08-30-2016 11:31 AM - edited 03-08-2019 07:13 AM
Hey Everyone,
I have been looking to mark all traffic in a single vlan as EF on a 3560x switch. Here is the config I am using but a 'show policy-map int vlan912' shows 0 hits on neither the voip class or class default. Any suggestions?
!
! Matching and marking all traffic in the VOIP VLAN:
ip access-list ext VOIP_ACCESS
permit ip any any
!
class-map match-any VOIP_MAP
description voip
match access-group name VOIP_ACCESS
!
policy-map MARKING_POLICY
class VOIP_MAP
set dscp ef
set precedence 5
!
int Vl912
service-policy input MARKING_POLICY
!
SWITCH#show vers
Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 15.2(2)E, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Thu 26-Jun-14 17:15 by prod_rel_team
ROM: Bootstrap program is C3560E boot loader
BOOTLDR: C3560E Boot Loader (C3560X-HBOOT-M) Version 12.2(58r)SE1, RELEASE SOFTWARE (fc1)
SWITCH uptime is 1 year, 13 weeks, 3 days, 5 hours, 0 minutes
System returned to ROM by power-on
System restarted at 21:27:30 EDT Tue Mar 29 2011
System image file is "flash:c3560e-universalk9-mz.152-2.E.bin"
Last reload reason: Unknown reason
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
License Level: ipservices
License Type: Permanent
Next reload license Level: ipservices
cisco WS-C3560X-24 (PowerPC405) processor (revision A0) with 262144K bytes of memory.
08-30-2016 09:23 PM
Hi There,
You may have just made a typo, but your show command is referencing a different VLAN than the configuration.
'show policy-map int vlan191'
int Vl912
service-policy input MARKING_POLICY
Can you confirm whether you are using the VLAN in the show command to check your stats?
08-31-2016 04:51 AM
Thanks Jonathan, the show command above was a typo. I had been testing a couple of different switches so it got mixed up. Using the config example from above, 'show policy-map int vlan912' shows 0's on a traffic counters.
08-31-2016 06:44 AM
Set up another test and used a policy-map in a second router to monitor QoS classes and verified the marking is actually taking place. The counters must be an IOS bug.
I also verified the vlan-based command is needed on any host ports where the dscp must be re-marked:
!
interface GigabitEthernet0/10
description test host
switchport access vlan 912
switchport mode access
mls qos vlan-based
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide