Qos

[985116]

Hello,

My C2960 X (Brand New) with ios c2960x-universalk9-mz.152-7.E0a.bin, rejected the qos commands below.

mls qos srr-queue input bandwidth 70 30
mls qos srr-queue input threshold 1 80 90
mls qos srr-queue input priority-queue 2 bandwidth 30
mls qos srr-queue input cos-map queue 1 threshold 2 3
mls qos srr-queue input cos-map queue 1 threshold 3 6 7
mls qos srr-queue input cos-map queue 2 threshold 1 4
mls qos srr-queue input dscp-map queue 1 threshold 2 24
mls qos srr-queue input dscp-map queue 1 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue input dscp-map queue 1 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue input dscp-map queue 2 threshold 3 46 47

Any comments?

[Joseph W. Doherty]

Cannot say for sure but perhaps either QoS is not globally enabled or with that version if IOS it uses the newer router like QoS statements or it's a license issue.

[985116]

Networking

I decided to add a DMZ switch (C2960) to my network. First, I created a management port , and directly connected the management port to my C6504 core switch (both ports are trunked). I was able to ping ( I have default GW on the core and no default GW on the DMZ switch)- I do not want to have a default gateway on the DMZ.

Every other port(s) on the DMZ will be connected to my ISP and firewall. 3 ports dedicated to my ISPs with vlans 3001,3002, and 3003. 

The specific port vlans and vlan interfaces ( 3001,3002,3003) are already configured in the core (6504), but I am still unsure if it will route ( from DMZ to firewall and from fire wall to the core + all other devices.)

Any advise on how I should configure my core switch and DMZ to route properly?

I am looking for an access list template.

Thanks in advance.

[985116]

Networking

I decided to add a DMZ switch (C2960) to my network. First, I created a management port , and directly connected the management port to my C6504 core switch (both ports are trunked). I was able to ping ( I have default GW on the core and no default GW on the DMZ switch)- I do not want to have a default gateway on the DMZ.

Every other port(s) on the DMZ will be connected to my ISP and firewall. 3 ports dedicated to my ISPs with vlans 3001,3002, and 3003. 

The specific port vlans and vlan interfaces ( 3001,3002,3003) are already configured in the core (6504), but I am still unsure if it will route ( from DMZ to firewall and from fire wall to the core + all other devices.)

Any advise on how I should configure my core switch and DMZ to route properly?

I am looking for an access list template.

Thanks in advance.

[balaji.bandi]

Agree with @Joseph W. Doherty 

try below start with :

Enabling QoS Globally

By default, QoS is disabled on the switch.

The following procedure to enable QoS globally is required.

SUMMARY STEPS

1.    configure terminal

2.    mls qos

3.    end

4.    show mls qos

5.    copy running-config startup-config

[985116]

mls qos is already enabled.

The switch did not accept any of the "mls qos srr-queue input" comments but it accepted all the " mls qos srr-queue output" comments.

Can you use my switch without any of the "mls qos srr-queue input" comments? if yes, would there be any device connection issue(s)?

see mls qos srr-queue output comments below ( The switch accepted all the mls qos srr-queue output comments)

mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 0
mls qos srr-queue output cos-map queue 4 threshold 3 1
mls qos srr-queue output dscp-map queue 1 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue output dscp-map queue 1 threshold 3 46 47
mls qos srr-queue output dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 2 threshold 1 26 27 28 29 30 31 34 35
mls qos srr-queue output dscp-map queue 2 threshold 1 36 37 38 39
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue output dscp-map queue 4 threshold 1 8 9 11 13 15
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
mls qos queue-set output 1 threshold 1 100 100 50 200
mls qos queue-set output 1 threshold 2 125 125 100 400
mls qos queue-set output 1 threshold 3 100 100 100 400
mls qos queue-set output 1 threshold 4 60 150 50 200
mls qos queue-set output 1 buffers 15 25 40 20

Please advise.

[Joseph W. Doherty · Accepted solution]

Ah, that helped when you noted only the "input" commands weren't accepted. I thought we were dealing with something a bit more complicated. When in doubt, RTFM.

If you look here: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_7_e/b_1527_2960x_cr/qos_commands.html, you'll notice there are no "mls qos srr-queue input" commands.

[985116]

Does it mean that I do not need to worry about the "Input"commands?

Thanks in advance!

[Joseph W. Doherty]

Yes and no. Since they are not supported, there's not much you can do about it on your device, so in that respect, no need to worry. However, if your traffic was such you really needed such, then, yes, worry.

Regarding the latter, it's unusual you need to worry about ingress congestion on latter switches. Likely the 2960X has a fabric that can absorb all ingress port traffic at wire-speed (unlike the original 3750G. If so, that's likely why the commands are not there.)