Preclassification

The following scenario shows how to pre-classify packets using traffic policies. This reduces packet processing time and improves system performance.

Test Pre-Classify Out

Description

A traffic policy is configured in DUT0 (interface eth0). This policy enables pre-classification in the OUT hook; i.e., only IP packets are processed and classified.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.0.0.1/24
set interfaces ethernet eth0 traffic control out HTB
set interfaces ethernet eth0 traffic policy out CLASSIFIER
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set traffic control HTB type htb bandwidth 10000
set traffic control HTB type htb class 1 bandwidth percentage 25
set traffic control HTB type htb class 2 bandwidth percentage 25
set traffic control HTB type htb class 3 bandwidth percentage 25
set traffic control HTB type htb class 4 bandwidth percentage 25
set traffic control HTB type htb default-class 4
set traffic policy CLASSIFIER rule 1 selector ICMP
set traffic policy CLASSIFIER rule 1 set class 1
set traffic policy CLASSIFIER rule 2 selector TCP
set traffic policy CLASSIFIER rule 2 set class 2
set traffic policy CLASSIFIER rule 3 selector UDP
set traffic policy CLASSIFIER rule 3 set class 3
set traffic selector ICMP rule 1 protocol icmp
set traffic selector TCP rule 1 protocol tcp
set traffic selector UDP rule 1 protocol udp

Step 2: Set the following configuration in DUT1 :

set interfaces ethernet eth0 address 10.0.0.2/24
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 3: Send an ARP ping from DUT0 to IP address 10.0.0.2:

admin@DUT0$ arping 10.0.0.2 interface eth0 timeout 5 count 1

Step 4: Ping the IP address 10.0.0.2 from DUT0:

admin@DUT0$ ping 10.0.0.2 count 5 size 56 timeout 1

Step 5: Initiate a bandwidth test from DUT0 to DUT1

admin@DUT1$ monitor test performance server port 5001
admin@DUT0$ monitor test performance client 10.0.0.2 duration 5 port 5001 parallel 1

Step 6: Initiate a bandwidth test from DUT0 to DUT1

admin@DUT1$ monitor test performance server port 5001
admin@DUT0$ monitor test performance client 10.0.0.2 duration 5 udp port 5001 parallel 1

Step 7: Run the command traffic control show on DUT0 and check whether the output matches the following regular expressions:

class 1\s+1:0\s+[1-9]\d*
class 2\s+1:0\s+[1-9]\d*
class 3\s+1:0\s+[1-9]\d*
class 4 \(default\)\s+1:0\s+[1-9]\d*

Note

Traffic selectors can also be used to filter packets based on pre-classification ID.

Step 8: Modify the following configuration lines in DUT0 :

set interfaces ethernet eth0 traffic policy link-out TP_ACCT
set traffic policy TP_ACCT rule 1 selector TS_ACCT
set traffic selector TS_ACCT rule 1 class 1
set traffic selector TS_ACCT rule 2 not class 2

Step 9: Send an ARP ping from DUT0 to IP address 10.0.0.2:

admin@DUT0$ arping 10.0.0.2 interface eth0 timeout 5 count 1

Step 10: Ping the IP address 10.0.0.2 from DUT0:

admin@DUT0$ ping 10.0.0.2 count 5 size 56 timeout 1

Step 11: Run the command traffic selector TS_ACCT show on DUT0 and check whether the output matches the following regular expressions:

1\s+[1-9]\d*
2\s+[1-9]\d*

Test Pre-Classify Link-Out