DMVPN QoS Configuration over sat link

Hi everyone, having one of those days where I cant seem to see the trees through the forest! Hopefully someone can point the way :)
We have a DMVPN setup with Hub & spoke, 3 remote sites over satellite but the remote sites internet traffic does not come over the vpn, it goes out via the ISP.
One particular site we've been having flooding and packet loss issues with has now been increased from 256k to a 512Kb Cir and the ISP has allowed a 1536 burst - this is where im confused most!
Almost all examples of QoS i see is to limit/restrict the flow to less than the provider CIR is allowing to avoid them dropping packets, so in this scenario, how do I make the most of the burst rate?
The DMVPN is currently set up with QoS policies via IP nhrp map groups, shaping the tunnel to 256k then child maps prioritizing mgmt, Skype etc. Although this seems like a great idea, im being led to believe I should just have qos pre-classify on the tunnel and set the policy-map on the Internet interface, but what I cant work out is how to prioritize or allocate most of the bandwidth to the tunnel for 'work related' purposes and limiting web browsing as currently it seems http/https traffic it taking all the bandwidth!
If I don't use the bandwidth command on the physical interface it appears it believes it has 100m, so I think I need to set it 512k but not sure how to utilize the burst.
Then im guessing I should use something like priority percent and shape average percent to prioritize tunnel traffic over http but does qos then need to be configured on the Hub somewhere as well?
If anyone has a similar setup and can provide example config that would be great.
Any assistance is greatly appreciated, please let me know if you want any configs/outputs.
Cheers,
Kev

Thanks for the reply Marcin, however that doesn't really answer my question(s).
I am fully aware of per tunnel qos as well as HQos, im just no expert in either!
I understand that per tunnel qos applies the settings to the tunnel, but anything Not going via the tunnel will not have any qos applied and that currently seems to be the issue, naughty streaming media and http/https traffic flooding the link!
Using Hqos will apply to the whole link, but it seems I need qos-pre classify on the tunnel to apply before it gets encrypted, or should I just prioritise all GRE so that all tunnel traffic gets priority?
Perhaps I just have my settings too low, http(s) traffic takes all it can leaving work related tunnel traffic, email etc starved of BW.
If anyone has any example configs of similar setups that would be much appreciated, its easier for me to reverse engineer! :)
cheers,
Kev

Similar Messages

VOIP configuration over mpls link

Hi
we want to deploy voip for multiple location over the mpls lines we have between the multiple location can any body suggest the feasibility and how to do it and any related document and guidance for that
Thanks
Manish gaur

Hi,
what do you call a "mpls link"? Do you have an IP interface connecting to a MPLS network implemented by a provider or do you operate a MPLS network yourself?
In any case you might have a look at
1) Enterprise QoS Solution Reference Network Design Guide Version 3.3
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns432/c649/ccmigration_09186a008049b062.pdf
2) Layer 3 MPLS VPN Enterprise Consumer Guide Version 2
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns171/c649/ccmigration_09186a008077b19b.pdf
3) Various design guides for Unified communications
http://www.cisco.com/en/US/netsol/ns656/networking_solutions_design_guidances_list.html#anchor10
Hope this helps!
Regards, Martin

FXO traffic is going over Wan link after enabling QoS

Hi,
We have CCM 5.0,2811 voice gateway,1 4FXO and 1 g.shdsl card on it. 4 Telco lines are on 4FXO card.CCM is at the other side of g.shdsl line.Topology like that,
2811 ---------------- CCM
4fxo g.shdsl
When a call receives from FXO port, system is working normally without QoS. When we enable QoS traffic,traffic is going over wan link then return again.Because of that,delays and timeouts occuring.Router's config is at the attachment. Please Help!
Thank you

Check your H323 gateway config in CCM to be sure the Media Termination Point Required box is unchecked. Using MTP forces the call to terminate on the closest MTP resource which is likely at your CCM site.
Please rate helpful posts.
Dave

Configuring CE-PE link on Frame Relay over ATM

Hi!
Need you guys expert opinion on how to configure configuring CE-PE link on Frame Relay over ATM. I am stump by this one because I never done it before. The CE is a Cisco 7206 with ATM PA and the parameters given to us is DLCI number in x/y format...isn't that the format for PVC. When asked, my SP contact says that it is indeed FR over ATM. Any of you guys who have experience to guide on this or point me in the right direction is most welcome. Thanks
Rgds
Helme

Hello Helme,
ask your provider if they are doing FR to ATM service interworking.
In that case one side is configured for Frame-Relay and the other side for ATM
Service interworking is done by provider.
Verify that you have the same MTU on both sides and configure following ISP specifications
ATM uses two numbers to identify a PVC
int atm 4/0
no ip address
no shut
int atm 4/0.1 point-to-point
mtu 1500
ip address x.x.x.1 255.255.255.252
pvc x/y
enc aal5snap
protocol ip x.x.x.2 broadcast
this should be enough to have it working
on the other side configure or have a point-to-point subif configured on FR
see this example
http://www.cisco.com/en/US/tech/tk39/tk53/technologies_configuration_example09186a00801747e3.shtml
Hope to help
Giuseppe

QOS configuration for Wireless voice over IP

HI, I've been asked to install approx 5 wireless phones on a network that consists of the following:-
1 x 4006 core switch
8 x 3550 Access switches
6 x 1100 AP's (that are connected to the Access switches.
My question is this - does anyone have a basic QoS configuration that I can place onto the LAN infrastructure (Core/Access switches).
Kind Regards
Steve

Should refer to http://www.cisco.com/en/US/products/hw/phones/ps379/products_implementation_design_guide_book09186a00802a029a.html. Also Cat 4K should have Sup2+ or higher to support voice.

DMVPN Spoke with 2 internet link

Hi All,
I am stuck in a situation where we have 2 hubs one in HQ and one in DR site. Both hubs are configured to have different dmvpn cloud. We have some branches with two internet links one adsl and another 3G.
I want to setup dmvpn in such a way so that if adsl goes down then dmvpn tuneel should come up via 3G.
What I know is i would require different tunnels on spoke for achieving this. Currently on each spoke I have two tunnels one terminates on HQ and another terminates on DR and both are live. I am managing routes via eigrp.
My question is that do I need to create another dmvpn cloud for this to work as I can not use same subnet IP on new tunnels which will be having 3G as source ? or shall I create new subnet for tunnels which will work over 3G ??
if i create new tunnel for 3G network then what will be the configuration on HQ & DR as we have only on internet link on DR & HO.
can anybody help me on this ?
just need idea how to achive it. my full dmvpn is working over internet no private mpls....

Hi Jain,
You can let HQ and DR in same DMVPN Cloud. In HQ, do Static NHRP MAP to DR and vise versa.
Spoke routers, create two static NHRP Map and NHS.
Tunnel0
description Spoke
ip nhrp map multicast HQ-WAN-IP
ip nhrp map HQ-Tunnel-IP HQ-WAN-IP
ip nhrp map multicast DR-WAN-IP
ip nhrp map DR-Tunnel-IP DR-WAN-IP
ip nhrp network-id 123
ip nhrp holdtime 60
ip nhrp nhs HQ-Tunnel-IP
ip nhrp nhs DR-Tunnel-IP
This will allow you use one DMVPN cloud for two Hub.
Secondly, for spoke failover to 3G, you would need to create another DMVPN Tunnel at HUB and SPOKE router
At HUB, use different Tunnel IP, but tunnel source will be same. In order this to work, i will suggest you to use DMVPN over IPSec. Use Diffrent tunnel key and ip nhrp network-id for both tunnel interface. Use "shared" command when apply ipsec policy in Tunnel interface.
Sample config at Hub( I only show the difference in Tunnel config)
tunne0
description ***Primary Tunnel***
ip address x.x.x.x
ip nhrp network-id 1
tunnel key 1
tunnel protection ipsec profile TN-DMVPN shared
tunne1
description ***Primary Tunnel***
ip address y.y.y.y
ip nhrp network-id 2
tunnel key 2
tunnel protection ipsec profile TN-DMVPN shared
At Spoke, you configure same as primary tunnel, but make sure to change network-id and tunnel key. Here, you may no need to use "shared" command when apply ipsec policy
Hope this helps.
Regards,
Nagis

QoS on metro ethernet links

We recently got a metro ethernet link (45Mbps) between 2 of our offices.
Currently we do not have any QoS services from the provider on this link.
I want to implement QoS over this link. Should i treat this as a normal P2P link and do the QoS or should i also need to ask the SP to do some sort of QoS in their MEN.
Does it really matter to have the SP do QoS as well
Note:- I will be using the link purely as a L3 P2P link
Thanks in advance
Narayan

You would need the QOS on the MAN connect as well. Even though you are running a L3 P2P link you are traversing multiple L2 hops.
And where there may be contention by others traffic contending for the resources.
I believe in most cases your SP's 4 to 5 Classes would be good enough. Still you may want to understand his classes and also may want to negotiate the SLA terms.
Once this is taken care you can simply ask him to trust the incoming DSCP on the attachment circuit at his UPE.
You may also have to configure incoming DSCP trust on your Metro-CPE link which connects to you internal core routers.
HTH-Cheers,
Swaroop

