cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6578
Views
15
Helpful
4
Replies

How to apply Service-policy (QoS) on a DMVPN Tunnel interface of a Cisco 1941 ISR2

emcueto08
Level 1
Level 1

Hi to all,


I'm Eugene from the Philippines and just want to ask how we can apply a service-policy (QoS) on a tunnel interface of the DMVPN on a Cisco 1941 ISR2. Previously, client's routers were Cisco 1841 ISR. But as we know 1841ISR is on its way EoL/EoS so clients purchased 1941 ISR2 instead for the new sites and well replace the old ones. On a Cisco 1841 we can apply "service-policy output <policy-map name>" on the tunnel interface for DMVPN for the QoS. But when we migrated the configuration to the 1941 ISR2, there were no option to place service-policy under the tunnel interface. How can we apply our QoS on the tunnel interface?


Hope we can have as you support asap as our client already starting to migrated from 1841 to 1941.

Many Thanks and Regards,

Eugene

4 Replies 4

Raphael Wouters
Cisco Employee
Cisco Employee

Hi Eugene,

Unfortunately outbound QoS policy on an mGRE tunnel is not supported and has never been. The CLI has been removed from mGRE interfaces around 15.0M. Previously you could apply the QoS on the tunnel interface but the result were not predictable, it may work or may not work correctly.

On the hub, per-tunnel QoS for DMVPN relies on NHRP registration packets containing the NHRP group from the spoke to be able to map the correct QoS template. There is currently is no mechanism to tie this together on spoke.

Depending on what you need to do, you can still use qos-preclassify on the spoke and apply the service-policy on the physical interface, or match GRE packets on the physical interface.

Hi Raphael,

Thanks for the reply.

So you mean we could have this set-up:

HUB (Cisco3845) - run per-tunnel QoS using NHRP groups as hub

SPOKE (Cisco1841) - run QoS pre-classify and service-policy on the DMVPN tunnel interface

SPOKE (Cisco 1941 ISR2) - run per-tunnel QoS using NHRP group as spoke

How about if the DMVPN is a Spoke-to-Spoke set-up will this still be the configuration we can use?

Regards,

Eugene

Hi Eugene,

Not exactly, you can not do QoS using NHRP group on a spoke, and you can not apply QoS on a mGRE tunne interface, but you can on a physical interface and qos-preclassify will help matching packets before encapsulation. So you need to:

   HUB (Cisco3845) - run per-tunnel QoS using NHRP groups as hub

   SPOKE (Cisco1841) - run QoS pre-classify and service-policy on the DMVPN physical interface

   SPOKE (Cisco 1941 ISR2) - run QoS pre-classify and service-policy on the DMVPN physical interface

> How about if the DMVPN is a Spoke-to-Spoke set-up will this still be the configuration we can use?

This is a limiation of these setup unfortunately. On the spoke you can easily match spoke-to-hub as you know the hub IP address, but you can not easily match specific spoke-to-spoke, so you'll usually have to treat all the spoke-to-spoke traffic the same way.

Thanks,
Raphael

cyberbench31
Level 1
Level 1

Hi sir Eugene,

pwede bang pa assist ako sa setup ng dmvpn namin.. intermittent kasi ung ping ko sa spoke di ko alam kung ano ang kulang sa config ko, iisa pa lang naman ang spoke ko sa ngaun pero nagka problema na agad ako..

salamat,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco