Greetings,
I am attempting to configure and get working QoS on a Catalyst 3550 (C3550-IPBASE-M) with IOS 12.2(25)SEB4.
So far, I have configured the following ACL ('ip access-list extended VACL') on my switch:
Extended IP access list VACL
10 permit udp 10.200.0.0 0.0.255.255 any
20 permit udp any 10.200.0.0 0.0.255.255
I have designed this ACL to match against any traffic to or from the IP 10.200.0.0 (any IP within that class B network). This ACL is being used in a class-map called VCLASS ('class-map VCLASS'):
Class Map match-any VCLASS (id 1)
Match access-group name VACL
As you can see, I am obeying the 'one match per class-map' limitation. This class-map is then being used in a policy-mapp called VPOLICY (the 'V' stands for 'Voice'):
Policy Map VPOLICY
Class VCLASS
set dscp ef
This policy-map simply sets the DSCP value of the packet to EF (46). With these three entities defined, I am applying this policy-map to the interface fa0/3 (I am using this single interface as a test at the minute) on the ingress port.
FastEthernet0/3
Attached policy-map for Ingress: VPOLICY
trust state: not trusted
trust mode: not trusted
COS override: dis
Attached policy-map for Egress: VPOLICY-OUT
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: none
As you can also see, I have something called "VPOLICY-OUT" for Egress. The VCLASS-OUT and VPOLICY-OUT maps are defined as follows:
Class Map match-all VCLASS-OUT (id 2)
Match ip dscp ef
Policy Map VPOLICY-OUT
Class VCLASS-OUT
police 2097000 61440 exceed-action drop
trust dscp
I have enable the priority queue on fa0/3, and I have setup the CoS-QID map:
FastEthernet0/3
Egress expedite queue: ena
wrr bandwidth weights:
qid-weights
1 - 1
2 - 2
3 - 4
4 - 3 when expedite queue is disabled
Cos-queue map:
cos-qid
0 - 1
1 - 1
2 - 2
3 - 2
4 - 4
5 - 4
6 - 3
7 - 3
Currently, DSCP EF (46) matches to CoS value '5'. CoS value '5' has been configured to use queue ID '3', which, according to Cisco documentation, is the priority queue when priority queueing is enabled.
After all this has been defined, here is the results from 'show policy-map int fa0/3':
FastEthernet0/3
Service-policy input: VPOLICY
Class-map: VCLASS (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group name VACL
0 packets, 0 bytes
5 minute rate 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
Service-policy output: VPOLICY-OUT
Class-map: VCLASS-OUT (match-all)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: ip dscp ef
Class-map: class-default (match-any)
7584 packets, 496217 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
7584 packets, 496217 bytes
5 minute rate 0 bps
Nothing is being matched, except on the Egress under the "class-default" class-map.
I have been at this for some time now, and I don't understand why nothing is matching. Could some PLEASE help me understand what I am potentially doing wrong here? I have attached my configuration (with sensitive information edited out) for your review.
I hope someone can help, and all feedback is appreciated.
Kind regards,
Michael Crilly.
