QoS Classification before WAN Accelerator

QoS Classification before WAN Accelerator

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
QoS Classification before WAN Accelerator auromed 05-02-2008
Posted by auromed on May 2, 2008, 3:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I've inherited a semi large corporate network and want to get the QoS
cleaned up a bit. The current network is a bit of a mess, so I am
mostly looking at doing some classification and policing at the WAN
routers for the near term solution. This has been done somewhat on the
WAN router already, but most of the larger sites have riverbed WAN
accelerators, so classifying traffic which isnt already marked with a
DSCP value isn't really an option as it all gets sent out over one
port to the riverbed device at the destination site.

This is what I have at one of the sites...
LAN <-> 3560 <-> Riverbed <-> Wan Router <-> WAN

I'd like to do some classification on the 3560, apply DSCP values,
have the riverbed pass those through and have the WAN router police on
those. The riverbed passes through DSCP values, as my voice traffic
that is marked at the phone goes through fine, so that shouldnt be an
issue. I tried applying a policy on both the vlan and interfaces on
the 3560, but havent had much luck.

When trying to apply the "service policy input classify" on the port
leading to the Riverbed, I get...
- Remove policy failed for interface GigabitEthernet0/1 -

The first thought in my head is that I need CEF on to do 'set' based
policies, but I havent applied too much QoS on a L3 switch before, so
ya know.

* * * * * 3560 Config (Abbreviated)* * * * *
version 12.2
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname ***agg-sw1
!
clock timezone EST -5
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
vtp mode transparent
ip subnet-zero
ip routing
no ip domain-lookup
!
mls qos
!
!
class-map match-all medium-priority
match access-group name qos-medium-priority
class-map match-all high-priority
match access-group name qos-high-priority
class-map match-any voice
match ip dscp ef
match access-group name qos-voice
!
!
policy-map classify
class voice
set dscp ef
class high-priority
set dscp 31
class medium-priority
set dscp 21
class class-default
set dscp default
!
!
!
interface GigabitEthernet0/1
description WAN
switchport access vlan 2
speed 1000
duplex full
priority-queue out
mls qos trust dscp
!
interface GigabitEthernet0/2
description Link to Building2
switchport access vlan 4
speed 100
duplex full
mls qos trust dscp
!
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2
description SITE1 WAN
ip address 172.20.3.254 255.255.255.0
ip pim sparse-mode
!
interface Vlan4
description Link to Building2
ip address 172.25.4.2 255.255.255.252
ip pim sparse-mode
!
* * * * *

Any ideas, or direction on how I can achieve my goal of doing some
classification and setting the DSCP field on the 3560?

NMFall 20%
Posted by response3 on May 27, 2008, 7:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> I've inherited a semi large corporate network and want to get the QoS
> cleaned up a bit. The current network is a bit of a mess, so I am
> mostly looking at doing some classification and policing at the WAN
> routers for the near term solution. This has been done somewhat on the
> WAN router already, but most of the larger sites have riverbed WAN
> accelerators, so classifying traffic which isnt already marked with a
> DSCP value isn't really an option as it all gets sent out over one
> port to the riverbed device at the destination site.
>
> This is what I have at one of the sites...
> LAN <-> 3560 <-> Riverbed <-> Wan Router <-> WAN
>
> I'd like to do some classification on the 3560, apply DSCP values,
> have the riverbed pass those through and have the WAN router police on
> those. The riverbed passes through DSCP values, as my voice traffic
> that is marked at the phone goes through fine, so that shouldnt be an
> issue. I tried applying a policy on both the vlan and interfaces on
> the 3560, but havent had much luck.
>
> When trying to apply the "service policy input classify" on the port
> leading to the Riverbed, I get...
> - Remove policy failed for interface GigabitEthernet0/1 -
>
> The first thought in my head is that I need CEF on to do 'set' based
> policies, but I havent applied too much QoS on a L3 switch before, so
> ya know.
>
> * * * * * 3560 Config (Abbreviated)* * * * *
> version 12.2
> no service pad
> service timestamps debug datetime localtime
> service timestamps log datetime localtime
> service password-encryption
> !
> hostname ***agg-sw1
> !
> clock timezone EST -5
> clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
> vtp mode transparent
> ip subnet-zero
> ip routing
> no ip domain-lookup
> !
> mls qos
> !
> !
> class-map match-all medium-priority
> match access-group name qos-medium-priority
> class-map match-all high-priority
> match access-group name qos-high-priority
> class-map match-any voice
> match ip dscp ef
> match access-group name qos-voice
> !
> !
> policy-map classify
> class voice
> set dscp ef
> class high-priority
> set dscp 31
> class medium-priority
> set dscp 21
> class class-default
> set dscp default
> !
> !
> !
> interface GigabitEthernet0/1
> description WAN
> switchport access vlan 2
> speed 1000
> duplex full
> priority-queue out
> mls qos trust dscp
> !
> interface GigabitEthernet0/2
> description Link to Building2
> switchport access vlan 4
> speed 100
> duplex full
> mls qos trust dscp
> !
> !
> interface Vlan1
> no ip address
> shutdown
> !
> interface Vlan2
> description SITE1 WAN
> ip address 172.20.3.254 255.255.255.0
> ip pim sparse-mode
> !
> interface Vlan4
> description Link to Building2
> ip address 172.25.4.2 255.255.255.252
> ip pim sparse-mode
> !
> * * * * *
>
> Any ideas, or direction on how I can achieve my goal of doing some
> classification and setting the DSCP field on the 3560?

