ACL and Polycoms

[thethmon]

We are trying to setup some Polycom i900 systems to set the DSCP value of EF on their video packets and catch these for QoS on our router. What is happening I cannot figure out. I have set up the following ACL:

permit ip host 10.103.118.140 any dscp ef

permit ip any host 10.103.118.140 dscp ef

permit ip host 10.103.118.140 any precedence critical

permit ip any host 10.103.118.140 precedence critical

permit 46 host 10.103.118.140 any (108 matches)

permit 46 any host 10.103.118.140(102 matches)

Now, I expected the router to see the traffic based upon the first condition, however, it sees it on the last two. I only added the last two lines after seeing the following doing a debug ip packet detail:

Jan 13 16:28:30 CST: IP: s=10.103.118.140 (Serial0/0.1), d=10.103.118.140(FastEthernet0/0), g=10.103.118.140, len 192, forward, proto=46

Have I done something wrong in the ACL? Is the ACL matching inproperly? Or is this a problem in the Polycom?

[#2]

I agree with you that the access-lists should be considered from top to bottom and not otherwise. May be the problem has arised because of some misconfigurations of access-lists. I would suggest you, to have a copy of all the accesslists in a notepad, then delete all the access lists and re-add them one by one.And if I am not wrong, the access lists should be ended by a deny any any statement.

Hope this works.

[epylko]

Please post your entire QoS config.

Your access list is just doing matching; it is not doing any setting for your DSCP values.

Also, I think the Polycom's are IP precedence aware and set their outgoing VC packets to 5.

Also, matching protocol 46 (RSVP) isn't really going to help - RSVP does not transport application data. It is only used for requesting resources from the network.

Also, a Cisco search for QoS and Polycom returns this url: http://www.cisco.com/en/US/tech/tk652/tk701/technologies_tech_note09186a0080111c1b.shtml

-Eric