Enterprise QoS Solution Reference Network Design Guide

More documents

Recommendations

Info

Catalyst 3550—QoS Considerations and Design 2-36 Enterprise QoS Solution Reference Network Design Guide Chapter 2 Campus QoS Design CAT3550(config-pmap-c)# set ip dscp 0 CAT3550(config-pmap-c)# police 1000000 8000 exceed-action policed-dscp-transmit ! Out-of-profile excess data traffic is marked down to Scavenger (CS1) CAT3550(config-pmap-c)# exit CAT3550(config-pmap)#exit CAT3550(config)# CAT3550(config)#interface FastEthernet0/1 CAT3550(config-if)# service-policy input UNTRUSTED-SERVER CAT3550(config-if)#exit CAT3550(config)# CAT3550(config)#ip access list extended SAP CAT3550(config-ext-nacl)# permit tcp any range 3200 3203 any CAT3550(config-ext-nacl)# permit tcp any eq 3600 any CAT3550(config-ext-nacl)# CAT3550(config-ext-nacl)#ip access list extended LOTUS CAT3550(config-ext-nacl)# permit tcp any eq 1352 any CAT3550(config-ext-nacl)# CAT3550(config-ext-nacl)#ip access list extended IMAP CAT3550(config-ext-nacl)# permit tcp any eq 143 any CAT3550(config-ext-nacl)# permit tcp any eq 220 any CAT3550(config-ext-nacl)#end CAT3550# Catalyst MLS QoS Verification Commands Catalyst MLS QoS verification commands for the Multi-Application Server+ Scavenger model include the following: show mls qos show mls qos map show mls qos interface show mls qos interface policers show mls qos statistics show class-map show policy-map show policy interface Catalyst 3500—Conditionally-Trusted IP Phone + PC with Scavenger-Class QoS (Basic) Model Configuration This section includes the following topics: Configuration Catalyst MLS QoS Verification Commands The Catalyst 3550’s support of Per-Port/Per-VLAN policing makes for a distinct advantage over other platforms when provisioning a (Basic or Advanced) Conditionally-Trusted Endpoint Model. This is because Per-Port/Per-VLAN policies can be provisioned without having to enter subnet-specific information for each switch. This makes such policies more modular and portable. Version 3.3
Chapter 2 Campus QoS Design Version 3.3 Catalyst 3550—QoS Considerations and Design In the following example, the VLAN 10 is the DVLAN and VLAN 110 is the VVLAN. Example 2-20 Catalyst 3550—Conditionally-Trusted IP Phone + PC + Scavenger (Basic) Model Configuration CAT3550(config)#mls qos map cos-dscp 0 8 16 24 32 46 48 56 ! Modifies CoS-to-DSCP mapping to map CoS 5 to DSCP EF CAT3550(config)#mls qos map policed-dscp 0 24 to 8 ! Excess DVLAN & VVLAN traffic will be remarked to Scavenger (CS1) CAT3550(config)# CAT3550(config)# CAT3550(config)#class-map match-all VOICE CAT3550(config-cmap)# match ip dscp 46 ! DSCP EF (voice) CAT3550(config-cmap)#class-map match-any CALL SIGNALING ! Need ‘match-any’ here CAT3550(config-cmap)# match ip dscp 26 ! DSCP AF31 (old Call-Signaling) CAT3550(config-cmap)# match ip dscp 24 ! DSCP CS3 (new Call-Signaling) CAT3550(config-cmap)# CAT3550(config-cmap)#class-map match-all VVLAN-VOICE CAT3550(config-cmap)# match vlan 110 ! VLAN 110 is VVLAN CAT3550(config-cmap)# match class-map VOICE ! Matches VVLAN DSCP EF CAT3550(config-cmap)# CAT3550(config-cmap)#class-map match-all VVLAN-CALL-SIGNALING CAT3550(config-cmap)# match vlan 110 ! VLAN 110 is VVLAN CAT3550(config-cmap)# match class-map CALL SIGNALING !Matches VVLAN AF31/CS3 CAT3550(config-cmap)# CAT3550(config-cmap)#class-map match-all ANY CAT3550(config-cmap)# match access-group name ANY ! Workaround ACL CAT3550(config-cmap)# CAT3550(config-cmap)#class-map match-all VVLAN-ANY CAT3550(config-cmap)# match vlan 110 ! VLAN 110 is VVLAN CAT3550(config-cmap)# match class-map ANY ! Matches any other VVLAN traffic CAT3550(config-cmap)# CAT3550(config-cmap)#class-map match-all DVLAN-ANY CAT3550(config-cmap)# match vlan 10 ! VLAN 10 is DVLAN CAT3550(config-cmap)# match class-map ANY ! Matches all DVLAN traffic CAT3550(config-cmap)# CAT3550(config-cmap)#policy-map IPPHONE+PC-BASIC CAT3550(config-pmap)#class VVLAN-VOICE CAT3550(config-pmap-c)# set ip dscp 46 ! DSCP EF (Voice) CAT3550(config-pmap-c)# police 128000 8000 exceed-action drop ! Only one voice call is permitted per switchport VVLAN CAT3550(config-pmap-c)#class VVLAN-CALL-SIGNALING CAT3550(config-pmap-c)# set ip dscp 24 ! DSCP CS3 (Call-Signaling) CAT3550(config-pmap-c)# police 32000 8000 exceed-action policed-dscp-transmit ! Out-of-profile call signaling is marked down to Scavenger (CS1) CAT3550(config-pmap-c)#class VVLAN-ANY CAT3550(config-pmap-c)# set ip dscp 0 CAT3550(config-pmap-c)# police 32000 8000 exceed-action