class-map and policy-map question - Page 2

hugh2_nguyen · ‎10-08-2009

Hi,

I'm using Cisco 3825 router and trying to set reserved bandwidth for different priority ingress traffic from different interface. I have high priority traffic comming into interface fa2/14 at rate ~1Mbps and low priority traffic comming into interface g2/0 at rate ~7Mbps. I configured the following classes and policy-map to reverse 2Mbps for Fa2/14 and 7Mbps for G2/0 over the congested Ethernet port fa2/0 (i.e. Tunnel0), which is the output Ethernet interface to the WAN:

class-map match-any high

match input-interface FastEthernet2/14

class-map match-any low

match input-interface GigabitEthernet2/0

!

policy-map TRAFFIC

class high

bandwidth 2000

class low

bandwidth 7000

policy-map FQ

class class-default

fair-queue

!

interface Tunnel0

bandwidth 10000

ip address 10.1.1.1 255.255.255.0

load-interval 30

ipv6 enable

ospfv3 instance 64 network manet

ospfv3 1 area 0 address-family ipv4 instance 64

tunnel source FastEthernet2/0

tunnel destination 142.x.x.10

!

interface FastEthernet2/0

no switchport

bandwidth 10000

ip address 192.x.x.10 255.255.255.0

load-interval 30

service-policy output TRAFFIC

!

The class-map and policy-map don't seem to work. The "show policy-map int f2/0" showed that int f2/0 is still running on class-default:

Router6-w-AXP#show policy-map int f2/0

FastEthernet2/0

Service-policy output: TRAFFIC

Class-map: high (match-any)

0 packets, 0 bytes

30 second offered rate 0 bps, drop rate 0 bps

Match: input-interface FastEthernet2/14

0 packets, 0 bytes

30 second rate 0 bps

Queueing

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 0/0

bandwidth 2000 kbps

Class-map: low (match-any)

0 packets, 0 bytes

30 second offered rate 0 bps, drop rate 0 bps

Match: input-interface GigabitEthernet2/0

0 packets, 0 bytes

30 second rate 0 bps

Queueing

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 0/0

bandwidth 7000 kbps

Class-map: class-default (match-any)

11971181 packets, 8583659812 bytes

30 second offered rate 10602000 bps, drop rate 0 bps

Match: any

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 3165/620740

Would you please give me some advice on a proper way to configure reserved bandwidth over the congested tunnel. Attached are running-config file and show policy-map data.

Thanks!

Hugh

hugh2_nguyen · ‎10-12-2009

Joe,

"police" seemed to work for my situation. I was able to keep class low not to exceed 8Mbps. Here the policy-map and show data:

!

class-map match-any high

match dscp 2

class-map match-any low

match dscp 1

!

policy-map high

class class-default

set dscp 2

policy-map TRAFFIC

class high

bandwidth 2000

class low

police rate 8000000 bps

conform-action transmit

exceed-action drop

policy-map low

class class-default

set dscp 1

!

Router6-w-AXP#sh policy-map int f2/0

FastEthernet2/0

Service-policy output: TRAFFIC

Class-map: high (match-any)

780244 packets, 561761736 bytes

30 second offered rate 1164000 bps, drop rate 0 bps

Match: dscp 2

780244 packets, 561761736 bytes

30 second rate 1164000 bps

Queueing

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 0/0

bandwidth 2000 kbps

Class-map: low (match-any)

706010 packets, 508024908 bytes

30 second offered rate 9514000 bps, drop rate 1568000 bps

Match: dscp 1

706010 packets, 508024908 bytes

30 second rate 9514000 bps

police:

rate 8000000 bps, burst 250000 bytes, peak-burst 1500 bytes

conformed 631608 packets, 433410268 bytes; actions:

transmit

exceeded 74368 packets, 74611308 bytes; actions:

drop

violated 0 packets, 0 bytes; actions:

drop

conformed 7946000 bps, exceed 1568000 bps, violate 0 bps

Class-map: class-default (match-any)

323 packets, 58720 bytes

30 second offered rate 0 bps, drop rate 0 bps

Match: any

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 231/46268

Router6-w-AXP#

Joseph W. Doherty · ‎10-12-2009

Policier works but shaper doesn't?! What IOS are you running?

Also rather interesting that your one set of stats show 10+ Mbps on an 10 Mbps Ethernet.(?)

"The router wouldn't accept command "set dscp be": "

Just use a value of zero.

hugh2_nguyen · ‎10-13-2009

I'm running IOS 12.4(24)GC1. I think there's 1024 bits per 1Mb perhaps 10Mbps equal 10240000 bits !!??

I'll try shaper again but I really don't want class low bursts above 8Mbps which shaper usually allows.

Joseph W. Doherty · ‎10-13-2009

I've not worked with that IOS variant. Shaper should also restrict rate, if it doesn't, perhaps an issue within that IOS variant.