×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

How to apply Service-policy (QoS) on a DMVPN Tunnel interface of a Cisco 1941 ISR2

Unanswered Question
Nov 10th, 2010
User Badges:

Hi to all,


I'm Eugene from the Philippines and just want to ask how we can apply a service-policy (QoS) on a tunnel interface of the DMVPN on a Cisco 1941 ISR2. Previously, client's routers were Cisco 1841 ISR. But as we know 1841ISR is on its way EoL/EoS so clients purchased 1941 ISR2 instead for the new sites and well replace the old ones. On a Cisco 1841 we can apply "service-policy output <policy-map name>" on the tunnel interface for DMVPN for the QoS. But when we migrated the configuration to the 1941 ISR2, there were no option to place service-policy under the tunnel interface. How can we apply our QoS on the tunnel interface?


Hope we can have as you support asap as our client already starting to migrated from 1841 to 1941.



Many Thanks and Regards,

Eugene

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Raphael Wouters Mon, 11/15/2010 - 06:20
User Badges:
  • Cisco Employee,

Hi Eugene,


Unfortunately outbound QoS policy on an mGRE tunnel is not supported and has never been. The CLI has been removed from mGRE interfaces around 15.0M. Previously you could apply the QoS on the tunnel interface but the result were not predictable, it may work or may not work correctly.



On the hub, per-tunnel QoS for DMVPN relies on NHRP registration packets containing the NHRP group from the spoke to be able to map the correct QoS template. There is currently is no mechanism to tie this together on spoke.


Depending on what you need to do, you can still use qos-preclassify on the spoke and apply the service-policy on the physical interface, or match GRE packets on the physical interface.

emcueto08 Mon, 11/15/2010 - 19:34
User Badges:

Hi Raphael,


Thanks for the reply.


So you mean we could have this set-up:


HUB (Cisco3845) - run per-tunnel QoS using NHRP groups as hub

SPOKE (Cisco1841) - run QoS pre-classify and service-policy on the DMVPN tunnel interface

SPOKE (Cisco 1941 ISR2) - run per-tunnel QoS using NHRP group as spoke


How about if the DMVPN is a Spoke-to-Spoke set-up will this still be the configuration we can use?



Regards,

Eugene

Raphael Wouters Tue, 11/16/2010 - 01:02
User Badges:
  • Cisco Employee,

Hi Eugene,


Not exactly, you can not do QoS using NHRP group on a spoke, and you can not apply QoS on a mGRE tunne interface, but you can on a physical interface and qos-preclassify will help matching packets before encapsulation. So you need to:



   HUB (Cisco3845) - run per-tunnel QoS using NHRP groups as hub

   SPOKE (Cisco1841) - run QoS pre-classify and service-policy on the DMVPN physical interface

   SPOKE (Cisco 1941 ISR2) - run QoS pre-classify and service-policy on the DMVPN physical interface


> How about if the DMVPN is a Spoke-to-Spoke set-up will this still be the configuration we can use?


This is a limiation of these setup unfortunately. On the spoke you can easily match spoke-to-hub as you know the hub IP address, but you can not easily match specific spoke-to-spoke, so you'll usually have to treat all the spoke-to-spoke traffic the same way.


Thanks,
Raphael
cyberbench31 Tue, 01/05/2016 - 22:16
User Badges:

Hi sir Eugene,

pwede bang pa assist ako sa setup ng dmvpn namin.. intermittent kasi ung ping ko sa spoke di ko alam kung ano ang kulang sa config ko, iisa pa lang naman ang spoke ko sa ngaun pero nagka problema na agad ako..

salamat,

Actions

This Discussion

Related Content