QoS MQC - Service-policy on a class doesn't tag the TOS field IP within DSCP.

[Erico Verissimo]

Hi,

I am experiencing a problem with my QoS configuration. I have a class that I need to limit the bandwidth, but this class should be prioritized. Check out below:

policy-map proxy_lbio - It needs limitation and tag the tos filed for prioritization. 
class proxy_lbio
police 256000 conform-action set-dscp-transmit af21 exceed-action set-dscp-transmit 0 violate-action set-dscp-transmit 0

I put this class on the another class as below:

class DCL
bandwidth percent 30
random-detect dscp-based
set dscp af21
service-policy proxy_lbio

When I do the command #sh policy-map interface the service policy doesn't show the packets relative the class proxy_lbio.

Service-policy : proxy_lbio

Class-map: proxy_lbio (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group name proxy_lbio_acl
0 packets, 0 bytes
30 second rate 0 bps
police:
cir 256000 bps, bc 8000 bytes, be 8000 bytes
conformed 0 packets, 0 bytes; actions:
set-dscp-transmit af21
exceeded 0 packets, 0 bytes; actions:
set-dscp-transmit default
violated 0 packets, 0 bytes; actions:
set-dscp-transmit default
conformed 0 bps, exceed 0 bps, violate 0 bps

Following the entire configuration:

class-map match-any proxy_lbio
match access-group name proxy_lbio_acl
class-map match-any DCA
match access-group name citrix_acl
match access-group name gerimp_acl
match access-group name oam_acl
match access-group name lbio_acl
match access-group name svoip_acl
class-map match-any DCL
match access-group name worklist_acl
match access-group name ris_acl
match access-group name rec_voz_acl
class-map match-any REAL_TIME
match access-group name voip_acl
!
!
policy-map proxy_lbio
class proxy_lbio
police 256000 conform-action set-dscp-transmit af21 exceed-action set-dscp-transmit 0 violate-action set-dscp-transmit 0
policy-map canoas_qos
class DCA
bandwidth percent 40
random-detect dscp-based
set ip dscp af41
class DCL
bandwidth percent 30
random-detect dscp-based
set dscp af21
service-policy proxy_lbio
class REAL_TIME
priority percent 10
set ip dscp ef
class class-default
set ip dscp default
fair-queue
random-detect dscp-based
policy-map shape_canoas_qos_512Kbps
class class-default
shape average 512000
service-policy canoas_qos

Thanks for any help!

[Richard Bradfield]

can you post the whole of "sh policy map interface",are you getting any hits on class DCL?

also in the class DCL under the policy map the command should be "set ip dsp af21"

also if this is applied on the "policy-map shape_canoas_qos_512Kbps" you are only allowing 512K anyway and class DCL sets to bandwidth of 30% so would only be 153K so never hits the 256k anyway. 

[Erico Verissimo]

Hi Richard,

I hope you are doing very well and thanks for your response.

I did some changes in the configuration, following your advice. Check out below:

class-map match-any proxy_lbio
match access-group name proxy_lbio_acl
class-map match-any DCA
match access-group name citrix_acl
match access-group name gerimp_acl
match access-group name oam_acl
match access-group name lbio_acl
match access-group name svoip_acl
class-map match-any DCL
match access-group name worklist_acl
match access-group name ris_acl
match access-group name rec_voz_acl
class-map match-any REAL_TIME
match access-group name voip_acl
!
!
policy-map proxy_lbio
class proxy_lbio
police 100000 conform-action set-dscp-transmit af21 exceed-action set-dscp-transmit 0 violate-action set-dscp-transmit 0
policy-map canoas_qos
class DCA
bandwidth percent 40
random-detect dscp-based
set ip dscp af41
class DCL
bandwidth percent 15
random-detect dscp-based
set ip dscp af21
service-policy proxy_lbio
class REAL_TIME
priority percent 10
set ip dscp ef
class class-default
set ip dscp default
fair-queue
random-detect dscp-based
policy-map shape_canoas_qos_512Kbps
class class-default
shape average 512000
service-policy canoas_qos

Command "sh policy map interface".

wei-rt01-canoas#sh policy-map interface
Serial0/1/0.100

Service-policy output: shape_canoas_qos_512Kbps

Class-map: class-default (match-any)
207198 packets, 21910464 bytes
30 second offered rate 69000 bps, drop rate 0 bps
Match: any
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 207728/22505312
shape (average) cir 512000, bc 2048, be 2048
target shape rate 512000
lower bound cir 0, adapt to fecn 0

