How does QOS pre-classify realy work

Hi,
Does Qos pre-classify simply copy the precedence feild form the inside packet to the encapsulation header or does it apply the policy-map of the source physical interface?
I would say it only copy the feild but I have a GRE over IPsec tunnel mode that's behaving funny...

Ok, it works like I expected.
Now for my funny router...
I've got my main campus and a remote site connected by an encrypted GRE tunnel. Where do I place de QOS pre classify command, on the tunnel interface or on the crypto-map...or on both.
I've tried configuring it on both. On the policing policy-map on the outgoing interface, my match statement is an ACL trying to match on ESP traffic (the hit counter doesnt increase) and I've added a line for the un-encrypted trafic IPs and this one has hits. In the child policy, I've got hit with my IP precedende value in my voice class, that part is ok.
So, why can't I match on my permit ESP host A host B? And how is it possible to have match on the acl (permit ip any to remote site range)? The later should be encrypted when it hit the outbound policy map.

Similar Messages

  • Qos pre-classify not classifying packets correctly.

    This is a little 831 router (12.4.4T) with one private and one public interface connected to a 1000/256 ADSL circuit. There is a VPN to the Head Office with a GRE tunnel and EIGRP.
    The Tunnels bandwidth is set to 1544 since there is a frame-relay backup and the service provider hasn’t configured their parameters correctly, but this shouldn’t affect the QoS.
    What’s happening is that we can only see a very small amount of traffic being classified correctly and all other traffic seems to match the last (ip any any) access-list. The fact that the data is being classified seems to indicate that the qos pre-classify is working but we don’t know why it’s not matching the correct data classes.
    Any ideas would be greatly appreciated...
    router#sh policy-map int eth1
    Ethernet1
    Service-policy output: soho01-vpn-256
    Class-map: AC-CLASS-G1 (match-any)
    14110 packets, 2414498 bytes
    5 minute offered rate 9000 bps, drop rate 0 bps
    Match: access-group name AC-G1
    14110 packets, 2414498 bytes
    5 minute rate 9000 bps
    Queueing
    Output Queue: Conversation 73
    Bandwidth 128 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 1/60
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: AC-CLASS-G2 (match-any)
    0 packets, 0 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: access-group name AC-G2
    0 packets, 0 bytes
    5 minute rate 0 bps
    Queueing
    Output Queue: Conversation 74
    Bandwidth 8 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 0/0
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: AC-CLASS-G3 (match-any)
    12 packets, 968 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: access-group name AC-G3
    12 packets, 968 bytes
    5 minute rate 0 bps
    Queueing
    Output Queue: Conversation 75
    Bandwidth 32 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 9/558
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: AC-CLASS-G4 (match-any)
    1621 packets, 266028 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: access-group name AC-G4
    1621 packets, 266028 bytes
    5 minute rate 0 bps
    Queueing
    Output Queue: Conversation 76
    Bandwidth 64 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 19/1240
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: AC-CLASS-G5 (match-any)
    9336 packets, 693246 bytes
    5 minute offered rate 1000 bps, drop rate 0 bps
    Match: access-group name AC-G5
    9336 packets, 693246 bytes
    5 minute rate 1000 bps
    Queueing
    Output Queue: Conversation 77
    Bandwidth 16 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 8248/511990
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: AC-CLASS-G6 (match-any)
    369616 packets, 79361172 bytes
    5 minute offered rate 164000 bps, drop rate 0 bps
    Match: access-group name AC-G6
    369616 packets, 79361172 bytes
    5 minute rate 164000 bps
    Queueing
    Output Queue: Conversation 78
    Bandwidth 8 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 310/24424
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: class-default (match-any)
    4750 packets, 285000 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: any

    Someone please correct me if I am wrong but if you add the 5 minute offered rate for all your classes you are classifying about 175K worth of traffic throughout your service policy. If I am reading correctly your circuit is 256 up 1M down.
    From looking at your configuration it seems most of your traffic is matching the class named class AC-CLASS-G6. There is no access list defined for this class so essentially all traffic that hasn?t matched a previous class will match here. This explains why you?re not matching any traffic on the default class.
    It is recommended to only assign queues for up to 75% of the available bandwidth. IOS determines what this 75% is based on the bandwidth statement. Right now you have queues defined for all but 2K of your available bandwidth which means traffic that doesn?t match any of your classes will be tail dropped during times of congestion. I assume you are intending to do this based on the max-reserved-bandwidth command and the missing access list.
    When using qos-preclassify essentially what happens is the ToS bits are copied into the post gre or IPSEC IP header. In this case you are not matching based on DSCP marking you are matching on IP address so therefore when packets egress your E0 interface the post GRE or IPSEC IP header doesn?t have an address or type field that matches your class statements. If you were to mark traffic based on these classes with a DSCP marking (i.e. AF 31, 32, 33) at the inbound interface you could then copy these markings and provide the appropriate PHB on your egress interface E0.
    HTH
    RS

  • How does QoS work with WAAS WCCP? What's the interaction between QoS Traffic Classification and WAE Traffic Application Policy?

