mls qos configuration

catalystexpress · ‎10-10-2012

Hi All,

I have my edge switches configured with trust dscp for my cisco ipt and my core switch 6506 interface is also set to trust dscp, now how do i check if the incoming packets on my core switch interface see the dscp marking and the outgoing interface too do not tamper the packet

I tried few show mls qos .. but this commands does not give me the information am looking for

Am not allowed to do a packet capture during production hour

many thanks for the support

cheers.

Core SW

SG-CRSW01#sh run int gi1/11

Building configuration...

Current configuration : 274 bytes

!

interface GigabitEthernet1/11

description To 31st floor Voice Switch:

switchport

switchport trunk allowed vlan 6,31,641

switchport mode trunk

no ip address

logging event link-status

logging event spanning-tree status

udld port aggressive

mls qos trust dscp

end

Voice Switch

interface FastEthernet1/0/2

switchport access vlan 31

switchport mode access

switchport voice vlan 641

srr-queue bandwidth share 10 10 60 20

priority-queue out

mls qos trust device cisco-phone

mls qos trust dscp

auto qos voip cisco-phone

spanning-tree portfast

service-policy input AutoQoS-Police-CiscoPhone

catalystexpress · ‎10-10-2012

Hi All,

Below is the configuration i have in my voice switch and i have mls qos enabled, now when i do show policy-map int i do not see any matching packets though i make calls from the IP phone on that port not sure what is that am missing here, can anyone please help me with this, but i do see the dscp marking are coming in

Many thanks

Cheers..

class-map match-all AutoQoS-VoIP-RTP-Trust

match ip dscp ef

class-map match-all AutoQoS-VoIP-Control-Trust

match ip dscp cs3 af31

!

policy-map AutoQoS-Police-CiscoPhone

class AutoQoS-VoIP-RTP-Trust

set dscp ef

police 320000 8000 exceed-action policed-dscp-transmit

class AutoQoS-VoIP-Control-Trust

set dscp cs3

police 32000 8000 exceed-action policed-dscp-transmit

!

SG-31F-SW05#sh policy-map interface fa1/0/25

FastEthernet1/0/25

Service-policy input: AutoQoS-Police-CiscoPhone

Class-map: AutoQoS-VoIP-RTP-Trust (match-all)

0 packets, 0 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: ip dscp ef (46)

Class-map: AutoQoS-VoIP-Control-Trust (match-all)

0 packets, 0 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: ip dscp cs3 (24) af31 (26)

Class-map: class-default (match-any)

0 packets, 0 bytes

5 minute offered rate 0 bps, drop rate 0 bps

Match: any

SG-31F-SW05#

SG-31F-SW05#sh mls qos int fa1/0/25 statistics

FastEthernet1/0/25 (All statistics are in packets)

dscp: incoming

-------------------------------

0 - 4 : 2478 0 0 0 0

5 - 9 : 0 0 0 0 0

10 - 14 : 0 0 0 0 0

15 - 19 : 0 0 0 0 0

20 - 24 : 0 0 0 0 996107

25 - 29 : 0 0 0 0 0

30 - 34 : 0 0 0 0 0

35 - 39 : 0 0 0 0 0

40 - 44 : 0 0 0 0 0

45 - 49 : 0 13548915 0 0 0

50 - 54 : 0 0 0 0 0

55 - 59 : 0 0 0 0 0

60 - 64 : 0 0 0 0

dscp: outgoing

-------------------------------

0 - 4 : 38385090 0 0 0 0

5 - 9 : 0 0 0 0 0

10 - 14 : 0 0 0 0 0

15 - 19 : 0 0 0 0 0

20 - 24 : 0 0 0 0 44674

25 - 29 : 0 40672 0 0 0

30 - 34 : 0 0 0 0 0

35 - 39 : 0 0 0 0 0

40 - 44 : 0 0 0 0 0

45 - 49 : 0 115565 0 13779617 0

50 - 54 : 0 0 0 0 0

55 - 59 : 0 0 0 0 0

60 - 64 : 0 0 0 0

cos: incoming

-------------------------------

0 - 4 : 196342 0 0 996071 0

5 - 7 : 13548910 0 0

cos: outgoing

-------------------------------

0 - 4 : 63078966 0 0 85394 0

5 - 7 : 115540 13852334 1

output queues enqueued:

queue: threshold1 threshold2 threshold3

-----------------------------------------------

queue 0: 2 0 115183

queue 1: 671677 2005 25373428

queue 2: 0 0 0

queue 3: 0 0 62410701

output queues dropped:

queue: threshold1 threshold2 threshold3

-----------------------------------------------

queue 0: 0 0 0

queue 1: 0 0 0

queue 2: 0 0 0

queue 3: 0 0 0

Policer: Inprofile: 14544337 OutofProfile: 0

SG-31F-SW05#

Ton V Engelen · ‎10-11-2012

Hi

looking at the output of

sh mls qos int fa1/0/25 statistics

it is looking ok, i see signaling and voice packets going in and out.

The output queue also shows the amount of voice packets in queue 0, thres 3. That also looks ok. (I miss some packets, but not much, seems that queueing is working fine)

(The command service-policy input AutoQoS-Police-CiscoPhone could be removed imo )

How does the config on the 6506 looks? Do you also trust dscp on the incoming trunk of the 6506? If not, do that too.

What i did on the 6509 overhere is apply a policy on each vlan SVI which needs this.

(This way i can check if all matching and setting is working)

class-map match-any CM_SIGNALING

match ip dscp cs3

match ip dscp af31

class-map match-all CM_VOIP

match ip dscp ef

class-map match-all VC-VIDEO

match ip dscp af41

!

policy-map REMARK-DSCP

class CM_VOIP

set dscp ef

class CM_SIGNALING

set dscp cs3

class VC-VIDEO

set dscp af41

Interface Vlanx

service-policy output REMARK-DSCP

Then if i issue

show mls qos ip

i see the following:

Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By

Vlx 5 Out CM_VOIP 46 4 -- 0 17314579046 0

Vlx 5 Out CM_SIGNALI 24 5 -- 0 5629343607 0

Vlx 5 Out VC-VIDEO 34 6 -- 0 20274672839 0

sh policy-map inte Vlanx

Vlanx

Service-policy output: REMARK-DSCP

    class-map: CM_VOIP (match-all)
      Match: ip dscp ef (46)
      set dscp 46:
      Earl in slot 5 :
        17334192532 bytes
        5 minute offered rate 489448 bps
        aggregate-forwarded 17334192532 bytes

    class-map: CM_SIGNALING (match-any)
      Match: ip dscp cs3 (24)
      Match: ip dscp af31 (26)
      set dscp 24:
      Earl in slot 5 :
        5635611248 bytes
        5 minute offered rate 152952 bps
        aggregate-forwarded 5635611248 bytes

    class-map: VC-VIDEO (match-all)
      Match: ip dscp af41 (34)
      set dscp 34:
      Earl in slot 5 :
        20274672839 bytes
        5 minute offered rate 0 bps
        aggregate-forwarded 20274672839 bytes

    Class-map: class-default (match-any)
      16927 packets, 1885149 bytes
      5 minute offered rate 0000 bps, drop rate 0000 bps
      Match: any
        16927 packets, 1885149 bytes
        5 minute rate 0 bps

catalystexpress · ‎10-11-2012

Hi Ton,

Thanks very much for the advice

Yes i trust dscp on my 6506

Core SW

SG-CRSW01#sh run int gi1/11

Building configuration...

Current configuration : 274 bytes

!

interface GigabitEthernet1/11

description To 31st floor Voice Switch:

switchport

switchport trunk allowed vlan 6,31,641

switchport mode trunk

no ip address

logging event link-status

logging event spanning-tree status

udld port aggressive

mls qos trust dscp

end

But i wonder why i still do not see anything on the policy-map output, i will try your suggestion and let you know

thanks

cheers..