03-08-2005 11:43 PM - edited 02-21-2020 12:00 AM
Hi All
I have configured QoS for particular ports 1494 and 1604, but not sure whether the QoS is working correctly or not.
Below are the setting details.
Does the class-map match-all default override my class-map match-all metaframe?
I was confused because, in my log server, I see lot of traffic for port 1494, but the counters for access-list 111 is not showing that much.
Can some body please tell, what can be the problem?
!
!
class-map match-all metaframe
description Mataframe applications are marked
match access-group 111
class-map match-all default
description Marking all the traffic
match any
!
!
policy-map metaframe-map
class metaframe
shape peak 384000
bandwidth 384
!
!
interface Serial0/0
service-policy output metaframe-map
!
!
access-list 111 permit tcp any any eq 1494
access-list 111 permit udp any any eq 1604
!
!
test#show access-lists 111
Extended IP access list 111
permit tcp any any eq 1494 (5571 matches)
permit udp any any eq 1604 (2 matches)
test#
test#show policy-map interface serial 0/0
Serial0/0
Service-policy output: metaframe-map
Class-map: metaframe (match-all)
5312 packets, 253681 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group 111
Traffic Shaping
Target Byte Sustain Excess Interval Increment Adapt
Rate Limit bits/int bits/int (ms) (bytes) Active
768000 2400 9600 9600 25 2400 -
Queue Packets Bytes Packets Bytes Shaping
Depth Delayed Delayed Active
0 5310 253585 0 0 no
Weighted Fair Queueing
Output Queue: Conversation 266
Bandwidth 384 (kbps) Max Threshold 64 (packets)
(pkts matched/bytes matched) 5312/253681
(depth/total drops/no-buffer drops) 0/0/0
Class-map: class-default (match-any)
1202077 packets, 57081765 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
test#
test#show policy-map metaframe-map
Policy Map metaframe-map
Class metaframe
Traffic Shaping
Peak Rate Traffic Shaping
CIR 384000 (bps) Max. Buffers Limit 1000 (Packets)
Weighted Fair Queueing
Bandwidth 384 (kbps) Max Threshold 64 (packets)
test#
test#show class-map
Class Map match-any class-default (id 0)
Match any
Class Map match-all metaframe (id 2)
Description: Mataframe applications are marked
Match access-group 111
Class Map match-all default (id 3)
Description: Marking all the traffic
Match any
test#
-Rcp
Solved! Go to Solution.
03-16-2005 05:35 AM
When you see the counters from 'sh policy' increasing, the QoS is working. Keep in mind, your configuration reserves the bandwidth for the application but does not tell it to put this apps in front of other traffics. To get priority treatment for this apps, replace the word "bandwidth" with "priority". That means the meta packets will always be processed first. However, under congestion, this app cannot used more than its share of bandwidth. When not congested, this app can use more bandwidth. I see you have traffic shaping, if you have frame relay connection, the FR cloud can delay your packet based on the cloud's condition at the moment.
As for the counter of ACL not incrementing correctly, I would assume it is the "feature of the day" that you ran into, the fix is usually "upgrade the IOS to higher version".
03-09-2005 02:26 AM
Hi
the command match all is to match both arguments in the access list. however if you use match any, the match argument matches each one.
also you can use NBAR to recognise ICA auto depending on router and IOS.
it should look like this
class-map match-any metaframe
match protocol citrix
policy-map metaframe-map
class metaframe
shape peak 384000
bandwidth 384
good luck
03-09-2005 02:53 AM
Thakyou very much.
My IOS version is not supporting the protocol citirix. So I used the access-list.
Do I need to use the below command apart from my metaframe:
class-map match-all default
description Marking all the traffic
match any
-Rcp
03-09-2005 03:16 AM
Hi,
No, all other traffic will fall into default
Mario
03-09-2005 03:28 AM
Hi,
Thankyou verymuch.
Is it possible to use the priority-list with class-map/policy-map like:
priority-list 1 protocol ip high list 111
priority-list 2 default medium
-Rcp
03-09-2005 03:34 AM
Hi,
It is beter to use CBWFQ insted of PQ - you can use PQ but you can not monitor it by SNMP
regards
Mario
03-09-2005 05:51 PM
Hi
Thank you very much.
After changing the config, I monitored the citirix packets in log server and in my router access-list count. It seems that the count of packets are not matching.
Whether the access-list count shows only first packet count from an IP address which got matched with access-list and rest all the packets with same IP address and with match with access-list will not be shown in the counter?
!
!
version 12.2
!
!
class-map match-any metaframe
description Mataframe applications are marked
match access-group 111
!
!
policy-map metaframe-map
class metaframe
shape peak 384000
bandwidth 384
!
!
interface Serial0/0
service-policy output metaframe-map
!
