QoS on 3560

[nilesh_sawant]

hi

I have WS-C3560G-48PS on which internet link is connected & from same switch internet is extended to end users, VPN gateway & for my we server. I want to restrict the  internet bandwidth on portwise

In short
Internet connectivity  is on Gig0/1 of 5mbps
End users firewall connected on Gig0/2  <-- Want to restrict the in & out bw to 2mb
VPN gateway connected on Gig0/3        <-- Want to restrict the in & out bw to 1mb
Webserver connected on Gig0/4        <-- Want to restrict the in & out bw to 2mb

Can anyone advice what configuration i need to do on the switch?
Switch IOS is c3560-ipbase-mz.122-35.SE5.bin, if reqire i can upgrade the IOS.

Thanks in advance.

[Dennis Mink]

Nilesh,

assuming you are going to configure this from the CLI, there are 3 steps to the process of configuring QoS:

1-Classification  (using the class-map statement)

2-ACTION   (using policy map statements)

3-Enable on interface  (using the service policy statement, on the WAN interface in this case)

1-You have identified 4 types of traffic (coming from 4 different ports), so you will need to create 4 separate Access lists that can classify this traffic. At this stage you should already have you named ACL's with the names below  (INTERNET, WEB_SRVR etc)class-map match-all INTERNET match access-group name INTERNET

class-map match-all END_USERS_FIREWALL

match access-group name  END_USERS_FIREWALL

class-map match-all VPN_GW

match access-group name VPN_GW

class-map match-all WEB_SRVR

match access-group name WEB_SRVR

2 Create the policy map that defines what to do with the traffic defined in the previous step.policy-map WAN_OUT

   class INTERNET

   bandwidth 5000

   class END_USERS_FIREWALL

   bandwidth 2000

   classVPN_GW

   bandwidth 1000

   class END_WEB_SRVR

   bandwidth 2000

3-

interface GigabitEthernet0/0 description provider Connection bandwidth 1024000 ip address 10.200.200.4 255.255.255.252 no ip redirects no ip unreachables no ip proxy-arp ip pim sparse-dense-mode ip flow egress load-interval 30 duplex full speed 100 ! service-policy output WAN_OUT<---------------------------------please let me know if it is helpfull and rate if it is