Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

qos verification into carrier network

We classify / mark traffic inbound on LAN interface and shape / queue on outbound interface in a DMVPN / GETVPN environment. Our understanding is that with classification and marking on LAN interface, DSCP / TOS bits are preserved (copied to IP Header during IPSEC encryption)on Tunnel interface. Therefore, original DSCP settings would be preserved and visible into carrier network.

Questions;

* is our understanding on preserved DSCP values correct?

* how could we verify / view, from the router itself, the DSCP are exiting the interface to the carrier

Thank you

2 REPLIES
New Member

Re: qos verification into carrier network

Point of clarification, our outbound policy map (shape / queue) is on the WAN's physical interface.

Will the original DSCP values marked on the LAN side interface be preserved / visible as the traffic leaves the tunnel (encrypted) and goes out WAN interface?

Super Bronze

Re: qos verification into carrier network

"is our understanding on preserved DSCP values correct? "

My understanding is the same for single GRE/IPSec VPN. Not 100% positive about DMVPN(mGRE) and/or GETVPN, but I think it's also true for those too.

"how could we verify / view, from the router itself, the DSCP are exiting the interface to the carrier "

What might verify the above,

1) insure outbound policy isn't remarking

2) insure outbound policy is applied to VPN's physical egress interface

3) insure pre-classify is off and/or match against a protocol that's being used (should fail)

4) examine any stats that count against DSCP markings (e.g. class match stats, DSCP WRED stats)

246
Views
0
Helpful
2
Replies
CreatePlease to create content