!
test#show policy-map
Policy Map metaframe-map
Class metaframe
Traffic Shaping
Peak Rate Traffic Shaping
CIR 384000 (bps) Max. Buffers Limit 1000 (Packets)
Weighted Fair Queueing
Bandwidth 384 (kbps) Max Threshold 64 (packets)
test#
test#show class-map
Class Map match-any class-default (id 0)
Match any
Class Map match-any metaframe (id 2)
Description: Mataframe applications are marked
Match access-group 111
test#
test#show access-list 111
Extended IP access list 111
permit tcp any any eq 1494 (30 matches)
permit udp any any eq 1604
test#
test#show policy-map interface serial 0/0
Serial0/0
Service-policy output: metaframe-map
Class-map: metaframe (match-any)
5387 packets, 257287 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group 111
30 packets, 1430 bytes
5 minute rate 0 bps
Traffic Shaping
Target Byte Sustain Excess Interval Increment Adapt
Rate Limit bits/int bits/int (ms) (bytes) Active
768000 2400 9600 9600 25 2400 -
Queue Packets Bytes Packets Bytes Shaping
Depth Delayed Delayed Active
0 5385 257191 0 0 no
Weighted Fair Queueing
Output Queue: Conversation 266
Bandwidth 384 (kbps) Max Threshold 64 (packets)
(pkts matched/bytes matched) 5387/257287
(depth/total drops/no-buffer drops) 0/0/0
Class-map: class-default (match-any)
1215401 packets, 58022614 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
test#
-Rcp
03-15-2005 06:00 AM
Let me guess, your router is a Cat6500 (perhaps running hybrid mode, not native mode). With Cat6500, the first packet is processed by the MSFC and the ACL counter is incremented. Subsequence packets of the flow is processed by the PFC and ACL counter will not be incremented. The counters of policy-map is corrected because the CBWFQ is processed by the MSFC, not PFC.
03-15-2005 11:24 PM
Hi,
Thankyou very much for replying.
My router is cisco 1751 with IOS version 12.2(4)T3.
How can I know, whether the QoS is taking place or not?
Some more information:
test#show queueing
Current fair queue configuration:
Interface Discard Dynamic Reserved Link Priority
threshold queues queues queues queues
Serial0/0 64 256 64 8 1
Current DLCI priority queue configuration:
Current priority queue configuration:
Current custom queue configuration:
Current random-detect configuration:
Current per-SID queue configuration:
test#
test#show queueing interface serial 0/0
Interface Serial0/0 queueing strategy: fair
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 8601
Queueing strategy: weighted fair
Output queue: 0/1000/64/8601 (size/max total/threshold/drops)
Conversations 0/33/256 (active/max active/max total)
Reserved Conversations 1/2 (allocated/max allocated)
Available Bandwidth 774 kilobits/sec
test#
test#show queue serial 0/0
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 8601
Queueing strategy: weighted fair
Output queue: 0/1000/64/8601 (size/max total/threshold/drops)
Conversations 0/33/256 (active/max active/max total)
Reserved Conversations 1/2 (allocated/max allocated)
Available Bandwidth 774 kilobits/sec
test#
03-16-2005 05:35 AM
When you see the counters from 'sh policy' increasing, the QoS is working. Keep in mind, your configuration reserves the bandwidth for the application but does not tell it to put this apps in front of other traffics. To get priority treatment for this apps, replace the word "bandwidth" with "priority". That means the meta packets will always be processed first. However, under congestion, this app cannot used more than its share of bandwidth. When not congested, this app can use more bandwidth. I see you have traffic shaping, if you have frame relay connection, the FR cloud can delay your packet based on the cloud's condition at the moment.
As for the counter of ACL not incrementing correctly, I would assume it is the "feature of the day" that you ran into, the fix is usually "upgrade the IOS to higher version".
03-17-2005 12:18 AM
My IOS priority feature is below:
test(config-pmap-c)#?
QoS policy-map class configuration commands:
bandwidth Bandwidth
exit Exit from QoS class action configuration mode
no Negate or set default values of a command
priority Strict Scheduling Priority for this Class
queue-limit Queue Max Threshold for Tail Drop
random-detect Enable Random Early Detection as drop policy
service-policy Configure QoS Service Policy
shape Traffic Shaping
yem(config-pmap-c)#priority ?
<8-2000000> Kilo Bits per second
percent % of total bandwidth
test(config-pmap-c)#priority
This dosent allow to set the priority as high for meta application.
My network is FR. We have not configured traffic shaping in FR interface(serial).
Shape peak of 384000 is for metaframe class.
Is it possible to configure both priority and bandwidth for perticular class?
03-17-2005 05:14 AM
You can configure priority only for 1 class, and upto 63 bandwidth reservation for other classes. You cannot both config both priority and bw for the same class but setting priority has the same characteristic effect. For sample config, search for MQC on CCO.
03-29-2005 05:08 AM
Hi!
Priority is not recommended to be used rather than RTP packets, so keep it in your mind. RTP uses UDP between 16383-32767 and some TCP ports. So, in your application it is not something that is acceptable. To prioritise your preferred traffic, CBWFQ as you configure is to be, should be enough...
Baris.
03-29-2005 05:56 AM
LLQ is different than RTP priority. RTP priority is only for UDP traffic in the specified port range. LLQ can be used for any traffic type you want. CBWFQ (same as LLQ but lacks one priority class) does not actually give prioritization. It reserves the bandwidth for each different traffic classes. The implementation depends on what you want.
03-29-2005 06:44 AM
I agree with you, RTP priority priotises only the traffic between 16383-32767 UDP ports, let me better classify only the even numbered ports. As you have said that LLQ actually understands every port, it can be used for any type of traffic. As i have wanted to point out that LLQ's prioritisation is not RECOMMENDED to be used for other traffic rather than voice, video such real-time applications that do not bear with any delay on the link. The implementation depends on how you want to manage the traffic flowing through the link.
Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide