Policy-map & class-map help needed.

[Michael Durham]

I have a VPN between my home and office via a HughesNet G4 Internet connection. My most important connection is the VoIP phone. Right now I haee my phone using G729r8 codec and my download RTP stream is perfect!  However, my upload RTP stream ends up with paclets being stacked up.  If I use G711u coded, my upload packets stack up so bad that the person I am calling cannot even hear me.

I asked for help int the VoIP section of this forum and they suggested that I create a policy-map nad a class-map to priortize my RTP trafffic but no one seems to know how I should write thies mappings or on which interface to apply them.

Below is a diagram of my network and VPN connection.  I have a GRE Tunnel that connects me to my office network. I want the RTP traffic to get top priority and the maximum bandwadth of my Internet connection.  I do have access to hte cli on my work routers should I need to do any data shaping on that end too.  I can provide any config files that you may need.

I am still new to this stuff and willing to learn.  But since this is my office phone and I need to contact customers, I need a very quck solution; otherwise, I would do the research and figure this out myself.  I am very thankful for any help that you may be able to provide.

My IP phone is on the 192.168.3.0 network and the office CME VoIP router is on the 192.168.2.0 netowrk.  The GRE Tunnel is on the 172.30.1.0 netowrk.  My office edge router has a public static IP and my edge router has a dynamic public IP.

---Michael

[Simon Brooks]

Hi Michael.

I dont think you applied my class-maps correctly.

Can you show me a running config from the router excluding any public addresses and username/paswods?

Simon

[Michael Durham]

Its attached t the first post above,    Home CME router.txt.zip (2.7 K)

[Simon Brooks]

Thanks Micheal,  As mentioned previously, I think you have configured the class-maps wrong, it looks like you have configured the following;

class-map VOICE

match dscp ef

match dscp AF21

class-map class-default

Can you change to;

class-map VOICE

match dscp ef

class-map class-default

(leave out the AF21 section), I was looked at your COS-DSCP mapping on the switch and everything not EF should be classified as COS 0 by default.

Also can you change the tunnel mtu;

int tun0

ip mtu 1476

exit

Then send me a show policy-map int tun0

Simon

[paul driver]

Hello

(matches all voip payload)

access-list 100 permit udp any any range 16384 32767

access-list 100 permit tcp any any eq 1720

class-map match-all Qos-VOIP_child

match access-group 100

policy-map Qos-VOIP_child

class Qos-VOIP

  priority  xx

class class-default

fair queue

policy-map Qos-VOIP_parent

class class-default

shape average xxx (if applicable)

service-policy output Qos-VOIP_child

Where Do I Apply the Service Policy?

You  can apply a service policy to either the tunnel interface or to the        underlying physical interface. The decision of where to apply the policy        depends on the QoS objectives. It also depends on which header you  need to use       for classification.

• Apply the policy to the tunnel interface without           qos-preclassify when you want to classify packets           based on the pre-tunnel header.

• Apply the policy to the physical interface           without qos-preclassify when you want to classify           packets based on the post-tunnel header. In  addition, apply the policy to the           physical interface when you want to  shape or police all traffic belonging to a           tunnel, and the physical  interface supports several tunnels.

• Apply the policy to a physical interface and           enable qos-preclassify on a tunnel interface when           you want to classify packets based on the pre-tunnel header.

res

Paul

Please don't forget to rate any posts that have been helpful.

Thanks.

[Michael Durham]

Paul,

I was looking at your suggestion and I read that one somewhere.  My question, Since I want VoIP RTP to have the higest priority of ANY traffic going out to the Internet, I think I should apply the policy to the physical interface. But I am unsure about the commands to use and which one of the two recommendataions I should do. 

• Apply the policy to the physical interface           without qos-preclassify when you want to classify           packets based on the post-tunnel  header. In  addition, apply the policy to the           physical  interface when you want to  shape or police all traffic belonging to  a           tunnel, and the physical  interface supports several  tunnels.

OR

• Apply the policy to a physical interface and           enable qos-preclassify on a tunnel interface when           you want to classify packets based on the pre-tunnel header.

