cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2560
Views
10
Helpful
18
Replies

Best Practices Metro Ethernet QoS?

pnicolette
Level 1
Level 1

Our sites connect via routers into a single Metro Ethernet (TLS) VLAN. The main site with most servers and the Internet link uses a 100Mb TLS circuit, same for another big site; the rest are 10Mb. Majority of traffic is outbound from main site to others. There's no VoIP, limited streaming video, but occasional congestion when a large file transfer hogs a 10Mb pipe with default FIFO queue.

Where to start for QoS?

Can the main site router enforce separate 10Mb output limits for each destination, even though they share one interface?

Or should I apply input service policies to the TLS interfaces of the other routers?

Or a better way....?

Thanks much for any ideas!

Paul

18 Replies 18

Thanks again!

Finally [thanks for your patience, hope this helps others]...

What are pros/cons in my mostly hub-spoke world of using dscp designations like cs1, cs2, cs3 versus the newer, more complex scheme like ef, af31, af11, be and such?

Actually you mean the pros/cons of DSCP vs. IP Precendence?

The former provides six bits for marking vs. only 3 bits for the latter. Using RFC recommendations, priorities overlap between the two and the additional DSCP bits are used for indicating drop precedence.

If you're going to mark at all, I would recommend using DSCP. Of course, you don't need markings to deliver QoS, it's just convenient for downstream devices (so they don't have to analyse the traffic again).

Hi Joseph,

I used your config for our qos environement which has a diagram below. Central and all branchs connected to ISP/MPLS cloud via metro ethernet lines witch different bandwidths. Central connected 100Mb, other branchs has different bandwidths.

We need QoS both central and branchs for especially voip RTP and signallling traffic. So i used your config but we have some problems.

As you see following outputs Class-map: Branch-A has 1024Kb bw and using 1024Kb bandwitdth but under Service-policy "queue",

Class-map: "realtime" and "signal" using 20000 and 5000Kb bandwidth. Actually i want to use 20% and 5% of 1024Kb.

What is the issue outthere?

Router:Cisco 3845

IOS:c3845-spservicesk9-mz.124-13f.bin

Thanks in advance.

Central_Router#sh policy-map interface g0/0

GigabitEthernet0/0

  Service-policy output: central

    Class-map: Branch-A (match-all)

      133672 packets, 93715046 bytes

      5 minute offered rate 372000 bps, drop rate 0 bps

      Match: access-group name Branch-A

      Traffic Shaping

           Target/Average   Byte   Sustain   Excess    Interval  Increment

             Rate           Limit  bits/int  bits/int  (ms)      (bytes)

        100000000/100000000 625000 2500000   2500000   25        312500

        Adapt  Queue     Packets   Bytes     Packets   Bytes     Shaping

        Active Depth                         Delayed   Delayed   Active

        -      0         133672    93715046  0         0         no

      Queueing

        Output Queue: Conversation 265

        Bandwidth 1 (%)

        Bandwidth 1024 (kbps)Max Threshold 64 (packets)

        (pkts matched/bytes matched) 454/409201

        (depth/total drops/no-buffer drops) 0/0/0

      Service-policy : queue

        Class-map: realtime (match-all)

          0 packets, 0 bytes

          5 minute offered rate 0 bps, drop rate 0 bps

          Match: ip dscp ef (46)

          Queueing

            Strict Priority

            Output Queue: Conversation 264

            Bandwidth 20 (%)

            Bandwidth 20000 (kbps) Burst 500000 (Bytes)

            (pkts matched/bytes matched) 0/0

            (total drops/bytes drops) 0/0

        Class-map: signal (match-all)

          0 packets, 0 bytes

          5 minute offered rate 0 bps, drop rate 0 bps

          Match: ip dscp af31 (26)

          Queueing

            Output Queue: Conversation 265

            Bandwidth 5 (%)

            Bandwidth 5000 (kbps)Max Threshold 64 (packets)

            (pkts matched/bytes matched) 0/0

        (depth/total drops/no-buffer drops) 0/0/0

        Class-map: class-default (match-any)

          133672 packets, 93715046 bytes

qosproblem.jpg

!---INPUT-----

!

policy-map mark

class RTP_AUDIO

  set ip dscp ef

class SIGNALLING

  set ip dscp af31

!

class-map match-any RTP_AUDIO

match access-group name rtp

!

ip access-list extended rtp

permit udp any any range 16384 32767

!

class-map match-any SIGNALLING

match ip dscp cs3

match access-group name signalling

!

ip access-list extended signalling

remark H323

permit tcp any any range 1720 1721

remark SKINNY

permit tcp any any range 2000 2002

permit udp any any range 1720 1721

remark MGCP

permit udp any any eq 2427

remark SIP

permit tcp any any eq 5060

permit udp any any eq 5060

!

!

!----OUTPUT-----

policy-map queue

class realtime

  priority percent 20

class signal

  bandwidth percent 5

class class-default

  fair-queue

!

class-map match-all realtime

match ip dscp ef

!

class-map match-all signal

match ip dscp af31

!

!---OUTPUT with BRANCH-----

!

policy-map central

class Branch-A

  shape average 100000000

  bandwidth percent 1

  service-policy queue

class Branch-B

  shape average 100000000

  bandwidth percent 1

  service-policy queue

class Branch-C

  shape average 100000000

  bandwidth percent 2

  service-policy queue

class Branch-D

  shape average 100000000

  bandwidth percent 2

  service-policy queue

!

class-map match-all Branch-A

match access-group name Branch-A

class-map match-all Branch-B

match access-group name Branch-B

class-map match-all Branch-C

match access-group name Branch-C

class-map match-all Branch-D

match access-group name Branch-D

!

ip access-list extended Branch-A

permit ip any 10.34.128.0 0.0.7.255

ip access-list extended Branch-B

permit ip any 10.34.112.0 0.0.7.255

ip access-list extended Branch-C

permit ip any 10.34.152.0 0.0.7.255

ip access-list extended Branch-D

permit ip any 10.35.144.0 0.0.7.255

!

interface GigabitEthernet0/0

bandwidth 102400

ip address 172.100.0.2 255.255.255.248

service-policy output central

!

interface GigabitEthernet0/1

ip address 172.18.0.2 255.255.255.252

service-policy input mark

!

Solved after IOS upgrade, thanx.

Review Cisco Networking products for a $25 gift card