Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

class-map not works, Packets not tagging

Hey Guys,

I have define policy maping and dont know why its not tagging the IPs;

 

class-map match-all KHAN
 match access-group name ABC
 match input-interface GigabitEthernet0/1

 

ip access-list extended ABC
 permit ip host 10.11.201.20 10.11.207.128 0.0.0.127
 permit ip host 10.11.201.19 10.11.207.128 0.0.0.127

 

policy-map TAIM
 class voice
    priority percent 50
  set dscp ef
 class KHAN
    priority percent 49
  set dscp af41

 

interface Multilink1

service-policy output TAIM

 

 

 

When I check the IPs on netflow it is showing half packets are tagged with af41 anf half are default. 

Any idea will be appreciated. 

Thanks

 

show policy map interface result

 

    Class-map: TAIM (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: access-group name ABC
      Match: input-interface GigabitEthernet0/1
      Priority: 49% (3763 kbps), burst bytes 94050, b/w exceed drops: 0

      QoS Set
        dscp af41
          Packets marked 0

 

 

 

 

 

 

 

 

2 REPLIES

The problem is the way you

The problem is the way you are matching the packets:

Here it shows that there are 0 packets marked and 0 packets matched:

 Class-map: TAIM (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: access-group name ABC
      Match: input-interface GigabitEthernet0/1
      Priority: 49% (3763 kbps), burst bytes 94050, b/w exceed drops: 0

      QoS Set
        dscp af41
          Packets marked 0

 

When you define this:

class-map match-all KHAN
 match access-group name ABC
 match input-interface GigabitEthernet0/1

 

You are telling the router to match both conditions of ACL ABC and Interface input Gi0/1... most likely what happens here is that the class map does not match both condtions here.

Depending on what you need to accomplish, you can change it to be ANY:

class-map match-any KHAN
 match access-group name ABC
 match input-interface GigabitEthernet0/1

 

This way it will work if it matches either the first condition ACL ABC or second condition input Gi0/1.

Or you can just remove the input statement for Gi0/1 and match by the IPs only:

class-map match-all KHAN
 match access-group name ABC
 

New Member

Thanks for reply Ruggero,  as

Thanks for reply Ruggero,  as per my little knowledge on class-map; Match-all will match both ACL and Gig 0/1 interface, which I think I have configured already.

If I use match-any it wont be a good idea as I need both Gig 0/1 and ACL thats why I use Match-all. what do you think ?

 

Should I apply  "service-policy output TAIM" onto Gig0/1 interface instead of Multilink 1. 

 

Thanks

99
Views
0
Helpful
2
Replies
CreatePlease to create content