Enabling #mls qos globally on 3650 switch

Hi,
I just got a WS-C3650 switch,  Trying to configure #mls qos but it seems as if this switch does not support this feature. 
Is there a way of enabling it?
Regards
Pardon

Hey,
Its enabled by default, as this box uses MQC for QoS. Check the link:
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3650-series-switches/qa_c67-729531.html
HTH.
Regards,
RS.

Similar Messages

  • Without 'MLS QOS' in 6500 does any interface queueing and trusting take place?

    I have a 6500 that does not have 'mls qos' global configured, although the interfaces do have 'mls qos trust dscp' on them as in:
    interface GigabitEthernet3/3
    switchport
    switchport access vlan 536
    switchport mode access
    switchport voice vlan 910
    logging event link-status
    mls qos trust dscp
    spanning-tree portfast
    When I 'show queueing int gx/x', it does show the default queueing structure of the interface as in:
    LLT-6509AS-A#sh queueing int g3/3
    Interface GigabitEthernet3/3 queueing strategy:  Weighted Round-Robin
      QoS is disabled globally
      Port is untrusted
      Extend trust state: not trusted [COS = 0]
      Default COS is 0
        Queueing Mode In Tx direction: mode-cos
        Transmit queues [type = 1p3q8t]:
        Queue Id    Scheduling  Num of thresholds
           01         WRR                 08
           02         WRR                 08
           03         WRR                 08
           04         Priority              01
    ---- snip ----
        queue thresh cos-map
        1     1      0 1 2 3 4 5 6 7
        1     2     
        1     3     
        1     4     
        1     5     
        1     6     
        1     7     
        1     8     
      Packets dropped on Transmit:
        BPDU packets:  0
        queue              dropped  [cos-map]
        1                        0  [0 1 2 3 4 5 6 7 ]
        2                        0  []
        3                        0  []
        4                        0  []
      Packets dropped on Receive:
        BPDU packets:  0
        queue              dropped  [cos-map]
        1                        0  [0 1 2 3 4 5 6 7 ]
    So just what does the global 'mls qos' do?  Without it is the command 'mls qos trust dscp' ignored?
    I'm trying to track down where in our network dscp settings are being stripped out of packets and this is when I noticed the 'mls qos' was not configured.

    it enables QOS on the switch, without it no QOS is being used.
    Sent from Cisco Technical Support iPhone App

  • MLS QOS problems on 3750

    When i enable mls qos on 3750 running EMI image the ingress ports should switch to non-trusted and therefore reclassify all DSCP/COS bits to 0.
    This is not happening and the COS bits are reamining as set by the IP handsets and pc's.
    This does not happen on 3550 or 6500's which i have just tested to verify.

    What is the exact version of OS you are using ?

  • MLS QOS on 2960S

    Enabling MLS QOS on 2960S seems to "throttle" bandwidth when using a specific Mitel 5320 phone.  I have a PC behind the Mitel and the performance is way slower.  Validated via a speed test.  Once I remove the MLS QOS globally, the performance is greatly improved, about doubled.  This is causing some issues as users with this particular phone attached with a PC behind the phone are starting to complain.  What could be causing this or what settings to overcome this?

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    Enabling QoS on a 2960/3560/3750, using defaults, often results in slow transfer performance.  This because the default buffer settings often increase drop rates in the newly enabled egress queues.  Manual buffer tuning might mitigate.

