules for the Cisco SCE 8000 is 64, which
includes not only traffic rules configured via the Cisco SCE platform CLI, but also any additional rules
configured by external management systems, such as SCA BB. Each rule is given a name when it is
defined, which is then used when referring to the rule.
Packets are selected according to user-defined criteria, which may be a combination of the following:
•
IP address
—A single address or a subnet range can be specified for each of the line ports
(Subscriber / Network) for IPv4 IP addresses. A specific IP address or a CIDR notation prefix for
IPv6 IP addresses.
•
Protocol
—For IPv4, TCP/UDP/ICMP/IGRP/EIGRP/IS-IS/OSPF/Other. For IPv6, TCP and UDP.
•
TCP/UDP Ports
—A single port or a port range can be specified for each of the line ports
(Subscriber / Network) for IPv4 IP address. A single port only can be specified for each of the line
ports (Subscriber / Network) for IPv4 IP address. Valid only for TCP/UDP.
•
Direction (Upstream/Downstream)
—Valid only for TCP.
The possible actions are:
•
Count
the packet by a specific traffic counter
•
Block
the packet (do not pass it to the other side)
•
Ignore
the packet (do not provide service for this packet. No bandwidth metering, transaction
reporting and so on are performed.)
•
Quick-forward
the packet
with service—
Forward delay-sensitive packets through the fast path
while maintaining serviceability for these packets
•
Quick-forward
the packet
with no service (quick-forwarding-ignore)
— forward delay-sensitive
packets through the fast path with no service provided for these packets
The
Block
and
Ignore
actions affect only those packets that are not a part of an existing flow.
Note that
Block
and
Ignore
are mutually exclusive. However, blocked or ignored packets can also be
counted.
It is possible for a single packet to match more that one rule (The simplest way to cause this is to
configure two identical rules with different names). When this happens, the system operates as follows:
•
Any counter counts a specific packet only once. This means that:
–
If two rules specify that the packet should be counted by the same counter, it is counted only
once.
–
If two rules specify that the packet should be counted by different counters, it is counted twice,
once by each counter.
•
Block
takes precedence over
Ignore—
If one rule specifies
Block
, and another rule specifies
Ignore
,
the packet is blocked.
Traffic Counters
Traffic counters count the traffic as specified by the traffic rules. The maximum number of counters is
32. Each counter is given a name when it is defined, which is then used when referring to the counter.
A traffic counter can be configured in one of two ways:
•
Count packets—
The counter is incremented by 1 for each packet it counts.
