QoS policy fail on vlan interface of a router 3845

[ashley_dew]

Hi,

I have configured a qos policy and I am trying to apply the policy to a vlan interface which is physically connected to a switch module port of a 3845 Router.

When I try to apply, the message configuration failed appears.

Here is the policy map

class-map match-any VPN

match access-group name VPN_Spidernet

policy-map child-VPN-Spidernet

class VPN

bandwidth 128000

shape average 256000

class class-default

fair-queue

  random-detect

policy-map parent-VPN-Spidernet

class class-default

shape average 1000000

service-policy child-VPN-Spidernet

ip access-list extended VPN_Spidernet

remark VPN sortante tunnel seulement

permit ah any any

permit esp any any

Here's the configuration of the interfaces

interface Vlan2

description connexion Internet Spidernet

bandwidth 1000

ip address x.y.z.189 255.255.255.128

ip access-group CONNEXION-ENTRANTE-SPIDERNET in

ip nat outside

ip inspect Firewall out

ip virtual-reassembly

interface FastEthernet0/0/1

description Connexion Internet Spidernet

switchport access vlan 2

bandwidth 1000

duplex half

speed 10

!

When I do in config mode

int vlan 2

service-policy output parent-VPN-Spidernet

I have got the message Configuration Failed !

Could you please help.

Ashley

[Marwan ALshawi]

Hi Ashley

i dont thin you can apply if to the vlan interface i mean outbound shaping policy map

some cisco switches they do support some policing with the use of per vlan QoS

but for this ISR switch module  i am not 100% sure but almost it is not gonna work

i recommend you to use the actual physical interface rather than the vlan interface

by the way why you have the depulx hardcoded to half ? this not related to QoS but better to have full either auto or hard coded depending on the other end setup !!

HTH

[ashley_dew]

Hi,

Thanks for the update. You are probably right for the QoS. I will try on the physical interface directly or try to use CAR on the SVI.

I know the hardcoded duplex is strange. Its the Wimax modem connected on the interface cannot negociate with the router and cannot run on 100 Full. The only working config is 10 Half. We are waiting for the ISP to change their modem or cable.

Again thx for the update.

Ashley

[matt.eason · Accepted solution]

Hi Ashley,

QoS functionality on an etherswitch module is limited and doesn't offer the same level of features that would usually be available.

Unlike a standard Fast/GigEthernet port on a router the etherswitch modules are not capable of doing red, shaping, cbwfq etc..  According to Cisco's documentation you are limited to class based marking, policing on 15.1(1)T and car(another form of policing)

You should still be able to implement some form of bandwidth reservation by using the etherswitch modules WRR queuing system.

These websites have further information should assist you.

http://www.cisco.com/en/US/prod/collateral/routers/ps5853/prod_white_paper0900aecd8064c9f4.html

http://www.cisco.com/en/US/products/hw/modules/ps2797/products_qanda_item09186a00802c9e7a.shtml#qa28

Regards,

Matt

[ashley_dew]

Hi Matt,

I will try to use CAR on the SVI but first I will need to upgrade the router to 15.1(1) T. Currently it is on 15.0.

Thanks for the excellent references which is in the right direction.

Ashley