Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Cisco Class-Maps and set dscp show 0 packets marked

Hello,

We are running a simple VC traffic marking setup across multiple IOS routers of mixed hardware 2921, 2801, 3925 and 3945s.

Our aim was to simply mark packets from a particular VC source at each site and set the dscp to af31, for the ISP routers to then apply the relevant conditioning and prioritizing out on to the WAN.

However, we have come across an issue on one of the 3925 routers that seems to show packets hiiting the ACL but not getting marked:

RTR_US1#clear count           show policy-map int g0/1

GigabitEthernet0/1

Service-policy output: ppq

queue stats for all priority classes:

Queueing

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 2450/1743260

Class-map: video-conf (match-any)

2450 packets, 1743260 bytes

30 second offered rate 329000 bps, drop rate 0000 bps

Match: access-group 131

2450 packets, 1743260 bytes

30 second rate 329000 bps

QoS Set

dscp af31

Packets marked 0

Priority: 3072 kbps, burst bytes 76800, b/w exceed drops: 0

Class-map: class-default (match-any)

9585 packets, 5127166 bytes

30 second offered rate 969000 bps, drop rate 0000 bps

Match: any

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 9585/5127482

Our other 3925 at another site with a similar configuration works fine:

Rtr_UK1#show policy-map int gi0/1

GigabitEthernet0/1

Service-policy output: ppq

queue stats for all priority classes:

Queueing

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 22223/15705754

Class-map: video-conf (match-any)

22223 packets, 15705754 bytes

30 second offered rate 974000 bps, drop rate 0 bps

Match: access-group 131

22223 packets, 15705754 bytes

30 second rate 974000 bps

QoS Set

dscp af31

Packets marked 22223

Priority: 3072 kbps, burst bytes 76800, b/w exceed drops: 0

Class-map: class-default (match-any)

62248 packets, 10682892 bytes

30 second offered rate 751000 bps, drop rate 0 bps

Match: any

queue limit 64 packets

(queue depth/total drops/no-buffer drops) 0/0/0

(pkts output/bytes output) 62248/10685230

The configuration is identical with the exception of the source host defined in the ACL.  The router at fault is configured with the following:

!

class-map match-any video-conf

match access-group 131

!

policy-map ppq

class video-conf

  set dscp af31

  priority 3072

!

access-list 131 permit ip host 10.234.200.41 any

!

interface GigabitEthernet0/1

description OUTSIDE to CE Router 801

ip address 192.xx.xx.xx 255.255.255.252

no ip unreachables

no ip proxy-arp

ip flow monitor NETFLOW1 input

ip flow monitor NETFLOW1 output

ip flow ingress

no ip mfib forwarding input

no ip mfib forwarding output

ip ospf hello-interval 1

load-interval 30

duplex full

speed 100

no cdp enable

crypto map getvpn-map

service-policy output ppq

!

The configuration for the working 3925 is as follows:

!

class-map match-any video-conf

match access-group 131

!

policy-map ppq

class video-conf

  set dscp af31

  priority 3072

!

access-list 131 permit ip host 10.82.40.20 any

!

interface GigabitEthernet0/1

description L3 to CE Router 1

ip address 10.xx.xx.xx 255.255.248

no ip redirects

no ip unreachables

no ip proxy-arp

no ip mfib forwarding input

no ip mfib forwarding output

ip flow monitor NETFLOW1 input

ip flow monitor NETFLOW1 output

ip flow ingress

ip tcp adjust-mss 1360

ip ospf hello-interval 1

load-interval 30

duplex full

speed 100

no cdp enable

crypto map getvpn-map

service-policy output ppq

!

Any assistance in helping to understand why this is happening on a particualr device is appreciated.

Regards

  • Other Network Infrastructure Subjects
Everyone's tags (5)
1 REPLY
New Member

Have you ever figured this

Have you ever figured this out?

I'm having a similar issue but mine is related to Voice traffic EF showing Packets marked 0.

The ACL, class-map, policy-map, nested service policy applied into sub-interface with no IP all looks good, but still showing marked 0. I also have under this sub-interface bridge-group - BVI, not sure if that makes any difference...

I also have another site working fine, but the only difference is the service policy is applied in the physical interface and there is an IP assigned to it.

Any help is much appreciated!

Thanks!

323
Views
0
Helpful
1
Replies
This widget could not be displayed.