09-01-2011 12:21 AM - edited 03-07-2019 01:59 AM
I am trying to setup a simple Policy to Mark Ingress packets to a default of IP Precedence 1. I have a class that matches an ACL to mark packets IP Precedence 0.
Here is basic polic-map I am using to test the basics...
ip access-list standard TEST
permit any
class-map match-any TEST
match access-group name TEST
!
!
policy-map TESTMARK
class TEST
set dscp cs1
I have a Port-Channel with 4 members. Applied the map to the physicals.
fa 1/0/1 - 4
service-policy input TESTMARK
Finding I don't get any hits on the show policy-map i i
FastEthernet1/0/1
Service-policy input: TESTMARK
Class-map: TEST (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group name TEST
0 packets, 0 bytes
5 minute rate 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
FastEthernet1/0/2
Service-policy input: TESTMARK
Class-map: TEST (match-any)
0 packets, 0 bytes
This seems like a basic task however it has me stumped at the moment.
Solved! Go to Solution.
09-01-2011 07:01 AM
The command 'show policy-map interface
Though visible in the command-line help string, the control-plane and interface keywords
are not supported, and the statistics shown in the display should be ignored.
You would want to use: 'show mls qos interface
Regards,
Amit
09-01-2011 01:19 AM
This might sound silly, but did you turn qos on?
#mls qos
09-01-2011 02:14 AM
Hi,
You won't be able to see the marking like this on a switch. You'll have to sniff on a host receiving traffic or configure an egress ACL on the port connected to destination and match on on dscp with a log option.
Regards.
Alain.
09-01-2011 04:49 AM
Hi,
Use "show mls qos interface FastEthernet1/0/1 statistics" to verify.
Regards,
Alex
09-01-2011 07:01 AM
The command 'show policy-map interface
Though visible in the command-line help string, the control-plane and interface keywords
are not supported, and the statistics shown in the display should be ignored.
You would want to use: 'show mls qos interface
Regards,
Amit
09-01-2011 05:57 PM
Thanks all for the quick response. I was only looking at these outputs initially and was bothered by the line "qos mode:port-based"
Whilst I have applied the PM to a physical I was wondering if the switch would report on use of MQC.
Switch#sh mls qos interface fa 1/0/1
FastEthernet1/0/1
Attached policy-map for Ingress: TESTMARK
trust state: not trusted
trust mode: not trusted
trust enabled flag: ena
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: none
qos mode: port-based
Output of Switch#sh mls qos interface fastEthernet 1/0/1 statistics
FastEthernet1/0/1 (All statistics are in packets)
dscp: incoming
-------------------------------
0 - 4 : 39 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
So thanks for pointers. Looks like I was getting the desired result. Now I will be building up the policy to hopefully police CS0's data rate.
09-02-2011 05:16 AM
Hi,
If you consider your question is answered please mark it as answered. So that will be helpfull for the others.
Regards,
Alex
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide