When applying my config I am getting an error of 'Cannot attach queuing-based child policy to a non-queuing based class'. Hopefully someone can take a look through this and advise if my syntax or methodology are wrong. I am assuming it is wanting me to make the Parent policy shaping rather than policing..
I have a traditional network with a single head office and multiple branches connected via a carrier IPWAN. The head office bandwidth into the IPWAN cloud is policed by the carrier to 10Mb and branches have varying bandwidth provided in the range of .5 - 4Mb.
Wanting to place some QoS at my head office link with the aim to
Police outbound traffic to a maximum of 10Mb then>
Shape outbound traffic to branches to the speed of the link at the branch then>
Assign bandwidth to traffic classes
My reasoning is
That I would rather see the drops on my interface, rather than have the carrier drop my traffic,
I do not want to flood branches with greater amounts of traffic than they can handle and have the carrier drop this at the branch PE.
Prioritise certain traffic types
(...omitted for brevity)
service-policy output WAN-EGRESS-PARENT
policy-map WAN-EGRESS-PARENT class class-default police rate 10000000 conform-action transmit exceed-action drop service-policy WAN-EGRESS-CHILD
policy-map WAN-EGRESS-CHILD class Site_Branch1 shape average 4000000 service-policy QUEUING_POLICY class Site_Branch2 shape average 2000000 service-policy QUEUING_POLICY
policy-map QUEUING_POLICY class ICMP_Traffic bandwidth 8 class Critical-Data priority percent 25 class Scavenger bandwidth percent 1 class Bulkdata bandwidth percent remaining 20
class class-default random-detect dscp-based
class-map match-all ICMP_Traffic match access-group name ICMP class-map match-any Site_Branch1 match access-group name Site_Branch1 class-map match-any Site_Branch2
match access-group name Site_Branch2
class-map match-any Critical-Data match ip dscp ef class-map match-any Scavenger description Scavenger class to be used for unwanted traffic match ip dscp cs1 class-map match-any Management match ip dscp af21 class-map match-any Critical-Data description Critical Data Services match ip dscp af31 match ip dscp cs6
ip access-list extended ICMP permit icmp any any ip access-list extended Site_Branch1
permit ip any 10.xx.xx.0 0.0.0.255 ip access-list extended Site_Branch2
Change the parent level class to shaping instead of policing should help. A policer (non-queuing) doesn't generate back pressure like shaper does, so it cannot be used on the parent level in HQoS config.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...