Configuring QoS for traffic inside a VLAN on Cisco 881
We've been trying to setup QoS for traffic leaving VLAN1 on FE0 in order to shape or police this to a certain value while prioritising voice traffic.
We can mark the packets (DSCP value) either as they arrive on the WAN FE4 or as they leave VLAN1, but the QoS policy which is in place on outbound FE0 can't see the marked packets.
I know IP ToS reflect and QoS pre-classify can be used on VPN tunnels to apply marked packets on the inside of the tunnel to the outside of the tunnel.
I've been searching for a solution but Google hasn't been very helpful on this occasion, splitting voice and data in to seperate VLANs isn't an option as they have a great deal of non-VLAN capable switches which they don't intend to swap out.
I imagine there must be a way for this to work on a Cisco 881, could someone please advise on a suitable solution\configuration?
Here's the current configuration.
class-map match-any VoIP
match dscp ef
match dscp af31
match ip precedence 5
class-map match-all VoIP_IN
match access-group 150
policy-map QoS_CHILD class VoIP priority percent 75 class class-default fair-queue bandwidth percent 5 policy-map QoS_PARENT class class-default shape average percent 88 police rate percent 90 service-policy QoS_CHILD
set ip precedence 5
interface FastEthernet0 description LAN Physical bandwidth 32768 no cdp enable
service-policy output QoS_PARENT
interface Vlan1 description LAN Virtual
ip address 10.0.0.1 255.255.255.0 ip nat inside ip virtual-reassembly
interface FastEthernet4 description WAN bandwidth 32768 ip address 220.127.116.11 255.255.255.248 ip nat outside ip virtual-reassembly ip tcp adjust-mss 1452 duplex full speed 10 crypto map ASGVPN ! service-policy input QoS_IN_MARK service-policy output QoS_PARENT
access-list 150 permit ip 18.104.22.168 0.0.0.63 any
Since 2008, the ASR 1000 platforms have dramatically changed the WAN edge router’s capabilities. With its very own QuantumFlow Processor (QFP) innovation, the data plane was powered to offer advanced scalable services along with high performance. Fast for...
Traditionally Cisco has used several different methods for storing passwords and keys in IOS. The older methods are Type 5 (MD5 hash) & Type7 (Vigenere obfuscation). We enabled Type 7 encryption with the CLI service password-encryption...
AI spoofing detection is a feature in AI Endpoint Analytics released in Cisco DNA Center v22.214.171.124, that identifies endp...
Como parte de mi preparacion para el ENARSI he estado haciendo una serie de videos para que se me quede mas grabado todo, en el siguiente link encontraran una liga con los mecanismos de asignacion de direccion IPV6 a Hosts https://youtube...
So you have the DNA Center racked and stacked in your data centre, and you are thinking what next?
To get instant value from your DNA Center, you should next discover and add your network devices to it. In this video, we will take you through the ...