  • "mls qos trust dscp" vs. "mls qos trust cos"

    Are these statements correct ?
    1. If using QoS profile without setting "wired qos protocol", always use "mls qos trust dscp" on the WLC trunk port
    - downstream wmm traffic will be policed down to "?" (this one I'm not sure, is it "not policed" or "policed down to cos 6 for platinum, etc")
    2. If using QoS profile with setting "wired qos protocol",
    - use "mls qos trust cos" on the WLC trunk port if you want outgoing LWAPP traffic COS/DSCP to reflect QoS profile setting and if you want to rewrite DSCP in the outgoing upstream traffic to QoS profile setting
    - use "mls qos trust dscp" on the WLC trunk port if you want LWAPP traffic COS/DSCP to reflect original DSCP setting and if you want to leave DSCP alone in the outgoing upstream traffic
    3. With either "mls qos trust cos" or "mls qos trust dscp" on WLC trunk port, downstream wmm traffic will be policed down to "wired qos protocol" setting (What if "wired qos protocol" is not set, will it be policed down to, for example, cos 6 for Platinum?)
    4. Always use "mls qos trust dscp" on non-HREAP AP ports
    Use "mls qos trust dscp" on HREAP AP ports, if you want to preserve upstream DSCP for locally switched WLANs
    Use "mls qos trust cos" on HREAP AP ports, if you want to QoS profile 802.1p to override upstream DSCP for locally switched WLANs
    5. Use either "mls qos trust dscp" or "mls qos trust cos" on switch-to-switch trunks

    Are these statements correct ?
    1. If using QoS profile without setting "wired qos protocol", always use "mls qos trust dscp" on the WLC trunk port
      - downstream wmm traffic will be policed down to "?" (this one I'm not sure, is it "not policed" or "policed down to cos 6 for platinum, etc")
    Ans: Not sure about always. you can use both 'mls qos trust dscp' and 'mls qos trust cos'. Since it is a trunk port the packets will have a cos value (802.1p tag) and hence you can trust cos. Downstream and upstream traffic both are capped to the WLAN max QoS value. for example if Wlan is set to silver, and if a packet comes in at platinum QoS, the AP will cap it to silver in upstream direction. Same holds true for a cos 5 / dscp 46 packet coming in from the wired side.
    2. If using QoS profile with setting "wired qos protocol",
      - use "mls qos trust cos" on the WLC trunk port if you want outgoing LWAPP traffic COS/DSCP to reflect QoS profile setting and if you want to rewrite DSCP in the outgoing upstream traffic to QoS profile setting
      - use "mls qos trust dscp" on the WLC trunk port if you want LWAPP traffic COS/DSCP to reflect original DSCP setting and if you want to leave DSCP alone in the outgoing upstream traffic
    Ans:
    3. With either "mls qos trust cos" or "mls qos trust dscp" on WLC trunk port, downstream wmm traffic will be policed down to "wired qos protocol" setting (What if "wired qos protocol" is not set, will it be policed down to, for example, cos 6 for Platinum?)
    Ans: Traffic in both direction wil always get capped to WLAN max QoS. Untagged (802.1p = 0) traffic will be treated as best effort.
    4. Always use "mls qos trust dscp" on non-HREAP AP ports
       Use "mls qos trust dscp" on HREAP AP ports, if you want to preserve upstream DSCP for locally switched WLANs
       Use "mls qos trust cos" on HREAP AP ports, if you want to QoS profile 802.1p to override upstream DSCP for locally switched WLANs
    Ans:
    5. Use either "mls qos trust dscp" or "mls qos trust cos" on switch-to-switch trunks
    Ans: I think on purely layer 2 switches you can trust dscp, but am not 100% sure.

  • Mls qos enabled globally and disabled for only one interface

    Hello !
    My switch is Cisco IOS Software, C2960X Software (C2960X-UNIVERSALK9-M), Version 15.0(2)EX5, RELEASE SOFTWARE (fc1)
    I try to disabled mls qos only for one interface, but when i do it, mls qos is globally disabled. Is it possible to do it ? 
    XXX#show mls qos
    QoS is enabled
    QoS ip packet dscp rewrite is enabled
    XXX#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
    XXX(config)#interface gigabitEthernet 1/0/5
    XXX(config-if)#no mls qos
    XXX(config)#exit
    XXX#
    XXX#show mls qos
    QoS is disabled
    QoS ip packet dscp rewrite is enabled
    Thanks in advance for your help !!
    Denis

    Hi Denis,
    You cant disable the QOS on per interface on 2960 devices.
    By default, QoS is disabled. When we enable QoS all ports
    will be assigned to queue-set 1. We can configure up to two
    different queue-sets.
    Hence if you remove the qos out of the interface it would be disabled globally as well.
    HTH

  • Cisco 3650 QoS design: "mls QoS" not supported

    Dear colleagues,
    I am currently testing a Cisco 3650 for various catalogue items. One key feature that we use on almost all our catalogue items, is Quality of Service (QoS).
    On the old Cisco 3560 and 3750, we use "mls qos" and related commands. We use numbered ACLs for  untrusted QoS policy that sits on the LAN / ingress port. I have raised a TAC case for this issue but is there a tool to help me convert the "mls QoS" design on the old 3560 platform to the new 3650 platform where "mls qos" is not supported?
    Many thanks.

    Hi,
    The new 3650 runs IOS-XE and the older Cisco 3560 and 3750 run IOS.  So the QOS architecture on the new 3650 is different.
    here is the link to the qos config for the 3650:
    http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/3se/qos/configuration_guide/b_qos_3se_3650_cg/b_qos_3se_3650_cg_chapter_011.html
    HTH

  • Cisco 3560 switch| mls qos trust dscp question

    Hi everybody
    Hi everybody .
    Please consider the following example:
    3560 sw f1/1--------trunk---SW2
    3560 sw
    f1/1
    mls qos trust dscp
    3560 is using default cos-dscp map, assume a 3560 receives a frame carrying IP packet on f1/1 with COS 4, what will 3560 switch do?
    1) will it use its default cos --dscp map  ( cos 4--.dscp 32) and rewrite 32 in dscp field  of the packet in the frame and provide PHB for dscp 32 ?
    Much appreciated!!
    Have  a great weekend.

    Hi
    No it will not trust the cos value, because You have configured to trust dcsp. So, the switch will trust the dcsp value in the incoming frame.
    /Mikael

