NNI QoS Examples

In this example end sites connected to an NNI interface are identified by a unique outer VLAN tag (S-TAG). Each end site may have multiple inner VLAN tags (C-TAGs) which need to be grouped and classified as one. In this example the QoS shaper and schedulers are applied to an interface-set which matches each NNI sub-interface with an outer tag on VLAN 100:

set class-of-service scheduler-maps PSN-schmap forwarding-class REALTIME scheduler Scheduler-REALTIME
set class-of-service scheduler-maps PSN-schmap forwarding-class PSN-APP-1 scheduler Scheduler-PSN-APP-1
set class-of-service scheduler-maps PSN-schmap forwarding-class PSN-APP-2 scheduler Scheduler-PSN-APP-2
set class-of-service scheduler-maps PSN-schmap forwarding-class PSN-APP-3 scheduler Scheduler-PSN-APP-3
set class-of-service scheduler-maps PSN-schmap forwarding-class PSN-APP-4 scheduler Scheduler-PSN-APP-4
set class-of-service scheduler-maps PSN-schmap forwarding-class PSN-class-default scheduler Scheduler-PSN-class-default
set class-of-service scheduler-maps PSN-schmap forwarding-class NC scheduler Scheduler-NC

set class-of-service traffic-control-profiles 10M scheduler-map PSN-schmap
set class-of-service traffic-control-profiles 10M shaping-rate 10m
set class-of-service traffic-control-profiles 10M shaping-rate burst-size 1m

set interfaces ge-0/0/4 description "Carrier Ethernet NNI"
set interfaces ge-0/0/4 flexible-vlan-tagging
set interfaces ge-0/0/4 encapsulation flexible-ethernet-services
set interfaces ge-0/0/4 mtu 1522

set interfaces ge-0/0/4 unit 1 description "Customer 1 - Site 5 - Voice VLAN"
set interfaces ge-0/0/4 unit 1 vlan-tags outer 105
set interfaces ge-0/0/4 unit 1 vlan-tags inner 201
set interfaces ge-0/0/4 unit 1 family inet address 192.168.1.1/30

set interfaces ge-0/0/4 unit 2 description "Customer 1 - Site 5 - Data VLAN"
set interfaces ge-0/0/4 unit 2 vlan-tags outer 105
set interfaces ge-0/0/4 unit 2 vlan-tags inner 202
set interfaces ge-0/0/4 unit 2 family inet address 192.168.2.1/30

set interfaces interface-set Cust1_Site5_STAG_105 interface ge-0/0/4 vlan-tags-outer 105

set class-of-service interfaces interface-set Cust1_Site5_STAG_105 input-traffic-control-profile 10M
set class-of-service interfaces interface-set Cust1_Site5_STAG_105 output-traffic-control-profile 10M

 

In this example a policer is defined and applied to each sub-interface on the NNI interface as a firewall filter. Each unit/sub-interface the same policer is applied to, they will share the policer bandwidth (which means that below 1Mbps is shared between two units, so they can run at 0.5Mbps, or 1 can run at 0.75MBps and the other 0.25Mbps etc):

set firewall policer police-1m physical-interface-policer
set firewall policer police-1m if-exceeding bandwidth-limit 1m
set firewall policer police-1m if-exceeding burst-size-limit 250k
set firewall policer police-1m then discard

set firewall family inet filter cust1-site5-1m physical-interface-filter
set firewall family inet filter cust1-site5-1m term 1 then policer police-1m

set interfaces ge-0/0/4 description "Carrier Ethernet NNI"
set interfaces ge-0/0/4 flexible-vlan-tagging
set interfaces ge-0/0/4 encapsulation flexible-ethernet-services
set interfaces ge-0/0/4 mtu 1522

set interfaces ge-0/0/4 unit 1 vlan-tags outer 105
set interfaces ge-0/0/4 unit 1 vlan-tags inner 201
set interfaces ge-0/0/4 unit 1 family inet filter output cust1-site5-1m

set interfaces ge-0/0/4 unit 2 vlan-tags outer 105
set interfaces ge-0/0/4 unit 2 vlan-tags inner 202
set interfaces ge-0/0/4 unit 2 family inet filter output cust1-site5-1m

# show interfaces ge-0/0/4.1 extensive | match bps
# show interfaces ge-0/0/4.2 extensive | match bps

 

If per unit policers are required the following would work, but this only supports 1 VLAN per end site:

set firewall policer site1-1m if-exceeding bandwidth-limit 100k
set firewall policer site1-1m if-exceeding burst-size-limit 3125
set firewall policer site1-1m then discard

set firewall policer site2-1m if-exceeding bandwidth-limit 100k
set firewall policer site2-1m if-exceeding burst-size-limit 3125
set firewall policer site2-1m then discard

set interfaces ge-0/0/4 description "Carrier Ethernet NNI"
set interfaces ge-0/0/4 flexible-vlan-tagging
set interfaces ge-0/0/4 encapsulation flexible-ethernet-services
set interfaces ge-0/0/4 mtu 1522

set interfaces ge-0/0/4 unit 1 description "Site 1"
set interfaces ge-0/0/4 unit 1 vlan-id 101
set interfaces ge-0/0/4 unit 1 statistics
set interfaces ge-0/0/4 unit 1 family inet policer input site1-1m

set interfaces ge-0/0/4 unit 2 description "Site 1"
set interfaces ge-0/0/4 unit 2 vlan-id 102
set interfaces ge-0/0/4 unit 2 statistics
set interfaces ge-0/0/4 unit 2 family inet policer input site2-1m

 

?

output-traffic-control-profile-remaining

---