12-11-2009 04:05 AM - edited 03-04-2019 06:56 AM
I have an issue on a customer network where they have 5 VPN connections.
The bearer is attached to a gig interface, and the PVCs run as sub-interfaces.
Two of the VPN's also have COS. AF4 and ef.
My issue is that I cannot get a policy-map together that allows configs for ALL the VPNs.
The one attached shows classes all within one policy-map. However, when I cut and paste it into the router, it says I have too many classes.
Ideally I would like to create a nested policy, but it doesn't appear that you can do this, like you can other routers, such as a 7206VXR.
Can you help please?
class-map match-any VPN
match input-interface FastEthernet2/5
class-map match-any VPN1
match input-interface FastEthernet2/7
class-map match-any VPN2
match input-interface FastEthernet2/8
class-map match-any VPN3
match input-interface gi2/4
class-map match-any af4_output
match ip dscp af41
class-map match-any VPN4
match input-interface GigabitEthernet2/3
class-map match-all VPN4_ef_output
match input-interface GigabitEthernet2/3
match ip dscp 46
int gi2/1
description 1000M Flex IP Clear Access:
no service-policy output CE-OUTPUT
bandwidth 460880
exit
policy-map CE-OUTPUT
class ce_mgmt_unb
police 8000 8000 8000 conform-action set-prec-transmit 6 exceed-action set-prec-transmit 6
bandwidth 4035
random-detect dscp-based
random-detect exponential-weighting-constant 10
random-detect dscp 63 142 227 10
class af4_output
police 20896000 141500 283000 conform-action set-dscp-transmit 34 exceed-action drop violate-action drop
bandwidth 20070
random-detect dscp-based
random-detect exponential-weighting-constant 10
random-detect dscp 34 142 227 10
random-detect dscp 32 142 227 10
random-detect dscp 36 43 114 5
random-detect dscp 38 43 114 5
class class-default
bandwidth 375316
random-detect dscp-based
random-detect exponential-weighting-constant 14
random-detect dscp 48 1225 1960 10
shape 403456
class VPN
bandwidth 4014
random-detect dscp-based
random-detect exponential-weighting-constant 8
random-detect dscp 48 127 203 10
shape 4096
class VPN1
bandwidth 10034
random-detect dscp-based
random-detect exponential-weighting-constant 9
random-detect dscp 48 200 320 10
shape 10240
class VPN2
bandwidth 25088
random-detect dscp-based
random-detect exponential-weighting-constant 10
random-detect dscp 48 317 507 10
shape 25600
class VPN3
bandwidth 2006
random-detect dscp-based
random-detect exponential-weighting-constant 7
random-detect dscp 48 90 144 10
shape 2048
class VPN4_ef_output
police 6560000 16000 16000 conform-action transmit exceed-action drop
priority
class VPN4
bandwidth 8492
random-detect dscp-based
random-detect exponential-weighting-constant 9
random-detect dscp 48 184 294 10
shape 15360
12-28-2009 12:22 AM
Hello Pete,
it can be a question of IOS version.
According to the following document on 10700 series some QoS features have been added later
>>
Starting in Cisco IOS Release 12.0(24)S, the Cisco 10720 Internet router supports the following MQC features:
•Distribution of Remaining Bandwidth
Starting in Cisco IOS Release 12.0(25)S, the Cisco 10720 Internet router supports additional MQC features:
•MQC Bandwidth in Absolute Values
•Single Rate 3-Color Marker for Traffic Policing
Starting in Cisco IOS Release 12.0(26)S, the Cisco 10720 Internet router also supports the following MQC features:
•MQC Hierarchical Class Maps on the Cisco 10720 Internet Router
•MQC Strict Priority Queue on the Cisco 10720 Internet Router
Starting in Cisco IOS Release 12.0(27)S, the Cisco 10720 Internet router supports:
•DiffServ Compliant Weighted Random Early Detection
Starting in Cisco IOS Release 12.0(30)S, the Cisco 10720 Internet router supports all IPv4 QoS features in IPv6 environments, including packet classification, queuing, traffic shaping, WRED, class-based packet marking, and policing of IPv6 packets.
see http://www.cisco.com/en/US/docs/ios/12_0st/12_0st17/feature/guide/10720.html#wp1153849
Hope to help
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide