< Home

trust

Function

The trust command specifies the priority to be mapped for packets.

The undo trust command cancels the configuration.

By default:
  • The S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI process packets based on the mapping of the 802.1p priority.

  • The S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735S-S, S5735-S-I, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S process packets based on the mapping of the outer 802.1p priority.

Format

trust { 8021p | dscp } (S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI)

undo trust { 8021p | dscp } (S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI)

trust { 8021p { inner | outer } | dscp } (S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S)

trust { 8021p outer | dscp } (S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735-S-I, and S5735S-S)

undo trust (S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735S-S, S5735-S-I, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S)

Parameters

Parameter

Description

Value

8021p

Maps packets based on the 802.1p priority.

-

inner

Maps packets based on the inner 802.1p priority.

-

outer

Maps packets based on the outer 802.1p priority.

-

dscp

Maps packets based on the DSCP priority.

-

Views

Ethernet interface view, MultiGE interface view, GE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, Eth-Trunk member interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If a device does not trust any packet priority, packets enter queue 0 and 8021.p priorities in the packets are set to 0. Differentiated services cannot be provided. After the trust command is used, the device searches for the mapping table based on the priority in packets, re-marks the inner priority in packets, and sends packets to queues.

To set the same priority to be trusted on multiple interfaces, you can perform the configuration on a port group to reduce the workload.

Precautions

By default, the S2720-EI, S5720I-SI, S5720-LI, S5735-L, S5735S-L, S5735S-L-M, S5720S-LI, S5720S-SI, S5720-SI, S5735-S, S5735-S-I, and S5735S-S in a version earlier than V200R013C00 do not trust priorities of packets. If the trust command is not executed to change the switches to trust 802.1p or DSCP priority of packets, the switches will process packets based on the mapping of the 802.1p priority after they are updated to V200R013C00 and later versions.

On the S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI, when the trust dscp and trust 8021p commands are configured on the same interface:

  • The interface trusts DSCP priorities if IPv4 packets are received.
  • The interface trusts 802.1p priorities if VLAN packets are received.

If both a traffic policy containing remark 8021p or remark dscp and the trust 8021p or trust dscp command are configured in the outbound interface of packets, only the traffic policy containing remark 8021p or remark dscp takes effect, and the trust 8021p or trust dscp command does not take effect.

On the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S, if you run the trust 8021p inner, trust 8021p outer, and trust dscp commands multiple times on the same interface, only the latest configuration takes effect.

On the S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735-S-I, and S5735S-S, if you run the trust 8021p outer and trust dscp commands multiple times on the same interface, only the latest configuration takes effect.

The trust command cannot be configured on both an Eth-Trunk and its member interfaces.

Example

# Configure GE0/0/1 to trust DSCP priorities.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] trust dscp
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >