I am creating input QOS service policy to classify my business critical traffic. Can I use mls qos trust dscp to trust IP phones and service-policy QOS-LAN for my business critical traffic on the same interface?
Classification using a port trust state (for example, mls qos trust [ cos | dscp| ip-precedence ] ) and a policy map (for example, service-policy inputpolicy-map-name) are mutually exclusive. The last one configured overwrites the previous configuration.
You will have to deal with all traffic using only one of these approaches.
The statistics in the show policy-map output are not to be trusted - the reason is that these switches are performing the operations in hardware while the counters shown in this output are based on software packet processing that does not take place on switches.
You have to think in terms of trust regardless of IOS accepting the configuration or not. To make the point clearer, if the port is trusted (meaning for example it is an uplink Port to Distribution Switch or Next-Hop Router) then you configure "mls qos trust dscp" however if the port is untrusted (meaning for example the port connects to an end Host) then you want to mark incoming packets with an inbound policy like "service-policy input QOS-LAN". I recommend these set of commands as well whether the port is trusted or untrusted: "priority-queue out", "queue-set 1", "srr-queue bandwidth share 10 10 60 20", and "srr-queue bandwidth shape 10 0 0 0" -> The reason for these 4 commands is because Cat2960 does not provide the optimum egress queueing configuration. Specifically this occurs when one type of traffic predominates on the switch ports, usually when the switch is used to connect a server (then if you can see drops in some queues while other queues are under utilized. This is due to the way the buffer resources have been divided between the queues).
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.