Would you also please show me the commands for this part too?  Do I use servce-policy out Qos-VOIP_parent? and apply it to my Gi0/0 interface? 

Here is my current tunnel config:

interface Tunnel0

bandwidth 20000

ip address 172.30.1.2 255.255.255.252

ip mtu 1410

ip nhrp map multicast 55.9.6.90

ip nhrp map 172.30.1.1 55.9.6.90

ip nhrp network-id 1

ip nhrp holdtime 300

ip nhrp nhs 172.30.1.1

ip nhrp registration timeout 20

ip tcp adjust-mss 1360

qos pre-classify

tunnel source GigabitEthernet0/0

tunnel destination 55.9.6.90

tunnel key 1

tunnel protection ipsec profile WA-FLA

service-policy output GRE_TUNNEL_TRAFFIC_PARENT

[paul driver]

Hello,

Try applying the parent policy to the source interface of the tunnel- outbound ( gig0/0)

int tun0

qos pre-classify

int gig0/0

service-policy output Qos-VOIP_parent

res

Paul

Please don't forget to rate any posts that have been helpful.

Thanks.

[Michael Durham]

Simon,

I removed the af21 but when I try to add class-map class-default I getthe following error:

    % class-default is a well-known class and is not configurable under class-map

I see the PDriver made a different suggestion than yours.  Should I add his to yours or replace yours with his?  Have not done anything with PDriver's suggestions yet.

Tunnel0

  Service-policy output: GRE_TUNNEL_TRAFFIC_PARENT

    Class-map: class-default (match-any)

      23650 packets, 2845062 bytes

      5 minute offered rate 26000 bps, drop rate 0 bps

      Match: any

      Queueing

      queue limit 64 packets

      (queue depth/total drops/no-buffer drops) 0/0/0

      (pkts output/bytes output) 23465/4681286

      shape (average) cir 100000000, bc 1000000, be 1000000

      target shape rate 100000000

      Service-policy : GRE_TUNNEL_TRAFFIC_CHILD

        queue stats for all priority classes:

          queue limit 64 packets

          (queue depth/total drops/no-buffer drops) 0/0/0

          (pkts output/bytes output) 5811/1754922

        Class-map: VOICE (match-all)

          5811 packets, 1324908 bytes

          5 minute offered rate 25000 bps, drop rate 0 bps

          Match:  dscp ef (46)

          Priority: 50% (50000 kbps), burst bytes 1250000, b/w exceed drops: 0

        Class-map: class-default (match-any)

          17839 packets, 1520154 bytes

          5 minute offered rate 0 bps, drop rate 0 bps

          Match: any

          Queueing

          queue limit 64 packets

          (queue depth/total drops/no-buffer drops) 0/0/0

          (pkts output/bytes output) 17654/2926364

          bandwidth 25% (25000 kbps)

I made a a 60 second phone call to a landline.  The audio was as bad as when I was using G711ulaw.  In other words, it got a lot worse. 

When i put the mtu back down to 1410 it came back as was before but still not usable.

Suggestions?

[Michael Durham]

The first two outputs are from the rotuers at the office side of  the tunnel, The third output is from my home edge router.  Rememver, I  am connected to my office's CME router for my phone service. These  outputs were taken after a 1 munite phone call over the tunner to a  landline.  The audio was very bad to the landline.

OFFICE CME ROUTER

GigabitEthernet0/0 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 001e.7a5d.8fa0 (bia 001e.7a5d.8fa0)
  Internet address is 55.9.6.91/29
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full Duplex, 1Gbps, media type is T
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:06, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 15000 bits/sec, 15 packets/sec
  5 minute output rate 15000 bits/sec, 14 packets/sec
     1299977 packets input, 268699417 bytes, 1 no buffer
     Received 70626 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 1 throttles
     10 input errors, 0 CRC, 0 frame, 0 overrun, 10 ignored
     0 watchdog, 0 multicast, 0 pause input
     1292677 packets output, 256958568 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     33 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
Service-Engine0/0 is up, line protocol is up
  Hardware is I82559FE, address is 001e.7a5d.8fa2 (bia 001e.7a5d.8fa2)
  Interface is unnumbered. Using address of GigabitEthernet0/1.2 (192.168.2.1)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:02, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     327885 packets input, 57548371 bytes, 0 no buffer
     Received 145 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 input packets with dribble condition detected
     770591 packets output, 112308153 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/1 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 001e.7a5d.8fa1 (bia 001e.7a5d.8fa1)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  1., loopback not set
  Keepalive set (10 sec)
  Full Duplex, 100Mbps, media type is T
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 15000 bits/sec, 15 packets/sec
  5 minute output rate 15000 bits/sec, 16 packets/sec
     3762297 packets input, 453784983 bytes, 0 no buffer
     Received 366698 broadcasts (264804 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     4463473 packets output, 499193175 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     224 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/1.2 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 001e.7a5d.8fa1 (bia 001e.7a5d.8fa1)
  Internet address is 192.168.2.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  2.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.10 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 001e.7a5d.8fa1 (bia 001e.7a5d.8fa1)
  Internet address is 192.168.10.5/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  10.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
NVI0 is up, line protocol is up
  Hardware is NVI
  Interface is unnumbered. Using address of GigabitEthernet0/0 (55.9.6.91)
  MTU 1514 bytes, BW 56 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation UNKNOWN, loopback not set
  Keepalive set (10 sec)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

OFFICE EDGE ROUTER

FastEthernet0/0 is up, line protocol is up
  Hardware is Gt96k FE, address is 0019.e792.17ae (bia 0019.e792.17ae)
  Internet address is 55.9.6.90/29
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, 100BaseTX/FX
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 34000 bits/sec, 28 packets/sec
  5 minute output rate 31000 bits/sec, 29 packets/sec
     6056624 packets input, 900738211 bytes
     Received 75191 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog
     0 input packets with dribble condition detected
     4840139 packets output, 1025607872 bytes, 0 underruns
     0 output errors, 0 collisions, 7 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
FastEthernet0/1 is up, line protocol is up
  Hardware is Gt96k FE, address is 0019.e792.17af (bia 0019.e792.17af)
  Internet address is 192.168.10.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, 100BaseTX/FX
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:03, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 28000 bits/sec, 29 packets/sec
  5 minute output rate 29000 bits/sec, 28 packets/sec
     4566399 packets input, 874388593 bytes
     Received 340544 broadcasts (264783 IP multicasts)
     0 runts, 0 giants, 0 throttles
     1 input errors, 0 CRC, 0 frame, 0 overrun, 1 ignored
     0 watchdog
     0 input packets with dribble condition detected
     5955439 packets output, 739508274 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     227 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out
NVI0 is up, line protocol is up
  Hardware is NVI
  Interface is unnumbered. Using address of FastEthernet0/0 (55.9.6.90)
  MTU 1514 bytes, BW 56 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation UNKNOWN, loopback not set
  Keepalive set (10 sec)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
Tunnel0 is up, line protocol is up
  Hardware is Tunnel
  Internet address is 172.30.1.1/30
  MTU 17912 bytes, BW 20000 Kbit/sec, DLY 50000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation TUNNEL, loopback not set
  Keepalive not set
  Tunnel source 55.9.6.90 (FastEthernet0/0)
   Tunnel Subblocks:
      src-track:
         Tunnel0 source tracking subblock associated with FastEthernet0/0
          Set of tunnels with source FastEthernet0/0, 1 member (includes iterators), on interface
  Tunnel protocol/transport multi-GRE/IP
    Key 0x1, sequencing disabled
    Checksumming of packets disabled
  Tunnel TTL 255, Fast tunneling enabled
  Tunnel transport MTU 1472 bytes
  Tunnel transmit bandwidth 8000 (kbps)
  Tunnel receive bandwidth 8000 (kbps)
  Tunnel protection via IPSec (profile "FLA-WA")
  Last input 00:00:00, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 38
  Queueing strategy: fifo
  Output queue: 0/0 (size/max)
  5 minute input rate 24000 bits/sec, 27 packets/sec
  5 minute output rate 29000 bits/sec, 28 packets/sec
     1441556 packets input, 108499847 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     1462878 packets output, 216434793 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

CME HOME ROUTER

GigabitEthernet0/0 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1340 (bia 0021.5527.1340)
  Description: Router - C3524 Port Fa0/23 192.168.70.1
  Internet address is 110.7.8.138/29
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full Duplex, 100Mbps, media type is T
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:04, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: Class-based queueing
  Output queue: 0/1000/0 (size/max total/drops)
  5 minute input rate 180000 bits/sec, 59 packets/sec
  5 minute output rate 46000 bits/sec, 48 packets/sec
     64355787 packets input, 3006359974 bytes, 0 no buffer
     Received 27017 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     4 input errors, 0 CRC, 4 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     37841765 packets output, 3234187634 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     68 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/0.69 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1340 (bia 0021.5527.1340)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Description: Router - C3524 Port Fa0/20 Trunk
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  1., loopback not set
  Keepalive set (10 sec)
  Full Duplex, 100Mbps, media type is T
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 122000 bits/sec, 109 packets/sec
  5 minute output rate 172000 bits/sec, 73 packets/sec
     197513221 packets input, 59869928 bytes, 0 no buffer
     Received 5112545 broadcasts (127399298 IP multicasts)
     1 runts, 0 giants, 0 throttles
     3 input errors, 1 CRC, 0 frame, 0 overrun, 1 ignored
     0 watchdog, 0 multicast, 0 pause input
     94663333 packets output, 1976937090 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/1.3 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 192.168.3.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  3.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.30 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.69 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 192.168.69.3/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  69.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.100 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.110 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 10.110.0.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  110.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.115 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 10.115.0.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  115.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.125 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
NVI0 is up, line protocol is up
  Hardware is NVI
  Interface is unnumbered. Using address of GigabitEthernet0/0 (110.7.8.138)
  MTU 1514 bytes, BW 56 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation UNKNOWN, loopback not set
  Keepalive set (10 sec)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
Tunnel0 is up, line protocol is up
  Hardware is Tunnel
  Internet address is 172.30.1.2/30
  MTU 17850 bytes, BW 20000 Kbit/sec, DLY 50000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation TUNNEL, loopback not set
  Keepalive not set
  Tunnel source 110.7.8.138 (GigabitEthernet0/0), destination 55.9.6.90
   Tunnel Subblocks:
      src-track:
         Tunnel0 source tracking subblock associated with GigabitEthernet0/0
          Set of tunnels with source GigabitEthernet0/0, 1 member (includes iterators), on interface
  Tunnel protocol/transport GRE/IP
    Key 0x1, sequencing disabled
    Checksumming of packets disabled
  Tunnel TTL 255, Fast tunneling enabled
  Tunnel transport MTU 1410 bytes
  Tunnel transmit bandwidth 8000 (kbps)
  Tunnel receive bandwidth 8000 (kbps)
  Tunnel protection via IPSec (profile "WA-FLA")
  Last input 00:00:04, output 3w5d, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 40057
  Queueing strategy: fifo (QOS pre-classification)
  Output queue: 0/0 (size/max)
  5 minute input rate 24000 bits/sec, 37 packets/sec
  5 minute output rate 37000 bits/sec, 37 packets/sec
     3311406 packets input, 245796282 bytes, 0 no buffer
     Received 0 broadcasts (6 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     3328442 packets output, 488073528 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

[Simon Brooks]

Hi Michael,

Okay we are now matching EF fine and I don't see any drops, can you clear interface counters then make a call.  Then hang up and send me a show int tun0

QOS is looking good mate, you could increase the allowed priority of the interface % to 99 for a test if you wish!

policy-map GRE_TUNNEL_TRAFFIC_CHILD
class VOICE
priority percent 99

Then try your call, if you still get bad call then the only thing left is to sort out the round trip time of 700ms, it needs to be below 150ms for one way (300ms in total)

Thanks

Simon

[Michael Durham]

I made the change above but I had to remove the class class-defualt bandwidth percent 25.  Then I made a 1 minute call.  Netxt I streamed some music and made another call for 1 minute.  The music never quit playing.  Results below.  

