Solved: QoS problems over an ethernet subinterface

cabel · ‎07-16-2010

Hello Everyone. My QoS problems I have on my HQ gateway (Cisco 2811) and my remote site (Cisco 1841) don't seem to be working and I have no idea why. Calls cut in and out very badly when the circuit is concentrated. On the cisco 1841, my voice traffic seems to be marked right and going to the right policy-map, but on the HQ side it doesn't seem to be doing that. Here is some info:

Both sites are using one ethernet interface and split up by vlans (500 and 501) from our provider. The speed of the circuit is 3Mb/s. Please let me know if you need any more information. Thanks!
 
 
--------------- HQ Gateway Cisco 2811 --------------------
interface FastEthernet0/1
bandwidth 3000
no ip address
no ip redirects
no ip proxy-arp
duplex auto
speed auto
!      
interface FastEthernet0/1.500
description "To Central Ave"
encapsulation dot1Q 500
ip address 192.168.0.17 255.255.255.252
no ip redirects
no ip proxy-arp
service-policy output QoS_Albany_Parent
!      
interface FastEthernet0/1.501
description "To New Karner Road"
encapsulation dot1Q 501
ip address 192.168.0.5 255.255.255.252
no ip redirects
no ip proxy-arp
service-policy output QoS_Albany_Parent
!
!      
mls qos map cos-dscp 0 8 16 26 34 46 48 56
!
!      
class-map match-any dscp46
match ip dscp ef
match ip precedence 5
!      
!      
policy-map AutoQoS-Policy-Trust
  description QoS
class dscp46
  priority percent 35
class class-default
  fair-queue
policy-map QoS_Albany_Parent
class class-default
  shape average percent 95
  service-policy AutoQoS-Policy-Trust
-----------------------------------------------------
 
 
---------- Router at remote site Cisco 1841 ---------
interface FastEthernet0/1
description "NKR Local to Latham"
bandwidth 3000
ip address 192.168.0.6 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
duplex auto
speed auto
service-policy output QoS_NKR_Parent
!
!
!      
class-map match-any Voip-Control-Trust
match ip dscp cs3
match ip dscp af31
class-map match-all Staff
match ip dscp cs1
class-map match-any VoIP-Trust
match ip dscp ef
match ip precedence 5
class-map match-any AutoQoS-VoIP-Control-Trust
match ip dscp cs3
match ip dscp af31
!      
!      
policy-map QoS-VoIP-Policy
  description QoS for Albany 75% voice burst
class VoIP-Trust
  priority percent 35 300000
  set dscp ef
class AutoQoS-VoIP-Control-Trust
  bandwidth percent 5
class Staff
  bandwidth percent 20
class class-default
  fair-queue
policy-map QoS_NKR_Parent
class class-default
  shape average percent 95
  service-policy QoS-VoIP-Policy
------------------------------------------------
 
 
------ Gateway Cisco 2811 show policy-map ------
#show policy-map int fa0/1.501
FastEthernet0/1.501
 
  Service-policy output: QoS_Albany_Parent
 
    Class-map: class-default (match-any)
      25141425 packets, 22854129846 bytes
      5 minute offered rate 347000 bps, drop rate 0 bps
      Match: any
      Traffic Shaping
           Target/Average   Byte   Sustain   Excess    Interval  Increment
             Rate           Limit  bits/int  bits/int  (ms)      (bytes)
               95 (%)                0 (ms)      0 (ms)
          2850000/2850000   17100  68400     68400     24        8550  
 
        Adapt  Queue     Packets   Bytes     Packets   Bytes     Shaping
        Active Depth                         Delayed   Delayed   Active
        -      0         25138587  1375033230 5043479   3112890157 no
 
      Service-policy : AutoQoS-Policy-Trust
 
        Class-map: dscp46 (match-any)
          0 packets, 0 bytes
          5 minute offered rate 0 bps, drop rate 0 bps
          Match: ip dscp ef (46)
            0 packets, 0 bytes
            5 minute rate 0 bps
          Queueing
            Strict Priority
            Output Queue: Conversation 136
            Bandwidth 35 (%)
            Bandwidth 997 (kbps) Burst 24925 (Bytes)
            (pkts matched/bytes matched) 0/0
            (total drops/bytes drops) 0/0
 
        Class-map: class-default (match-any)
          25141426 packets, 22854134502 bytes
          5 minute offered rate 347000 bps, drop rate 0 bps
          Match: any
          Queueing
            Flow Based Fair Queueing
            Maximum Number of Hashed Queues 128
        (total queued/total drops/no-buffer drops) 0/527/0
------------------------------------------------------
 
 
 
------------ Remote show policy-map ------------
#sho policy-map int fa0/1
FastEthernet0/1
 
  Service-policy output: QoS_NKR_Parent
 
    Class-map: class-default (match-any)
      26024405 packets, 17721424020 bytes
      5 minute offered rate 178000 bps, drop rate 0 bps
      Match: any
      Traffic Shaping
           Target/Average   Byte   Sustain   Excess    Interval  Increment
             Rate           Limit  bits/int  bits/int  (ms)      (bytes)
               95 (%)                0 (ms)      0 (ms)
          2850000/2850000   17100  68400     68400     24        8550  
 
        Adapt  Queue     Packets   Bytes     Packets   Bytes     Shaping
        Active Depth                         Delayed   Delayed   Active
        -      0         26018735  536436868 11132581  2351775935 no
 
      Service-policy : QoS-VoIP-Policy
 
        Class-map: VoIP-Trust (match-any)
          1289430 packets, 274951568 bytes
          5 minute offered rate 5000 bps, drop rate 0 bps
          Match: ip dscp ef (46)
            1289430 packets, 274951568 bytes
            5 minute rate 5000 bps
          Queueing
            Strict Priority
            Output Queue: Conversation 136
            Bandwidth 35 (%)
            Bandwidth 997 (kbps) Burst 24925 (Bytes)
            (pkts matched/bytes matched) 66915/14317951
            (total drops/bytes drops) 0/0
          QoS Set
            dscp ef
              Packets marked 1289430
 
        Class-map: AutoQoS-VoIP-Control-Trust (match-any)
          24318 packets, 13955238 bytes
          5 minute offered rate 0 bps, drop rate 0 bps
          Match: ip dscp cs3 (24)
            24318 packets, 13955238 bytes
            5 minute rate 0 bps
          Match: ip dscp af31 (26)
            0 packets, 0 bytes
            5 minute rate 0 bps
          Queueing
            Output Queue: Conversation 137
            Bandwidth 5 (%)
            Bandwidth 142 (kbps)Max Threshold 64 (packets)
            (pkts matched/bytes matched) 1470/842226
        (depth/total drops/no-buffer drops) 0/0/0
       
        Class-map: class-default (match-any)
          24710657 packets, 17432518728 bytes
          5 minute offered rate 169000 bps, drop rate 0 bps
          Match: any
          Queueing
            Flow Based Fair Queueing
            Maximum Number of Hashed Queues 128
        (total queued/total drops/no-buffer drops) 0/22/0
--------------------------------------------------------
Thanks in advance! I'm still new to qos and still very much learning, but from what i read this should work right? If you need more information let me know.

Mohamed Sobair · ‎07-18-2010

Hi,

Classification and marking should be applied on the ingress (trusted boundary). Your VOIP traffic is not classified and marked at the ingress, you need to apply the following into your QoS Config at HQ:

class-map match-any VOIP

match access-group 100

access-list 100 permit udp any any range 16384 32767

access-list 100 permit tcp any any eq 1720

policy-map voip-marking

class VOIP

set ip dscp ef

interface x ( Source LAN for IP Phones)

service-policy input Voip-marking

Let us know if this solves your problem,

Mohamed

View solution in original post

Mohamed Sobair · ‎07-18-2010

Hi,

Classification and marking should be applied on the ingress (trusted boundary). Your VOIP traffic is not classified and marked at the ingress, you need to apply the following into your QoS Config at HQ:

class-map match-any VOIP

match access-group 100

access-list 100 permit udp any any range 16384 32767

access-list 100 permit tcp any any eq 1720

policy-map voip-marking

class VOIP

set ip dscp ef

interface x ( Source LAN for IP Phones)

service-policy input Voip-marking

Let us know if this solves your problem,

Mohamed

cabel · ‎07-21-2010

Awesome! I think that worked! My show policy map now looks like this:

Service-policy output: QoS_Albany_Parent

    Class-map: class-default (match-any)
      39642600 packets, 24944921439 bytes
      5 minute offered rate 239000 bps, drop rate 0 bps
      Match: any
      Traffic Shaping
           Target/Average   Byte   Sustain   Excess    Interval Increment
             Rate           Limit bits/int bits/int (ms)      (bytes)
               95 (%)                0 (ms)      0 (ms)
          2850000/2850000   17100 68400     68400     24        8550

        Adapt Queue     Packets   Bytes     Packets   Bytes     Shaping
        Active Depth                         Delayed   Delayed   Active
        -      0         39587793 3388006521 5025411   2241546962 no

Service-policy : AutoQoS-Policy-Trust

        Class-map: dscp46 (match-any)
          165795 packets, 105201803 bytes
          5 minute offered rate 0 bps, drop rate 0 bps
          Match: ip dscp ef (46)
            56727 packets, 80932030 bytes
            5 minute rate 0 bps
          Match: ip precedence 5
            0 packets, 0 bytes
            5 minute rate 0 bps
          Match: access-group 100
            109068 packets, 24269773 bytes
            5 minute rate 0 bps
          Queueing
            Strict Priority
            Output Queue: Conversation 136
            Bandwidth 35 (%)
            Bandwidth 997 (kbps) Burst 24925 (Bytes)
            (pkts matched/bytes matched) 13875/8161087
            (total drops/bytes drops) 254/385572

        Class-map: class-default (match-any)
          39476797 packets, 24839719200 bytes
          5 minute offered rate 233000 bps, drop rate 0 bps
          Match: any
          Queueing
            Flow Based Fair Queueing
            Maximum Number of Hashed Queues 128
        (total queued/total drops/no-buffer drops) 0/42780/0

And this is the change I made:


class-map match-any dscp46
 match ip dscp ef 
 match ip precedence 5 
 match access-group 100
!         
!         
policy-map AutoQoS-Policy-Trust
 class dscp46
  priority percent 35
 class class-default
  fair-queue
policy-map QoS_Albany_Parent
 class class-default
  shape average percent 95
  service-policy AutoQoS-Policy-Trust
!         
!         
! 
access-list 100 permit udp any any range 16384 32767
access-list 100 permit tcp any any eq 1720

Looks good now. I will go over to the remote site and test it out. Thanks again!