Is there any standard or usual way to configure LAN equipment to put NMS packets in high priority? Base on RFC 4594, network control packets or telephony packets could have the highest priority among different classes. NMS is responsible for configuring network equipment through different methods, i.e by SSH or SNMP or even HTTPS. How to make these packets have high priority? 1- By defining an ACL which sperate packets whose destination or source IP address is NMS IP address and the set a high priority DSCP value for them during classification or
2- By defining an ACL which sperate packets whose destination or source MAC address is NMS MAC address and the set a high priority DSCP value for them during classification or
What type of LAN device are you using? Does it support NBAR for application identification? If yes, then you can match protocols in the ACL for classification
If you don't want all the packets destined to NMS to be classified, you can use a combination of ports with the IP addresses for classification.
E.g. If NMS IP is <NMS_IP> and the managed device in LAN has an IP <LAN_IP>. Then the ACL that will be used for classification of a SSH packet coming from the LAN side, and destined to the NMS, can be as follows
access-list extended MATCH_NMS
10 permit tcp host <LAN_IP> host <NMS_IP> eq 22
This can be matched in a class-map to match the relevant traffic. The on the LAN port, in the inbound direction, you can have a policy that sets the appropriate DSCP value to this traffic. With this DSCP marking, the downstream router(s) and network components can provide appropriate priority in the network, provided these routers have appropriate QoS policies.
Cisco Digital Network Architecture Center Modules (Design Module)Part.3In this article, we are going to talk about the Cisco Digital Network Architecture Center design Module.Cisco DNA Center gives us the flexibility and scalability to configure mult...
Cisco 2509-RJ freezes during start-up I bought some Cisco 2509-RJ terminal server to work on my labs and was working fine. Today I turned it on and half way through starting up it seems to freeze. I can only find one instance of this happing to ...
Cisco Digital Network Architecture Center Modules(Design Module)Part.2In this article, we are going to talk about the Cisco Digital Network Architecture Center design Module. Cisco DNA Center gives us the flexibility and availability to con...
Connectivity Design considerations and recommendation
1.Management Access connectivity
If there is a dedicated OOB management path, consider connecting to CIMC and MGMT port.
If OOB path is not available, Connect the dedicated Management port to LAN Swi...