    How does QoS work with WAAS WCCP? What's the interaction between Router QoS Traffic Classification and WAE Traffic Application Policy?

    By default, WAAS preserves the DSCP marking on intercepted packets.  There is a configuration option to set/override the DSCP value at the global (device), application, and classifier levels.  Currently WAAS provides marking only.  There is no action taken by WAAS based on the DSCP value.
    Regards,
    Zach

  • How does Creative Cloud for teams work with staff who work in two locations ie in the office/home

    How does Creative Cloud from teams work with staff who work in two locations i.e. in the office and home?

    There is no difference please be aware that each login is provided with two activations however.  If you wish to have a computer at both work and home activated though that is perfectly fine as long as your employer is ok with using company software at home.

  • How does the DAQmx read.vi work in producer/consumer mode

    Dear all,
    I have one question: how does the DAQmx read.vi work in producer/consumer mode ? 
    I mean if i set the acquisition samples quantity is 5000,(see the enclosed picture), how does the DAQmx read.vi acquire the samples ?
    5000 samples one time ?
    And how does the write. vi work ? Also 5000 samples one time ?
    Look forward to your reply.
    Thank you.
    Attachments:
    producer consumer mode.png ‏28 KB

    It will read 5000 samples per channel.
    The Write Measurement File just writes whatever you give it.  It you send it 5000 data points, it will write the 5000 data points.
    There are only two ways to tell somebody thanks: Kudos and Marked Solutions
    Unofficial Forum Rules and Guidelines

  • How does the Mac App Store work?!

    Hey guys i recently posted this quesiton in a different area of the community but instead of being helped was just ridiculed for posting in the wrong place... +1 for helpfulness guys :/ lol Anyways... ive been told to ask in the development section.. I have a $9.99 app and it was sitting at 10th place in the top grossing apps a few weeks ago on the UK app store, now I noticed in the morning that it was ahead of an app which was 49.99 so i presumed that I must have sold at least 5 or 6 to be ahead of him (my idea of top grossing is quantity x price) but when itunesconnect released their reports in the afternoon it turned out that i'd only sold 1 copy.. so what im asking is basically how does the top grossing section work? and how regularly does it update? is it live? daily? etc
    Thanks in advance!

    Your rank is better than the other app because you've made a sale while they've made none. When you make a sale, you jump in the charts, and after that you slowly go down if you don't make another sale. In other words, the bottom of the charts has many apps that didn't make any sale recently. I've also noticed that if you make some sales in other countries than the current chart, that'll very slightly improve your rank.

  • How does the LCM rollback feature work in theory?

    Hi
    How does the LCM rollback feature work in theory?
    Let's say
    1. I've Webi report 'x' in QA system
    2. I promote a modified version of webi report 'x' from DEV to QA using LCM. So now I've 'x1' in QA.
    3. I "rollback" this promotion job in LCM. Which means I've get back 'x' in QA system.
    So does this mean that LCM kept a "backup" copy of 'x' in QA (CMS+filestore file backup) before overwriting with the promoted 'x1' from DEV?
    If yes, does it clear the 'x' anytime from QA? (maybe after second iteration of 'x2'?)
    Thanks

    I highly recommend you read the following blog posts that contains straight answers to common questions about the automatic update feature:
    Hello, Adobe Flash Player Background Updater (Windows)!
    Adobe Flash Player Background Updater for Mac is live!

  • How does EXIT modules in DMEE work?

    Dear friends, how does EXIT modules in DMEE work?
    If I want to use this module DMEE_EXIT_DK_OCR_ACCOUNTNO to extract the account number of an OCR line, what should I do?
    And especially what do I put in the import parameters?
    /René

    The module called DMEE_EXIT_DK_OCR_ACCOUNTNO is a dummy module or template module if you like.
    The problem is that the module DMEE_EXIT_DK_OCR_ACCOUNTNO has a condition that never where fulfilled!
    I copied the module to Z_DMEE_EXIT_DK_OCR_ACCOUNTNO and changed the conditions u2013 and then everything was working with import and export parameters!
    Either is DMEE_EXIT_DK_OCR_ACCOUNTNO a serious mistake in standard SAP or just an undocumented template to be modified!
    /René

  • I live in the country and there is no High speed available, How does Firefox for desk top work with Dial up ???

    I live in the country and there is no High speed available, How does Firefox for desk top work with Dial up ??? I have a great dell computer, Dimention 8400. Before I install firefox I want to know for no waste of time for either party..

    Unless you enabled Find My iPad on it before it was stolen then there isn't any way to locate it. If you did enable it then you could try locating it either via http://icloud.com on a computer or Find My iPhone on another device - but that will only work if it's connected to a network and the device hasn't already been wiped and/or Find My iPad disabled on it.
    If it was stolen then you should report it to the police. You should also change your iTunes account password, your email account passwords, and any passwords that you'd stored on websites/emails/notes etc.
    If it was never registered to your account then it won't appear on your support profile : https://supportprofile.apple.com/
    The only other ways to find it that I know of (apart from on the actual device) are via the packaging, the backup on a computer's iTunes : http://support.apple.com/kb/HT4061

  • How does the widgets HTML snippet work on iweb?

    How does the widgets HTML nippet work on Iweb? and when should you use it?

    Joe R wrote:
    I'm creating Tool Tip definitions for the Operators in the Filter on the Interactive Reports. I was looking for a definition for the 'Contains' operator and from what I've found this operator is used to do a text search and it returns a relevance score for every row selected.The IR "Contains" filter is not the same as the Oracle Text <tt>contains</tt> operator.
    The IR "Contains" filter performs a simple string comparison on all of the column values returned. It does not make use of any Oracle Text indexes on the underlying data.
    Despite < a href="https://forums.oracle.com/forums/thread.jspa?messageID=2434666">vague promises of enhancement</a>, no Oracle Text support has yet been included in Interactive Reports.

  • How does new Label Management feature works in Aruba Central?

    Q: How does new Label Management feature works in Aruba Central?
    A: Central provides a standard web-based interface that allows you to configure and monitor multiple Aruba Wi-Fi networks.  
    With as many as devices that central could manage, searching a specific device or set of devices becomes difficult. This is where "Label management" feature of Aruba Central helps out.
    With "Label Management", administrator can create various labels in advance and use them to assign it to different IAPs or Switches as required.  Once the labels are assigned, user can use the label string to search a device or group of devices in central.
    Follow these steps create various set of labels in "Label Management":
    Login to Aruba Central and click on "All Groups"
    In the left-menu, under "Maintenance" select "Label Management"
    Click on "Create Label" button and create as many labels you require as per the environment and ease of use.

    for rating . you need to enable rating from List options and choose if it's going to be 5 star or like 
    to add like button to each page in a publishing site you can use the below script 
    function LikePage() {
    var aContextObject = new SP.ClientContext.get_current();
    EnsureScriptFunc('reputation.js', 'Microsoft.Office.Server.ReputationModel.Reputation', function () {
    Microsoft.Office.Server.ReputationModel.
    Reputation.setLike(aContextObject, _spPageContextInfo.pageListId, _spPageContextInfo.pageItemId;, true);
    aContextObject.executeQueryAsync(
    function () {
    alert('you liked the page'); //here you can update the likes count of the page
    }, function (sender, args) {
    Hope that helps|Amr Fouad|MCTS,MCPD sharePoint 2010

  • GRC - Role Expert v5.2: how does the Transaction Usage functionality work

    Hi All,
    re: GRC - Role Expert v5.2: how does the Transaction Usage functionality work
    We are implementing GRC suite v5.2, but specifically my question is regarding Role Expert:
    SAP documentation states that it is possible to use Role Expert to do the following: for roles allows you to see if, or how much, a transaction is being used, when it was last used, and who used it.
    My question is how without Audit Log or RBE?
    Let me know if you have ever used this functionality and if it requires the SAP Back-End Audit Log to be turned on or RBE.
    Thanks in advance!

    Hi Gary,
    You dont need a RBE tool activation to get the successful transaction usage log with Role Expert.
    Role Expert functionality allows you to log all the transactions that have been added/deleted to the role that is changed. Also when you create a new role via the Role Expert then automatically the transaction log starts.
    If you go the "History" tab in the Role Expert, then you can find all the last changes made to the role.
    Also you can go to the "Risk Analysis" tab to find the log of Risk Analysis performed with the added tcodes.
    Hope this helps.
    Thanks,
    Kiran Kandepalli.

  • How does the shake to shuffle work on ipod touch 4g?

    So, i want to know how does the shake to shuffle work, i opened the music player and started playing a song but when i shake the ipod, nothing happens, the option of shuffle on the screen is still white and when the song currently playing ends, the next one in alphabetical order starts. The shake to shuffle option in settings is On.

    The iPod can only tether via Bluetooth for internet connectivity to an iPhone. It will connect to other phones to tether for internet connectivity if the phones can act like a wifi hotspot.

  • Qos pre-classify

    can ay body explain and what are
    the effects of qos pre-classify command when apply to gre tunnel interface

    When packets are encapsulated by tunnel or encryption headers, QoS features are unable to examine the original packet
    Headers and correctly classify the packets.  so we are using QOS  pre-classify command.
    Regards,
    Hariharan k

  • How does SMB 3 Multipath actualy work?

    First of all, sorry if there is a better form to post this in, I didn't see a general networking or SMB forum.
    I've been trying to find anything about how SMB 3 Multipath actually works at a networking level (OSI Layer 2, Layer 3). I can't find anything that actually talks about how it achieves multipathing once it's out of its exit interface. Even how it actually chooses
    potential exit interfaces is still a mystery to me.
    How does the MAC address forwarding work? Does it somehow dynamically learn the available MACs on the destination and split the load between them? If that's the case does it work over layer 3 subnets if there are two available routes? How does it learn about
    multiple available paths and actually get the network equipment to use them? In other words if Server A and B have 4 NICs they have 4 MAC addresses or more, one or more IP addresses, teamed or not teamed. Layer 2 adjacency vs Layer 3. There are a lot of variables
    that it has to work with. Is DNS involved at all? If my connection attempt is the server.domain.local DNS might have more than one IP address that server is reachable from but if I connect to 192.168.1.1 then I'm specifying an IP and DNS doesn't come into
    play, does that affect SMB 3 Multipath?
    I know SMB 3 works when in a team and not in a team, I've tried it. But if it is in an LACP team then once it leaves the server NIC it's up to the switch to forward that to the destination based on the hash, for a single flow in normal situations the switch
    would pick the same interface but I get increased bandwidth so I know the switch is sending to both interfaces, so I assume there are multiple flows. That means something about the flows has to be different, I assume the destination MACs, but I haven't put
    a packet capture to look...yet...
    Does anyone know of any papers or details that talk about these issues they can point me to? Every blog post or video I've seen is super generic about how it actually works. It's not magic.

    Hi,
    With Multichannel, SMB will create multiple TCP/IP connections for that single session (at least one per interface or more if they are RSS-capable). This allows SMB to use
    the combined NIC bandwidth available and makes it possible for the SMB client to continue to work uninterrupted if a NIC fails.
    Although a team always provides fault tolerance, SMB without Multichannel will create only one TCP/IP connection per team, leading to limitations in both the number of CPU
    cores engaged and the use of the full team bandwidth.
    The related article:
    The basics of SMB Multichannel, a feature of Windows Server 2012 and SMB 3.0
    http://blogs.technet.com/b/josebda/archive/2012/06/28/the-basics-of-smb-multichannel-a-feature-of-windows-server-2012-and-smb-3-0.aspx
    More information:
    How much traffic needs to pass between the SMB Client and Server before Multichannel actually starts?
    http://blogs.technet.com/b/josebda/archive/2013/01/18/how-much-traffic-needs-to-pass-between-the-smb-client-and-server-before-multichannel-actually-starts.aspx
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

Maybe you are looking for

  • Error while exporting BO Report to excel

    Post Author: noble CA Forum: .NET When ever i try to export a Big BO 6.5 Report to (Almpst 8000 Pages ) to Excel 2003 I am getting BO Unhandiled exception. Anybody can advice how to solve this issue.

  • Are accessible multiple signatures in Acrobat XI Pro possible?

    I'd like to access two saved signatures in Acrobat XI Pro but I haven't found an easy way to do it in order to use them for signing documents. Is this possible? If so, how? If I haven't created a digital ID or a digital certificate are my signatures

  • Where can i go for a honest oppion???

    I have finely got to the point of maybe showing my first website . I would like to find a site where i can get a honest oppion and feed back on the site i have created  and maybe a little coaching i dont mind if it is a outside site just a honest one

  • Getting response from a Web Service

    Hello, everyone, I want MII to show the response from a Web Service it is calling through the Web Service action. But when this Web Service return an error (as a Soap Fault response), MII simply does not show the response. It show it truncated, such

  • Several console-oriented Qs

    I'll just list them · Alt-d doesn't work in xterm as a shortcut to deleting consecutive non-whitespace characters; is there any way of making it work? Ctrl-d still works for individual characters... · I'm no longer able to switch to TTYs with Ctrl-Al