ASR 1002 , QOS police & shape work !! but LLQ dont work ?? can u help ?

[Dr.X]

Hi Guys ,

i have cisco ASR 1002

TOPOLOY AS BELOW :

------LAN-CLOUD--------0/0/2---ASR1002---0/0/0---------->Internet

i need to do LLQ for specific hosts in the local cloud .

but , i find that my qos can match , but i cant see the performance of LLQ because as i know , if i set LLQ to 1 M , i will not exceed 1 M speed.

so , whatever i set the priority value , i always get higer speed like 50 M

but , if i used the command police or shape on the same qos it works and limit the speed !!!

i just want to ask , why LLQ can be configured and applied , but the performance of it is not showing ??!!

here is my config when using LLQ and not working in performance :

Verification & config are below :

Gateway-ASR1002#sh policy-map Matching
  Policy Map Matching
    Class Matching
      priority level 1 1000 (kbps)

Gateway-ASR1002#sh policy-map Marking 
  Policy Map Marking
    Class Marking
      set ip dscp af11

Gateway-ASR1002#sh class-map Matching
 Class Map match-all Matching (id 12)
   Match ip  dscp af11 (10)

Gateway-ASR1002#sh class-map Marking 
 Class Map match-any Marking (id 10)
   Match access-group name CIR

Gateway-ASR1002#sh ip access-lists CIR
Extended IP access list CIR
    10 permit ip any host x.x.19.225
    

Gateway-ASR1002#sh run int gigabitEthernet 0/0/0
Building configuration...

Current configuration : 217 bytes
!
interface GigabitEthernet0/0/0
 description Ixxxx
 bandwidth 900000
 ip address xxxxxxxx
 ip access-group BGP out
 load-interval 30
 negotiation auto
 service-policy input Marking
end

Gateway-ASR1002#sh run int gigabitEthernet 0/0/2
Building configuration...

Current configuration : 168 bytes
!
interface GigabitEthernet0/0/2
 description ASR-7600
 bandwidth 900000
xxxxxxxxxx
 negotiation auto
 service-policy output Matching
end

Gateway-ASR1002#sh policy-map interface gigabitEthernet 0/0/02
 GigabitEthernet0/0/2 

  Service-policy output: Matching

    queue stats for all priority classes:
      Queueing
      priority level 1
      queue limit 512 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 89724/123734852

    Class-map: Matching (match-all)  
      338828 packets, 477511119 bytes
      5 minute offered rate 766000 bps, drop rate 0000 bps
      Match: ip dscp af11 (10)
      Priority: 1000 kbps, burst bytes 25000, b/w exceed drops: 0
      
      Priority Level: 1 

    Class-map: class-default (match-any)  
      247357217 packets, 286129058478 bytes
      5 minute offered rate 791475000 bps, drop rate 0000 bps
      Match: any 
      
      queue limit 3750 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 64983602/75611448736
Gateway-ASR1002#

Any help ????

why the LLQ is not doing properly and i always exceed the 1000Kbps in LLQ ?

regards

[Akash Agrawal]

Hi,

In the output, you have shown, traffic rate under class Matching is 766kbps which is less than rate-limit (1000kbps). Rest traffic is falling under class class-default. Please check if you have anytime more than 1mbps traffic under Matching class. In case you find more traffic, please share  output of "show hqf interface gig0/0/0/2"

Regards,

Akash

[Dr.X]

Hi Akash ,

thank you for reply

actually here wt i did and still no luck

in the ACL called CIR im matching the dowload traffic for the host x.x.19.225

now , on that host i used download manager and limited the download to 130Kbps

and on the policmap i changed priority to 50  , see below :

policy-map Matching
 class Matching
  priority 50 32

now i download a file by download maager and still the speed is opened !!! and seems that priority is not working ok with me !!!

here is verification on router

Gateway-ASR1002#sh policy-map interface gigabitEthernet 0/0/2
 GigabitEthernet0/0/2 

  Service-policy output: Matching

    queue stats for all priority classes:
      Queueing
      queue limit 512 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 49076/67723886

    Class-map: Matching (match-all)  
      74246 packets, 102171086 bytes
      5 minute offered rate 1013000 bps, drop rate 0000 bps
      Match: ip dscp af11 (10)
      Priority: 50 kbps, burst bytes 32, b/w exceed drops: 0
      

    Class-map: class-default (match-any)  
      57583882 packets, 66475409053 bytes
      5 minute offered rate 557005000 bps, drop rate 0000 bps
      Match: any 
      
      queue limit 3750 packets
      (queue depth/total drops/no-buffer drops) 1/0/0
      (pkts output/bytes output) 30951964/35827585858

plz look @ the offer rate and look @ the priority , why there are no drops there ???

as you see the speed is about 1 Mbps but the it should be cut to 50 K , but thats not occuring ??!!!!

again , if i removed the command priority and replaced it with police or shaping ... it works like a charm !!!!

can you help ?

about the command "show hqf interface gig0/0/0/2""  

i cant use it on my ASR !

Gateway-ASR1002#sh h?
h323  history    hosts            html
http  hw-module  hw-programmable  

Gateway-ASR1002#sh h

regards

[Dr.X]

Do you think it may be as   bug ???

here is my router details :

Gateway-ASR1002#sh ve
Gateway-ASR1002#sh version 
Cisco IOS XE Software, Version 03.11.00.S - Standard Support Release
Cisco IOS Software, ASR1000 Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.4(1)S, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 19-Nov-13 20:12 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2013 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON

Gateway-ASR1002 uptime is 6 weeks, 6 days, 1 hour, 0 minutes
Uptime for this control processor is 6 weeks, 6 days, 1 hour, 4 minutes
System returned to ROM by reload at 19:55:40 UTC Thu Apr 3 2014
System image file is "bootflash:/asr1000rp1-adventerprisek9.03.11.00.S.154-1.S-std.bi"
Last reload reason: PowerOn

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.
          
cisco ASR1002 (2RU) processor with 1662145K/6147K bytes of memory.
Processor board ID FOX1807GBZW
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7757823K bytes of eUSB flash at bootflash:.

Configuration register is 0x2102

Gateway-ASR1002#   
Gateway-ASR1002#sh pla
Gateway-ASR1002#sh platform 
Chassis type: ASR1002             

Slot      Type                State                 Insert time (ago) 
--------- ------------------- --------------------- ----------------- 
0         ASR1002-SIP10       ok                    6w6d          
 0/0      4XGE-BUILT-IN       ok                    6w6d          
R0        ASR1002-RP1         ok, active            6w6d          
F0        ASR1000-ESP5        ok, active            6w6d          
P0        ASR1002-PWR-AC      ok                    6w6d          
P1        ASR1002-PWR-AC      ok                    6w6d          

Slot      CPLD Version        Firmware Version                        
--------- ------------------- --------------------------------------- 
0         07120202            15.3(3r)S                           
R0        08011017            15.3(3r)S                           
F0        09111601            15.3(3r)S   

[ju_mobile]

Hi,

Check the commands used within the policy-map for priority traffic. The ASR's have a feature that allow priority queues to burst when bandwidth is available. Effectively, you don't get the cold hard police limit that you used to. These can be defined in two ways:

1) Priority <bandwidth>

or

2) Priority

2) police <bandwidth>

Further information can be found here: 

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_conmgt/configuration/xe-3s/asr1000/qos-conmgt-xe-3s-asr1000-book/qos-conmgt-multilevel-pq.html

With the conditional policing, traffic policing does not engage unless the interface is congested. If the priority class is configured with an “always on” (unconditional) policer. The priority class is always policed to the configured value regardless of whether the interface is congested.