I am trying to classifiy incoming packets from IP phones using ACL. Below shown my detail config. However, when I use Wireshark and check packets arriving from IP phone, it shows DSCP=0. It seems teh ACL doesn't applied on the access port.
FYI, I use QoS practice document to configure.
!!!!!!!!! MQC !!!!!!!!!!!!!!!!!!
class-map match-all DVLAN-PC-VIDEO match access-group name DVLAN-PC-VIDEO class-map match-all VVLAN-CALL-SIGNALING match access-group name VVLAN-CALL-SIGNALING class-map match-all VVLAN-VOICE match access-group name VVLAN-VOICE class-map match-all VVLAN-ANY match access-group name VVLAN-ANY !
class class-default dbl policy-map IPPHONE+PC class VVLAN-VOICE set ip dscp ef class VVLAN-CALL-SIGNALING set ip dscp cs3 class DVLAN-PC-VIDEO set ip dscp af41 class VVLAN-ANY set ip dscp default class class-default set ip dscp default
ip access-list extended DVLAN-PC-VIDEO permit udp any any range 16384 32767 permit udp any any range 5445 5446 ip access-list extended VVLAN-ANY permit ip 220.127.116.11 0.0.1.255 any ip access-list extended VVLAN-CALL-SIGNALING permit tcp 18.104.22.168 0.0.1.255 any range 2000 2002 ip access-list extended VVLAN-VOICE permit udp 22.214.171.124 0.0.1.255 any range 16384 32767
If I have the two commands below under interface along with service-policy input IPPHONE+PC, it doesn't at all mark any traffic. However, if I have the two commands below and not used service-policy input IPPHONE+PC, yes I can see the marking.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...