ASR1001 QOS Problem %QOS-4-TUN_MOV_FAIL
Dear member,
I have facing a problem on the ASR with QOS problem, I configured a hqos on phyical interface and hqos on tunnel interface, the number of tunnel about 350.
I check on the logging, the QOS on tunnel was continues fail and install.
============================================
%QOS-6-TUN_INSTALL: Installing suspended policy on Tunnel2000.
%QOS-4-TUN_MOV_FAIL: Queueing hierarchy move failed on Tunnel2780, suspending policy.
%QOS-4-TUN_MOV_FAIL: Queueing hierarchy move failed on Tunnel2000, suspending policy.
%QOS-6-TUN_INSTALL: Installing suspended policy on Tunnel3080.
%QOS-4-TUN_MOV_FAIL: Queueing hierarchy move failed on Tunnel3080, suspending policy.
%QOS-6-TUN_INSTALL: Installing suspended policy on Tunnel2380.
%QOS-4-TUN_MOV_FAIL: Queueing hierarchy move failed on Tunnel2380, suspending policy.
%QOS-4-TUN_MOV_FAIL: Queueing hierarchy move failed on Tunnel70, suspending policy.
%QOS-6-TUN_INSTALL: Installing suspended policy on Tunnel2140.
============================================
Any member have this experience.
Attach the QoS configuration for reference.
Regards
Russ
Seem not related to this bug as ASR only suspended policy without reboot.
Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.2(4)S, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Mon 23-Jul-12 20:03 by mcpre
IOS XE Version: 03.07.00.S
License Level: adventerprise
License Type: Permanent
Next reload license Level: adventerprise
cisco ASR1001 (1RU) processor with 1156392K/6147K bytes of memory.
Processor board ID SSI170805JC
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7741439K bytes of eUSB flash at bootflash:.
Configuration register is 0x2102
Similar Messages
-
I'm soon to start to configure a QoS policy for ASR1001 routers that act as CE devices.
The access circuit is 1G, limited by the SP to 300Mbps. Within that 300Mbps I will have 4 classes of traffic, each one sourced from a different VRF.
Within those 4 classes, I need to furthur sub-divide the QoS policy.
As I have no kit to play with yet I've had a read through the appropriate sections in the Cisco press book End-to-End QoS network design, which suggests these routers support 3 levels of hierarchy., but there are no examples, and no shaping based configurations. The Cisco ASR1000 QoS guides only talk about two level policing.
What is the best way to approach this policy, my thought is as follows:
Outer policy, shape all traffic to 300Mbps, as the SP drops anything above that.
Inner policy shape traffic from each vrf (based on source address) to the appropriate value for the sub-interface that acts as a transit for the particular VRF
Inner sub-policy, prioritise voice traffic, and provide bandwidth guarantees via shaping for 2 or 3 traffic sub-classes.
As far as I understand this is 3 layers of hierarchy, Is this feasible with the ASR1001? It will be running latest code with IP base licencies
AndyNow I have the routers and having trouble setting up the QoS policy. The ASR will be a CE with a dot.1q trunk supporting multiple sub-interfaces, one for each VRF/VPN.
The SP allows 300Mbps on a 1 Gig link to support all VPN's. Each VPN is allowed 40Mbps towards the SP.
The default VPN requires 40mbps bandwidth with 2Mbps prioritsed for voice, so initially I configured this with a shaper and a priority class for the voice traffic, and applied this to the untagged interface, without any problem.
I then configured g0/0/0/.102, and tried to apply a shaper to that interface as it also requires 40Mbps for the associated VRF.
This isn't allowed.
So I tried the same approach with policers instead of shapers, same still not allowed.
How do I approach this:
G0/0/0 with shaper/policer setting outer to 300Mbps, then two sub-classes, one with 40Mbps and the other to prioritise voice with 2Mbps.
G0/0/0.100 with shaper/policer setting this to 40Mbps.
The documents don't described this in enough detail. Does the router regard g0/0/0 and g0/0/0.100 as seperate interfaces, each having a qos policy, that is how I'm trying to get this to work.
Or, should I define an ACL for each VPN, apply shaping or policing to each class and apply the service-policy to the main interface?
-Andy -
Problem with QOS for SIP on RV082
Hello,
I have problem with quality of VOIP call with Linskys RV082. Firmware is 2.0.0.19tm.
Router is configured as dual-wan , one port (WAN2) is for ADSL 8000/512kb and other one is (WAN1) SHDSL 8000/8000kb.
VOIP traffic from certain IP of LAN is routed to WAN2 (through protocol binding). We have quaranted QOS on ADSL by ISP.
Problem is that voice is dropping when we load WAN2 with other data connection. Last week i reload new firmware, restore default factory and configured router whole again. All was ok only for 1 day and then voice was dropping again. I mean that problem is at mark packets, because when I put VOIP PBX in front of behind router , QOS is working fine.
Can you help me? Is this know issue?
Thanks.
Jan Babak
Message was edited by: jabacomCZthank you for reply !!!
below is the show output :
ciscoasa# show priority-queue statistics outside_wan
Priority-Queue Statistics interface outside_wan
Queue Type = BE
Tail Drops = 0
Reset Drops = 0
Packets Transmit = 7971924
Packets Enqueued = 0
Current Q Length = 0
Max Q Length = 0
Queue Type = LLQ
Tail Drops = 0
Reset Drops = 0
Packets Transmit = 189321
Packets Enqueued = 0
Current Q Length = 0
Max Q Length = 0
ciscoasa#
so does the command look like, the one I should use instead of priority-queue outside_wan ?? -
I am trying to test and document the performance of QoS. I have an E3000 with firmware version 1.0.04.
I have tried various traffic generators (like Netperf), and settled on D-ITG; It can send, receive, and report on many different traffic streams.
I have set up QoS rules on the E3000: port 12865 Low priority, port 12875 High priority. The traffic flow is from computers on my LAN, through the internet port on the router to a WAN addressed computer in the same room.
Cisco documentation states that QoS works only on "upstream" traffic, hence the particular traffic flow.
My problem is that the QoS appear not to prioritise when enabled.
Stream 1 on port 12865 achieves ~45Mbps, stream 2 on a seperate computer simultaneously on port 12875 achieves ~45Mbps also.
I have tried both TCP and UDP traffic.
Can anyone suggest why? Has anyone else found issues with QoS?Do you have a similar set up? Can you tell me how you have approached the problem? Have you got any different results?
-
QoS Problem - Outbound Ethernet Marcation
Hi all,
I have a problem with QoS.
Everytime a voice packet go outbound through an Ethernet interface the router remove the DSCP marcation 46 (EF) and marks as 0. Serial interfaces work fine.
I've tried with different IOS versions but the problem is the same.
If anyone has faced this problem before, please let'me know what IOS version this QoS configuration work.
Cheers ///
Neirival de Sousa (Brazil/Angola)Hi,
can yo be more specific about your hardware/software and general setup?
Also one more thing: are you sure it happens outbound? Could it be that a LAN switch is receiving the frame/IP packet and the default port settings for Catalysts kick in? QoS wise all LAN ports on the Catalyst switches are untrusted, thus any marking will be set to 0 (best effort), when received on such a port. You need to issue a "mls trust ..." command on each port, where markings should be passed unchanged. The "..." is "cos" or "dscp" and depends on hardware/IOS.
Hope this helps! Please rate all posts.
Regards, Martin -
QOS problem (multicast) with 3750
Hi,
I need help to solve following problem.
I have setup qos in our 3750, see below.
Unicast traffic is handle correct, However with multicast streams the router set the dscp to 0
Has somebody any idea what is missing?
Too old sw? Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(35)SE,
Regards Niklas
ip multicast-routing distributed
ip multicast multipath
mls qos srr-queue input priority-queue 1 bandwidth 10
mls qos srr-queue input dscp-map queue 1 threshold 1 46
mls qos srr-queue input dscp-map queue 2 threshold 1 11 24 30 48
mls qos srr-queue output dscp-map queue 1 threshold 1 48
mls qos srr-queue output dscp-map queue 2 threshold 1 46
mls qos srr-queue output dscp-map queue 3 threshold 1 40
mls qos srr-queue output dscp-map queue 4 threshold 1 11 24 30
mls qos
interface GigabitEthernet1/0/22
switchport access vlan 41
switchport mode access
load-interval 30
srr-queue bandwidth share 25 25 25 20
priority-queue out
mls qos trust dscp
interface GigabitEthernet1/0/23
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 40
switchport mode trunk
load-interval 30
srr-queue bandwidth share 25 25 25 20
priority-queue out
mls qos trust dscpHi,
Here comes the printouts:
with mls qos enabled:
cisco-Mcast#sh mls qos interface gigabitEthernet 1/0/22 statistics
GigabitEthernet1/0/22
dscp: incoming
0 - 4 : 0 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
0 - 4 : 8881981 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 307 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
0 - 4 : 0 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
0 - 4 : 8881981 0 0 0 0
5 - 7 : 0 307 0
Policer: Inprofile: 0 OutofProfile: 0
cisco-Mcast#sh mls qos interface gigabitEthernet 1/0/23 statistics
GigabitEthernet1/0/23
dscp: incoming
0 - 4 : 8931330 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 202 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
0 - 4 : 0 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 1206 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
0 - 4 : 11357772 0 0 0 0
5 - 7 : 0 2 0
cos: outgoing
0 - 4 : 0 0 0 0 0
5 - 7 : 0 1206 2
Policer: Inprofile: 0 OutofProfile: 0
cisco-Mcast#
mls qos disabled:
cisco-Mcast#sh mls qos interface gigabitEthernet 1/0/22 statistics
GigabitEthernet1/0/22
dscp: incoming
0 - 4 : 0 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
0 - 4 : 0 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 7371 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
0 - 4 : 0 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
0 - 4 : 7371 0 0 0 0
5 - 7 : 0 0 0
Policer: Inprofile: 0 OutofProfile: 0
cisco-Mcast#sh mls qos interface gigabitEthernet 1/0/23 statistics
GigabitEthernet1/0/23
dscp: incoming
0 - 4 : 0 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 23281 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
0 - 4 : 0 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 2 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
0 - 4 : 29272 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
0 - 4 : 0 0 0 0 0
5 - 7 : 0 2 0
Policer: Inprofile: 0 OutofProfile: 0
cisco-Mcast#
BR Niklas -
Hello.
I have problem with bandwidth management on my RVS4000.
That is the way how i done it:
All traffic (TCP & UDP on all ports)
IP range 192.168.0.2 - 192.168.0.2 (My IP adress)
Guaranted download speed 1kbps
Maximum download speed 5000kbps
after saving setting and rebooting router
I have maximum download speed on my PC 12000kbps
Please help me to solve this problem.
Why QOS doesnt work ?
By the way sorry for my english i do not ue this language very often
Looking forward for some advices.Jaroslaw,
Please call into Cisco Small Business Support Center and speak with next available engineer (Support Numbers)
Jasbryan -
I have a trouble to implement dynamic QoS between two sites (Site A, and site B) across low speed WAN link (512k). On each site I have Cisco 1921 router. Most important app is Oracle. Because of slow speed WAN links, I want to avoid exact bandwith reservation for Oracle. I only reserve 5% bandwith for network control(icmp, ssh, telnet...) and want configure next Qos scenario:
1. If Oracle traffic exist on a network, it must have 70% of link speed guaranteed, all other apps (e.g mail, file share, ftp) use rest of the bandwith.
2. If there isn't Oracle traffic on a network, all other apps can use all available bandwith.
Issue descrtption:
I used all Cisco guides, but when I implemented this on production it simply didn't work. There is no any significant improvement after implementing this (when I start network file sharing accross wan link, Oracle becomes etremly slow.). Do anyone hadsimilar problem?
Here is configuration wich I trying to implement:
ACL-s and class-maps used to mark traffic:
access-list 119 remark ###QoS-MGMT###
access-list 119 permit tcp any any eq 22
access-list 119 permit tcp any any eq telnet
access-list 119 permit icmp any any
access-list 120 remark ###QoS-DB_ORA###
access-list 120 permit ip any host 10.100.40.30
access-list 120 permit tcp any any eq 1521
class-map match-any Oracle
match access-group 120
class-map match-any Mgmt_Traffic
match access-group 119
policy-map LAN
class Mgmt_Traffic
set dscp 7
class Oracle
set dscp 5
class class-default
set dscp default
policy-map WAN
class Oracle
priority percent 70
class Mgmt_Traffic
priority percent 5
Implementation of this policy maps (both sites are identical):
interface FastEthernet0/0
description WAN
bandwidth 512
service-policy output WAN
interface FastEthernet0/1
description LAN
bandwidth 512
service-policy input LAN
Thanx for help!Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Any other idea?
Yes, several.
First, we might confirm whether CBWFQ is working as configured. To be precise, when TAC "showed me" shaped/child CBWFQ worked correctly under 15.x, it was a specific 15.x something (I'll have to find what they actually used) and I took their word for it, i.e. I didn't actually confirm it operated correctly as our internal IOS usage standards don't (yet) allow 15.x code.
Easiest way to confirm correct operation, use a traffic generator to push 1 Mbps to the two classes and see if overall rate is limited to 512 Mbps and bandwidth proportions are 70/30.
I note you wrote you did try the 2nd LLQ policy, correct? Well, it too should be tested to insure your rate is limited to 512 and 70/30 bandwidth split. (You can also try a variation of the last w/o any FQ.)
If above tests confirm correct operation, then there are numerous reasons why you're not obtaining the performance you expect. For example, your WAN vendor could have a misconfiguration or even a technical issue they're unaware of (my experience the former is rare, say less than 1% of the time, the latter is very, very rare but I've seen such too [e.g. 3 months of complaining to a tier one vendor, Ethernet performance not quite right, they finally found cause - buggy firmware on one of their line cards]); or the nature of your traffic you're testing with causes "unexpected behavior" (e.g. UDP vs. TCP?); or L2 rates vs. L3 rates (touched on that in my prior post); application sensitivity (e.g. don't know about Oracle, but some earlier version of SAP were extremely "fragile"); or etc.
So, first confirm CBWFQ is working as it should. If not, you'll need to work with TAC. If it's working correctly, we can start to eliminate other possible issues. -
Problem Advance QOS VOIP on ATM
hi,
I have a big problem for VOIP QOS on ATM interface.
Unable to have a proper voice on an ATM interface, no drop packets ...
I give you a link is to download a PDF that explains everything with schemas. Thank you in advance.Pdf explains problem
-
Hi everyone,
I've got a probleme. I red the cisco QoS book, but it doesn't work for me.
I want to do what so many others do, reserve bandwitdh for some specific trafic. But if I test the config, every flow gets the same bandwidth.
I transmit from 2 pc's with a matching ip and a not matching ip each 100MB file. Teracopy shows me the bandwitdh of each 1,3 MB/s and if I look to the folder, the files arrive nearly at the same time.
IOS (tm) C2600 Software (C2600-I-M), Version 12.2(19), RELEASE SOFTWARE (fc3)
Standard IP access list it-intern
permit x.x.x.x (125133 matches)
permit x.x.x.x (60651 matches)
permit x.x.x.x, wildcard bits 0.0.0.255 (905968 matches)
Class Map match-any class-default (id 0)
Match any
Class Map match-any not-it-intern (id 1)
Match not access-group name it-intern
Policy Map cbwfq
Class not-it-intern
Bandwidth 70 (%) Max Threshold 64 (packets)
interface FastEthernet0/1
description # 20 MBit #
bandwidth 20000
ip address x.x.x.x x.x.x.x
service-policy output cbwfq
ip route-cache flow
no ip mroute-cache
duplex auto
speed auto
If I make:
ciscoHV3#sh pol int
FastEthernet0/1
Service-policy output: cbwfq
Class-map: not-it-intern (match-any)
11127978 packets, 4292340182 bytes
5 minute offered rate 4422000 bps, drop rate 0 bps
Match: not access-group name it-intern
11127962 packets, 4292327891 bytes
5 minute rate 4422000 bps
Queueing
Output Queue: Conversation 265
Bandwidth 70 (%) Max Threshold 64 (packets)
(pkts matched/bytes matched) 111155/27836979
(depth/total drops/no-buffer drops) 0/0/0
Class-map: class-default (match-any)
827815 packets, 919625061 bytes
5 minute offered rate 2911000 bps, drop rate 0 bps
Match: any
- I can see that pakets became matched.
I fall in dispair, please help.I've got a WAN connection, which is connected via FastEthernet to the router. The ISP garantees 20 mbit/s. There are 2 IPs and 1 Subnet that got low prior. So I created a Class that "Not" matches that Accessgroup. The remaining traffic should become a minimum of 70% of the bandwidth.
If I understand you, I only get congestion if i would use the physical interface speed (100mbit/s) and only in this case I can use the bandwidth comands.
But would work a config like this?:
Policy-Map cbwfq
Class not-it-intern
Bandwidth percent 70
Policy-Map police-all
Class class-default
police cir 20000000
service-policy cbwfq
interface FastEthernet0/1
description # 20 MBit #
bandwidth 20000
ip address x.x.x.x x.x.x.x
service-policy output police-all
ip route-cache flow
no ip mroute-cache
duplex auto
speed auto
I don't want to use shaping, thats the currently way how I limit the traffic for the sources of the ACL(it-intern). But shaping stresses the router a little bit too much and how I said, I dont want to limit I want to garantee a minimum of traffic.
By the way, thanks a lot for your help until now. -
Problems with QoS between 2950 and 3550 with use of Native VLAN
Hi!
I try to set up QoS between a C2950 and a C3550, I have provided a drawing that might help understanding the setup.
As I understand it, since I only have the SMI image on the C2950 I have to run a 802.1Q trunk over the leased 2Mb line to get QoS to work. And I DO get it to work, or at least it seems so to me.
What I'm trying to setup QoS on is between a Nortel Succession Media Server and a Nortel i2004 IP Phone.
And when I sniff the port that the Succession Media Server is connected to, I get this output:
*BEGIN*
*** TO IP Phone ***
IP version: 0x04 (4)
Header length: 0x05 (5) - 20 bytes
Type of service: 0xB8 (184)
Precedence: 101 - CRITIC/ECP
Delay: 1 - Low delay
Throughput: 1 - High throughput
Reliability: 0 - Normal reliability
Total length: 0x00C8 (200)
ID: 0x5FE1 (24545)
Flags
Don't fragment bit: 0 - May fragment
More fragments bit: 0 - Last fragment
Fragment offset: 0x0000 (0)
Time to live: 0x40 (64)
Protocol: 0x11 (17) - UDP
Checksum: 0x69EC (27116) - correct
Source IP: 10.40.2.10
Destination IP: 10.10.153.100
IP Options: None
UDP
Source port: 5216
Destination port: 5200
Length: 0x00B4 (180)
Checksum: 0x5C02 (23554) - correct
*** FROM IP Phone ***
IP version: 0x04 (4)
Header length: 0x05 (5) - 20 bytes
Type of service: 0xB8 (184)
Precedence: 101 - CRITIC/ECP
Delay: 1 - Low delay
Throughput: 1 - High throughput
Reliability: 0 - Normal reliability
Total length: 0x00C8 (200)
ID: 0x8285 (33413)
Flags
Don't fragment bit: 0 - May fragment
More fragments bit: 0 - Last fragment
Fragment offset: 0x0000 (0)
Time to live: 0x7F (127)
Protocol: 0x11 (17) - UDP
Checksum: 0x0848 (2120) - correct
Source IP: 10.10.153.100
Destination IP: 10.40.2.10
IP Options: None
UDP
Source port: 5200
Destination port: 5216
Length: 0x00B4 (180)
Checksum: 0x5631 (22065) - correct
*END*
But, then to the problem:
Since the modems I use have ip adresses in them I want to monitor them and be able to change settings in them.
But to connect to units within the trunk, I have to set the native vlan to VLAN 144, which provides the ip adresses I use for the modems, in both ends of the trunk.
But if I do that the tagging of the packets from the IP Phone disappears!
Here's an output after native VLAN is applied:
*BEGIN*
*** TO IP Phone ***
IP version: 0x04 (4)
Header length: 0x05 (5) - 20 bytes
Type of service: 0xB8 (184)
Precedence: 101 - CRITIC/ECP
Delay: 1 - Low delay
Throughput: 1 - High throughput
Reliability: 0 - Normal reliability
Total length: 0x00C8 (200)
ID: 0xDEF8 (57080)
Flags
Don't fragment bit: 0 - May fragment
More fragments bit: 0 - Last fragment
Fragment offset: 0x0000 (0)
Time to live: 0x40 (64)
Protocol: 0x11 (17) - UDP
Checksum: 0xEAD4 (60116) - correct
Source IP: 10.40.2.10
Destination IP: 10.10.153.100
IP Options: None
UDP
Source port: 5240
Destination port: 5200
Length: 0x00B4 (180)
*** FROM IP Phone ***
IP version: 0x04 (4)
Header length: 0x05 (5) - 20 bytes
Type of service: 0x00 (0)
Precedence: 000 - Routine
Delay: 0 - Normal delay
Throughput: 0 - Normal throughput
Reliability: 0 - Normal reliability
Total length: 0x00C8 (200)
ID: 0x89E4 (35300)
Flags
Don't fragment bit: 0 - May fragment
More fragments bit: 0 - Last fragment
Fragment offset: 0x0000 (0)
Time to live: 0x7F (127)
Protocol: 0x11 (17) - UDP
Checksum: 0x01A1 (417) - correct
Source IP: 10.10.153.100
Destination IP: 10.40.2.10
IP Options: None
UDP
Source port: 5200
Destination port: 5240
Length: 0x00B4 (180)
Checksum: 0x31CA (12746) - correct
*END*
See, there is noe QoS tagging from the IP Phone anymore.
If I set no switchport trunk native vlan 144 in both ends the tagging is back.
Any ideas? Is this a bug, or just some command I don't know about?
Please take a look at the picture to get a more understandable view of the setup.
Thanks!Well, native VLANs are by definition untagged so there´s nothing wrong with that as far as you are getting the expected results. By the other way I think you should include VLAN 402 on your allowed vlan range on Catalyst 3550's FastEth0/45 trunk port, otherwise this VLAN will be completly isolated from the rest of the network.
-
I'm new to setting up QoS so I would like some input.
I'm setting up QoS on my 3750X:
Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.2(2)E, RELEASE SOFTWARE (fc3)
I enabled Auto QoS on the switch:
mls qos map policed-dscp 0 10 18 24 46 to 8
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue input bandwidth 70 30
mls qos srr-queue input threshold 1 80 90
mls qos srr-queue input priority-queue 2 bandwidth 30
mls qos srr-queue input cos-map queue 1 threshold 2 3
mls qos srr-queue input cos-map queue 1 threshold 3 6 7
mls qos srr-queue input cos-map queue 2 threshold 1 4
mls qos srr-queue input dscp-map queue 1 threshold 2 24
mls qos srr-queue input dscp-map queue 1 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue input dscp-map queue 1 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue input dscp-map queue 2 threshold 3 46 47
mls qos srr-queue output cos-map queue 1 threshold 3 4 5
mls qos srr-queue output cos-map queue 2 threshold 1 2
mls qos srr-queue output cos-map queue 2 threshold 2 3
mls qos srr-queue output cos-map queue 2 threshold 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 0
mls qos srr-queue output cos-map queue 4 threshold 3 1
mls qos srr-queue output dscp-map queue 1 threshold 3 32 33 40 41 42 43 44 45
mls qos srr-queue output dscp-map queue 1 threshold 3 46 47
mls qos srr-queue output dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 2 threshold 1 26 27 28 29 30 31 34 35
mls qos srr-queue output dscp-map queue 2 threshold 1 36 37 38 39
mls qos srr-queue output dscp-map queue 2 threshold 2 24
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue output dscp-map queue 4 threshold 1 8 9 11 13 15
mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14
mls qos queue-set output 1 threshold 1 100 100 50 200
mls qos queue-set output 1 threshold 2 125 125 100 400
mls qos queue-set output 1 threshold 3 100 100 100 3200
mls qos queue-set output 1 threshold 4 60 150 50 200
mls qos queue-set output 1 buffers 15 25 40 20
mls qos
auto qos srnd4
All ports are setup like this:
interface GigabitEthernet1/0/1
switchport mode access
srr-queue bandwidth share 1 30 35 5
priority-queue out
mls qos trust dscp
auto qos trust dscp
The problem is this:
I have an IPTV application that I tag with AF41 (DSCP 34):
policy-map QoS-Ceton-InfiniTV-Policy
class QoS-Ceton-InfiniTV-Data-Class
set dscp af41
But when I'm playing that application back on a client, packets are dropped when I'm also running Remote Desktop tagged with AF21 (DSCP 18).
Temporarily, I solved the problem by changing all ports to queue-set 2:
Queueset: 1
Queue : 1 2 3 4
buffers : 15 25 40 20
threshold1: 100 125 100 60
threshold2: 100 125 100 150
reserved : 50 100 100 50
maximum : 200 400 3200 200
Queueset: 2
Queue : 1 2 3 4
buffers : 25 25 25 25
threshold1: 100 200 100 100
threshold2: 100 200 100 100
reserved : 50 50 50 50
maximum : 400 400 400 400
What I don't get is Auto QoS is suppose to make this easy, isn't it?
How come AF41 packets are dropped for AF21 packets?
Thanks for any input.Even with queue-set 2, I still see drops, just not as many.
GigabitEthernet1/0/27 (All statistics are in packets)
dscp: incoming
0 - 4 : 7324189 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 236744 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 1127 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
0 - 4 : 17433393 2 94 0 163
5 - 9 : 0 291 0 1 0
10 - 14 : 30613 0 0 0 0
15 - 19 : 0 3822 0 281615 0
20 - 24 : 0 0 0 0 103072
25 - 29 : 0 11 0 0 0
30 - 34 : 0 0 7605 0 15387535
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 16394 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 18872 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
0 - 4 : 7564272 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
0 - 4 : 17467998 30614 285437 103083 15395140
5 - 7 : 7914 16394 209955
output queues enqueued:
queue: threshold1 threshold2 threshold3
queue 0: 0 0 7605
queue 1: 15673244 245425 264513
queue 2: 0 0 17441610
queue 3: 1 30602 0
output queues dropped:
queue: threshold1 threshold2 threshold3
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 588
queue 3: 0 0 0
Policer: Inprofile: 0 OutofProfile: 0 -
WRVS4400N Firmware V1.1.03 QoS Problem
With this router, there seems to be a problem with the V1.1.03 firmware. I cannot save any of it's QoS/ CoS settings on any of the pages, from either a wireless OR wired device HTTP session.
If I try to create my own service in the bandwidth limitations, when I save settings, it defaults back to the first 2 or 3 entries in the services list. It's very annoying.
Is there a fix for this?Allow me to demonstrate.
I add custom services.
I click "SAVE SETTINGS"
I get this result.
Maybe someone there could take 2 seconds to answer why the router would do this.... or maybe tell me why I cannot assign priority to ports... or do any QoS/CoS settings AT ALL?
Message Edited by JZulkeski on 02-24-2008 10:52 AM -
Dears
I want your help in figuring out the problem in configuration, as I am trying to deploy qos on DMVPN
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.1.5 172.23.11.5 UP 00:16:57 D 172.23.11.5/32
NHRP group: spoke_group1
Output QoS service-policy applied: none
AUBEgypt-RHT-R this router is hub
shooting club is spoke
but i can't see the result as expected :
AUBEgypt-RHT-R#show dmvpn detail
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================
Interface Tunnel172 is up/up, Addr. is 172.23.11.1, VRF ""
Tunnel Src./Dest. addr: 172.23.1.1/MGRE, Tunnel VRF ""
Protocol/Transport: "multi-GRE/IP", Protect "IPSEC_PROFILE"
Interface State Control: Disabled
Type:Hub, Total NBMA Peers (v4/v6): 1
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.1.5 172.23.11.5 UP 00:16:57 D 172.23.11.5/32
NHRP group: spoke_group1
Output QoS service-policy applied: none
Crypto Session Details:
Interface: Tunnel172
Session: [0x689D0324]
IKE SA: local 172.23.1.1/500 remote 172.23.1.5/500 Active
Capabilities:D connid:1004 lifetime:23:44:18
Crypto Session Status: UP-ACTIVE
fvrf: (none), Phase1_id: 172.23.1.5
IPSEC FLOW: permit 47 host 172.23.1.1 host 172.23.1.5
Active SAs: 4, origin: crypto map
Inbound: #pkts dec'ed 127 drop 0 life (KB/Sec) 4514806/113
Outbound: #pkts enc'ed 127 drop 0 life (KB/Sec) 4514807/113
Outbound SPI : 0xA67C0EBD, transform : esp-aes esp-sha-hmac
Socket State: Open
Pending DMVPN Sessions:
AUBEgypt-RHT-R#show ip nhrp
172.23.11.5/32 via 172.23.11.5
Tunnel172 created 00:17:17, expire 01:42:42
Type: dynamic, Flags: unique registered
NBMA address: 172.23.1.5
Group: spoke_group1
Shooting-Club#show dmvpn detail
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================
Interface Tunnel1 is up/up, Addr. is 172.23.11.5, VRF ""
Tunnel Src./Dest. addr: 172.23.1.5/MGRE, Tunnel VRF ""
Protocol/Transport: "multi-GRE/IP", Protect "IPSEC_PROFILE"
Interface State Control: Disabled
IPv4 NHS: 172.23.11.1 RE
Type:Spoke, Total NBMA Peers (v4/v6): 1
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.1.1 172.23.11.1 UP 00:17:48 S 172.23.11.1/32
Interface Tunnel2 is up/up, Addr. is 172.23.22.5, VRF ""
Tunnel Src./Dest. addr: 172.23.2.5/MGRE, Tunnel VRF ""
Protocol/Transport: "multi-GRE/IP", Protect "IPSEC_PROFILE"
Interface State Control: Disabled
IPv4 NHS: 172.23.22.1 RE
Type:Spoke, Total NBMA Peers (v4/v6): 1
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.2.1 172.23.22.1 UP 00:17:48 S 172.23.22.1/32
Crypto Session Details:
Interface: Tunnel1
Session: [0x669AD6D4]
IKE SA: local 172.23.1.5/500 remote 172.23.1.1/500 Active
Capabilities:(none) connid:1007 lifetime:23:43:28
Crypto Session Status: UP-ACTIVE
fvrf: (none), Phase1_id: 172.23.1.1
IPSEC FLOW: permit 47 host 172.23.1.5 host 172.23.1.1
Active SAs: 2, origin: crypto map
Inbound: #pkts dec'ed 134 drop 0 life (KB/Sec) 4437700/52
Outbound: #pkts enc'ed 133 drop 1 life (KB/Sec) 4437700/52
Outbound SPI : 0x90A47368, transform : esp-aes esp-sha-hmac
Socket State: Open
Interface: Tunnel2
Session: [0x669AD5E4]
IKE SA: local 172.23.2.5/500 remote 172.23.2.1/500 Active
Capabilities:(none) connid:1008 lifetime:23:43:29
Crypto Session Status: UP-ACTIVE
fvrf: (none), Phase1_id: 172.23.2.1
IPSEC FLOW: permit 47 host 172.23.2.5 host 172.23.2.1
Active SAs: 2, origin: crypto map
Inbound: #pkts dec'ed 133 drop 0 life (KB/Sec) 4409710/55
Outbound: #pkts enc'ed 133 drop 1 life (KB/Sec) 4409710/55
Outbound SPI : 0xEEC2E783, transform : esp-aes esp-sha-hmacDears
I want your help in figuring out the problem in configuration, as I am trying to deploy qos on DMVPN
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.1.5 172.23.11.5 UP 00:16:57 D 172.23.11.5/32
NHRP group: spoke_group1
Output QoS service-policy applied: none
AUBEgypt-RHT-R this router is hub
shooting club is spoke
but i can't see the result as expected :
AUBEgypt-RHT-R#show dmvpn detail
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================
Interface Tunnel172 is up/up, Addr. is 172.23.11.1, VRF ""
Tunnel Src./Dest. addr: 172.23.1.1/MGRE, Tunnel VRF ""
Protocol/Transport: "multi-GRE/IP", Protect "IPSEC_PROFILE"
Interface State Control: Disabled
Type:Hub, Total NBMA Peers (v4/v6): 1
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.1.5 172.23.11.5 UP 00:16:57 D 172.23.11.5/32
NHRP group: spoke_group1
Output QoS service-policy applied: none
Crypto Session Details:
Interface: Tunnel172
Session: [0x689D0324]
IKE SA: local 172.23.1.1/500 remote 172.23.1.5/500 Active
Capabilities:D connid:1004 lifetime:23:44:18
Crypto Session Status: UP-ACTIVE
fvrf: (none), Phase1_id: 172.23.1.5
IPSEC FLOW: permit 47 host 172.23.1.1 host 172.23.1.5
Active SAs: 4, origin: crypto map
Inbound: #pkts dec'ed 127 drop 0 life (KB/Sec) 4514806/113
Outbound: #pkts enc'ed 127 drop 0 life (KB/Sec) 4514807/113
Outbound SPI : 0xA67C0EBD, transform : esp-aes esp-sha-hmac
Socket State: Open
Pending DMVPN Sessions:
AUBEgypt-RHT-R#show ip nhrp
172.23.11.5/32 via 172.23.11.5
Tunnel172 created 00:17:17, expire 01:42:42
Type: dynamic, Flags: unique registered
NBMA address: 172.23.1.5
Group: spoke_group1
Shooting-Club#show dmvpn detail
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================
Interface Tunnel1 is up/up, Addr. is 172.23.11.5, VRF ""
Tunnel Src./Dest. addr: 172.23.1.5/MGRE, Tunnel VRF ""
Protocol/Transport: "multi-GRE/IP", Protect "IPSEC_PROFILE"
Interface State Control: Disabled
IPv4 NHS: 172.23.11.1 RE
Type:Spoke, Total NBMA Peers (v4/v6): 1
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.1.1 172.23.11.1 UP 00:17:48 S 172.23.11.1/32
Interface Tunnel2 is up/up, Addr. is 172.23.22.5, VRF ""
Tunnel Src./Dest. addr: 172.23.2.5/MGRE, Tunnel VRF ""
Protocol/Transport: "multi-GRE/IP", Protect "IPSEC_PROFILE"
Interface State Control: Disabled
IPv4 NHS: 172.23.22.1 RE
Type:Spoke, Total NBMA Peers (v4/v6): 1
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network
1 172.23.2.1 172.23.22.1 UP 00:17:48 S 172.23.22.1/32
Crypto Session Details:
Interface: Tunnel1
Session: [0x669AD6D4]
IKE SA: local 172.23.1.5/500 remote 172.23.1.1/500 Active
Capabilities:(none) connid:1007 lifetime:23:43:28
Crypto Session Status: UP-ACTIVE
fvrf: (none), Phase1_id: 172.23.1.1
IPSEC FLOW: permit 47 host 172.23.1.5 host 172.23.1.1
Active SAs: 2, origin: crypto map
Inbound: #pkts dec'ed 134 drop 0 life (KB/Sec) 4437700/52
Outbound: #pkts enc'ed 133 drop 1 life (KB/Sec) 4437700/52
Outbound SPI : 0x90A47368, transform : esp-aes esp-sha-hmac
Socket State: Open
Interface: Tunnel2
Session: [0x669AD5E4]
IKE SA: local 172.23.2.5/500 remote 172.23.2.1/500 Active
Capabilities:(none) connid:1008 lifetime:23:43:29
Crypto Session Status: UP-ACTIVE
fvrf: (none), Phase1_id: 172.23.2.1
IPSEC FLOW: permit 47 host 172.23.2.5 host 172.23.2.1
Active SAs: 2, origin: crypto map
Inbound: #pkts dec'ed 133 drop 0 life (KB/Sec) 4409710/55
Outbound: #pkts enc'ed 133 drop 1 life (KB/Sec) 4409710/55
Outbound SPI : 0xEEC2E783, transform : esp-aes esp-sha-hmac -
I'm trying to configure the router's QoS but I'm not succeeding . I put the game League of Legends as a high priority , but as soon as I turn on the TV with Net Flix the game connection is bad . My questions are as follows - DHCP is not done by the router , but the modem. This would prevent the operation of the QoS ? - QoS just work for WAN connection? Because i'm doing the connection on the ethernet port. - I need to put the TV or the Net Flix as low priority in QoS ? Below modem settings
Thanks for the quick return.Allow me to elaborate : - My internet is 10mb / s- The Internet comes via cable modem / router Thomson. This router is doing DHCP and sharing the internet via ethernet port to the E900 router.- I tried some settings to share the Internet via WAN without success . Thomson Modem configurations E900 Modem Thomson
Maybe you are looking for
-
IPhoto 9.2.1 update - no RAW files
This problem is on my husband's MacBook Pro running 10.6.8. Prior to the 9.2.1 update he had uploaded quite a few RAW (NEF) files from his Nikon D90 and they worked fine. After the update, the thumbnails are there, but they cannot be opened to view
-
I opened my Verizon package on Friday and my iPhone 6 was missing from the box! Somewhere along the delivery chain, someone opened the package, opened the box, and took the phone out, leaving the charger! Has anyone had this experience? Now I have
-
Connecting Retina to Boxlight Projector ...
Hello ... I have a Retina Mac book pro and need to hook it up to this Boxlight projector. Since the Boxlight doesn't have an HDMI connector, what kind of cable/adaptor do I need to get? .. thanks ...
-
i was wondering if anyone knows how to get dvd's i burned on my dvd recorder on my ipod. i use videora, but it doesn't work for some reason.
-
How to check if the file is out of synchronization
I would like to check every time my main application frame gets focus if the file has been changed while the frame was out of focus, like what eclipse has, how can I achieve this? (except by saving the file data on loosing focus, is there a better wa