6500 access layer QoS

I have 6506E Sup32 PFC3B 12.2(18)SXE device at the access layer of the network and would like to implement QoS (for access ports) for Voice, Video.
I suppose that untrusted microflow policing is best for me. But documents say that such kind functionality works for L3 MSFC routed traffic. For PFC3b I can use "mls qos bridged" for bridged traffic on specified vlans. Does it really work for input service policy on access ports for traffic from user ports (if I use this command on user's int VLAN)?
Distribution and core layers of my networks are MPLS based.
Config:
interface FastEthernet2/1
switchport
switchport access vlan 10
switchport mode access
switchport voice vlan 30
no ip address
spanning-tree portfast
service-policy input IPPHONE+VIDEO
interface Vlan30 ! also for Vlan 30
ip vrf forwarding VOICE
ip address 10.168.8.254 255.255.255.0
ip helper-address 10.168.2.33
ip helper-address 10.168.2.34
ip pim sparse-dense-mode
mls qos bridged
policy-map IPPHONE+VIDEO
class VOICE
police flow mask src-only 320000 8000 conform-action set-dscp-transmit ef exceed-action drop
class VIDEO-INTERACTIVE
police flow mask src-only 2400000 8000 conform-action set-dscp-transmit af41 exceed-action drop
class CALL-SIGNALING
police flow mask src-only 32000 8000 conform-action set-dscp-transmit cs3 exceed-action policed-dscp-transmit
class class-default
police flow mask src-only 5000000 8000 conform-action transmit exceed-action policed-dscp-transmit

This URL should help you:
http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a00801c8c4b.shtml

Similar Messages

6500 or 4500 for the access layer

I would like to get some input as to the best switch to use at the access layer. I am considering both the 6500 with a Supervisor 32 and the 4500 with a Supervisor 5. I am using the Sup 720 in the data center so staying with a single platform is appealing although the 4500 clearly appears to out perform the Sup 32.
Does anyone have experience with the Supervisor 32? Any feedback would be much appreciated.

Go with the 6500 with the Sup32. Cisco has a bundle with a chassis, Sup32, and a Fan for the reduced price.
Few reasons the Sup32 is a better choice.. (engage your Local Cisco account team for a overview to compare architectures)
Same Layer2 engine as the Sup720. This means you will receive the same Layer2 performance as the Sup720 would using classic line cards
Modular IOS and the Same IOS as your core. This allows you to only have to test and maintain one code for the network
Can upgrade to a Sup720 later if your needs change. (or the next version line cards as well without replacing chassis)
higher density POE support in the 6500 chassis.
Many more features are supported in Hardware on the Sup32 due to the PFC3B.
Control Plane Policing. Hardware policiers
Service module support
Dont let PPS fool you on the spec sheets. Look at the architecture as a whole. The Sup V on the 4500 is a shared memory architecture and has a limited "punt path". The Sup32 has a 1Gbs punt path and the SupV is under 250k pps. The Sup V also does not have a dedicated L2 engine like the Sup32 does (PFC3B vs asic)
Your profile also lists you as with a financial firm. With multicast in the equation, the 6500 is always the best bet. The Multicast features/policers support in hardware to insure reliability and low latency switching is a perfect fit for the Sup32/Sup720.
With the Sup32 you can have the same reliability you have in the core. Also, the 6500 bundle cost comes to roughly the same cost as the 4500.

Layer 3 to the Access Layer and MPLS Design Considerations

Hi,
We are about to install a new network consisting of Cat 4500s with Sup7E at the Access Layer, with Nexus 7000 at the Distribution and Core layers.
We have 14 floors with at least three 4500s on each floor. Within the office block where the Access Layer and Distribution Layer reside we need to support secure borderless networking using 802.1x to place users from different parts of the business into segregated networks at layer 3.
All switches will have the feature sets to support MPLS/ VRF / OSPF / EIGRP / BGP etc.
We quickly dismissed the idea of using VRF-Lite due to the sheer number of Vlans we would need to managage and maintain, the point to point links alone just to get one additional VRF on each floor required far too many Vlans.
As a result we are now considering deploying MPLS. The obvious benefits include scalability and manageability, the fact that all switch to switch links can now be routed, instead of having to using SVIs.
My query is one of design surrounding MPLS and how this maps to an enterprise network with a routed access layer. Do Cat 4500s become the CEs and take part in MPLS / BGP and Label Distribution, or does the BGP peering and Label Distribution only occur between the Distrubtion - Core - Distrubtion layers, mapping to the PE - P - PE topology in an ISP environment, the access layer simply uses the IGP (OSPF in this case) to learn routes ?
Any help would be greatly appreciated.
Chris.

Hi Andy,
Thanks for your response.
I have been doing a little bit more research it seems the Cat 4500s do not support MPLS!! Nor do Cisco have any plans to support it on this platform. I find this a little rediculous considering the level that Cisco are pitching this platform. With the Sup 7E only VRF Lite is supported, with plans to support EVN (which still uses trunk links for logical separation).
So it looks like we are going to have to go back to the drawing board.
(perhaps we should have gone HP or Juniper!)
Chris.

Bandwidth from Access Layer to Distribution Layer

Folks:
I am currently on Chapter 12 of “CCNP Switching 642-813, Official Certification Guide” ISBN: 978-1-58720-243-8. I am currently not grasping the three layers entirely, and I was hoping someone could offer insight in a different way.
I believe I understand, that switches in the Access-Layer can be layer2 devices (2950, etc), and devices in the Distribution Layer should be Multilayer devices such as Layer-3 switches (3750) and inter-vlan routing takes place at the Distribution layer. But what I do not understand – how does one account for bandwidth and traffic from the Access Layer switches to the Distribution Switches?
Let use a 24 port 2950 switch located at the Access-Layer. If everyone was online and communicating, the total traffic for the switch would be 4.8 Gbps. The latter is due to each port providing 100 Mbps but in Full-Duplex, so (100*2)*24. So, how does an engineer spec out the required uplink ports from the Access Layer to the Distribution?
I am sure this is easy; however, I am not getting the concepts. Any insight is great.

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
As noted by Peter, edge hosts don't generally all concurrently push/pull their full port bandwidth for substained periods. However, host bandwidth usage often varies much by "kind" of host. For example, many server hosts are "busier" than most user hosts, so when designing networks you normally design for lower oversubscription ratios for server hosts than for user hosts. Old rule-of-thumbs ratios suggest oversubscription ratios of about 8:1 to 4:1 for servers, and about 48:1 to 24:1 for users.
Keep in mind that oversubscription ratios can be "skewed" by what the host is doing, i.e. not all server or user hosts have similar bandwidth demands. For example, your primary mail server or primary file server might be much "busier" than other server hosts. Likewise, some user hosts might be much "busier", for example, years ago I supported a LAN segment of CADD (20) workstations which had more traffic on their local LAN than the (2,000 user) corporate backbone.

Calculating oversubscription on access layer

So, the situation is that we have about 240 users (max, no further expansion to this figure) on each floor of a building, spanning across 10 floors. As I understood from the basic calculation, for every 240 users @ 100/1000, I need to deploy 5(48 port stacked switches within each IDF on each floor) (5x48) will share 2x1GigE uplinks(etherchannel) terminated into two different cores with a redundant 2x1G uplink (passive).
Someone tells me that this will result in an oversubscription ratio of 120:1 in the best case scenario when we fully utilize both uplinks in an active/active setup. Is this ratio unacceptable at access layer?
Should I consider dual 10GigE uplinks from the access layer to core, to start with, irrespective?
I currently am working with 1G uplinks and don't see any major hassles. My applications though utilise 3D and CAD drawings but I still feel that 2-4Gig uplink would be more than sufficient for me as I can link aggregate further upto 8Gigs using Cisco Cat 3750E.
Should we go for 10Gig uplink straightway?
Your thoughts!!

You really need to look at your traffic endpoints to determine what the possible bottlenecks are. If most of your users are only going to a couple of servers, then it's likely the bottleneck will be the server links, not you access uplinks.
With that in mind, a 10 gig link works better than channeled gig links. First, you don't have the problem of multiple flows using the same saturated gig link of a bundle while others are not being used. Second, you don't need to concern yourself that the correct channel hash method is being used.
Although 10 gig ports are more expensive than gig ports, if you factor in the possible need for additional cable runs and the cost of multiple gig modules, 10 gig might becomes less expensive sooner then you might expect.
You note you don't have any problems with gig uplinks today. Assuming your moving users from 10/100 to 10/100/1000 and they will be using 1000, unlikely performance will be any worse, but possible it won't improve much either.
PS:
Deja-vu - reminds me of moving from 10 to 100 Mbps for users and 100 to gig for uplinks

Object services - manual implementation of database access layer

Hello,
this is my first time with object services. I read a lot but can't find the information which I really need to implement my requirements.
I have build a persistent class, clicked to "persistence", mapped my persistent attributes. I want to use a table-like attribute in my class, which contains references to another class. I added this attribute manually to the attribute list in the class builder. Consequently, GET and SET methods were generated automatically. Then I changed the generator settings by activating "manual implementation of database access layer".
So, my first notice is - If I choose manual implementation a call of create_persistent-method will not work. Nothing will be inserted into the mapped data base table.
Can anybody give me a example which shows how I can implement the database access layer manually? What do I have to do to write object attributes into data base table?
Which methods do I have to enhance?
Thanks a lot for any help in advance!
Anne

Thanks for your answer, but I would not be sure if you really got my problem.
I really really read much stuff (including SAP help, sappress "object services in ABAP" by Assig, Fobbe, Niemitz, sappress "abap objects" by keller), I googled a lot. But I couldn't find detailed information about this manual implementation of database access which you can activate in persistence settings.
This is the only extract out of SAP Help regarding this topic:
"If you prefer to carry out a manual implementation of the database access layer, select to change the generator settings and select the field of the same name. In this case you can implement your own database read routines, through which you can redefine the generated SET and GET methods for access to the database. This is particularly recommended if you want to improve performance by providing these routines with their own buffer mechanism. "
And some information about so calles Structure mapping which means the same idea in my opinion
"Structure Mapping
In this case, you map ABAP Dictionary structures, rather than database tables or database views to persistent objects. The application developer must therefore program the type of persistent data storage in the appropriate methods of the class actor.
You will need to map a structure (or structures) if you want a persistent object to contain table-like attributes. Database tables can only have flat structures, which prevents your mapping the object to a table in this case. You must still use structure mapping, even if you want to store the data in a different form u2013 such as in a file on the application server."
I used the debugger to get the idea of the SAVE method. But I couldn't find the difference between manual and automatic implementation in the code.
I tried to use implicit enhancement, but was not successful. Right now I am trying to redefine the SAVE method of the interface IF_OS_CA_SERVICE. But I can't believe that I have to implement the whole attribute-table-mapping on my own now. That can't be the idea of object service and their manual implementation. In my opinion it must be possible to use predefined algorithm to map business key etc. to corresponding table fields and to implement own ideas just for those table-like attributes..
Or am I totally wrong with this thoughts?
Thanks in advance!!
Anne

Data Access Layer In BPM

Hi,
I am using WLPI. I need to define the data access layer. As workflows deal in
XML and for JDBC calls I need value objects. I have few questions:
Is there any proffered way of communication between BPM and database?
Does BEA/Sun/BPM Users recommend entity beans for data access thru BPM?
Do I have to write XML to value object and vice versa logic for each type of communication?
Please recommend a standard approach.
Thanks,
Parag

My questions are:
Is it proper to use AI Adaptors for normal database storage? and is there any
way to store the XML into its db representation? I was thinking of calling business
operation from BPM, passing the xml and parsing it in session bean and make jdbc
calls in ejb. Looks like a lot of effort. Hence I am curious to know other solutions
Thanks,
Parag
"Dharnidhar Vemuri" <[email protected]> wrote:
Hi,
Ways that I can think of are
- using Application Integration, specifically views (it also
uses
EJB)
- EJB classes
- a java class
I didn't get u what u meant by XML to value object. Can u be in more
detail.
Thanks
Dhar
"Parag" <[email protected]> wrote in message
news:[email protected]..
Hi,
I am using WLPI. I need to define the data access layer. As workflowsdeal
in
XML and for JDBC calls I need value objects. I have few questions:
Is there any proffered way of communication between BPM and database?
Does BEA/Sun/BPM Users recommend entity beans for data access thruBPM?
Do I have to write XML to value object and vice versa logic for eachtype
of communication?
Please recommend a standard approach.
Thanks,
Parag

802.1x Guest Vlan and Routed access layer design

Hi!
For many reasons, I have to re-design my campus network in a more ISP like way. The plan is to move to a routed access layer in the next two years. I have 802.1x with guest vlan on my access ports(3750). I was reading on the subject and I found that the guest vlan feature was not availeble with internal vlan(routed port).
Is this limitation realy there, is there a way I can get around it without complicating my design even more. Do cisco have plan to lift this???

You cannot use/configure 802.1X on a routed port today. Typically, 802.1X is to be used for LAN edge ports.
The Guest-VLAN should work with a routed access design though. If your Guest-VLAN is chosen to be separate from say otherwise statically configured access VLANs, you would need to configure it via separate SVI with corresponding IP info (in a routed access model).
Hope this helps,

Oracle Data Access Layer - w/Enterprise Services

I'm looking for an example Oracle Data Access layer incorporating Enterprise Services with at least a simple window form inserting and updating data tables.
Can somepoint point me in the right direction?
Thanks,
Tony

Hi Tony,
I would recommed you hit some of the popular .Net Development sites on the Internet. For example, just googling on .Net Enterprise Services provides links where simple samples can be reviewed. These generic code samples can then be tweaked to include ODP code for data access. If your components or code will be enlisting in transactions with MTS, hence your class or aspx page is transactional, you will need to install the Oracle Services for MTS in addtion to the ODP driver.
HTH
Jenny

Flex/Coldfusion data access layer

Hi
I'm researching ways to achieve a data access layer using flex/coldfusion.
Currently it seems that I would need a RemoteObject on each flex component that will access ColdFusion (a cfc that will access a database).
I'm not sure if it's possible to have a data access class, which will contain a single RemoteObject, and somehow I will be able to request data from a component and somehow retrieve it again. I have the feeling I'd have to dispatch events at the component level, and also include the result handling here too, which I'm not sure is ideal. I haven't been able to decide on a strategy yet.
So far I've only found articles describing a need to have a layered structure when building a large data-centric application, however no examples of how this is actually acheived.
If anyone has seen any examples of this please could you share them here.
Thanks.

I am looking for something similar, but I am not too
sure how it would work.
I have tried developing one myself, using the
underlying interface classes, but I am unsure how to
overcome the differences between SQL Server and
Oracle when returning result sets. SQL Server is
happy to return a DataSet from a stored procedure,
but Oracle must be given a Ref Cursor variable
parameter for each DataTable returned.
This means that the calling code must differ between
SQL Server and Oracle.
If anyone can suggest a neat way to get over this,
I'd appreciate it.
Check out the DAABv3 from GotDotNet. It implements an abstract factory pattern for data providers. It works with Oracle, but not, I think, with ODP.NET. It's extensible, though, so ODP.NET support could be added.
In addition the V2 of the .NET framework will have an abstract factory pattern for data providers built in.
On the particular question of ref cursors and Sql Server, here's what I do. My Oracle procedures which return result sets always return only one, and, by convention, the ref cursor parameter is the last one. Then I use a helper method like FillDataTable, or ExecuteReader to interface with the database. The application is bound the SqlServer definition of the procedure, but in the Oracle version of the helper function I simply add another parameter to the end of the command parameters to receive the ref cursor.
David

Data Access Layer

Hi:
Does anyone have a provider independent .net data access layer including odp.net?
Thanks
Ram

I am looking for something similar, but I am not too
sure how it would work.
I have tried developing one myself, using the
underlying interface classes, but I am unsure how to
overcome the differences between SQL Server and
Oracle when returning result sets. SQL Server is
happy to return a DataSet from a stored procedure,
but Oracle must be given a Ref Cursor variable
parameter for each DataTable returned.
This means that the calling code must differ between
SQL Server and Oracle.
If anyone can suggest a neat way to get over this,
I'd appreciate it.
Check out the DAABv3 from GotDotNet. It implements an abstract factory pattern for data providers. It works with Oracle, but not, I think, with ODP.NET. It's extensible, though, so ODP.NET support could be added.
In addition the V2 of the .NET framework will have an abstract factory pattern for data providers built in.
On the particular question of ref cursors and Sql Server, here's what I do. My Oracle procedures which return result sets always return only one, and, by convention, the ref cursor parameter is the last one. Then I use a helper method like FillDataTable, or ExecuteReader to interface with the database. The application is bound the SqlServer definition of the procedure, but in the Oracle version of the helper function I simply add another parameter to the end of the command parameters to receive the ref cursor.
David

Access Layer Routing

Hello everyone,
We're running on a collapsed core network design and I'm looking to move routing down to the access layer. I've attached a sample diagram of a small portion of the overall network to give you an idea of how things are connected. Currently, all routing, ACLs, multicast, etc. is being handled in the core. I would like to move as much of this down to the access layer as possible. The problem I'm faced with is our phone system (non-Cisco). We have two PBXs that are not running in an HA configuration and are in their own VLANs with routing between them. We have phones that are registered to both PBXs that are physically located throughout our campus. I'm afraid that if I move routing down to the access layer, I'm gonna lose communications between the phones and the VoIP system since traditional routing won't allow me to have the same subnet in two different locations for the same infrastructure. The only thing I can think of is possibly establishing EIGRP neighbors for the phone network and then NAT'ing the phones behind their gateway. Can someone shed some light on some real-world workable solutions?
Thanks!
TLock

I have just typed out probably the longest answer I have ever done and this stupid website just errored on me and I lost it :-)
So basically you make the uplinks trunks and for each access switch you need two new vlans unique to that switch ie. you cannot reuse these vlans on other access switches.
You then emulate point to point links using SVIs to peer on instead of L3 routed links.
On the trunk link you only allow the new vlans + the VOIP vlan eg. access switch connects to core1 and core2. New vlans are 3 & 4.
Create new vlans on access switch and vlan 3 on core 1, vlan 4 on core 2 plus the corresponding SVIs. You only need two useable IPs per vlan. So -
uplink to core 1 -> allowed vlans = vlan 3 + VOIP vlan
uplink to core2 -> allowed vlans = vlan 4 + VOIP vlan
Then you peer with a dynamic routing protocol between access switch and the core switches using the SVI IPs.
All vlans (except the VOIP vlan) are routed locally and for remote subnets they use the new vlans as transit.
Key thing is to only allow the vlans that need to be allowed on the trunk links and basically you have emulated using point to point links but using SVIs.
The main downside is you need two new vlans per access switch. This means a lot of new vlans on the core where you may hit STP issues if you are running a variant of PVST. Note I'm assuming all core switches will be L3 interconnected so STP isn't doing anything except for the VOIP vlan but it should still be running.
The VOIP vlan would have to be routed in the core. Which means if you want HSRP for it you need to run separate L2 links between the switches (in addition to the L3 links). The L2 links would be access ports in the VOIP vlan.
Finally, and this applies even if you had L3 routed links ie. you didn't need to span the VOIP vlan across multiple switches, you are not necessarily going to get the best use of your uplinks because you have three core switches eg.
ESW02 connects to CSW01 and CSW02
ESW05 connects to CSW02 and CSW03
that means for subnets on ESW05, ESW02 is always going to see CSW02 as the best path because it is a shorter number of hops away.
You could play with the metric to influence this but it is not ideal ie. if you only had two core switches this would not be a problem and each access switch would see equal cost paths.
But I suspect you cannot simply go down to two core switches.
Let me know what you think ie. queries, doubts, just don't like the idea :-)
Jon

MSTP on Access Layer Switches

Hello everyone,
When configuring MST for STP, is there a need to configure it on access layer switches in a collapsed core design? I can find docs to configure the root and secondary root bridges but I don't see anything about configuring access layer switches. In RSTP, you configure it on all switches cooperating in STP and set the root and secondary bridges accordingly. Any help is appreciated.
Regards,
Terence

Hi,
You should configure your access switches for MST as well so you are using the same STP for core and access. The only difference between the core and access is that the core is root and back up root for STP and the access layer is just default (32768).
HTH

Packets dropped to Access layer switch???

We have a 6509 running in Native IOS that has 2gb port channels connecting to our 7 access layer switches. About a week ago we were working with Remote span vlans and added a remote span from the 6509 to our other core (6513) which is connected via a 20Gbps portchannel. We began to notice that a lot of people were calling in reporting devices as being slow and we noticed that from the 6509 (Which was the root bridge) we were disgarding millions of packets on the transmit side of our access layer switches. We took out the remote span but it appears that we are still disgarding packets. There are no input or output errors on either side. The Remote span VLAN does not exist on the access layer switch's VLAN database. Does anybody have any idea what we should be looking for?

you can use an acl to match the number of packets that come into / out of each of the devices. Simply use two lines in each acl where on the first line you match the packet in question and on the second line you have "permit ip any any" so you don't block any packets. Then simply apply the acl either inbound or outbound on the interface in question. If you want more than one acl on a given device, such as inbound one interfaceand outbound another, be sure to use two different acl numbers.
create the acl's and apply them
ensure there isn't an active call
clear access-list counters on all devices where you configured the acl's so we ensure all of them are set to 0

What is the recommenden access port QoS configuration for 8900/9900 video enabled phones

Hi all,
we are currently starting to roll out some video enabled 9900 and 8900 phones in our network. In the past we did not use video and configured the access ports on our Catalyst 2960 switches with "auto qos voip ciscp-phone". This however creates a policy which does not include a class-map to correctly handle the AF41 video traffic coming from those phones. I have thougth about extending the autoqos policy with a AF41 class-map but am not sure if this is the right way to do it.
That's what I have in mind:
class-map match-all AUTOQOS_VIDEO_DATA_CLASS
match ip dscp af41
class-map match-all AUTOQOS_VOIP_DATA_CLASS
match ip dscp ef
class-map match-all AUTOQOS_DEFAULT_CLASS
match access-group name AUTOQOS-ACL-DEFAULT
class-map match-all AUTOQOS_VOIP_SIGNAL_CLASS
match ip dscp cs3
policy-map AUTOQOS-SRND4-CISCOPHONE-POLICY
class AUTOQOS_VOIP_DATA_CLASS
   set dscp ef
police 128000 8000 exceed-action policed-dscp-transmit
class AUTOQOS_VIDEO_DATA_CLASS
   set dscp af41
police 1500000 8000 exceed-action policed-dscp-transmit
class AUTOQOS_VOIP_SIGNAL_CLASS
   set dscp cs3
police 32000 8000 exceed-action policed-dscp-transmit
class AUTOQOS_DEFAULT_CLASS
   set dscp default
police 10000000 8000 exceed-action policed-dscp-transmit
How do you guys do it ? Is there some documentation for this ?
Thank you for your kind help
best regards
Andreas

Hi
You have to keep this table on your mind. Your configuration is fine if your configuration for SD video , but if for HD video , it is not ok you have to change video bandwidth at least 5M.
Traffic Type
Layer 2 CoS
Layer 3 IP Precedence
Layer 3 DSCP
Voice RTP1
5
5
EF
Voice control
3
3
AF31
Video conference
4
4
AF41
Streaming video (IP/TV)
1
1
AF13
Data
0-2
0-2
0-AF23
*Interactive Video "AF41"- Sensitive but can tolerate packet loss of about 1% and latency almost same as voice.
*Streaming Video "AF13" - Less sensitive - can tolerate about 4-5% packet loss and latency of about 4-5 seconds.
*HD video conference will require between 5M to 16M , but SD video conference will use 384K to 1 M
Note:-Video QOS , if you will assume that your video conference will use around 384K , you have to add 20% because video conference include voice so the total bandwidth 460K.
Kindly check the below link
http://www.sdcug.com/wp-content/uploads/2011/04/Campus-QoS-for-Voice-and-Video.pdf
Thanks
please rate all useful information

6500 access layer QoS

Similar Messages

Maybe you are looking for