Hello,
We are running a simple VC traffic marking setup across multiple IOS routers of mixed hardware 2921, 2801, 3925 and 3945s.
Our aim was to simply mark packets from a particular VC source at each site and set the dscp to af31, for the ISP routers to then apply the relevant conditioning and prioritizing out on to the WAN.
However, we have come across an issue on one of the 3925 routers that seems to show packets hiiting the ACL but not getting marked:
RTR_US1#clear count show policy-map int g0/1
GigabitEthernet0/1
Service-policy output: ppq
queue stats for all priority classes:
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 2450/1743260
Class-map: video-conf (match-any)
2450 packets, 1743260 bytes
30 second offered rate 329000 bps, drop rate 0000 bps
Match: access-group 131
2450 packets, 1743260 bytes
30 second rate 329000 bps
QoS Set
dscp af31
Packets marked 0
Priority: 3072 kbps, burst bytes 76800, b/w exceed drops: 0
Class-map: class-default (match-any)
9585 packets, 5127166 bytes
30 second offered rate 969000 bps, drop rate 0000 bps
Match: any
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 9585/5127482
Our other 3925 at another site with a similar configuration works fine:
Rtr_UK1#show policy-map int gi0/1
GigabitEthernet0/1
Service-policy output: ppq
queue stats for all priority classes:
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 22223/15705754
Class-map: video-conf (match-any)
22223 packets, 15705754 bytes
30 second offered rate 974000 bps, drop rate 0 bps
Match: access-group 131
22223 packets, 15705754 bytes
30 second rate 974000 bps
QoS Set
dscp af31
Packets marked 22223
Priority: 3072 kbps, burst bytes 76800, b/w exceed drops: 0
Class-map: class-default (match-any)
62248 packets, 10682892 bytes
30 second offered rate 751000 bps, drop rate 0 bps
Match: any
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 62248/10685230
The configuration is identical with the exception of the source host defined in the ACL. The router at fault is configured with the following:
!
class-map match-any video-conf
match access-group 131
!
policy-map ppq
class video-conf
set dscp af31
priority 3072
!
access-list 131 permit ip host 10.234.200.41 any
!
interface GigabitEthernet0/1
description OUTSIDE to CE Router 801
ip address 192.xx.xx.xx 255.255.255.252
no ip unreachables
no ip proxy-arp
ip flow monitor NETFLOW1 input
ip flow monitor NETFLOW1 output
ip flow ingress
no ip mfib forwarding input
no ip mfib forwarding output
ip ospf hello-interval 1
load-interval 30
duplex full
speed 100
no cdp enable
crypto map getvpn-map
service-policy output ppq
!
The configuration for the working 3925 is as follows:
!
class-map match-any video-conf
match access-group 131
!
policy-map ppq
class video-conf
set dscp af31
priority 3072
!
access-list 131 permit ip host 10.82.40.20 any
!
interface GigabitEthernet0/1
description L3 to CE Router 1
ip address 10.xx.xx.xx 255.255.248
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mfib forwarding input
no ip mfib forwarding output
ip flow monitor NETFLOW1 input
ip flow monitor NETFLOW1 output
ip flow ingress
ip tcp adjust-mss 1360
ip ospf hello-interval 1
load-interval 30
duplex full
speed 100
no cdp enable
crypto map getvpn-map
service-policy output ppq
!
Any assistance in helping to understand why this is happening on a particualr device is appreciated.
Regards
