I have a customer who requires to identify and police traffic on egress on a 3560 trunk link. I cannot use ingress classifications because we do not know what route the traffic will take yet. The egress interface connects to multipoint wireless equipment with 4 different bandwidth point to point links. So the ingress traffic may be routed via any one of 4 point to point wireless links connected to the single egress interface. Am I correct in assuming we cannot mark on the egress direction then put the traffic in a SRR shaped egress queue based on the marking ?
So we would only have the option to egress queue based on markings applied or trusted on the inbound direction ?
I had thought of some kind of policy map/aggregate policer configuration based on the exit VLAN but it seems we can only apply this type of config inbound.
From reading the 3560 configuration guides it seems the 3560 cannot deploy the kind of requirements this customer needs. Perhaps they should have deployed some kind of Metro switch ?
For a bit of clarification on what my customer is looking for here maybe this helps
On the Egress of a single Gigabit interface there are multiple point to point VLANs. These go to a outdoor wireless device that has 2 or 4 point to point wireless links. So each Wireless link takes some of the point to point VLANs from a single Gig interface and each wireless link can be a different speed.
Can we mark on an egress direction prior to queueing the traffic through one of the 4 egress queues ? So routing decides that the traffic will go via VLAN 10. Mark CoS 1 for example. Traffic going via VLAN 20 mark CoS 2 for example. Then based on these CoS values place the traffic into one of the 4 egress queues which have shaping applied to limit the bandwidth such that the downstream wireless links do not get overloaded. Marking on the ingress does not help because we do not know at this point what VLAN, and hence what wireless link, the traffic will exit on. For the same reason policing on the ingress cannot be used because there is a possibility that the same ingress traffic may go via the fastest Wireless link normally but be routed over the slowest link under a wireless link failure scenario.
Having read all the relevant QoS documentation for the 3560 I cannot imagine a way this can be done.
Any input would be appreciated even if it is a suggestion we can consider and possibly discount.
Is your WAN ready for a multicloud transformation?
Network Insider Live Webinar
Tuesday, July 21, 2020 10:00 am Pacific Time (San Francisco, GMT-08:00)
This webinar will show how convergence between SD-WAN and Security is emerging as important new SASE a...
Does anyone know if perpetual PoE is supported on C2960XR-24PD-I? (currently running15.2(7)E2)I get error when trying to configure perpetual PoE on any of the ports. switch(config-if)#power inline port perpetpual-poe-ha  ...
We are having issues with a WS-C2960X-48FPD-L running IOS 15.2(2)E7. Some ports are simply not working. We had POE issues on some https://showbox.bio/ https://tutuapp.uno/ https://vidmate.cool/ of the ports and decided to upgrad...
Inviting all network professionals! We'd like to understand IT priorities for your organization and the time taken for key network management activities. Your response will help us provide you insights on OpEx, provisioning, and troubleshooting savings w...
Hi! I have a 3945 series router and if there is a power loss, or the router is rebooted, it loses controller, and WAN interface serial configuration. Any thoughts on what may be causing this? The confreg-register is at 0x2102 which is the correct setting....