QoS

ravinder.bora · ‎10-14-2014

Hi Please help me on this:

How to configure QoS for Video Conferencing . which parameters I should follow for this.

Installed VC Device like this VC Device àCore Switch [Native VLAN]àFirewall [5505 ASA]àCisco Router[2900]àISP

NAT=192.168.X.X to 125.X.X.X in Firwall

Should I configure QoS into all Network Device [Switch+Firewall+Router]

I have configure QoS like this as below:

lass-map match-all VC_Traffic

match dscp ef

match dscp af31

match dscp af41

!

policy-map Outbond_Policy

class VC_Traffic

priority percent 20

Amit Shah · ‎10-14-2014

Hi,

You need to apply QoS on different devices. Please refer following hyperlink for the same.

http://www.cisco.com/c/dam/en/us/td/docs/solutions/Verticals/Education/SRA_Schools/SchoolSRA_QoS_sba.pdf

Regards,

Amit

ravinder.bora · ‎10-16-2014

Hi Amit,

QoS configured on Router and apply on WAN interface. But still Video Stuck.

also check in MRTG Graph no over utilization of Link.

Regards,

Ravinder

Joseph W. Doherty · ‎10-21-2014

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

A FW and NAT, eh? Are you running across the Internet? If so, is link also used for "generic" Internet access? If first, often shaping is needed if two sides have different bandwidth connections to the Internet. If also the second, unless you can enable QoS on ISP egress toward you, you cannot effectively manage ingress.

ravinder.bora · ‎10-21-2014

I joseph when I bypassed firewall then VC is working fine no packet drop. But when Firewall is working in between VC and router then packet drop.

That’s mean Firewall[ASA 5505] Drop VC packet.

125.19.X.X is VC ip which is NAT with private IP

access-list outside_acl extended permit icmp any host 125.19.X.X

access-list outside_acl extended permit tcp any host 125.19.X.X eq ftp

access-list outside_acl extended permit ip any host 125.19.X.X

access-list outside_acl extended permit tcp any host 125.19.X.X eq h323

access-list outside_acl extended permit tcp any host 125.19.X.X range 2326 2373

access-list outside_acl extended permit udp any host 125.19.X.X eq 5555

access-list outside_acl extended permit udp any host 125.19.X.X eq 1719

access-list outside_acl extended permit udp any host 125.19.X.X range 5555 5587

access-list outside_acl extended permit udp any host 125.19.X.X range 2326 2373

access-list outside_acl extended permit tcp any host 125.19.X.X range 5555 5587

access-list outside_acl extended permit tcp any host 125.19.X.X range 963 965

access-list outside_acl extended permit udp any host 125.19.X.X range 970 974

access-list outside_acl extended permit udp any host 125.19.X.X