11-06-2018 07:53 AM - edited 03-08-2019 04:33 PM
Hello,
i'm currenlty configuring Qos on 2960S platform (IOS 15.0(2)SE11, here is my configuration :
Policy-map :
WS-C2960S-48LPS-L#sh policy-map
Policy Map PM_MARKING-POLICY
Class CM_REALTIME-DATA
set dscp ef
Class CM_MULTIMEDIA-CONF-DATA
set dscp af41
Class CM_SIGNALING-CONTROL-DATA
set dscp cs3
Class CM_TRANSACTIONAL-DATA
set dscp af21
Class CM_BULK-DATA
set dscp af11
Class CM_SCAVENGER-DATA
set dscp cs1
Class-map :
WS-C2960S-48LPS-L#sh class-map
Class Map match-all CM_TRANSACTIONAL-DATA (id 4)
Match none
Class Map match-any class-default (id 0)
Match any
Class Map match-all CM_SCAVENGER-DATA (id 6)
Match none
Class Map match-all CM_MULTIMEDIA-CONF-DATA (id 2)
Match none
Class Map match-all CM_SIGNALING-CONTROL-DATA (id 3)
Match none
Class Map match-all CM_REALTIME-DATA (id 1)
Match none
Class Map match-all CM_BULK-DATA (id 5)
Match access-group name ACL_BULK-DATA
Access-list :
WS-C2960S-48LPS-L#sh ip access-lists ACL_BULK-DATA
Extended IP access list ACL_BULK-DATA
10 permit tcp any any eq 8080
Service Policy applied to Gi1/0/1 :
interface GigabitEthernet1/0/1
description Telephone / Poste de travail
switchport access vlan 123
switchport mode access
switchport voice vlan 456
load-interval 60
power inline consumption 7000
power inline police
speed auto 1000
duplex full
srr-queue bandwidth share 1 30 35 5
priority-queue out
no snmp trap link-status
snmp ifindex persist
mls qos trust dscp
no mdix auto
storm-control broadcast level 10.00
storm-control multicast level 10.00
no cdp enable
spanning-tree portfast
spanning-tree bpduguard enable
service-policy input PM_MARKING-POLICY
Global qos commands :
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 0
mls qos srr-queue output cos-map queue 4 threshold 3 1
mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46
mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34
mls qos srr-queue output dscp-map queue 2 threshold 1 36 38
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 56
mls qos srr-queue output dscp-map queue 3 threshold 3 0
mls qos srr-queue output dscp-map queue 4 threshold 1 8
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
mls qos queue-set output 1 threshold 1 100 100 100 100
mls qos queue-set output 1 threshold 2 80 90 100 400
mls qos queue-set output 1 threshold 3 100 100 100 100
mls qos queue-set output 1 threshold 4 60 100 100 400
mls qos queue-set output 1 buffers 15 30 35 20
mls qos
Looking at the qos statisctics for the port gi1/0/1 I noticed that for web browsing (proxy port 8080) no packets appear in dscp 10 (AF11) in the outgoing dscp statistics. DSCP field should be rewrite to AF11 instead of DSCP 0 (for web browsing) because of Class-map CM_BULK-DATA & ip access-list ACL_BULK-DATA. Right or wrong ?
WS-C2960S-48LPS-L#sh mls qos int gi1/0/1 statistics
GigabitEthernet1/0/1 (All statistics are in packets)
dscp: incoming
-------------------------------
0 - 4 : 34508 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 269 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------
0 - 4 : 164343 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------
0 - 4 : 35012 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------
0 - 4 : 252757 0 0 0 0
5 - 7 : 0 0 2522
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 128272 7224 2523
queue 2: 0 0 117350
queue 3: 0 0 0
output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0
Policer: Inprofile: 0 OutofProfile: 0
I don't understand why. What is my mistake ? your help would be greatly appreciated. Thank you.
Christophe.
11-06-2018 01:12 PM
Hello,
try and remove the 'mls qos trust dscp' from the interface...
--> Classification using a port trust state (for example, mls qos trust [cos | dscp | ip-precedence] and a policy map (for example, service-policy input policy-map-name) are mutually exclusive. The last one configured overwrites the previous configuration.
11-07-2018 11:32 PM
Hello Georg,
Thank you for your response. I tried your solution but it still doesn't work. Any other idea ?
Because service-policy is applied to input, should i have to look at dscp incoming rather than dscp outgoing ? I tried to change the direction of my acl but without success.
11-08-2018 07:18 AM
Hello,
looking at the output you posted earlier, it looks like everything outgoing gets reset to dscp 0...
Can you post the full config of your switch ?
11-08-2018 07:38 AM
Hello Georg,
Yes I agree, all traffic reset do dscp 0. Since the last post I made some changes :
Global qos commands :
mls qos srr-queue output dscp-map queue 1 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue output dscp-map queue 1 threshold 3 46 47
mls qos srr-queue output dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 2 threshold 1 26 27 28 29 30 31 34 35
mls qos srr-queue output dscp-map queue 2 threshold 1 36 37 38 39
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue output dscp-map queue 4 threshold 1 8 9 11 13 15
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
On the uplinks I added :
mls qos trust dscp
priority queue-out
srr-queue bandwidth share 1 30 35 5
Please found attached full config of the switch. Thank you very much for your help.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide