Catalyst 6500 and Class-based Qos

[ibrunello]

I've been playing with nested cbQos several times on pure L3 devices.

My usual configuration use:

- parent policy, with general policer limiting bandwith per-vlan

- child policy, with percentage on NBAR matching

Now I wanted to use the same approach on my switched network:

- cat2960 as access-devices

- cat6500 sup720 as distribution/core ones

I've been setting a police/class on vlan, and specifying "mls qos per-vlan" on trunk port between access and core.

Although I see some improvement (flow is slowed), the expected police is not reached (e.g. set a "police 32000" and I get a 1Mbit of traffic, sustained)

Any suggestion, before leaving CBQOS and try to use Cos/DSCP?

TIA

Ivan

[mchin345]

go through this Catalyst 6500 Series Software Configuration Guide (Configuring QoS) . It will clear your doubts.

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/catos/8.x/configuration/guide/qos.html

[ibrunello]

A good reading.

Will keep this as a reference.

Unfortunately, my 6500s are running Native-IOS, so I have to dig into the IOS equivalent commands.

Thank you

[ibrunello]

The CatOS version of the documentation seems a bit more clear than the Native one:

http://www.cisco.com/en/US/customer/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/qos.html

BTW, I managed to configure the policer in a CBQOS way, applying on VLAN:

1) (optional) mark packets at access switch, and set the trust mode on trunk poort

2) set an IP access-list on core.

I would put on a core, since I have several access switches on policed VLAN, and I want to make an aggregated L3 police.

3) set a class-map on core, matching ACL

4) set a policy map on core, matching class-map

5) apply policy map w/ the service-policy command.

PLEASE NOTE:

- use "output" clause for inbound traffic directed to VLAN

- use "input" clause for outbound traffic coming from VLAN

this makes perfect sense if you think of VLAN just like a physical interface.

6) (optional) set qos vlan on trunk port coming from access-switches:

MLS01(config-if)# mls qos vlan-based