After the results below, I set the class VOICE priority to 1 and the class class-default to 99 and the calls still had issues.  I would think that the music would nearly quit if 99% of the bandwidth was going to the Voice packets????

GigabitEthernet0/0 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1340 (bia 0021.5527.1340)
  Description: Router - C3524 Port Fa0/23 192.168.70.1
  Internet address is 110.7.8.138/29
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full Duplex, 100Mbps, media type is T
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:02, output 00:00:00, output hang never
  Last clearing of "show interface" counters 00:03:05
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: Class-based queueing
  Output queue: 0/1000/0 (size/max total/drops)
  5 minute input rate 150000 bits/sec, 47 packets/sec
  5 minute output rate 34000 bits/sec, 35 packets/sec
     9651 packets input, 3505828 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     8319 packets output, 1269296 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/0.69 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1340 (bia 0021.5527.1340)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Description: Router - C3524 Port Fa0/20 Trunk
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  1., loopback not set
  Keepalive set (10 sec)
  Full Duplex, 100Mbps, media type is T
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters 00:03:05
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 115000 bits/sec, 93 packets/sec
  5 minute output rate 151000 bits/sec, 56 packets/sec
     19080 packets input, 2753556 bytes, 0 no buffer
     Received 376 broadcasts (8575 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     11689 packets output, 3094919 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/1.3 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 192.168.3.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  3.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.30 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.69 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 192.168.69.3/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  69.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.100 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.110 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 10.110.0.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  110.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.115 is up, line protocol is up
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  Internet address is 10.115.0.1/24
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation 802.1Q Virtual LAN, Vlan ID  115.
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
GigabitEthernet0/1.125 is deleted, line protocol is down
  Hardware is MV96340 Ethernet, address is 0021.5527.1341 (bia 0021.5527.1341)
  MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  ARP type: ARPA, ARP Timeout 04:00:00
  Keepalive set (10 sec)
  Last clearing of "show interface" counters never
NVI0 is up, line protocol is up
  Hardware is NVI
  Interface is unnumbered. Using address of GigabitEthernet0/0 (110.7.8.138)
  MTU 1514 bytes, BW 56 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation UNKNOWN, loopback not set
  Keepalive set (10 sec)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:03:05
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
Tunnel0 is up, line protocol is up
  Hardware is Tunnel
  Internet address is 172.30.1.2/30
  MTU 17850 bytes, BW 20000 Kbit/sec, DLY 50000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation TUNNEL, loopback not set
  Keepalive not set
  Tunnel source 110.7.8.138 (GigabitEthernet0/0), destination 55.9.6.90
   Tunnel Subblocks:
      src-track:
         Tunnel0 source tracking subblock associated with GigabitEthernet0/0
          Set of tunnels with source GigabitEthernet0/0, 1 member (includes iterators), on interface
  Tunnel protocol/transport GRE/IP
    Key 0x1, sequencing disabled
    Checksumming of packets disabled
  Tunnel TTL 255, Fast tunneling enabled
  Tunnel transport MTU 1410 bytes
  Tunnel transmit bandwidth 8000 (kbps)
  Tunnel receive bandwidth 8000 (kbps)
  Tunnel protection via IPSec (profile "WA-FLA")
  Last input 00:00:00, output 3w6d, output hang never
  Last clearing of "show interface" counters 00:03:05
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo (QOS pre-classification)
  Output queue: 0/0 (size/max)
  5 minute input rate 23000 bits/sec, 25 packets/sec
  5 minute output rate 25000 bits/sec, 25 packets/sec
     6903 packets input, 418348 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     6838 packets output, 1036616 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

[Simon Brooks]

Thanks, from the above you have no queue drops which seems to signify that your QOS is now working as expected,  However I guess your call was still bad, the next step is to find out how much delay and jitter you have while on a call.

When on a call can you press the ? button twice, this should give you all the statisctics, you are looking for as close to 0 jitter as possible and a MOS of 3.92 for G729.

Also as little latency as possible.

Also please share another show policy-map int tun0

We may now be at a stage where there is nothing more we can do, we have prioritised all your voice traffic as much as possible and if the overall latency of the link is too high then you might need to look into other connections.

Please change your MTU back to 1476, it should be 24 bytes smaller than the physical interface MTU to account for 24 bytes of GRE header.

Simon

[Michael Durham]

Phone Stats:

Rec/Send Codec: G.729

Rec/Send Size:20ms

Rec Packets: 2768

Sebder Packets: 2771

Ave Jitter: 29

Max Jitter: 75

Recr Discarded: 1

Revr Lost Packets 1

MOS LQK: 3.7001

Aveg MOS LQK: 3.6970

Min MOS LQK: 3.5612

MAx MOS LQK: 3.7001

MOS LQK Version: 0.95

Cumulative Conceal Ration: 0.0013

Interval Conceal Ratio: 0.0000

Max Conceal Ratio:0.0328

Conceal Secs: 2

Serverly Conceal Secs:1

Network Protocol:

Tunnel0

  Service-policy output: GRE_TUNNEL_TRAFFIC_PARENT

    Class-map: class-default (match-any)

      13413 packets, 1175867 bytes

      5 minute offered rate 0 bps, drop rate 0 bps

      Match: any

      Queueing

      queue limit 64 packets

      (queue depth/total drops/no-buffer drops) 0/0/0

      (pkts output/bytes output) 13415/2227258

      shape (average) cir 100000000, bc 1000000, be 1000000

      target shape rate 100000000

      Service-policy : GRE_TUNNEL_TRAFFIC_CHILD

        queue stats for all priority classes:

          queue limit 64 packets

          (queue depth/total drops/no-buffer drops) 0/0/0

          (pkts output/bytes output) 12428/2063048

        Class-map: VOICE (match-all)

          12428 packets, 1093664 bytes

          5 minute offered rate 0 bps, drop rate 0 bps

          Match:  dscp ef (46)

          Priority: 1% (1000 kbps), burst bytes 25000, b/w exceed drops: 0

        Class-map: class-default (match-any)

          985 packets, 82203 bytes

          5 minute offered rate 0 bps, drop rate 0 bps

          Match: any

          Queueing

          queue limit 64 packets

          (queue depth/total drops/no-buffer drops) 0/0/0

          (pkts output/bytes output) 985/163878

          bandwidth 99% (99000 kbps)

[Simon Brooks]

Thanks Michael,

Please change the percentages back around as you are only giving voice 1% max bandwidth at times of congestion and 99% to everything else.

Also, your jitter is quite high, but that could just be related to the delay across the link of 700ms.

Simon

[Michael Durham]

Swtiched them back to :

class VOICE

  priority percent 99

class class-default

  bandwidth percent 1

Still crappy audio.  One question, in Paul's config above he uses fair-queue, would that make any difference?

[Simon Brooks]

fair-queue in the class-default policy only applies to conversations.  It applies express forwarding to the 'small talkers' compared to big talkers.  However as this is only part of your class-default, it will not have any affect on the voice class.

At the moment, we are guaranteeing Voice traffic 99% of the available bandwidth should congestion occur. 

The interface stats you gave me show that we are no longer dropping packets on the queues on the interfaces;

Total output drops: 0

and the policy-map shows us also that the queues are no longer dropping traffic.

To be honest I think we've done everything we can do to prioritise VOIP traffic across the network.

Remember the primary reason for using QOS is a bandaid to assist with congestion and packet drops.  If the bandwidth is too little or the delay is too much on a link then the only possible remediation task is to change the physical characteristics of the network (hence look into cable lines rather than wireless links).

Are you the host of the wireless link or is this provided by an ISP, have you spoken to the ISP to see if there is any issues with the link?  Are you still getting +700msec response times from the head office?

Simon