01-03-2008 02:55 AM - edited 03-13-2019 04:51 PM
Hi we make use of class-based QOS on our access switches interfaces.
When I do the following command I get a puzzling reply, in the below output you can see that NO traffic is being registered by the access-lists and class-maps, is this normal behaviour?
command: show policy-map interface fa0/1
FastEthernet0/1
Service-policy input: ax-qos
Class-map: voip-traffic (match-all)
0 packets, 0 bytes
offered rate 0 bps, drop rate 0 bps
Match: access-group name ax-qos_voip-traffic
Class-map: voip-signaling (match-all)
0 packets, 0 bytes
offered rate 0 bps, drop rate 0 bps
Match: access-group name ax-qos_voip-signaling
Class-map: voip-any (match-all)
0 packets, 0 bytes
offered rate 0 bps, drop rate 0 bps
Match: access-group name ax-qos_voip-any
Class-map: citrix (match-any)
0 packets, 0 bytes
offered rate 0 bps, drop rate 0 bps
Match: access-group name ax-qos_citrix
0 packets, 0 bytes
rate 0 bps
Class-map: managment (match-any)
0 packets, 0 bytes
offered rate 0 bps, drop rate 0 bps
Match: access-group name ax-qos_mgmt
0 packets, 0 bytes
rate 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
offered rate 0 bps, drop rate 0 bps
Match: any
0 packets, 0 bytes
rate 0 bps
sho class-map
Class Map match-any citrix (id 1)
Match access-group name ax-qos_citrix
Class Map match-any class-default (id 0)
Match any
Class Map match-all voip-traffic (id 2)
Match access-group name ax-qos_voip-traffic
Class Map match-all voip-signaling (id 3)
Match access-group name ax-qos_voip-signaling
Class Map match-all voip-any (id 4)
Match access-group name ax-qos_voip-any
Class Map match-any managment (id 5)
Match access-group name ax-qos_mgmt
show policy-map
Policy Map ax-qos
Class voip-traffic
set dscp ef
police 128000 8000 exceed-action drop
Class voip-signaling
set dscp cs3
police 32000 8000 exceed-action policed-dscp-transmit
Class voip-any
set dscp default
police 32000 8000 exceed-action policed-dscp-transmit
Class citrix
set dscp af31
police 192000 8000 exceed-action policed-dscp-transmit
Class managment
set dscp cs2
police 192000 8000 exceed-action policed-dscp-transmit
Class class-default
set dscp default
police 5000000 8000 exceed-action policed-dscp-transmit
01-03-2008 09:53 AM
It looks like you have access-lists for your matching, but I see no access-lists shown for traffic to match to.
01-04-2008 03:31 AM
Yes ofcourse you right here is the access-lists configured
Extended IP access list ax-qos_citrix
10 permit tcp any any eq 2598
20 permit tcp any any eq 1494
Extended IP access list ax-qos_mgmt
10 permit tcp any any eq tacacs
20 permit tcp any any eq 22
30 permit tcp any any eq telnet
40 permit tcp any any eq 1680
50 permit tcp any any range 2701 2702
60 permit tcp any any eq 3389
70 permit udp any any eq snmp
80 permit udp any any eq snmptrap
90 permit udp any any eq 1645
100 permit udp any any eq 1646
110 permit tcp any eq 22 any
120 permit tcp any eq telnet any
130 permit tcp any eq 3389 any
140 permit udp any any range 2701 2702
150 permit udp any range 2701 2702 any
160 permit tcp any range 2701 2702 any
Extended IP access list ax-qos_voip-any
10 permit ip 172.20.0.0 0.0.31.255 any
Extended IP access list ax-qos_voip-signaling
10 permit tcp 172.20.0.0 0.0.31.255 any range 2000 2002
Extended IP access list ax-qos_voip-traffic
10 permit udp 172.20.0.0 0.0.31.255 any range 16384 32767
01-05-2008 03:23 PM
Is this a router or a switch? Can you send the 'show run' and 'show ver'?
01-08-2008 12:35 AM
This is a switch 3560 with IOS ver 12.2(35)SE1
01-08-2008 12:38 AM
That's what I thought. You can't use the 'show policy-map interface' commands on a Catalyst switch to get counters. Do a search on these forums for policy-map or qos counters on a Catalyst switch. Hint 'show platform'...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide