QOS with FQDN Example - Router C3925

[crusier2015]

Hi Friends,

I need to configure qos based destination and FQDN, For example, suppose my link has 20 Mb, and i have to priorize 80% of bandwidht to domain cisco.com.

Do you have any example to use this QoS using FQDN?

Tks

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Well you could list all the IPs associated with a FQDN and match those.  (You'll need to maintain IP list.)

NBAR can also be used for matching domain names in some kinds of traffic.

[crusier2015]

Do you have an example to this scenario, can be with IP address, not is necessary using name.

Tks

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Krishna's posting, shows the way.

Of course, the ACL doesn't have to be number one, and in fact, as you'll want to match a destination IP, you'll want an extended ACL.  (You can also used a named ACL.)

For example,

class-map match-any URL

match ip access-group DestURL

ip access-list extended DestURL

permit ip any host 72.163.4.161

[crusier2015]

Tks!

Two questions:

- With this example configured, when we are not accessing the cisco.com, the 100% of bandwith will available  to any traffic , or  always will be available only  20 %?

- If response is 20 %,  how can I configure to 100% of bandwith will be available to any traffic, when i dont acess cisco.com?

[paul driver]

Hello

BW not being used by that class will be shared to other classes.

res

Paul

[crusier2015]

Friends,

I applied the following, and router always reserve 80% bandwith for IP: 200.137.80.16 , and 20 % bandwith for any other traffic.  

But , when i am not doing accessing IP: 200.137.80.16 ,  router is not providing 100 % of bandwidth to any traffic, always provide only 20 % of bandwidth. 

How can configure, to router allow 100% of bandwidth when i am not accessing the IP : 200.137.80.16 ?

class-map match-any all-traffic
 match access-group 103

class-map match-any important
 match access-group 102

policy-map qos
 class important
  shape average 8000000

 class all-traffic
  shape average 200000

access-list 102 permit ip any host 200.137.80.16
access-list 103 permit ip any any

!
interface GigabitEthernet0/2
 bandwidth 10000000
service-policy output qos

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

policy-map shapeqos
 class class-default
  shape average 8200000
  service-policy qos

policy-map qos
 class important
  bandwidth 80000

 class class-default
  bandwidth 2000

interface GigabitEthernet0/2
 bandwidth 10000000
service-policy output shapeqos

[crusier2015]

When i tried apply the commands, the follow message appers:

interface GigabitEthernet0/2

bandwidth 10000000

service-policy output shapeqos

Insufficient bandwidth 80000 kbps for the bandwidth guarantee

[crusier2015]

I added one more 0, on shape average, and now router accept all commands.

policy-map shapeqos
 class class-default
  shape average 82000000
  service-policy qos

policy-map qos
 class important
  bandwidth 80000

 class class-default
  bandwidth 2000

interface GigabitEthernet0/2
 bandwidth 10000000
service-policy output shapeqos

 But still not working. Follow the print of test , router it is not prioritizing  80% bandwidth to IP : 200.137.80.16:

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

You misunderstand how QoS works. Unless your 80% traffic is unable to acquire its 80%, usage ratios will often not be the ratio you've set.  I.e. you would only "see" the 80/20 ratio, for example, if you sent both traffic classes at 100% of maximum capacity.

Regarding actual setting of the shapers.  What exactly is the interface bandwidth and what exactly "causes" the lower limit?

[crusier2015]

Sorry, my understand is basic . I thought that when I do a simultaneous download, with any IP,  and IP : 200.137.80.16, the router always will ensure the 80% of band to 200.137.80.16.  So to any another address, the rate of download will be drop to maximum 20%.  If is possible, how can i set the configs to do this?

My link is 10 Mb, so i think the config of bandwith will be bandwidth 10000000 , is correct?

Thanks for your help, and sorry again for my basic knowledge.

[crusier2015]

HI ,

I tried the following, but it is not working, when i start a download simultaneous to ip 190.98.0.0 0.0.255.255, router never prioritize the 80 % of bandwidth  :

policy-map QoS-WAN
 class URL                 
  bandwidth percent 80 

class-map match-any URL
match ip access-group DestURL

ip access-list extended DestURL
 permit ip any 190.98.0.0 0.0.255.255

interface GigabitEthernet0/1
 bandwidth 102400
 service-policy output QoS-WAN

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

If you're still contending with 20 Mbps, i.e. your physical port has more bandwidth they you have downstream, you'll need to shape for the bandwidth.  You can then use a child policy to manage any shaped congestion.

e.g.

policy-map shape20Mbps

class class-default

shape average 20000000

service-policy QoS-WAN

policy-map QoS-WAN

class URL

bandwidth percent 80

class class-default

bandwidth percent 20

interface g0/1

service-policy output shape20Mbps

Additionally the policy you're using doesn't prioritize so much as "reserve" bandwidth; unclear whether that's what you really want/need.

[Krishnendu AR]

The basic flow will be like this:

1. Create an ACL to match the IP address of the domain.
2. Define a class-map to match the defined ACL
3. Create a policy-map and call the above defined class-map into it. Then defined 80% bandwidth for the class-map.
4. Finally apply the class-map as a service-policy in outbound direction in the WAN interface.

This is just a brief outline of what all needs to be done to achieve your goal.

Router#sh class-map URL
 Class Map match-any URL (id 4)
   Match ip  access-group 1   -------> Matching ACL defined

Router#sh run policy-map QoS-WAN
Building configuration...

Current configuration : 460 bytes
!
policy-map QoS-WAN
 class URL                 
  bandwidth percent 80

Router#sh run int GigabitEthernet0/1
Building configuration...

Current configuration : 230 bytes
!
interface GigabitEthernet0/1
 bandwidth 102400
 ip address x.x.x.x 255.255.255.252
 ip flow ingress
 ip flow egress
 service-policy output QoS-WAN
end

Krishna