Apply service policy to interface on 3560 and 3750

[davidwatson1]

Hi

I am trying to apply a service policy to an interface but it comes up with-

HSW(config-if)#service-policy input QoS
QoS: class(RT) Unsupported classification [GigabitEthernet1/0/24]

this is the policy-map

policy-map QoS
class VO
set dscp ef
class VI
set dscp af43
class RT
set dscp af41
class BA
set dscp af21

Ive seen a few articles about how its not supported but dont know what the end solution is to get this working.

Any help much appreciated.

thanks

[Philip D'Ath]

Can you show us the details for class RT, since that is the one it is complaining about.

[davidwatson1]

Hi Philip

Sorry, details as below-

class-map match-any BA
match access-group name PRINTING
match access-group name SNMP
class-map match-any RT
match access-group name TELNET
match access-group name CITRIX
match access-group name ORACLE
class-map match-any VO
match access-group name VOIP-RTP
match access-group name VOIP-SIG
class-map match-any VI

and the ACL associated with it

ip access-list extended CITRIX
permit tcp any any eq 1494
permit tcp any eq 1494 any
permit tcp any any eq 2598
permit tcp any eq 2598 any
ip access-list extended ORACLE
permit tcp any any eq 1521
permit tcp any eq 1521 any
ip access-list extended PRINTING
permit ip any host 10.1.1.2
permit ip any host 10.1.1.1
ip access-list extended SNMP
permit tcp any any eq 161
permit tcp any eq 161 any
permit udp any any eq snmp
permit udp any eq snmp any
ip access-list extended TELNET
permit tcp any any eq telnet
permit tcp any eq telnet any
ip access-list extended VOIP-RTP
permit udp any any range 3462 3525
permit udp any any range 9998 10317
permit udp any range 3462 3525 any
permit udp any range 9998 10317 any
ip access-list extended VOIP-SIG

[davidwatson1]

Hi

I actually think it shows it doesnt like RT as its the next class, if it remove all classes and leave one, it then works

class-map match-any BA
match access-group name PRINTING
class-map match-any RT
class-map match-any VO
class-map match-any VI

thanks

[Philip D'Ath]

If you add just the RT class does it work?

If you add just two classes, such as VO and VI does it work?

[davidwatson1]

After adding all the class maps and only 1 match access it appears to work.

ie

class-map match-any BA
match access-group name PRINTING
class-map match-any RT
match access-group name CITRIX
class-map match-any VO
match access-group name VOIP-RTP

I consolidated the 3 ACLS of telnet, citrix and Oracle as that will match under RT now

Strange it doesnt match multiple access lists on these models as it worked on a Nexus.

But it does appear to be working, thanks for your questions, helped me resolve it

[Philip D'Ath]

Well done.  It will be something to do with how the hardware processes it.

The newer switches, like the 3650's and 3850's are a lot more flexible in this regard.

[davidwatson1]

The older switches are a pain as they only support input as the output command doesnt work- i get the following message when applying to an interface

Warning: Assigning a policy map to the output side of an interface not supported