topic QoS not working in Network Security

QoS not working

aosandoval — Mon, 11 Mar 2019 21:35:54 GMT

Hello,

We have 4 remote offices coming through the WAN to use HQ Internet Connection (10/20 Mbps)

Since all remote offices and HQ are figthing for bandwidth, I would like to implement QoS.

The major problem is when they are downloading. Some times, time-outs occurred.

Can I allocate some guarantee BW for them (upload/downlaod)?

Below is my testing configuration

access-list site_specific_acl line 1 permit tcp host 10.0.1.10 any eq 80
access-list site_specific_acl line 2 permit tcp any host 10.0.1.10 eq 80

class-map site_specific_map
description "This class-map matches all Internet traffic for host 10.0.1.10"
match access-list site_specific_acl

policy-map site_specific_policy
class site_specific_map
police output 5000000 37500
police input 3000000 37500

service-policy site_specific_policy interface outside

I checked service-policy for outside interface and I don't see ay matches.

All advice will be greatly appreciated.

Thanks

Re: QoS not working

andrew.prince — Mon, 10 Oct 2011 17:49:05 GMT

Your acl is incorrect....the first line destintion port will not be 80, it will be anything from 1024 to 65535.

Second line to also round the wrong way.

Re: QoS not working

aosandoval — Tue, 11 Oct 2011 12:13:22 GMT

Thanks Andrew for your response.

I did modified the ACL as follow:

access-list site_specific_acl line 1 permit tcp host 10.0.1.10 any

access-list site_specific_acl line 2 permit tcp any host 10.0.1.10

I generated some traffic from 10.0.1.10 and still not traffic matched in sevice policy

Interface outside:

Service-policy: site_specific_policy

Class-map: site_specific_map

Output police Interface outside:

cir 500000 bps, bc 37500 bytes

conformed 0 packets, 0 bytes; actions: transmit

exceeded 0 packets, 0 bytes; actions: drop

conformed 0 bps, exceed 0 bps

Input police Interface outside:

cir 3000000 bps, bc 37500 bytes

conformed 0 packets, 0 bytes; actions: transmit

exceeded 0 packets, 0 bytes; actions: drop

conformed 0 bps, exceed 0 bps

Thanks

Re: QoS not working

andrew.prince — Tue, 11 Oct 2011 12:15:49 GMT

post your full qos config

Re: QoS not working

aosandoval — Tue, 11 Oct 2011 18:12:57 GMT

Here it is,

access-list site_specific_acl line 1 permit tcp host 10.0.1.10 any
access-list site_specific_acl line 2 permit tcp any host 10.0.1.10

class-map site_specific_map
description "This class-map matches all Internet traffic for host 10.0.1.10"
match access-list site_specific_acl

policy-map site_specific_policy
class site_specific_map
police output 500000 37500
police input 3000000 37500

service-policy site_specific_policy interface outside

Thanks

QoS not working

andrew.prince — Wed, 12 Oct 2011 08:27:02 GMT

Attach it to the "inside" interface.