hardware-profile filter
Use this command to enable or disable ingress IPv4 or IPv6, egress IPv6 filter groups, and TWAMP IPv4 and IPv6 groups. Disabling filter groups increases the configurable filter entries.
Disabling a TCAM filter group is not allowed if the group has any entries configured in hardware. Group dependent entries must be explicitly removed before disabling the TCAM group.
Note: The qos, qos-ext, and qos-policer filter groups can only be used for Layer 2 and IPv4 traffic. For IPv6 traffic QoS classification and actions, you must enable the ingress-ipv6-qos group and create an IPv6 ACL which can be matched in a class-map for applying QoS actions. For more, see the Quality of Service Guide.
Note: Usually the number of extended ingress filter groups that can be created at the same time is 3. If the PIM bidirectional feature is enabled, only 2 ingress extended filter groups can be created.
Note: The ipv4-ext and qos-policer grp parameters are not supported together.
For EVPN multi-homing:
• Before enabling EVPN multi-homing (evpn multi-homed command), give this command.
• Before disabling the hardware-profile, disable EVPN multi-homing.
Command Syntax
hardware-profile filter (ingress-l2|ingress-l2-ext|ingress-ipv4|ingress-ipv4-ext|ingress-ipv4-qos|ingress-ipv6|ingress-ipv6-ext|ingress-ipv6-ext-vlan|ingress-ipv6-qos|qos-ipv6|ingress-arp|qos|qos-ext|qos-policer|egress-l2|egress-ipv4|cfm-domain-name-str|twamp-ipv4|twamp-ipv6) (enable|disable)
Parameter
ingress-l2
Ingress L2 ACL filter group.
ingress-l2-ext
Ingress L2 ACL, QoS, mirror filter group.
ingress-ipv4
Ingress IP ACL filter group.
ingress-ipv4-ext
Ingress IP ACL, mirror, PBR filter group.
ingress-ipv4-qos
Ingress IPv4 group for ACL match QoS.
ingress-ipv6
Ingress IPv6 ACL, mirror, PBR filter group.
ingress-ipv6-ext
Ingress IPv6 group to support 128-bit address qualification support on physical interface.
ingress-ipv6-ext-vlan
Ingress IPv6 group to support 128-bit address qualification support on vlan interface and subinterface.
ingress-ipv6-qos
Ingress IPv6 group for ACL match QoS.
qos-ipv6
Ingress QOS IPv6 group for IPv6 QoS support with statistics.
ingress-arp
Ingress ARP group.
qos
Ingress QoS filter group.
qos-ext
Ingress QoS extended filter group.
qos-policer
Ingress extended QoS group for hierarchical policer support.
egress-l2
Egress L2 ACL filter group.
egress-ipv4
Egress IP ACL filter group.
cfm-domain-name-str
Egress CFM domain group.
twamp-ipv4
TWAMP IPv4 filter group.
twamp-ipv6
TWAMP IPv6 filter group.
enable
Enable filter group.
disable
Disable filter group.
no
Reset the group to as it was during init
Default
By default, all filter groups are disabled.
Command Mode
Configure mode
Applicability
This command was introduced before OcNOS version 1.3 and changed in OcNOS version 3.0.
Examples
#configure terminal
(config)#hardware-profile filter ingress-ipv4 enable
(config)#hardware-profile filter ingress-ipv4 disable
#(config)#hardware-profile filter egress-ipv4 enable
#(config)#hardware-profile filter egress-ipv4 disable
Table 34-99: Supported groups and the feature dependency on the groups
Group | Key Size | Security | QoS | PBR | Mirror | Statistics |
|---|
| | | | | | QMX | QAX | QUX |
|---|
ingress-l2 | 160 | Yes | No | N/A | No | Yes | Yes | Yes |
ingress-l2-ext | 320 | Yes | No | N/A | Yes | Yes | Yes | Yes |
ingress-ipv4 | 160 | Yes | No | No | No | Yes | Yes | Yes |
ingress-ipv4-ext | 320 | Yes | No | Yes | Yes | Yes | Yes | Yes |
ingress-ipv4-qos | 320 | N/A | Yes | N/A | N/A | Yes | Yes | Yes |
ingress-ipv6 | 320 | Yes | No | Yes | Yes | Yes | Yes | Yes |
Ingress-ipv6-ext | 320 | N/A | Yes | No | Yes | Yes | Yes | Yes |
Ingress-ipv6-ext-vlan | 320 | N/A | Yes | No | Yes | Yes | Yes | Yes |
ingress-ipv6-qos | 320 | N/A | Yes | N/A | N/A | Yes | Yes | Yes |
qos-ipv6 | 320 | N/A | Yes | N/A | N/A | Yes | Yes | Yes |
qos | 160 | N/A | Yes | N/A | N/A | No | No | No |
qos-ext | 320 | N/A | Yes | N/A | N/A | Yes | Yes | Yes |
qos-policer | 320 | N/A | Yes | N/A | N/A | Yes | Yes | Yes |
egress-l2 | 320 | Yes | N/A | N/A | N/A | Yes | Yes | Yes |
egress-ipv4 | 320 | Yes | N/A | N/A | N/A | Yes | Yes | Yes |
cfm-domain-name-str | 160 | N/A | N/A | N/A | N/A | Yes | Yes | Yes |
twamp-ipv4 | 320 | N/A | N/A | N/A | N/A | Yes | Yes | Yes |
twamp-ipv6 | 320 | N/A | N/A | N/A | N/A | Yes | Yes | Yes |
Table 34-100: Comparison between basic and extended group qualifiers
Basic Group | Qualifiers | Extended Group | Supported qualifiers |
|---|
ingress-l2 | Source MAC Destination MAC Ether Type (ip, ipv6, mpls, arp, cfm, fcoe) VLAN ID Inner VLAN ID | ingress-l2-ext | Source MAC Destination MAC Ether Type VLAN ID Inner VLAN ID COS |
ingress-ipv4 | Source IP Destination IP IP Protocols L4 Ports | ingress-ipv4-ext | Source IP Destination IP IP Protocols L4 Ports DSCP VLAN ID Inner VLAN ID TCP flags |
qos | VLAN ID COS Inner VLAN ID Inner COS Ether Type DSCP Topmost EXP | qos-ext | VLAN ID COS Inner VLAN ID Inner COS Ether Type DSCP Topmost EXP IP RTP L4 Ports Destination MAC Traffic type |
Table 34-101: Qualifiers for other groups
Group | Qualifiers |
|---|
ingress-ipv6 | Source IPv6 (n/w part) Destination IPv6 (n/w part) IPv6 Protocols L4 Ports |
ingress-ipv6-ext | src ipv6 address full 128 bits dest ipv6 address full 128 bits L4ports Ipv6 protocols Physical interface |
ingress-ipv6-ext-vlan | src ipv6 address full 128 bits dest ipv6 address full 128 bits L4ports Ipv6 protocols vlan interface subinterface |
egress-l2 | Source MAC Destination MAC VLAN ID Inner VLAN ID COS |
egress-ipv4 | Source IP Destination IP IP Protocols L4 Ports DSCP VLAN ID Inner VLAN ID |
qos-policer | VLAN ID COS Inner VLAN ID Inner COS Ether Type DSCP Topmost EXP IP RTP L4 Ports |
ingress-ipv4-qos | Source IP Destination IP IP Protocols L4 Ports DSCP VLAN ID Inner VLAN ID TCP flags |
ingress-ipv6-qos | Source IPv6 (n/w part) Destination IPv6 (n/w part) IPv6 Protocols L4 Ports |
qos-ipv6 | Source IPv6 (n/w part) Destination IPv6 (n/w part) IPv6 Protocols L4 Ports VLAN ID COS Inner VLAN ID Inner COS Ether Type DSCP |
cfm-domain-name-str | MA ID |
twamp-ipv4 | IPv4 Source IP IPv4 Destination IP UDP Source port UDP Destination port IPv4 Type of Service |
twamp-ipv6 | UDP Source port UDP Destination port IPv6 Source IP IPv6 Destination IP IPv6 Traffic Class |
Last modified date: 10/19/2023