I have a 3560 L3 switch that is connected to a MAN network in a funny way.
the outward-facing port is configured as a trunk to pass vlan traffic across the metro fiber to a distant-end 6513 L3 switch. It also is placed in a vlan to pass L3 traffic across that same metro fiber.
Here is the config of that port:
description Connection to TLS
switchport access vlan 21
switchport trunk encapsulation dot1q
switchport trunk native vlan 21
switchport mode trunk
The access ports are configured accordingly:
interface range FastEthernet0/1 - 24
description 10 / 100 Port
switchport access vlan 2
switchport mode access
mls qos trust cos
spanning-tree guard root
HERE IS THE QoS POLICY I WANT TO IMPLEMENT:
match ip dscp ef
match access-group 100
match access-group 101
set ip dscp ef
set ip dscp af41
set ip dscp af31
service-policy output TLS
Access-list 100 permit tcp any any eq 580
Access-list 100 permit udp any any eq 580
Access-list 101 permit ip 172.16.0.0 0.0.1.255 any
So, I want to classify and mark VoIP traffic, server heartbeat traffic and general data. No biggie.
And then I want to apply that QoS policy to the outward-facing gi0/1 metro fiber interface.
Everytime I try to enter the "service-policy output TLS" command, it says "Warning: Applying service policy to OUTPUT interface not supported"
Im confused. Dont I HAVE to apply it to the output so that the traffic LEAVING the 3560 and heading out to the outside world gets QoS'ed???