{"id":10047,"date":"2022-06-23T10:10:00","date_gmt":"2022-06-23T13:10:00","guid":{"rendered":"http:\/\/made4it.com.br\/selective-bandwidth-control-on-huawei-2-router\/"},"modified":"2023-02-13T09:23:26","modified_gmt":"2023-02-13T12:23:26","slug":"selective-bandwidth-control-on-huawei-2-router","status":"publish","type":"post","link":"https:\/\/made4it.com.br\/en\/selective-bandwidth-control-on-huawei-2-router\/","title":{"rendered":"Selective Bandwidth Control in Huawei Router"},"content":{"rendered":"\n<p>Hello, my name is Gabriel Henrique, I am a network analyst here at Made4IT and today I will show you how to configure selective bandwidth control on access layer users on Huawei&#8217;s NE line routers.<\/p>\n\n<p>Selective bandwidth control opens up the possibility of new products or the improvement, increment or &#8220;charm&#8221; in the delivery of the service to the end user being a very interesting differential, especially for ISPs that have local CDN.<\/p>\n\n<p><br\/>But, after all, what is selective band control all about?<\/p>\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.made4it.com.br\/wp-content\/uploads\/2022\/06\/0001-scaled.jpg\"><img decoding=\"async\" src=\"https:\/\/www.made4it.com.br\/wp-content\/uploads\/2022\/06\/0001.jpg\" alt=\"\" class=\"wp-image-2218\"\/><\/a><\/figure>\n\n<p>Normally, in BNGs\/BRAS\/PPPoE Server implementations, it is commonplace to have a global bandwidth control (from the user&#8217;s point of view) of which any and all content is limited by the value of the contracted plan. In selective bandwidth control, we have the possibility of assigning different bands to different services, where you can for example assign a bandwidth control value of &#8220;X&#8221; for your local CDN content, &#8220;y&#8221; for internal traffic to your network and &#8220;z&#8221; when the source or destination of traffic is external (links, transits, Peering, IX\/PTT, PNI, transports&#8230;), we can say that we do selective QoS or that we specifically control how much bandwidth per content or it could also be said that we can take bandwidth control away from selective CDN or PBR.<\/p>\n\n<p>Anyway, enough talk, let&#8217;s get to the cool part \ud83d\ude42<\/p>\n\n<p>In our test scenario, we have:<\/p>\n\n<p>&#8211; Customer with 100Mbps plan  <br\/>&#8211; Need to free up to 500Mbps when source\/destination is local CDNs  <br\/>&#8211; Need to maintain 100Mbps when source\/destination are not Local CDNs<br\/>&#8211; Local CDNs addressed with 192.0.2.0\/24 and 2001:DB8::\/64<\/p>\n\n<p>Pre-requisites:<\/p>\n\n<p>&#8211; ERP\/Radius with AVP support &#8220;Huawei-Policy-Name<br\/>&#8211; Domain of authenticating clients with a declared &#8220;user-group&#8221; (If you don&#8217;t know what user-group is, stay tuned to Made&#8217;s blog and soon there will be a post about Firewall that will explain exactly what it is about \ud83d\ude09<\/p>\n\n<p>Step 1: Configure, in the system-view, the necessary Radius parameters and activate the &#8220;Value Added Service&#8221; function in the router.<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\nradius-server coa-request hw-policy-name daa same-policy reply-ack<br \/>\nradius-server coa-request hw-policy-name daa coexist-with-user<br \/>\nvalue-added-service enable<br \/>\n[\/code]<\/p>\n\n<p><br\/>Step 2: In the Radius-group used for authentication, enable value-added-service accounting support<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\naaa<br \/>\ndomain made4it<br \/>\nvalue-added-service account-type radius made4it<br \/>\n[\/code]<\/p>\n\n<p><br\/>Step 3: Configure access ACLs delimiting CDN traffic and general traffic<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\nacl number 7000<br \/>\ndescription CDN<br \/>\nrule 10 permit ip source user-group any destination ip-address 192.0.2.0 0.0.0.255<br \/>\nrule 11 permit ip source ip-address 192.0.2.0 0.0.0.255 destination user-group any<br \/>\n#<br \/>\nacl number 7001<br \/>\ndescription GERAL<br \/>\nrule 10 permit ip source user-group any destination ip-address any<br \/>\nrule 11 permit ip source ip-address any destination user-group any<\/p>\n<p>acl ipv6 number 7002<br \/>\ndescription CDN PILOTO 500MBPS IPv6<br \/>\nrule 10 permit ipv6 source user-group any destination ipv6-address 2001:DB8::\/64<br \/>\nrule 11 permit ipv6 source ipv6-address 2001:DB8::\/64 destination user-group any<br \/>\n#<br \/>\nacl ipv6 number 7003<br \/>\ndescription GERAL PILOTO 100MBPS<br \/>\nrule 10 permit ipv6 source user-group any destination ipv6-address any<br \/>\nrule 11 permit ipv6 source ipv6-address any destination user-group any<br \/>\n[\/code]<\/p>\n\n<p>Step 4: Configure &#8220;classifiers&#8221; to classify traffic from ACLs<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\ntraffic classifier tc1 operator or<br \/>\nif-match acl 7000<br \/>\nif-match ipv6 acl 7002<br \/>\n#<br \/>\ntraffic classifier tc8 operator or<br \/>\nif-match acl 7001<br \/>\nif-match ipv6 acl 7003<br \/>\n[\/code]<\/p>\n\n<p><br\/>Step 5: Configure the behaviors we will use to identify each of the classifiers<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\ntraffic behavior tb1<br \/>\ncar<br \/>\ntariff-level 1<br \/>\ntraffic-statistic<br \/>\n#<br \/>\ntraffic behavior tb8<br \/>\ncar<br \/>\ntariff-level 8<br \/>\ntraffic-statistic<br \/>\n#<br \/>\n[\/code]<\/p>\n\n<p>Step 6: Configure the traffic-policy that will be linked globally, containing the previously configured classifier and behavior, effecting the differentiated classification of the flows<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\ntraffic policy DAA_1<br \/>\nshare-mode<br \/>\nclassifier tc1 behavior tb1 precedence 1<br \/>\nclassifier tc8 behavior tb8 precedence 8<br \/>\n#<br \/>\n[\/code]<\/p>\n\n<p><br\/>Step 7: Apply the traffic-policy globally.<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\naccounting-service-policy DAA_1<br \/>\n[\/code]<\/p>\n\n<p><br\/>Step 8: Configure the qos-profiles that will delimit the bandwidth of the respective contents<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\nqos-profile 100M<br \/>\ncar cir 103424 cbs 18700000 green pass red discard inbound<br \/>\ncar cir 103424 cbs 18700000 green pass red discard outbound<br \/>\nqos-profile 500M<br \/>\ncar cir 512000 cbs 18700000 green pass red discard inbound<br \/>\ncar cir 512000 cbs 18700000 green pass red discard outbound<br \/>\n[\/code]<\/p>\n\n<p><br\/>Step 9: Configure the policy that will control the client&#8217;s bandwidth<\/p>\n<p>[code]<br \/>\nsystem-view<br \/>\nvalue-added-service policy 100m daa<br \/>\naccounting-scheme made4it<br \/>\nuser-group made4it<br \/>\ntariff-level 1 qos-profile 500M<br \/>\ntariff-level 8 qos-profile 100M<br \/>\n[\/code]<\/p>\n\n<p><br\/>Ready. Now, ERP\/Radius just needs to deliver the AVP Huawei-Policy-Name := 150m to the customer, and the customer will have bandwidth control limiting up to 500Mbps when the origin\/destination are the local CDNs, and up to 100Mbps for the other origins \/destinations. <br\/>Remember that if ERP\/Radius delivers the Huawei-Input-Average-Rate, BRAS\/BNG will use it preferentially and will not apply the Policy name!<\/p>\n\n<p>The traffic-policy allows up to 8 &#8220;tariff-levels&#8221; where you can classify your traffic into up to 8 service types and apply different bandwidth controls for each of them.<\/p>\n\n<p>In the example case, if you want to configure differentiated bandwidth control for other plans, just create a new &#8220;qos-profile&#8221; and &#8220;value-added-service policy&#8221; with the values you want to apply, since the CDN and general traffic is already classified in distinct &#8220;tariff-levels&#8221;.<\/p>\n\n<p><br\/>That&#8217;s it, until next time! If you have any doubts about how to implement this configuration in your network, <a href=\"https:\/\/www.made4it.com.br\/contato\/\" class=\"rank-math-link\">get in touch and talk to one of our specialists.<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello, my name is Gabriel Henrique, I am a network analyst here at Made4IT and today I will show you how to configure selective bandwidth control on access layer users on Huawei&#8217;s NE line routers. Selective bandwidth control opens up the possibility of new products or the improvement, increment or &#8220;charm&#8221; in the delivery of [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":9126,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"postBodyCss":"","postBodyMargin":[],"postBodyPadding":[],"postBodyBackground":{"backgroundType":"classic","gradient":""},"footnotes":""},"categories":[352],"tags":[],"class_list":["post-10047","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized-en"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts\/10047","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/comments?post=10047"}],"version-history":[{"count":0,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/posts\/10047\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/media\/9126"}],"wp:attachment":[{"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/media?parent=10047"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/categories?post=10047"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/made4it.com.br\/en\/wp-json\/wp\/v2\/tags?post=10047"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}