  • Version 03.03.00.XO - MLS QOS not supported

    Hi All,
    Anyone face the same problem with the following IOS Version?
    MLS QOS is not supported in global command.
    Switch#sh ver
    Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500es8-UNIVERSALK9-M), Version 03.03.00.XO RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2013 by Cisco Systems, Inc.
    Compiled Wed 14-Aug-13 07:26 by prod_rel_team
    Cisco IOS-XE software, Copyright (c) 2005-2013 by cisco Systems, Inc.
    All rights reserved.  Certain components of Cisco IOS-XE software are
    licensed under the GNU General Public License ("GPL") Version 2.0.  The
    software code licensed under GPL Version 2.0 is free software that comes
    with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
    GPL code under the terms of GPL Version 2.0.  For more details, see the
    documentation or "License Notice" file accompanying the IOS-XE software,
    or the applicable URL provided on the flyer accompanying the IOS-XE
    software.
    ROM: 15.1(1r)SG2
    Switch uptime is 6 minutes
    System returned to ROM by power-on
    Running default software
    Jawa Revision 3, RadTrooper Revision 0x0.0x41, Conan Revision 0x1449
    Last reload reason: power-on
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    License Information for 'WS-X45-SUP8-E'
        License Level: entservices   Type: Permanent
        Next reboot license Level: entservices
    cisco WS-C4506-E (P5040) processor (revision 2) with 4194304K bytes of physical memory.
    Processor board ID FXS1812Q346
    P5040 CPU at 2.2GHz, Supervisor 8-E
    Last reset from PowerUp
    1 Virtual Ethernet interface
    20 Ten Gigabit Ethernet interfaces
    511K bytes of non-volatile configuration memory.
    Configuration register is 0x2101
    SWITCH(config)#mls qos
                         ^
    % Invalid input detected at '^' marker.
    SWITCH(config)#
    SWITCH(config)#?
    Configure commands:
      aaa                         Authentication, Authorization and Accounting.
      access-list                 Add an access list entry
      access-session              Access Sesion Global Configuration Commands
      agent-server                Modify DNS server properties
      alias                       Create command alias
      ancp                        Configure ANCP
      archive                     Archive the configuration
      arp                         Set a static ARP entry
      async-bootp                 Modify system bootp parameters
      audit                       Router Audit
      authentication              Auth Manager Global Configuration Commands
      auto                        Configure Automation
      banner                      Define a login banner
      beep                        Configure BEEP (Blocks Extensible Exchange
                                  Protocol)
      bfd                         BFD configuration commands
      bfd-template                BFD template configuration
      boot                        Modify system boot parameters
      bridge                      Bridge Group.
      buffers                     Adjust system buffer pool parameters
      bulkstat                    Bulkstat Application
      call-home                   Enter call-home configuration mode
      cdp                         Global CDP configuration subcommands
      cef                         Cisco Express Forwarding
      cisp                        Set CISP parameters
      class-map                   Configure CPL Class Map
      clns                        Global CLNS configuration subcommands
      clock                       Configure time-of-day clock
      cluster                     Cluster configuration commands
      cns                         CNS agents
      comet-server                Configure comet-server properties
      config-register             Define the configuration register
      configuration               Configuration access
      control-plane               Configure control plane services
      crypto                      Encryption module
      cts                         Cisco Trusted Security commands
      default                     Set a command to its defaults
      default-value               Default character-bits values
      define                      interface range macro definition
      device-sensor               IOS Sensor Commands
      diagnostic                  Configure diagnostic information
      dns-server                  Modify DNS server properties
      dnsix-dmdp                  Provide DMDP service for DNSIX
      dnsix-nat                   Provide DNSIX service for audit trails
      do-exec                     To run exec commands in config mode
      dot1x                       IEEE 802.1X Global Configuration Commands
      downward-compatible-config  Generate a configuration compatible with older
                                  software
      eap                         EAP Global Configuration Commands
      emm                         Specify pre-loading of MDF
      enable                      Modify enable password parameters
      end                         Exit from configure mode
      energywise                  EnergyWise Global Configuration Commands
      epm                         EPM Global Configuration Commands
      errdisable                  Error disable
      ethernet                    Ethernet configuration
      event                       Event related configuration commands
      exception                   Exception handling
      exit                        Exit from configure mode
      fallback                    Fallback configuration commands
      fhrp                        Configure First Hop Redundancy Protocols
      file                        Adjust file system parameters
      fips                        FIPS mode after next reload
      flow                        Global Flow configuration subcommands
      format                      Format the output
      global-address-family       Enter address-family base routing topology mode
      help                        Description of the interactive help system
      hostname                    Set system's network name
      hw-module                   Apply command (e.g. shutdown) to specified
                                  hardware target
      hw-module                   Control of individual components in the system
      hw-switch                   Control of individual components in the switch
      id-manager                  ID Pool Manager
      identity                    Identity Configuration Commands
      infra-test                  Configure end2end properties
      interface                   Select an interface to configure
      ip                          Global IP configuration subcommands
      ipc                         Configure IPC system
      ipv6                        Global IPv6 configuration commands
      isis                        Global ISIS configuration subcommands
      issu                        no description
      key                         Key management
      kron                        Kron interval Facility
      l2                          Layer 2
      l2protocol-tunnel           Tunnel Layer2 protocols
      lacp                        LACP configuration
      li-view                     LI View
      license                     Configure License
      line                        Configure a terminal line
      link                        Enable Link State Tracking feature
      lldp                        Global LLDP configuration subcommands
      location                    Global location configuration commands
      logging                     Modify message logging facilities
      login                       Enable secure login checking
      mab                         MAC Authentication Bypass Global Configuration
                                  Commands
      mac                         Global MAC configuration subcommands
      macro                       Macro configuration
      media-proxy                 Global media proxy configuration
      mediatrace                  Mediatrace Application
      memory                      Configure memory management
      metadata                    Metadata Application
      mka                         MACsec Key Agreement (MKA) configuration
      module                      Module
      monitor                     Monitoring different system events
      mvr                         Enable/Disable MVR on the switch
      netconf                     Configure NETCONF
    Thank you.

    Hi,
    QOS implementation has radically changed since the advent of
    sup-7 & later
    You no longer set mls qos as qos is on the engine by default.
    Please see the following links
    http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/white_paper_c11-539588.html
    "Ingress QoS: Default Actions
    First and foremost, QoS does not need to be enabled on the Supervisor Engine, it is on by default in compliance with the MQC construct.
    When a packet arrives at an interface, there are two options to take into consideration: is there a policy attached or not? If the packet arrives with or without a marking and there is not a policy attached to the interface, packets will flow through the switch untouched. There are no questions as to where the packet came from or if it has a valid marking. If the packet arrives with or without a marking, and a policy is attached to the interface, the packet will only then be subject to the policy classification."
    And the config guide
    http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/15-1/XE_330SG/configuration/guide/config/qos_mrg.html#wp1461453
    Hope this helps
    Regards
    Alex

  • How to enable auto QoS on C4500-X

    How to enable auto QoS on C4500-X for Cisco phone? Since it is different from the global commands 'mls qos',who has the example? Thanks.

    http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/20ew/configuration/guide/macro.html
    Take a look at this document
    And this one
    http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps4324/prod_white_paper0900aecd8041691c.html

  • Why does mls qos trust dscp dissapear after reboot?

    The command takes but after reboot, Invlaid inputs detected show up and "mls qos tust dscp" is gone from every interface.
    Happens on both 2960-24PC-S / 2960-48PST-S switches.

    Hi,
    thanks for your reply.
    mls qos
    interface GigabitEthernet3/34
    description *** DATA VLAN 35 - VOICE VLAN 34 ***
    switchport
    switchport trunk native vlan 36
    switchport trunk allowed vlan 34,36
    switchport mode trunk
    mls qos trust dscp
    no cdp enable
    spanning-tree portfast trunk
    If i don't include the global 'mls qos' command then the voice packets keep the dscp 46 value.  If I add the mls qos command this causes the switch to set the dscp values to zero.
    Thanks again 
    ps.  there are some other mls commands on the switch... i don't know if these could interfere but they were already on there so i'm reluctant to remove them..

  • Mls qos trust dscp??? is setting my DSCP values to zero!?

    Hi,
    I was just doing some testing to ensure that the command 'mls qos trust dscp' is working on my 6509 switches before rolling out QoS.
    Before adding any configuration I could see using wireshark that traffic from my Avaya 9608 handset was coming through with a DSCP value of 46 (as it is supposed to).
    I then added the command 'mls qos' (at global level)
    on examining the wireshark output this time, the DSCP value had been set to zero (i.e. it defaulted it to best effort)
    I then expected by adding the commmand 'mls qos trust dscp' on the interface the phone is connected to that the DSCP value would would again be left alone?
    does anybody know why this is happening?
    Many thanks in advance.
    Andy

    Hi,
    thanks for your reply.
    mls qos
    interface GigabitEthernet3/34
    description *** DATA VLAN 35 - VOICE VLAN 34 ***
    switchport
    switchport trunk native vlan 36
    switchport trunk allowed vlan 34,36
    switchport mode trunk
    mls qos trust dscp
    no cdp enable
    spanning-tree portfast trunk
    If i don't include the global 'mls qos' command then the voice packets keep the dscp 46 value.  If I add the mls qos command this causes the switch to set the dscp values to zero.
    Thanks again 
    ps.  there are some other mls commands on the switch... i don't know if these could interfere but they were already on there so i'm reluctant to remove them..

  • MLS QOS on METRO

    Was going thro one of the document on METRO QOS and came across 2 commands "mls qos trust cos pass-through dscp" and second one is "no mls qos rewrite ip dscp ".Can any please elaborate these commands and share difference between them.

    1.mls qos trust cos pass-through dscp -- To configure the multilayer switching (MLS) port trust state and to classify traffic by examining the class of service (CoS) or differentiated services code point (DSCP) value.
    2.no mls qos rewrite ip dscp-- To enable type of service (ToS)-to-differentiated services code point (DSCP) rewrite, use the mls qos rewrite ip dscp command in global configuration mode. To disable ToS-to-DSCP rewrite, use the no form of this command
    For more info about commands.
    http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m2.html#wp1014971

  • NAT problems on a L3 3650 switch

    So, I am trying to setup NAT on our new 3650 switch running IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.06.00E RELEASE SOFTWARE
    This simple setup involves a layer 3 port (1/0/46) to our gateway and a Vlan for NAT
    My hosts on my NAT Vlan (Vlan 2) do not seem able to ping anywhere else than the switch itself (all its interfaces) and their local subnet. Pings from the switch to outside are fine (NAT debug enabled):
    Switch#ping 8.8.8.8 source 192.168.122.1
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
    Packet sent with a source address of 192.168.122.1 
    Success rate is 100 percent (5/5), round-trip min/avg/max = 60/66/70 ms
    Switch#
    *Nov 10 14:27:04.145: NAT: ICMP id=1->1025
    *Nov 10 14:27:04.145: NAT: s=192.168.122.1->165.211.28.194, d=8.8.8.8 [5]
    *Nov 10 14:27:04.210: NAT: ICMP id=1025->1
    *Nov 10 14:27:04.210: NAT: s=8.8.8.8, d=165.211.28.194->192.168.122.1 [0]
    Running Config:
    ! Last configuration change at 13:51:06 UTC Mon Nov 10 2014
    version 15.2
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    service compress-config
    hostname Switch
    boot-start-marker
    boot system switch all flash:packages.conf
    boot-end-marker
    vrf definition Mgmt-vrf
    address-family ipv4
    exit-address-family
    no aaa new-model
    switch 1 provision ws-c3650-48ps
    ip routing
    ip dhcp excluded-address 192.168.122.1
    ip dhcp pool Pool14
    import all
    network 192.168.122.0 255.255.255.0
    dns-server 165.211.29.1
    default-router 192.168.122.1
    domain-name my.domain
    crypto pki trustpoint TP-self-signed-1875358754
    diagnostic bootup level minimal
    spanning-tree mode pvst
    spanning-tree extend system-id
    hw-switch switch 1 logging onboard message level 3
    redundancy
    mode sso
    class-map match-any non-client-nrt-class
    policy-map port_child_policy
    class non-client-nrt-class
    bandwidth remaining ratio 10
    interface GigabitEthernet0/0
    vrf forwarding Mgmt-vrf
    no ip address
    negotiation auto
    interface GigabitEthernet1/0/46
    description conf GW
    no switchport
    ip address 165.211.28.194 255.255.255.192
    ip nat outside
    interface GigabitEthernet1/0/47
    switchport access vlan 2
    spanning-tree portfast
    spanning-tree bpduguard enable
    interface GigabitEthernet1/0/48
    switchport access vlan 2
    spanning-tree portfast
    spanning-tree bpduguard enable
    interface Vlan1
    no ip address
    shutdown
    interface Vlan2
    ip address 192.168.122.1 255.255.255.0
    ip nat inside
    ip nat inside source list 61 interface GigabitEthernet1/0/46 overload
    ip forward-protocol nd
    ip http server
    ip http authentication local
    no ip http secure-server
    ip route 0.0.0.0 0.0.0.0 165.211.28.193
    access-list 61 permit 192.168.122.0 0.0.0.255
    line con 0
    stopbits 1
    line aux 0
    stopbits 1
    line vty 0 4
    login
    line vty 5 15
    login
    wsma agent exec
    profile httplistener
    profile httpslistener
    wsma agent config
    profile httplistener
    profile httpslistener
    wsma agent filesys
    profile httplistener
    profile httpslistener
    wsma agent notify
    profile httplistener
    profile httpslistener
    wsma profile listener httplistener
    transport http
    wsma profile listener httpslistener
    transport https
    ap group default-group
    end
    I also tried using a Vlan (+nat outside) instead of the Layer3 port (1/0/46) with the same results