From Cisco: "Only one ACL per class map and only one match class-map
configuration command per class map are supported. The ACL can have
multiple ACEs, which match fields against the contents of the packet."

It's kinda lame, but I think the problem is in your voice class-map.

The easy answer: Auto QoS
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_44_se/configuration/guide/swqos.html#wp1231112+




Posted by response3 on May 27, 2008, 7:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>
>
>
> > I've inherited a semi large corporate network and want to get the QoS
> > cleaned up a bit. The current network is a bit of a mess, so I am
> > mostly looking at doing some classification and policing at the WAN
> > routers for the near term solution. This has been done somewhat on the
> > WAN router already, but most of the larger sites have riverbed WAN
> > accelerators, so classifying traffic which isnt already marked with a
> > DSCP value isn't really an option as it all gets sent out over one
> > port to the riverbed device at the destination site.
>
> > This is what I have at one of the sites...
> > LAN <-> 3560 <-> Riverbed <-> Wan Router <-> WAN
>
> > I'd like to do some classification on the 3560, apply DSCP values,
> > have the riverbed pass those through and have the WAN router police on
> > those. The riverbed passes through DSCP values, as my voice traffic
> > that is marked at the phone goes through fine, so that shouldnt be an
> > issue. I tried applying a policy on both the vlan and interfaces on
> > the 3560, but havent had much luck.
>
> > When trying to apply the "service policy input classify" on the port
> > leading to the Riverbed, I get...
> > - Remove policy failed for interface GigabitEthernet0/1 -
>
> > The first thought in my head is that I need CEF on to do 'set' based
> > policies, but I havent applied too much QoS on a L3 switch before, so
> > ya know.
>
> > * * * * * 3560 Config (Abbreviated)* * * * *
> > version 12.2
> > no service pad
> > service timestamps debug datetime localtime
> > service timestamps log datetime localtime
> > service password-encryption
> > !
> > hostname ***agg-sw1
> > !
> > clock timezone EST -5
> > clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
> > vtp mode transparent
> > ip subnet-zero
> > ip routing
> > no ip domain-lookup
> > !
> > mls qos
> > !
> > !
> > class-map match-all medium-priority
> > match access-group name qos-medium-priority
> > class-map match-all high-priority
> > match access-group name qos-high-priority
> > class-map match-any voice
> > match ip dscp ef
> > match access-group name qos-voice
> > !
> > !
> > policy-map classify
> > class voice
> > set dscp ef
> > class high-priority
> > set dscp 31
> > class medium-priority
> > set dscp 21
> > class class-default
> > set dscp default
> > !
> > !
> > !
> > interface GigabitEthernet0/1
> > description WAN
> > switchport access vlan 2
> > speed 1000
> > duplex full
> > priority-queue out
> > mls qos trust dscp
> > !
> > interface GigabitEthernet0/2
> > description Link to Building2
> > switchport access vlan 4
> > speed 100
> > duplex full
> > mls qos trust dscp
> > !
> > !
> > interface Vlan1
> > no ip address
> > shutdown
> > !
> > interface Vlan2
> > description SITE1 WAN
> > ip address 172.20.3.254 255.255.255.0
> > ip pim sparse-mode
> > !
> > interface Vlan4
> > description Link to Building2
> > ip address 172.25.4.2 255.255.255.252
> > ip pim sparse-mode
> > !
> > * * * * *
>
> > Any ideas, or direction on how I can achieve my goal of doing some
> > classification and setting the DSCP field on the 3560?
>
> From Cisco: "Only one ACL per class map and only one match class-map
> configuration command per class map are supported. The ACL can have
> multiple ACEs, which match fields against the contents of the packet."
>
> It's kinda lame, but I think the problem is in your voice class-map.
>
> The easy answer: Auto
QoShttp://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/re...

Sorry, here's the link I found that info in.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_44_se/configuration/guide/swqos.html#wp1426811


Similar ThreadsPosted
Classification and marking on 1720 July 20, 2005, 5:32 am
WAN Accelerator September 25, 2006, 8:01 am
Cisco Secure Content Accelerator July 18, 2005, 7:35 pm
cisco 2801, ipsec problem with onboard accelerator November 19, 2007, 10:21 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map