Showing results for 
Search instead for 
Did you mean: 

QOS for CCTV traffic

sridhar ch


Need your help in configuring QOS on 2960x switches for video (CCTV) traffic. I have attached the NW diagram. Off late my security team says they are observing intermittent video loss for 2 to 3 secs. we have verified the uplinks connecting to Dist switch (3650) for any drops. so want to implement qos to see if this improves. let me know otherwise. 

1. All 2960's at the bottom are connected to 3650 via copper. These 2960's are dedicated for CCTV's only.

2. All 2970's are configured in L2 and CCTV's & switches are in the same VLAN

3. GW IP is set on FW's

4. CCTV's are connected to 2960's at the bottom




3 Replies 3

Joseph W. Doherty
Hall of Fame Master Hall of Fame Master
Hall of Fame Master

"Normal" QoS, on your leaf switches cannot help as all your traffic is the same (if I understand your topology, on those switches).  However, the 2960 switches can easily run out of interface buffer memory, especially if switch has QoS enabled and using the default (or even the AutoQoS) configuration.  If QoS is enable on those switches, first try disabling it.  If that doesn't work, the (likely) best thing you can to is re-enable QoS, but using a custom QoS configuration that tries to maximize buffer memory for the interfaces.  (BTW, with CCTV traffic, the main goal, like for other non-RT video, is to avoid dropping packets.)

For your 3650, assuming there's other traffic sharing links to the FWs besides CCTV (or other ports), then a custom QoS configuration for it might be useful too; one that also tries to preclude any CCTV traffic drops.  For starters, if not already configured, you might try configuring "qos queue-softmax-multiplier 1200" global config command.  (Further details about 3650/3850 QoS for troubleshooting drops can be found here: 3850 troubleshooting output drops.)

BTW, since your 3650 is a L3 switch, if possible, I would do LAN routing on it and only direct traffic to FWs, when needed.  (3650 can also perform basic security using ACLs, likely much, much faster routing and security processing than your FWs, although also, likely, not with all the possible traffic inspection capabilities of FWs.)

Georg Pauwen
VIP Master VIP Master
VIP Master



on a side note, what brand/model are your CCTV cameras ? Some models have a QoS feature that can be enabled.


Maybe a good starting point would be to just configure auto qos on one of the ports, and monitor the results


--> auto qos video ip-camera 



Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers