Escolar Documentos
Profissional Documentos
Cultura Documentos
That was to be expected. Poland is out of Euro Cup. The only thing we can do is to come back
to the real world .
Today I will show you how to use ACLs and traffic policies for packets lost troubleshooting
in a network.
#
interface GigabitEthernet3/0/0
undo shutdown
ip address 10.0.0.1 255.255.255.252
#
interface GigabitEthernet1/0/9
undo shutdown
ip address 172.16.0.1 255.255.255.252
#
interface LoopBack100
ip address 1.1.1.1 255.255.255.255
#
ospf 1 router-id 1.1.1.1
area 0.0.0.0
network 10.0.0.0 0.0.0.3
network 1.1.1.1 0.0.0.0
network 172.16.0.0 0.0.0.3
#
Configure ACL that permits ICMP traffic from CE to R2 Loopback100 IP address and
from R2 to CE (the same ACL for R1 and R2):
#
traffic classifier labnario operator or
if-match acl 3000
#
traffic behavior labnario
#
traffic policy labnario
statistics enable
classifier labnario behavior labnario
#
Notice that default behaviour for the traffic is to permit (default parameters are not displayed
in configuration). Remember to use statistics enable command to be able to display traffic
policy statistics.
Assign this traffic policy to all interfaces on the path between CE and R2 (for both
inbound and outbound direction):
R1
#
interface GigabitEthernet1/0/9
undo shutdown
ip address 172.16.0.1 255.255.255.252
traffic-policy labnario inbound
traffic-policy labnario outbound
#
interface GigabitEthernet3/0/0
undo shutdown
ip address 10.0.0.1 255.255.255.252
traffic-policy labnario inbound
traffic-policy labnario outbound
R2
#
interface GigabitEthernet3/0/0
undo shutdown
ip address 10.0.0.2 255.255.255.252
traffic-policy labnario inbound
traffic-policy labnario outbound
Display traffic policy statistics for all interfaces on the path between CE and R2 (for
inbound and outbound):
R1
R2
As you can see from these outputs, packets are not being lost in the network. In case of any
network problem you can use a similar traffic policy to find where packets are being lost. Of
course this is one of the examples of using traffic policy. You can, for instance, use it to catch
packets classified based on DSCP, 802.1p etc. I can say I use it very often in a routine work,
not only for troubleshooting but also in another applications.
This example was done based on NE40E V600R001SPC800 software. Traffic policy
configuration can vary depending on the devices and software you use.