cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
402
Views
0
Helpful
2
Replies

class-map not works, Packets not tagging

taimoor khan
Level 1
Level 1

Hey Guys,

I have define policy maping and dont know why its not tagging the IPs;

 

class-map match-all KHAN
 match access-group name ABC
 match input-interface GigabitEthernet0/1

 

ip access-list extended ABC
 permit ip host 10.11.201.20 10.11.207.128 0.0.0.127
 permit ip host 10.11.201.19 10.11.207.128 0.0.0.127

 

policy-map TAIM
 class voice
    priority percent 50
  set dscp ef
 class KHAN
    priority percent 49
  set dscp af41

 

interface Multilink1

service-policy output TAIM

 

 

 

When I check the IPs on netflow it is showing half packets are tagged with af41 anf half are default. 

Any idea will be appreciated. 

Thanks

 

show policy map interface result

 

    Class-map: TAIM (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: access-group name ABC
      Match: input-interface GigabitEthernet0/1
      Priority: 49% (3763 kbps), burst bytes 94050, b/w exceed drops: 0

      QoS Set
        dscp af41
          Packets marked 0

 

 

 

 

 

 

 

 

2 Replies 2

The problem is the way you are matching the packets:

Here it shows that there are 0 packets marked and 0 packets matched:

 Class-map: TAIM (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: access-group name ABC
      Match: input-interface GigabitEthernet0/1
      Priority: 49% (3763 kbps), burst bytes 94050, b/w exceed drops: 0

      QoS Set
        dscp af41
          Packets marked 0

 

When you define this:

class-map match-all KHAN
 match access-group name ABC
 match input-interface GigabitEthernet0/1

 

You are telling the router to match both conditions of ACL ABC and Interface input Gi0/1... most likely what happens here is that the class map does not match both condtions here.

Depending on what you need to accomplish, you can change it to be ANY:

class-map match-any KHAN
 match access-group name ABC
 match input-interface GigabitEthernet0/1

 

This way it will work if it matches either the first condition ACL ABC or second condition input Gi0/1.

Or you can just remove the input statement for Gi0/1 and match by the IPs only:

class-map match-all KHAN
 match access-group name ABC
 

Thanks for reply Ruggero,  as per my little knowledge on class-map; Match-all will match both ACL and Gig 0/1 interface, which I think I have configured already.

If I use match-any it wont be a good idea as I need both Gig 0/1 and ACL thats why I use Match-all. what do you think ?

 

Should I apply  "service-policy output TAIM" onto Gig0/1 interface instead of Multilink 1. 

 

Thanks

Review Cisco Networking for a $25 gift card