    Hello Paul, 
    1)yes the public addressing is correct. Our gateway is 165.211.28.193/26 and my public is setup 165.211.28.194/26.
    2) Ip routing is enabled on the switch as you can see on my configuration
    3)Switch#sh sdm prefer 
    Showing SDM Template Info
    This is the Advanced (low scale) template.
      Number of VLANs:                                 4094
      Unicast MAC addresses:                           32768
      Overflow Unicast MAC addresses:                  512
      IGMP and Multicast groups:                       4096
      Overflow IGMP and Multicast groups:              512
      Directly connected routes:                       16384
      Indirect routes:                                 7680
      Security Access Control Entries:                 1536
      QoS Access Control Entries:                      3072
      Policy Based Routing ACEs:                       1024
      Netflow ACEs:                                    768
      Wireless Input Microflow policer ACEs:           256
      Wireless Output Microflow policer ACEs:          256
      Flow SPAN ACEs:                                  512
      Tunnels:                                         256
      Control Plane Entries:                           512
      Input Netflow flows:                             8192
      Output Netflow flows:                            16384
      SGT/DGT entries:                                 4096
      SGT/DGT Overflow entries:                        512
    These numbers are typical for L2 and IPv4 features.
    Some features such as IPv6, use up double the entry size;
    so only half as many entries can be created.

  • Mls qos VS mls qos trust

    Hello world!
    I want to enable qos on a 3560 switch,
    So, I put:
    Overall setup mode "mls qos"
    Question:
    is what it is Verily nessaiire to interface configuration mode: "mls qos trust"?
    Regards,

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    Generally, on many Catalyst switches, once you enable QoS, they will erase an ingress CoS/ToS markings unless your trust it or otherwise (i.e. policy) maintain it.
    I.e. the answer to your question is an "it depends"; but unless you want the markings reset to zero, the answer is probably yes (you want to trust).

Maybe you are looking for

  • Problems installing Oracle 8.0.5. over OpenLinux 3.1.

    Hello everybody: I tried to install Oracle 8.0.5. in my linux box last weekend. All the procedure went OK until it went into the relink process, then it suddenly stopped with a message similar to this one: 'ld:libserver.a:Undefined symbol __strtoq_in

  • Image processor not saving settings for images to process

    Hello, I have raw images taken by a Canon G9.  I am trying to convert these .CR2 images to LZW tiff's.  This is my process: In Bridge, select images to process Click tools > photoshop > image processor Image processor window comes up.  I have the fol

  • Elements Organizer 8 - some WMV are not displayed properly in the Play Video but are in Play Vide

    Hello: Elements Organizer - some WMV are not displayed properly in the Play Video but are in Play Vide on Full screen. What's the problem? Wrong codec?

  • Use of  register g4 in kernel code

    Hi, My kernel is solaris 8, 64 bit and applications run as 32 bit. I was faciing a strange kernel panic (occured only once till now) where register $g4 contained a value which was not consistant with the contents in memory which it referenced to. ppd

  • Euro currency symbol in SmartForms

    Hi, I'm using ECC6.0 SmartForm. I'd like to add this symbol '€' in the text. I've tried to copy and paste it but the script editor doesn't allow. Does anyone have a solution for this problem?? Please help me it's very urgent... Tarick.