3850: Understanding interface configuration on NM modules

[dvag-nsafe]

Hi there,

i have an issue applying an policy-map to an interface. It doesn't give me an error though.

My policy is:

policy-map POLICY-S4B-USERPORT
 class CLASS-S4B-VOICE-USERPORT
  priority level 1 percent 5
  police cir percent 5 conform-action transmit  exceed-action drop
 class CLASS-S4B-VIDEO-USERPORT
  priority level 2 percent 10
  police cir percent 10 conform-action transmit  exceed-action drop
 class CLASS-S4B-APP-USERPORT
  police cir percent 5 pir percent 10
   conform-action transmit
  shape average percent 5
 class CLASS-S4B-SIGNALLING-USERPORT
  priority level 1 percent 1

I'm using object-groups for classifieng udp/tcp-traffic and also for IP-Address-filtering. Is this an issue with Switchports?

Here's me applying the PM:

sw-f-lab-c3850-1(config)#int TenGigabitEthernet1/0/48
sw-f-lab-c3850-1(config-if)#ser
sw-f-lab-c3850-1(config-if)#service-policy ou
sw-f-lab-c3850-1(config-if)#service-policy output POLICY-S4B-USERPORT
sw-f-lab-c3850-1(config-if)#end

sw-f-lab-c3850-1#sh policy-map interface

sw-f-lab-c3850-1#sh run int TenGigabitEthernet1/0/48
Building configuration...

Current configuration : 119 bytes
!
interface TenGigabitEthernet1/0/48
 description test_laptop1
 switchport access vlan 10
 spanning-tree portfast
end

sw-f-lab-c3850-1#

[Julio E. Moisa]

Hi

I have not used object-groups with ACLs in QoS but It should not be a problem as you are applying it to the ACL directly it will match only. Have you received any error message?

[dvag-nsafe]

Hi!

I was able to applie it, but it didn't show in the configuration. I tried the "all" option, but it still wasn't there. Seems like a bug, as other people seem to have the same issue (found multiple threads here in the forum). When i deleted the policies configuration and only applied the policy without any class-maps in it, it did show up and after that, i was able to apply the class-maps to that policy that was already applied to the interface. So this way it seems to work. But i should be easier.

[dvag-nsafe]

Hi Julio,

i'm still working on this. I have no object-groups anymore in my policy config, but still experience the same issue when trying to apply the policy to the interface:

policy-map POLICY-S4B-USERPORT-OUT
 class CLASS-S4B-VOICE
  priority level 1 percent 5
  police cir percent 5 conform-action transmit  exceed-action drop
 class CLASS-S4B-VIDEO
  priority level 2 percent 5
  police cir percent 5 conform-action transmit  exceed-action set-dscp-transmit cs3
 class CLASS-S4B-APP-SHARING
  bandwidth remaining percent 5
  police cir percent 5 conform-action transmit  exceed-action set-dscp-transmit default
 class CLASS-S4B-VOICE-SIGNALLING
  bandwidth remaining percent 1
 class class-default
  bandwidth remaining percent 94

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

sw-f-lab-c3850-2(config-pmap-c)#int Te1/0/48
sw-f-lab-c3850-2(config-if)#service-policy output POLICY-S4B-USERPORT-OUT
sw-f-lab-c3850-2(config-if)#do sh run int Te1/0/48
Building configuration...

Current configuration : 119 bytes
!
interface TenGigabitEthernet1/0/48
 description test_laptop2
 switchport access vlan 20
 spanning-tree portfast
end