Solved: Process 'set' action associated with class-map VOIP failed:

Andrew Schulz · ‎07-19-2011

I'm trying to set "service-policy output VOICE" to my FE0/0 interface and I continue to get the following error.

Process 'set' action associated with class-map VOIP failed: Set cos supported only with IEEE 802.1Q/ISL interfaces

Current configuration : 2737 bytes

!

version 12.4

no service pad

service tcp-keepalives-in

service tcp-keepalives-out

service timestamps debug datetime msec localtime show-timezone

service timestamps log datetime msec localtime show-timezone

service password-encryption

service sequence-numbers

!

hostname FIFE2801

!

boot-start-marker

warm-reboot

boot-end-marker

!

security authentication failure rate 3 log

security passwords min-length 6

logging buffered 4096 debugging

logging console critical

enable secret 5 $1$OsmI$mnA/0XdLqu8B3UCXSo4ex1

enable password 7 0701205A4B0C18161F1B130511

!

aaa new-model

!

aaa authentication login ciscoadmin group radius local

!

aaa session-id common

clock timezone PCTime -8

clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00

no ip source-route

ip cef

!

ip flow-cache timeout active 1

no ip bootp server

ip domain name piercecountylibrary.org

ip name-server 10.0.0.221

ip name-server 10.0.0.225

!

ip tcp synwait-time 10

!

class-map match-any VOIP

match access-group name VoiceTraffic

!

policy-map VOICE

class VOIP

bandwidth percent 50

set cos 5

class class-default

fair-queue

!

interface FastEthernet0/0

ip address 172.16.200.25 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

ip route-cache flow

speed 100

full-duplex

no mop enabled

!

interface FastEthernet0/1

no ip address

duplex auto

speed auto

!

interface FastEthernet0/1.1

description Data LAN

encapsulation dot1Q 1 native

ip address 10.0.25.101 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

no cdp enable

!

interface FastEthernet0/1.2

description Voice LAN

encapsulation dot1Q 2

ip address 10.0.125.101 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

no cdp enable

!

ip route 10.0.0.0 255.255.254.0 172.16.200.1

ip route 172.16.0.0 255.255.255.0 172.16.200.1

ip route 10.0.100.0 255.255.255.0 172.16.200.1

ip route 192.168.1.0 255.255.255.0 172.16.200.1

ip route 10.1.0.0 255.255.255.0 172.16.200.1

ip route 10.1.25.0 255.255.255.0 10.0.25.240

ip route 172.16.25.0 255.255.255.0 10.0.25.240

ip route 192.168.25.0 255.255.255.0 10.0.25.240

ip flow-export version 9

ip flow-export destination 10.0.0.5 9925

!

ip http server

ip http access-class 23

ip http timeout-policy idle 5 life 86400 requests 10000

!

ip access-list extended VoiceTraffic

permit ip 10.0.125.0 0.0.0.255 any

!

snmp-server community pacit RO

no cdp run

!

control-plane

!

line con 0

password 7 070D704B4C595D41

transport output telnet

line aux 0

transport output telnet

line vty 0 4

privilege level 15

password 7 13074615095C406E

login authentication ciscoadmin

transport input telnet

line vty 5 15

privilege level 15

password 7 111A4825071A2B1C1433

transport input telnet

!

scheduler allocate 20000 1000

ntp server 10.0.0.225

ntp server 10.0.0.221

end

Suggestions please.

Jon Marshall · ‎07-19-2011

Andrew

You need to get rid if the "set cos" within your policy map.

But if your ISP is expecting CoS settings then it sounds like you need to run a trunk on the outside interface. Sorry haven't setup VPLS before so can't be more specific.

Jon

View solution in original post

Jon Marshall · ‎07-19-2011

CoS markings are contained within an 802.1q tag. If the interface is running 802.1q such as fa0/1 in your config then you can set CoS but if it isn't then it makes no sense because there is no place to write the CoS value in the packet header.

So for non 802.1q interfaces you need to use either IP Precedence or DSCP markings.

Jon

Andrew Schulz · ‎07-19-2011

Thanks Jon,

I figured that was the case. Do I need to put the service-policy output VOICE on the WAN interface or can I put it on the LAN interface? My understanding is that it should be on the WAN or the ISP side of the router.

Jon Marshall · ‎07-19-2011

If you are trying to reserve bandwidth and set markings for the WAN then you need to apply it to the WAN interface. Generally speaking you would look to use DSCP markings when sending across a WAN.

Jon

Andrew Schulz · ‎07-19-2011

Thanks for the reply Jon. Yes, I am wanting to reserve bandwidth and set CoS marking on the WAN link. I am not familiar with how that configuration would work or how to write it. Would you mind a sample using my config above???

Also, this is to Comcast VPLS and they state that all packets must be marked with 802.1p CoS values. With that, I am unclear as to what needs to change in my config to get this working.

Andrew

Andrew Schulz · ‎07-19-2011

I setup my policy map with DSCP as follows:

policy-map VOICE

class VOIP

bandwidth percent 50

set cos 5

set dscp ef

class class-default

fair-queue

Then attempted to set the service-policy output VOICE to FE0/0 and I still get the error.

Jon Marshall · ‎07-19-2011

Andrew

You need to get rid if the "set cos" within your policy map.

But if your ISP is expecting CoS settings then it sounds like you need to run a trunk on the outside interface. Sorry haven't setup VPLS before so can't be more specific.

Jon

Andrew Schulz · ‎07-19-2011

Got it. Removing the set cos did the trick. Thanks.

As for the trunk on the WAN side, I have been advised by Comcast that it is not needed.

Thanks again for the assistance.