QOS on 3560 switch and 2811 router

[kai_koa01]

Dear Expert ,what can I done on my router QoS. I’m just a student and I need help from an expert. I read through the SRND covers for the switch and I apply the same configure on my switch. I need here to apply the qos on the router but I don’t know what is next, I don’t want to do an auto qos cause I need to learn more about qos. Hope there will be someone to help me out. 

[ashok_boin]

Hello,

Sorry. Your question is not clear. Can you please be specific what you need?

Ashok.

[kai_koa01]

i have apply the qos on the switch but i need to apply a qos on the HQ to allow voice to be priorities through the serial link interface.

here is what i apply on my switch.

config t
!
hostname S1
!
!
!
!
mls qos map policed-dscp 0 10 18 to 8
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue input bandwidth 70 30
mls qos srr-queue input threshold 1 80 90
mls qos srr-queue input priority-queue 2 bandwidth 30
mls qos srr-queue input cos-map queue 1 threshold 2 3
mls qos srr-queue input cos-map queue 1 threshold 3 6 7
mls qos srr-queue input cos-map queue 2 threshold 1 4
mls qos srr-queue input dscp-map queue 1 threshold 2 24
mls qos srr-queue input dscp-map queue 1 threshold 3 48 56
mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 0
mls qos srr-queue output cos-map queue 4 threshold 3 1
mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46
mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34
mls qos srr-queue output dscp-map queue 2 threshold 1 36 38
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 56
mls qos srr-queue output dscp-map queue 3 threshold 3 0
mls qos srr-queue output dscp-map queue 4 threshold 1 8
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
mls qos queue-set output 1 threshold 1 100 100 100 100
mls qos queue-set output 1 threshold 2 80 90 100 400
mls qos queue-set output 1 threshold 3 100 100 100 400
mls qos queue-set output 1 threshold 4 60 100 100 400
mls qos queue-set output 1 buffers 15 30 35 20
mls qos
!
!
!
!
!
!
!
class-map match-all BULK-DATA
match access-group name BULK-DATA
class-map match-all VVLAN-SIGNALING
match ip dscp cs3
class-map match-all MULTIMEDIA-CONFERENCING
match access-group name MULTIMEDIA-CONFERENCING
class-map match-all DEFAULT
match access-group name DEFAULT
class-map match-all SCAVENGER
match access-group name SCAVENGER
class-map match-all SIGNALING
match access-group name SIGNALING
class-map match-all VVLAN-VOIP
match ip dscp ef
class-map match-all TRANSACTIONAL-DATA
match access-group name TRANSACTIONAL-DATA
!
!
policy-map PER-PORT-POLICING
class VVLAN-VOIP
set dscp ef
police 128000 8000 exceed-action drop
class VVLAN-SIGNALING
set dscp cs3
police 32000 8000 exceed-action drop
class MULTIMEDIA-CONFERENCING
set dscp af41
police 5000000 8000 exceed-action drop
class SIGNALING
set dscp cs3
police 32000 8000 exceed-action drop
class TRANSACTIONAL-DATA
set dscp af21
police 10000000 8000 exceed-action policed-dscp-transmit
class BULK-DATA
set dscp af11
police 10000000 8000 exceed-action policed-dscp-transmit
class SCAVENGER
set dscp cs1
police 10000000 8000 exceed-action drop
class DEFAULT
set dscp default
police 10000000 8000 exceed-action policed-dscp-transmit
!
!
!
!
!
!
int f0/1
switchport trunk encapsulation dot1q
switchport mode trunk

vlan 10
name VOICE
vlan 20
name DATA
vlan 99
name MANAGEMENT
vlan 666
name NATIVE
vlan 99
name MANAGEMENT
vlan 999
name PARKING_LOT
exit
int vlan 99
ip add 10.10.99.99 255.255.255.0
no sh

int range f0/2-24
switchport mode access
switchport access vlan 20
switchport voice vlan 10

!
interface FastEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
srr-queue bandwidth share 1 30 35 5
priority-queue out
no sh
!

interface FastEthernet0/11
switchport access vlan 20
switchport mode access
switchport voice vlan 10
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
service-policy input PER-PORT-POLICING
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
switchport voice vlan 10
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
service-policy input PER-PORT-POLICING
!

interface FastEthernet0/24
switchport access vlan 20
switchport mode access
switchport voice vlan 10
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
service-policy input PER-PORT-POLICING
!
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 999
sh

!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 999
sh
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.10.99.99 255.255.255.0
exit
!

