04-13-2010 01:20 AM - edited 03-04-2019 08:07 AM
Hello,
In one of my remote office, we have a 1841 device (c1841-advipservicesk9-mz.124-19.bin) with a WIC-1ADSL=that is used for Internet browsing and access to our private network through an ipsec gre tunnel.
As the internet browsing is consuming a lot of bandwith, i would like to prioritize some packets to the internal network when they transit through this device.
Though, i'm unable to find the good configuration.
I used the following link as a reference http://www.cisco.com/en/US/tech/tk39/tk824/technologies_tech_note09186a00800d76b5.shtml but when I tried to apply the service-policy on my atm subinterface, it gave me the following error "CBWFQ : Hierarchy not supported for ATM VCs"
Here is a part of my config
class-map match-any critical_app
match access-group 100
!
!
policy-map bandwith
class critical_app
bandwidth percent 50
class class-default
bandwidth percent 25
policy-map parent
class class-default
service-policy bandwith
interface FastEthernet0/1
ip address 10.10.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface ATM0/0/0
no ip address
no ip mroute-cache
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0/0/0.1 point-to-point
pvc 0 0/50
vbr-nrt 480 480 1
!!!!!!! I tried to apply the service policy here!!!!!!!!!!!!
pppoe-client dial-pool-number 1
!
!
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly max-reassemblies 64
encapsulation ppp
dialer pool 1
dialer-group 10
ppp authentication chap callin
ppp chap hostname user
ppp chap password 0 password
crypto map WAN
ip nat inside source list 10 interface Dialer1 overload
access-list 100 permit tcp any any eq 99
How can i simply set up a low latency queue for the packets concerned by the ACL 100 ?
04-13-2010 02:07 AM
Hello Mathieu,
you can apply the CBWFQ scheduler directly to the PVC because you have defined the ATM traffic parameters with vbr-nrt command (otherwise it would not be accepted).
You don't need the external shaper, well you have no shaper in parent policy because the ATM traffic parameters act also as a shaper.
apply directly bandwidth scheduler, I would suggest a different name
Also taking in account that GRE and IPSec copy on external headers the internal headers if needed you can provide an LLQ to IP precedence 5 for VOIP RTP bearer channels, some bandwidth to other packets in the VPN connection and you don't need to assign resources to class class-default it uses what is left free.
class voip
match ip precedence 5
class vpn
match ip address 100
policy myscheduler
class voip
priority percent 10
class vpn
bandwidth percent 50
class class-default
random-detect
int atm0/0/0.1
pvc 0 0/50
service-policy out myscheduler
of you can apply it directly on atm subinterface or under ATM main interface (I had to do so on a C877)
Hope to help
Giuseppe
04-13-2010 07:26 AM
Hello giuslar,
Here is what I get :
interface ATM0/0/0
no ip address
no ip mroute-cache
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 224 in
!
interface ATM0/0/0.1 point-to-point
pvc 0 0/50
vbr-nrt 480 480 1
service-policy output myscheduler
pppoe-client dial-pool-number 1
Do you think it's ok like that ?
Because when I do a show policy interface, it's just empty, nothing appears !
And if i try to apply it direclty on the atm interface, it says : CBWFQ : Not supported on this interface
04-13-2010 07:30 AM
Hello Mathieu,
try also to apply it on the ATM subinterface
Hope to help
Giuseppe
04-13-2010 07:32 AM
Same thing : CBWFQ : Not supported on this interface
04-13-2010 07:35 AM
Hello Mathieu,
try to use a 12.4T image, in my case on C877 I had to move to 12.4T because I saw no matches on policy-map int, with no config change with just change of IOS the problem was fixed
Hope to help
Giuseppe
04-13-2010 07:49 AM
Unfortunately I don't have enough RAM for that
11-03-2010 02:02 PM
I had the same result when I tried to apply the service policy to this interface and I am running 12.4(11)T3.
interface ATM3/0
description Primary link to SJC
no ip address
ip flow ingress
atm clock INTERNAL
atm scrambling cell-payload
no atm ilmi-keepalive
!
interface ATM3/0.32 point-to-point
description Data PVC to SJC
bandwidth 42000
ip address 10.0.0.5 255.255.255.252
no ip redirects
ip flow ingress
no ip mroute-cache
no snmp trap link-status
pvc 1/32
oam-pvc manage
oam retry 3 10 1
encapsulation aal5snap
!
!
interface ATM3/0.33 point-to-point
description Voice PVC to SJC
bandwidth 3000
ip address 10.0.0.9 255.255.255.252
ip flow ingress
no snmp trap link-status
pvc 1/33
vbr-rt 3000 2000 32
oam-pvc manage
oam retry 3 10 1
encapsulation aal5snap
Did you resolve this problem?
11-04-2010 02:24 AM
Hello James,
I solved this by upgrading to 12.4(25c)
11-04-2010 01:19 PM
Are you running IPBASE or ADVENTERPRISE?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: