need to remark af41 to af31

[lkadlik]

Hi,

I think I  know what needs to be done for this but am not 100 percent sure.  The end goal is to make sure af41 packets are getting remarked to af31 going outbound to our mpls provider.

currently the following class and policy maps are configured on the asr router.

class-map match-any af31
  description matches af31 from ATT
 match ip dscp af31
 match ip dscp af32

class-map match-any video-wan-in
  description matches video from wan - reset dscp af41
 match ip dscp af31
 match ip dscp af32

class-map match-any video-mpls-out
 match ip dscp af31
 match ip dscp cs6
 match ip dscp af32

class-map match-any net-routing
  description matches routing traffic - cs6 (Default)
 match ip dscp cs6

class-map match-any net-mgmt
  description matches net-mgmt & vty traffic in/out
 match ip dscp cs2

class-map match-any backup-replication
  description matches backup and replication traffic
 match access-group name backup-replication-map
 match access-group name mark-af11


class-map match-any video
  description matches video
 match ip dscp af41
 match ip dscp af42
 match ip dscp af31
 match ip dscp af32
 match ip dscp cs6
 match ip dscp cs5


class-map match-any voice
  description matches voice traffic only - in or out
 match ip dscp ef


class-map match-any video/net-lan-out
  description matches video and routing traffic lan out
 match ip dscp af41
 match ip dscp af42
 match class-map net-routing
 match ip dscp af31


class-map match-any critical-apps
  description matches critical traffic lan/wan in & out
 match class-map net-mgmt
 match access-group name mark-af21

class-map match-any video/net-mpls-out
  description matches video and network/routing traffic mpls out
 match ip dscp af31
 match ip dscp af32
 match class-map net-routing

class-map match-any critical-apps-in/out
  description matches critical traffic lan/wan in & out
 match ip dscp af21
 match ip dscp af22
 match class-map net-mgmt

class-map match-all remark-ftp-af11
  description matches critical traffic af21/22 and remarks af11
 match class-map critical-apps-in/out
 match protocol ftp
!
policy-map pmap-wan-in
 description input policy from wan, for stats only
 class voice
 class video
 class net-mgmt
 class net-routing
 class critical-apps
 class backup-replication
 class class-default


policy-map pmap-wan-out
 class voice
  priority level 1 47500
 class video
  priority level 2 119000
 class af31
  bandwidth remaining percent 40
  random-detect dscp-based
 class critical-apps
  bandwidth remaining percent 30
  random-detect dscp-based
 class backup-replication
  bandwidth remaining percent 10
  random-detect dscp-based
  fair-queue
 class class-default
  random-detect dscp-based
  fair-queue



policy-map pmap-wan-gige-out
 description parent policy-map for shaping to CIR
 class class-default
  shape average 490000000 10000000 0
   service-policy pmap-wan-out


policy-map pmap-rtrlan-in
 description input policy from LAN for stats and set video dscp
 class voice
 class video
 class net-mgmt
 class net-routing
 class critical-apps
 class backup-replication
 class class-default

policy-map pmap-lan-out
 description applied outbound on lan interface
 class voice
  priority level 1 47500
 class video
  priority level 2 119000
 class af31
  bandwidth remaining percent 40
  random-detect dscp-based
 class critical-apps
  bandwidth remaining percent 30
  random-detect dscp-based
 class backup-replication
  bandwidth remaining percent 10
  random-detect dscp-based
  fair-queue
 class class-default
  random-detect dscp-based
  fair-queue

-------

I believe the below will work to remark the packets but then it is no longer part of the 2nd priority queue. So i guess my question is will the below remark the packets?  If so, is there anyway i can make it a part of the 2nd priority queue like the "video_no_af41" class is so that it participates in the same queue with the same bandwidth restriction?

class af41_to_af31
description used to remark af41 packets to af31 packets
 match ip dscp af41



class-map match-any video_no_af41
  description matches video
 match ip dscp af42
 match ip dscp af31
 match ip dscp af32
 match ip dscp cs6
 match ip dscp cs5


policy-map pmap-wan-out
 class voice
  priority level 1 47500
 class video_no_af41
  priority level 2 119000
class af41_to_af31
set dscp af31
class af31
  bandwidth remaining percent 40
  random-detect dscp-based
 class critical-apps
  bandwidth remaining percent 30
  random-detect dscp-based
 class backup-replication
  bandwidth remaining percent 10
  random-detect dscp-based
  fair-queue
 class class-default
  random-detect dscp-based
  fair-queue

Thank you.

[willwetherman]

Hi,

The above config will match AF41 packets and remark to AF31 but it will not place the newly remarked packets into the priority queue. Also note that you cannot have more than 2 priority queue levels and you cannot call the same priority queue level more than once in the same policy map.

To make this work you will need to match and remark the traffic before it hits your WAN interface. For example, you can create a new policy map and apply to your LAN interface in the ingress direction. This will remark the packets to AF31 which will then be matched by class video_no_af41 when they exit the WAN interface.

class af41_to_af31
description used to remark af41 packets to af31 packets
match ip dscp af41
!
policy-map remark
class af41_to_af31
set dscp af31
!
interface GigabitEthernet0/0
description LAN Interface
service-policy input remark

Hope this helps

Edit: Sorry I just noticed that you already have a policy-map attached to your LAN interface in the input direction. In this instance you just need to call class-map 'af41_to_af31' under this policy-map and remark to AF31

[lkadlik]

Hi,

Thank you.

On our internal interface we have

policy-map pmap-rtrlan-in
 description input policy from LAN for stats and set video dscp
 class voice
 class video
 class net-mgmt
 class net-routing
 class critical-apps
 class backup-replication
 class class-default

class-map match-any net-routing
  description matches routing traffic - cs6 (Default)
 match ip dscp cs6
class-map match-any net-mgmt
  description matches net-mgmt & vty traffic in/out
 match ip dscp cs2
class-map match-any backup-replication
  description matches backup and replication traffic
 match access-group name backup-replication-map
 match access-group name mark-af11

class-map match-any video
  description matches video
 match ip dscp af41
 match ip dscp af42
 match ip dscp af31
 match ip dscp af32
 match ip dscp cs6
 match ip dscp cs5

class-map match-any voice
  description matches voice traffic only - in or out
 match ip dscp ef

class-map match-any critical-apps
  description matches critical traffic lan/wan in & out
 match class-map net-mgmt
 match access-group name mark-af21

----------------------------------------------------------------

So based on your answer, I would take the match for af41 out of the video map and create the new class map discussed and add it to the existing policy map as

policy-map pmap-rtrlan-in

class af41_to_af31
set dscp af31

correct?

Thank you

Lynne

[willwetherman · Accepted solution]

Yes that is correct.

Let me know if you have any issues.