Service-policy : canoas_qos

queue stats for all priority classes:

queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 0/0

Class-map: DCA (match-any)
145602 packets, 8245337 bytes
30 second offered rate 35000 bps, drop rate 0 bps
Match: access-group name citrix_acl
138987 packets, 7621822 bytes
30 second rate 33000 bps
Match: access-group name gerimp_acl
3801 packets, 167692 bytes
30 second rate 0 bps
Match: access-group name oam_acl
1280 packets, 142461 bytes
30 second rate 0 bps
Match: access-group name lbio_acl
379 packets, 134027 bytes
30 second rate 0 bps
Match: access-group name svoip_acl
1155 packets, 179335 bytes
30 second rate 0 bps
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 145602/8250117
bandwidth 40% (204 kbps)
Exp-weight-constant: 9 (1/512)
Mean queue depth: 0 packets
dscp Transmitted Random drop Tail drop Minimum Maximum Mark
pkts/bytes pkts/bytes pkts/bytes thresh thresh prob

af41 145603/8250174 0/0 0/0 32 40 1/10
QoS Set
dscp af41
Packets marked 145603

Class-map: DCL (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group name worklist_acl
0 packets, 0 bytes
30 second rate 0 bps
Match: access-group name ris_acl
0 packets, 0 bytes
30 second rate 0 bps
Match: access-group name rec_voz_acl
0 packets, 0 bytes
30 second rate 0 bps
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 0/0
bandwidth 15% (76 kbps)
Exp-weight-constant: 9 (1/512)
Mean queue depth: 0 packets
dscp Transmitted Random drop Tail drop Minimum Maximum Mark
pkts/bytes pkts/bytes pkts/bytes thresh thresh prob

QoS Set
dscp af21
Packets marked 0

Service-policy : proxy_lbio

Class-map: proxy_lbio (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group name proxy_lbio_acl
0 packets, 0 bytes
30 second rate 0 bps
police:
cir 100000 bps, bc 3125 bytes, be 3125 bytes
conformed 0 packets, 0 bytes; actions:
set-dscp-transmit af21
exceeded 0 packets, 0 bytes; actions:
set-dscp-transmit default
violated 0 packets, 0 bytes; actions:
set-dscp-transmit default
conformed 0 bps, exceed 0 bps, violate 0 bps

Class-map: class-default (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: any

Class-map: REAL_TIME (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group name voip_acl
0 packets, 0 bytes
30 second rate 0 bps
Priority: 10% (51 kbps), burst bytes 1500, b/w exceed drops: 0

QoS Set
dscp ef
Packets marked 0

Class-map: class-default (match-any)
61590 packets, 13663585 bytes
30 second offered rate 34000 bps, drop rate 0 bps
Match: any
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0
(pkts output/bytes output) 62126/14255195
QoS Set
dscp default
Packets marked 61549
Fair-queue: per-flow queue limit 16
Exp-weight-constant: 9 (1/512)
Mean queue depth: 0 packets
dscp Transmitted Random drop Tail/Flow drop Minimum Maximum Mark
pkts/bytes pkts/bytes pkts/bytes thresh thresh prob

default 62126/14255195 0/0 0/0 20 40 1/10

Thanks!

[Richard Bradfield · Accepted solution]

ok thanks for the information.

You are  not getting any hits on the class map DCL Can you check your worklist_acl,ris_acl and rec_voz_acl for correct configuration

[Erico Verissimo]

The problem was in my class-map DCL, like you said before. I put the proxy_lbio_acl on the DCL class-map and works. check out:

class-map match-any proxy_lbio
match access-group name proxy_lbio_acl

class-map match-any DCL
match access-group name proxy_lbio_acl

Class-map: DCL (match-any)
14588 packets, 3841094 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group name proxy_lbio_acl
14588 packets, 3841094 bytes
30 second rate 0 bps

Service-policy : proxy_lbio

Class-map: proxy_lbio (match-any)
14588 packets, 3841094 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group name proxy_lbio_acl
14588 packets, 3841094 bytes
30 second rate 0 bps
police:
cir 100000 bps, bc 3125 bytes, be 3125 bytes
conformed 13586 packets, 2582900 bytes; actions:
set-dscp-transmit af21
exceeded 323 packets, 362061 bytes; actions:
set-dscp-transmit default
violated 679 packets, 896133 bytes; actions:
set-dscp-transmit default
conformed 0 bps, exceed 0 bps, violate 0 bps

Thanks.