policed-dscp-transmit ! Unauthorized VVLAN traffic is marked down to Scavenger (CS1) CAT3550(config-pmap-c)#class DVLAN-ANY CAT3550(config-pmap-c)# set ip dscp 0 CAT3550(config-pmap-c)# police 5000000 8000 exceed-action policed-dscp-transmit ! Out-of-profile data traffic is marked down to Scavenger (CS1) CAT3550(config-pmap-c)# exit CAT3550(config-pmap)#exit CAT3550(config)# CAT3550(config)#interface FastEthernet0/1 CAT3550(config-if)# switchport access vlan 10 ! DVLAN CAT3550(config-if)# switchport voice vlan 110 ! VVLAN CAT3550(config-if)# mls qos trust device cisco-phone ! Conditional Trust CAT3550(config-if)# service-policy input IPPHONE+PC-BASIC ! Attaches policy CAT3550(config-if)#exit CAT3550(config)# Enterprise QoS Solution Reference Network Design Guide 2-37
Page 1 and 2:
Enterprise QoS Solution Reference N
Page 3 and 4:
Version 3.3 Preface xiii Revision H
Page 5 and 6:
Version 3.3 Enterprise QoS Solution
Page 7 and 8:
Version 3.3 Catalyst 6500 CatOS QoS
Page 9 and 10:
Version 3.3 Cisco Documentation 3-4
Page 11 and 12:
Version 3.3 QoS Baseline (11-Class)
Page 13 and 14:
Version 3.3 Preface Revision Histor
Page 15 and 16:
Preface Version 3.3 Cisco Systems A
Page 17 and 18:
Preface Version 3.3 Obtaining Addit
Page 19 and 20:
QoS Overview What is QoS? Version 3
Page 21 and 22:
Chapter 1 Quality of Service Design
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38: Chapter 1 Quality of Service Design
Page 53 and 54: QoS Design Overview Version 3.3 Cam
Page 55 and 56: Chapter 2 Campus QoS Design Version
Page 57 and 58: Chapter 2 Campus QoS Design Call Si
Page 59 and 60: Chapter 2 Campus QoS Design Trusted
Page 63 and 64: Chapter 2 Campus QoS Design Cisco I
Page 65 and 66: Chapter 2 Campus QoS Design AutoQoS
Page 69 and 70: Chapter 2 Campus QoS Design Catalys
Page 81 and 82: Chapter 2 Campus QoS Design Figure
Page 87: Chapter 2 Campus QoS Design Version
Page 113 and 114: Chapter 2 Campus QoS Design show ml
Page 115 and 116: Chapter 2 Campus QoS Design Figure
Page 139 and 140:
Chapter 2 Campus QoS Design show qo
Page 141 and 142:
Chapter 2 Campus QoS Design show qo
Page 143 and 144:
Chapter 2 Campus QoS Design Version
Page 145 and 146:
Page 147 and 148:
Chapter 2 Campus QoS Design Catalys
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Chapter 2 Campus QoS Design WS-X674
Page 155 and 156:
Chapter 2 Campus QoS Design Configu
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Chapter 2 Campus QoS Design Referen
Page 179 and 180:
Version 3.3 WAN Aggregator QoS Desi
Page 181 and 182:
Chapter 3 WAN Aggregator QoS Design
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Page 197 and 198:
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213 and 214:
Page 215 and 216:
Page 217 and 218:
Page 219 and 220:
Page 221 and 222:
Page 223 and 224:
Page 225 and 226:
Page 227 and 228:
Page 229 and 230:
Version 3.3 Branch Router QoS Desig
Page 231 and 232:
Chapter 4 Branch Router QoS Design
Page 233 and 234:
Page 235 and 236:
Page 237 and 238:
Page 239 and 240:
Page 241 and 242:
Page 243 and 244:
Page 245 and 246:
Page 247 and 248:
Page 249 and 250:
Page 251 and 252:
Page 253 and 254:
Version 3.3 MPLS VPN QoS Design CHA
Page 255 and 256:
Chapter 5 MPLS VPN QoS Design Versi
Page 257 and 258:
Chapter 5 MPLS VPN QoS Design Servi
Page 259 and 260:
Chapter 5 MPLS VPN QoS Design Call-
Page 261 and 262:
Page 263 and 264:
Page 265 and 266:
Page 267 and 268:
Page 269 and 270:
Page 271 and 272:
Page 273 and 274:
Chapter 5 MPLS VPN QoS Design Short
Page 275 and 276:
Page 277 and 278:
Page 279 and 280:
Page 281 and 282:
Page 283 and 284:
Page 285 and 286:
Chapter 5 MPLS VPN QoS Design Books
Page 287 and 288:
Version 3.3 IPSec VPN QoS Design CH
Page 289 and 290:
Chapter 6 IPSec VPN QoS Design Vers
Page 291 and 292:
Page 293 and 294:
Page 295 and 296:
Chapter 6 IPSec VPN QoS Design Pref
Page 297 and 298:
Chapter 6 IPSec VPN QoS Design Dela
Page 299 and 300:
Chapter 6 IPSec VPN QoS Design QoS
Page 301 and 302:
Page 303 and 304:
Chapter 6 IPSec VPN QoS Design Anti
Page 305 and 306:
Page 307 and 308:
Page 309 and 310:
Page 311 and 312:
Page 313 and 314:
Page 315 and 316:
Page 317 and 318:
Chapter 6 IPSec VPN QoS Design Digi
Page 319 and 320:
Chapter 6 IPSec VPN QoS Design DSL
Page 321 and 322:
Page 323 and 324:
Page 325 and 326:
Page 327 and 328:
Chapter 6 IPSec VPN QoS Design Summ
Page 329 and 330:
Chapter 6 IPSec VPN QoS Design Book
show all

Enterprise QoS Solution Reference Network Design Guide

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?