QoS Configuration for NME-AIR-WLC

Hello,
I have a question on the correct QoS configuration for a VoIP deployment. I have followed the steps referenced here but have two questions..
1) The last recommendation in the list is to set DCA channel sensitivity to High to avoid changes during business hours. I think this should be Low? The manual states "Low—The DCA algorithm is not particularly sensitive to environmental changes."
2) The recommendation is to trust dscp on AP uplinks and to trust cos on the WLC uplink. However I can't find any configuration guidelines for configuring QoS if the WLC in question is an NME hosted in a 2921.
2a) The link between the switch and the 2921 is an 802.1q trunk so should I trust cos on this link rather than dscp?
2b) What configuration should be on the 2921? Create a policy-map and apply it to the uplink port?
2c) Should there be a service policy assigned to the In1/0 interface for the WLC itself?
Any thoughts appreciated.
Thanks,
Dave

Well I appear to have answered question 2 after I stopped being lazy and did some packet captures.
No configuration required on 2921 as packets captured from In1/0 and Gi0/0 show correct DSCP markings on RTP and SCCP packets.
Would still be interested to know on question 1 though.

Execute procedure over db link

I am trying to execute a stored procedure over database link and I get the following error
DBMS_APPLY_ADM.SET_UPDATE_CONFLICT_HANDLER@DBCS(
ERROR at line 12:
ORA-06550: line 12, column 2:
PLS-00306: wrong number or types of arguments in call to 'SET_UPDATE_CONFLICT_HA
NDLER'
ORA-06550: line 12, column 2:
PL/SQL: Statement ignored
However when I execute the same peice of code by logging on to the server the code executes successfully. "DBCS" is the database link name.
CODE which I am executing over DB LINK
DECLARE
COL_NAME DBMS_UTILITY.NAME_ARRAY;
CURSOR C1 IS
SELECT COLUMN_NAME FROM ALL_TAB_COLUMNS WHERE OWNER='SCOTT' AND TABLE_NAME='DEPT';
BEGIN
OPEN C1;
FETCH C1 BULK COLLECT INTO COL_NAME;
CLOSE c1;
DBMS_APPLY_ADM.SET_UPDATE_CONFLICT_HANDLER@DBCS(
OBJECT_NAME => 'SCOTT.DEPT',
METHOD_NAME => 'OVERWRITE',
RESOLUTION_COLUMN => COL_NAME(1),
COLUMN_LIST => COL_NAME);
END;
CODE without DB LINK (executed this on db where db link is pointing too.
DECLARE
COL_NAME DBMS_UTILITY.NAME_ARRAY;
CURSOR C1 IS
SELECT COLUMN_NAME FROM ALL_TAB_COLUMNS WHERE OWNER='SCOTT' AND TABLE_NAME='DEPT';
BEGIN
OPEN C1;
FETCH C1 BULK COLLECT INTO COL_NAME;
CLOSE c1;
DBMS_APPLY_ADM.SET_UPDATE_CONFLICT_HANDLER(
OBJECT_NAME => 'SCOTT.DEPT',
METHOD_NAME => 'OVERWRITE',
RESOLUTION_COLUMN => COL_NAME(1),
COLUMN_LIST => COL_NAME);
END;
Please guide.

orausern wrote:
Hi,
We are on Oracle 11.2.0.2 on Solaris 10. I have two databases on this version of Oracle. From one db I have execute a stored procedure via db link to another database. The store procedure has dynamic sqls (execute immediate) and it uses commit statement as part of the code. Is it alllowed to execute this procedure over db link? I am not aware on the implications on stored proc execution over db link and will be thankful for help.
Thanks,if no error is thrown, why are you looking for problems where none exist?

Interactive report performance problem over database link - Oracle Gateway

Hello all;
This is regarding a thread Interactive report performance problem over database link that was posted by Samo.
The issue that I am facing is when I use Oracle function like (apex_item.check_box) the query slow down by 45 seconds.
query like this: (due to sensitivity issue, I can not disclose real table name)
SELECT apex_item.checkbox(1,b.col3)
, a.col1
, a.col2
FROM table_one a
, table_two b
WHERE a.col3 = 12345
AND a.col4 = 100
AND b.col5 = a.col5
table_one and table_two are remote tables (non-oracle) which are connected using Oracle Gateway.
Now if I run above queries without apex_item.checkbox function the query return or response is less than a second but if I have apex_item.checkbox then the query run more than 30 seconds. I have resolved the issues by creating a collection but it’s not a good practice.
I would like to get ideas from people how to resolve or speed-up the query?
Any idea how to use sub-factoring for the above scenario? Or others method (creating view or materialized view are not an option).
Thank you.
Shaun S.

Hi Shaun
Okay, I have a million questions (could you tell me if both tables are from the same remote source, it looks like they're possibly not?), but let's just try some things first.
By now you should understand the idea of what I termed 'sub-factoring' in a previous post. This is to do with using the WITH blah AS (SELECT... syntax. Now in most circumstances this 'materialises' the results of the inner select statement. This means that we 'get' the results then do something with them afterwards. It's a handy trick when dealing with remote sites as sometimes you want the remote database to do the work. The reason that I ask you to use the MATERIALIZE hint for testing is just to force this, in 99.99% of cases this can be removed later. Using the WITH statement is also handled differently to inline view like SELECT * FROM (SELECT... but the same result can be mimicked with a NO_MERGE hint.
Looking at your case I would be interested to see what the explain plan and results would be for something like the following two statements (sorry - you're going have to check them, it's late!)
WITH a AS
(SELECT /*+ MATERIALIZE */ *
FROM table_one),
b AS
(SELECT /*+ MATERIALIZE */ *
FROM table_two),
sourceqry AS
(SELECT b.col3 x
       , a.col1 y
       , a.col2 z
FROM table_one a
    , table_two b
WHERE a.col3 = 12345
AND   a.col4 = 100
AND   b.col5 = a.col5)
SELECT apex_item.checkbox(1,x), y , z
FROM sourceqry
WITH a AS
(SELECT /*+ MATERIALIZE */ *
FROM table_one),
b AS
(SELECT /*+ MATERIALIZE */ *
FROM table_two)
SELECT apex_item.checkbox(1,x), y , z
FROM table_one a
    , table_two b
WHERE a.col3 = 12345
AND   a.col4 = 100
AND   b.col5 = a.col5If the remote tables are at the same site, then you should have the same results. If they aren't you should get the same results but different to the original query.
We aren't being told the real cardinality of the inners select here so the explain plan is distorted (this is normal for queries on remote and especially non-oracle sites). This hinders tuning normally but I don't think this is your problem at all. How many distinct values do you normally get of the column aliased 'x' and how many rows are normally returned in total? Also how are you testing response times, in APEX, SQL Developer, Toad SQLplus etc?
Sorry for all the questions but it helps to answer the question, if I can.
Cheers
Ben
http://www.munkyben.wordpress.com
Don't forget to mark replies helpful or correct ;)

Report over database link error

Good morning all.
I have a database link LINKA from USERA on LOCALSERVER to USERB on REMOTESERVER.
(create database link LINKA connect to USERB identified by mypassword using validtns)
In USERC on REMOTESERVER I have a TABLEX, with grant all on TABLEX to USERB on REMOTESERVER.
In USERB on REMOTESERVER I have a view TABLEXV, select * from USERC.TABLEX
From USERA on LOCALSERVER I can select * from TABLEXV@LINKA. In fact I can insert/update/delete tablexv from USERA.
I also have a view TABLEXV on USERA, select * from TABLEXV@LINKA. I can also select/insert/update/delete from USERA.TABLEXV.
So far so good - all working as expected.
Then, my APEX app on LOCALSERVER, interactive report, parsing schema USERA, querying TABLEXV, I get the following:
when "Exclude Link Column", I get the error "The requested URL /pls/apex/f was not found on server.
when "Link to Single Row View", report displays correctly.
when "Link to Custom Target", I get the error "The requested URL /pls/apex/f was not found on server.
When I run the select * from TABLEXV as a regular report (i.e. not interactive), I also get the error.
So the only time I get the report displayed correctly is using IR and "Link to Single Row View".
However, clicking on the link (for Single Row View) I get "The requested URL /pls/apex/wwv_flow.show was not found on this server.".
To summarize:
- accessing table via view over database link
- works outside of apex without issue
- inside only works when Link to Single Row View set
- But clicking on link fails
I could live with just having the Link to Singe Row View option if I could disable displaying of the icon so that the user cant click on it.
APEX 3.2.00.27
EE Database - 10.2.0.3 (yes I know out of support)
Remote EE Database - 10.2.0.5
Real object names replaced to protect the innocent!
Anyone got any clues?
I have used remote tables many times in my APEX applications and never had this issue.
Thanks,
Rob @ very confused .com

Good morning all.
I have a database link LINKA from USERA on LOCALSERVER to USERB on REMOTESERVER.
(create database link LINKA connect to USERB identified by mypassword using validtns)
In USERC on REMOTESERVER I have a TABLEX, with grant all on TABLEX to USERB on REMOTESERVER.
In USERB on REMOTESERVER I have a view TABLEXV, select * from USERC.TABLEX
From USERA on LOCALSERVER I can select * from TABLEXV@LINKA. In fact I can insert/update/delete tablexv from USERA.
I also have a view TABLEXV on USERA, select * from TABLEXV@LINKA. I can also select/insert/update/delete from USERA.TABLEXV.
So far so good - all working as expected.
Then, my APEX app on LOCALSERVER, interactive report, parsing schema USERA, querying TABLEXV, I get the following:
when "Exclude Link Column", I get the error "The requested URL /pls/apex/f was not found on server.
when "Link to Single Row View", report displays correctly.
when "Link to Custom Target", I get the error "The requested URL /pls/apex/f was not found on server.
When I run the select * from TABLEXV as a regular report (i.e. not interactive), I also get the error.
So the only time I get the report displayed correctly is using IR and "Link to Single Row View".
However, clicking on the link (for Single Row View) I get "The requested URL /pls/apex/wwv_flow.show was not found on this server.".
To summarize:
- accessing table via view over database link
- works outside of apex without issue
- inside only works when Link to Single Row View set
- But clicking on link fails
I could live with just having the Link to Singe Row View option if I could disable displaying of the icon so that the user cant click on it.
APEX 3.2.00.27
EE Database - 10.2.0.3 (yes I know out of support)
Remote EE Database - 10.2.0.5
Real object names replaced to protect the innocent!
Anyone got any clues?
I have used remote tables many times in my APEX applications and never had this issue.
Thanks,
Rob @ very confused .com

Mouse-over a link

when i mouse-over a link, i can see where that link brings me in the lower left corner. but when i enable the search (shift+f), the links are in the lower RIGHT corner. why? its really embarassing for example on facebook, because the chat windows can be found at the lower right corner, right where are these "links". can i change it some way? thanks in advance!

You can use this extension to change that behavior:
* Status-4-Evar: https://addons.mozilla.org/en-US/firefox/addon/status-4-evar/

Mouse over HTML link causes single frame to display at top of page Netscape only

Having a wierd problem. When you run the mouse over HTML
links on the page a single frame of the flash movie apears at the
top center of the page. It only happens in netscape in firefox
mode. IE, Opera, and Firefox do not have the problem.
Problem site
Thanks in Advance,
Vorsch

The problem goes away if i modify my .css file by removing
the
border: 1px solid #999999;
line from the "a:hover" style.
I ran my css file thru the validator at w3c and its fine. The
Page also validates as xhtml transitional.
and just a note the same file version is on my public server
and my testing server.
Has anyone ever seen this before?? I have several sites with
a:hover effects and flass media and have never run across this
before.

In WebHelp, when I mouse over a link, the font size changes.

Either after I generate to WebHelp or View in RoboHelp, when I mouse over a hyperlink text, the font changes from large to small text. My step is a 11pt font, my body text is 10pt. It appears the 11 pt. font switches to 10pt font when I mouse over it. Any way to fix this?
Also noticed that when I have a note at 9 pt, and mouse over a link, the text changes to 10pt.
So now it appears in most of my topics with links within a step or note. In a body, the text appears fine (or stays the same) when you mouse over a link.

Not believing that either.
You should be able to edit your CSS in a text editor. If you are not sure what to do, set up a simple project using your CSS. Any text will do and create a link.
See the Contact page on my site and follow the instructions there.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

I want to know how to get the web addresses to go away that appear in the bottom left corner of the browser every time my mouse goes over a link

Any time that my mouse goes over a link on a web page a little box in the bottom left corner of the browser pops up showing the web address for that link and it is really annoying, especially when i am on facebook because there are so many links on the home page i cant move my mouse anywhere without that box popping up and blocking part of my conversations. I was wondering if there was any way to turn this off. I've checked through the options and to my knowledge there is no way to turn it off. Just wondered if anyone else has had this problem or knew if there was a way to get that box to go away.

Another option would be to use the following extension to push those messages into the status bar. It could be a convenient way to have your messages visible when you want them, but with less distraction.
https://addons.mozilla.org/en-US/firefox/addon/status-4-evar/
If you try it, let us know what you think.

DMVPN QoS Configuration over sat link

Similar Messages

Maybe you are looking for