VSC7511 datasheet(24/324 Pages) MICROSEMI

24 / 324 page

Product Overview

VMDS-10488 VSC7511 Datasheet Revision 4.2

The QoS class and DP level in the basic classification are based on the class of service information in

the frame’s VLAN tags (PCP and DEI) and/or the DSCP values from the IP header. Both IPv4 and IPv6

are supported. If the frame is non-IP or untagged, the port’s default QoS class and DP level are used.

The DSCP values can be remapped before being used for QoS. This is done using a common table

mapping the incoming DSCP to a new value. Remapping is enabled per port. In addition, for each DSCP

value, it is possible to specify whether the value is trusted for QoS purposes.

Each IP frame is also classified to an internal DSCP value. By default, this value is taken from the IP

header but it may be remapped using the common DSCP mapping table or rewritten based on the

assigned QoS class. The classified DSCP value may be written into the frame at egress – this is

programmable in the rewriter.

Aggregation Code The basic classification calculates an aggregation code, which is used to select

between ports that are member of a link aggregation group. The aggregation code is based on selected

Layer-2 through Layer-4 information, such as MAC addresses, IP addresses, IPv6 flow label, and

TCP/UDP port numbers. The aggregation code ensures that frames belonging to the same conversation

are using the same physical ports in a link aggregation group.

2.3.2.1

Advanced Classification

Following basic classification, Layer-2 and Layer-4 information is extracted from each frame and

matched against a TCAM, IS1, with one of the following six different IS1 keys:

•

NORMAL. Up to 128 entries with primary fields in key consisting of SMAC, outer VLAN tag, 32-bit

source IP address, IP protocol, TCP/UDP source and destination port

•

NORMAL_IP6. Up to 64 entries with primary fields in key consisting of SMAC, inner and outer VLAN

tags, 128-bit source IP address, IP protocol, TCP/UDP source and destination port

•

7TUPLE. Up to 64 entries with primary fields in key consisting of source and destination MAC

addresses, inner and outer VLAN tags, 64-bit source and destination IP addresses, IP protocol,

TCP/UDP source and destination port

•

5TUPLE_IP4. Up to 128 entries with primary fields in key consisting of inner and outer VLAN tags,

32-bit source and destination IP addresses, IP protocol, TCP/UDP source and destination port

•

5TUPLE_IP6. Up to 64 entries with primary fields in key consisting of inner and outer VLAN tags,

128-bit source and destination IP addresses, IP protocol, TCP/UDP source and destination port

•

S1_DBL_VID. Up to 256 entries with primary fields in key consisting of inner and outer VLAN tags

The TCAM embeds powerful protocol awareness for well-known protocols such as LLC, SNAP, IPv4,

IPv6, and UDP/TCP. For each frame, three keys are generated and matched against the TCAM. The

keys are selectable per ingress port per frame type (IPv4, IPv6, non-IP) per IS1 lookup.

The actions associated with each entry (programmed into the TCAM action RAM) include the ability to

overwrite or translate the classified VLAN, overwrite the priority code point (PCP) or the drop eligibility

indicator (DEI), overwrite the QoS class and DP level, or overwrite the DSCP value. Each of these

actions is enabled individually for each of the three lookup.

In addition, a policy association group (PAG) is assigned to the frame. The PAG identifies a security

profile to which the frame belongs. The PAG is used in the succeeding security frame processor, IS2, to

select which access control lists to apply to the frame. The PAG enables creating efficient ACLs that only

are applicable to frames with the same PAG.

A lookup in IS1 can enable the use of a custom lookup in IS2, the security enforcement TCAM. The

custom lookup can match against selectable frame fields from the incoming frame. In total, 40 bytes from

the frame are matched against the TCAM. This is a powerful future-proofing feature enabling handling of

new protocols.

2.3.3

Versatile Content Aware Processor (VCAP)

All frames are inspected by the VCAP IS2 before they are passed on to the Layer-2 forwarding. The

following illustration depicts VCAP security enforcement.

VSC7511 датащи(PDF) 24 Page - Microsemi Corporation

VSC7511 датащи(HTML) 24 Page - Microsemi Corporation

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

датащи скачать

ссылки URL