!
ip access-list extended BULK-DATA
remark FTP
permit tcp any any eq ftp
permit tcp any any eq ftp-data
remark SSH/SFTP
permit tcp any any eq 22
remark SMTP/SECURE SMTP
permit tcp any any eq smtp
permit tcp any any eq 465
remark IMAP/SECURE IMAP
permit tcp any any eq 143
permit tcp any any eq 993
remark POP3/SECURE POP3
permit tcp any any eq pop3
permit tcp any any eq 995
remark CONNECTED PC BACKUP
permit tcp any eq 1914 any
ip access-list extended DEFAULT
remark EXPLICIT CLASS-DEFAULT
permit ip any any
ip access-list extended MULTIMEDIA-CONFERENCING
remark RTP
permit udp any any range 16384 32767
ip access-list extended SCAVENGER
remark KAZAA
permit tcp any any eq 1214
permit udp any any eq 1214
remark MICROSOFT DIRECT X GAMING
permit tcp any any range 2300 2400
permit udp any any range 2300 2400
remark APPLE ITUNES MUSIC SHARING
permit tcp any any eq 3689
permit udp any any eq 3689
remark BITTORRENT
permit tcp any any range 6881 6999
remark YAHOO GAMES
permit tcp any any eq 11999
remark MSN GAMING ZONE
permit tcp any any range 28800 29100
ip access-list extended SIGNALING
remark SCCP
permit tcp any any range 2000 2002
remark SIP
permit tcp any any range 5060 5061
permit udp any any range 5060 5061
ip access-list extended TRANSACTIONAL-DATA
remark HTTPS
permit tcp any any eq 443
remark ORACLE-SQL*NET
permit tcp any any eq 1521
permit udp any any eq 1521
remark ORACLE
permit tcp any any eq 1526
permit udp any any eq 1526
permit tcp any any eq 1575
permit udp any any eq 1575
permit tcp any any eq 1630
exit
!
ip sla 1
udp-jitter 209.165.200.228 49152 codec g711alaw
owner Paula-Voip
tag TEST
frequency 76
ip sla schedule 1 life forever start-time now
!
!
!
!
line con 0
line vty 5 15
!
ntp peer 209.165.200.226
end

[ashok_boin]

It's more or less similar configs except "mls qos" commands above for a switch.

Please go through the following link...

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sga/configuration/guide/config/qos.html

[kai_koa01]

thanks for stop by can anyone pls tell me what is wrong with the qos that i put on the SW1 and How to configure policy map on HQ?

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

A Cisco router's QoS is usually more comprehensive than a Cisco switch's QoS.

For the router, you'll likely want to use CBWFQ (q.v.).  Features, and operation, differ based on IOS version, especially pre and post HQF QOS - a 2811 might be running either.  What IOS version is on your 2811?

[kai_koa01]

HI Joseph

Here is my IOS version. Cisco IOS Software, 2800 Software (C2800NM-ADVENTERPRISEK9-M), Version 15.1(4)M9. I’m wondering how do I configure my sub interface and the serial interface to be able to make a call during congestion.

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Ok, that IOS is HQF. which helps.

Generally with CBWFQ you place your call(s) bearer traffic into LLQ.  (Sort of the PQ equivalent.)

You working with serial subinterface?  You'll need to further clarify.

[kai_koa01]

no serial subinterface but fastethernet is a subinterface in LAN. 100mbps for the fastethernet and 128kbps for serial interface

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Alright, you would apply your service policy to the serial interface.

Since the serial interface is only 128 Kbps, and it would be the feed to your 100 Mbps FE interface, you shouldn't need QoS on the FE.  However, unless you want to have QoS specific to each VLAN, you should only need to place your service policy on the FE main interface.

[kai_koa01]

can u give me an example pls?

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Something like:

class-map match-any LLQ
match ip dscp ef
class-map match-any Foreground
match ip dscp af41 cs3 af21
class-map match-any Background
match ip dscp cs1 af11

policy-map sample
class LLQ
priority percent 33
class Foreground
bandwidth remaining percent 89
fair-queue
class Background
bandwidth remaining percent 1
fair-queue
class default
bandwidth remaining percent 9
fair-queue

Or course, you can define more classes and play with bandwidth allocations, but with a HQF router's support of per class FQ, something like the above usually works well.

[edit]

PS:

BTW, a 128 Kbps serial link might only support one VoIP call (depends on the codec being used), and also for 128 Kbps with a 1500 MTU, LFI might be needed. (Cisco has a table somewhere when its needed for different bandwidth vs. MTU combos.)

[kai_koa01]

thanks Joseph for that.