trust upstream vlan

Function

The trust upstream vlan command binds a Layer 2 interface to a DS domain and enables the Layer 2 interface to support BA classification and to change the priorities of IP and MPLS packets.

The undo trust upstream vlan command cancels the configuration.

By default, no DS domain is bound to a Layer 2 interface.

Format

trust upstream { 5p3d | ds-domain-name | default } [ inbound | outbound ] vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo trust upstream { 5p3d | ds-domain-name | default } [ inbound | outbound ] vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

Parameters

Parameter	Description	Value
5p3d	Specify 5p3d domain.	-
ds-domain-name	Specifies the name of a DS domain. A DS domain consists of the DiffServ (DS) nodes that adopt the same service policy and Per-Hop Behavior (PHB) collection.	The value is a string of 1 to 48 case-sensitive characters.
default	Specify default domain.	-
inbound	Inbound.	-
outbound	Outbound.	-
vlan-id1	Specifies a start VLAN ID.	The value is an integer ranging from 1 to 4094.
to vlan-id2	Specifies an end VLAN ID.	The value is an integer ranging from 1 to 4094. vlan-id2 must be greater than vlan-id1.
vpn-mode	VPN mode.	-

Views

25GE interface view, 400GE interface view, 50GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, FlexE interface view, Layer 2 GE interface view, GE sub-interface view, GE electrical interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
qos	write

Usage Guidelines

Usage Scenario

To implement a simple traffic classification-based QoS policy, for example, to change the priorities of IP and MPLS packets, on a Layer 2 interface, run the trust upstream vlan command to bind the Layer 2 interface to a DS domain and enable the Layer 2 interface to map the priorities of packets.

The command trust upstream can take effect only on the outbound interface traffic and the inbound interface traffic by specifying the parameter inbound and outbound. If the inbound parameter is specified, the priority fields, dscp, exp, 8021p, configured in the DS domain is mapped to the internal priorities (queue, color) for the inbound interface traffic. If the outbound parameter is specified, the internal priorities (queue, color) configured in the DS domain is mapped to the priority fields, dscp, exp, 8021p, for the outbound interface traffic.

Configuration Impact

The trust upstream vlan command is mutually exclusive to the qos phb enable and qos default-service-class commands on a Layer 2 interface.

Precautions

Simple traffic classification cannot be configured on a physical interface that has been added to an Eth-trunk interface.

Example

# Bind a Layer 2 interface GE 0/1/24 to a DS domain named ds2 and configure the Layer 2 interface to implement simple traffic classification for packets from VLAN 2.

<HUAWEI> system-view
[~HUAWEI] diffserv domain ds2
[*HUAWEI-dsdomain-ds2] quit
[~HUAWEI] interface GigabitEthernet0/1/24
[*HUAWEI-GigabitEthernet0/1/24] portswitch
[*HUAWEI-GigabitEthernet0/1/24] port trunk allow-pass vlan 2
[*HUAWEI-GigabitEthernet0/1/24] trust upstream ds2 inbound vlan 2