Match lists provide a mechanism to simplify the configuration of IP and IPv6 criteria matching statements within QoS policies. Instead of defining multiple match statements in an ip-criteria or ipv6-criteria statement, an operator can group the same types of matching criteria into a single match list and use that list as a match criterion value, thereby requiring only a single policy entry per each unique action. The same match list can be used in one or more QoS policies.
The match lists further simplify management and deployment of the policy changes. A change in a match-list content is automatically propagated across all policies employing that list in their match criteria, therefore, only a single configuration change is required to trigger policy changes when a list is used by entries in one or more QoS policies.
The hardware resource usage does not change whether QoS match lists are used or whether the operator creates multiple entries (one for each element in the list). However, consideration must be given to how the lists are used to ensure only needed match permutations are created in a QoS policy entry (especially when other match criteria that are also lists or ranges are specified in the same entry). The system verifies whether a new list element, for example, an IP address prefix, can be added to a specific list, or a list can be used by a new QoS policy, by checking whether the resources exist in hardware to implement the required changes for all QoS policies that reference the updated list. If sufficient resources do not exist, the addition of a new element to the list or use of the list by another policy will fail.
QoS match lists are created within config>qos>match-list. The following types of match lists are supported:
The following restrictions apply to the use of prefix lists in network QoS policies:
The following shows a created IPv4 prefix list which is configured within a SAP ingress QoS policy to rate limit the traffic from those prefixes.
The IPv4 prefix list can be shown as follows:
This command enables the context to display information for match lists used in QoS policies.
This command creates a list of IPv4 prefixes for match criteria in QoS policies.
An IP prefix list must contain only IPv4 address prefixes created using the prefix command and cannot be deleted if it is referenced by a QoS policy.
The no form of this command deletes the specified list.
This command creates a text description stored in the configuration file for a configuration context.
The description command associates a text string with a configuration context to help identify the context in the configuration file.
The no form of this command removes any description string from the context.
This command creates a list of IPv6 prefixes for match criteria in QoS policies. An ipv6-prefix-list must contain only IPv6 address prefixes created using the prefix command and cannot be deleted if it is referenced by a QoS policy.
The no form of this command deletes the specified list.
This command adds an IPv4 address prefix to an existing IPv4 address prefix match list.
To add a set of unique prefixes, execute the command with all unique prefixes. The prefixes are allowed to overlap IPv4 address space.
An IPv4 prefix addition will be blocked, if resource exhaustion is detected anywhere in the system because of QoS Policies that use this IPv4 address prefix list.
The no form of this command deletes the specified prefix from the list.
This command adds an IPv6 address prefix to an existing IPv6 address prefix match list.
To add set of unique prefixes, execute the command with all unique prefixes. The prefixes are allowed to overlap IPv6 address space.
An IPv6 prefix addition will be blocked if resource exhaustion is detected anywhere in the system because of QoS Policies that use this IPv6 address prefix list.
The no form of this command deletes the specified prefix from the list.
Displays the list of configured IPv4 QoS prefix lists or the details of a specific IPv4 QoS prefix list together with the SAP and network QoS policies in which it is used and the entry number within that policy.
The following output is an example of ip-prefix-list information
Displays the list of configured IPv6 QoS prefix lists or the details of a specific IPv6 QoS prefix list together with the network QoS policies in which it is used and the entry number within that policy.
The following output is an example of ipv6-prefix-list information