QoS not working

[aosandoval]

Hello,

We have 4 remote offices coming through the WAN to use HQ Internet Connection (10/20 Mbps)

Since all remote offices and HQ are figthing for bandwidth, I would like to implement QoS.

The major problem is when they are downloading. Some times, time-outs occurred.

Can I allocate some guarantee BW for them (upload/downlaod)?

Below is my testing configuration

access-list site_specific_acl line 1 permit tcp host 10.0.1.10 any eq 80
access-list site_specific_acl line 2 permit tcp any host 10.0.1.10 eq 80

class-map site_specific_map
description "This class-map matches all Internet traffic for host 10.0.1.10"
match access-list site_specific_acl

policy-map site_specific_policy
class site_specific_map
  police output 5000000 37500
  police input 3000000 37500

service-policy site_specific_policy interface outside

I checked service-policy for outside interface and I don't see ay matches.

All advice will be greatly appreciated.

Thanks

[andrew.prince]

Your acl is incorrect....the first line destintion port will not be 80, it will be anything from 1024 to 65535.

Second line to also round the wrong way.

[aosandoval]

Thanks Andrew for your response.

I did modified the ACL as follow:

access-list site_specific_acl line 1 permit tcp host 10.0.1.10 any

access-list site_specific_acl line 2 permit tcp any host 10.0.1.10

I generated some traffic from 10.0.1.10 and still not traffic matched in sevice policy

Interface outside:

  Service-policy: site_specific_policy

    Class-map: site_specific_map

      Output police Interface outside:

        cir 500000 bps, bc 37500 bytes

        conformed 0 packets, 0 bytes; actions:  transmit

        exceeded 0 packets, 0 bytes; actions:  drop

        conformed 0 bps, exceed 0 bps

      Input police Interface outside:

        cir 3000000 bps, bc 37500 bytes

        conformed 0 packets, 0 bytes; actions:  transmit

        exceeded 0 packets, 0 bytes; actions:  drop

        conformed 0 bps, exceed 0 bps

Thanks

[andrew.prince]

post your full qos config

[aosandoval]

Here it is,

access-list site_specific_acl line 1 permit tcp host 10.0.1.10 any
access-list site_specific_acl line 2 permit tcp any host 10.0.1.10

class-map site_specific_map
description "This class-map matches all Internet traffic for host 10.0.1.10"
match access-list site_specific_acl

policy-map site_specific_policy
class site_specific_map
  police output 500000 37500
  police input 3000000 37500

service-policy site_specific_policy interface outside

Thanks

[andrew.prince]

Attach it to the "inside" interface.