Добавил:
Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:
DQOS Exam Certification Guide - Cisco press.pdf
Скачиваний:
73
Добавлен:
24.05.2014
Размер:
12.7 Mб
Скачать

QoS Configurations on Catalyst Switches 731

Example 10-23 Committing a QoS ACL to the ASIC

Cat65k> (enable) commit qos acl IP-PHONES

QoS ACL 'IP_PHONES' successfully committed.

Cat65k> (enable)

After the QoS ACL has been committed to hardware, you can map it to the desired VLAN. This allows the 63xx 10/100 line cards to get around the trust state issue. The set qos acl map command enables you to accomplish this task. Example 10-24 demonstrates the configuration of a QoS ACL map.

Example 10-24 Mapping the QoS ACL to a VLAN

Cat65k> (enable) set qos acl map IP_PHONES 110

ACL IP_PHONES is successfully mapped to vlan 110.

Cat65k> (enable)

Connecting a Catalyst OS Switch to WAN Segments

In Figure 10-11, a WAN router is connected to port 6/1. Typically, you will trust the Layer 3 markings from a WAN device. To configure QoS for a port that connects the distribution layer switch to a WAN segment, use port-based QoS with a trust state of trust-ipprec, as shown in Example 10-25.

Example 10-25 Associating QoS with Port 6/1 and Enabling IP Precedence Trust State

cat6k-distrib> (enable) set port qos 6/1 port-based

cat6k-distrib> (enable) set port qos 6/1 trust trust-ipprec

Trust type trust-ipprec not supported on port(s) 6/1

Receive thresholds enabled on ports(s) 6/1

Trust type set to untrusted on port(s) 6/1As discussed in the “Configuring Trust Boundaries” section, with all 63xx series 10/100 Ethernet line cards with 1q4t ports, the trust-ipprec port keyword displays an error message stating that trust-ipprec is not supported. This configuration must be entered to activate the receive queue drop thresholds; however, the trust state of the ports remains untrusted. You must configure a trust-ipprec ACL to match the ingress traffic to successfully apply the trust-ipprec trust state. The 65xx series 10/100 Ethernet line cards do not have this issue.

732 Chapter 10: LAN QoS

Example 10-26 creates the trust state ACL, commits the ACL to hardware, and applies the ACL to port 6/1.

Example 10-26 Trust ACL for WAN Segments

catOS> (enable) set qos acl ip ACL_TRUST-WAN trust-ipprec any catOS> (enable) commit qos acl ACL_TRUST-WAN

catOS> (enable) set qos acl map ACL_TRUST-WAN 6/1

Displaying QoS Settings for the Catalyst OS Switch

Several show commands enable you to verify the QoS configuration of the Catalyst OS switch. The show port qos command provides a great deal of information about the QoS configuration of the specified port, as shown in Example 10-27.

Example 10-27 The show port qos Command

CatOS> (enable) show port qos 2/1

QoS is enabled for the switch.

QoS policy source for the switch set to local.

Port

Interface Type

Interface Type

Policy Source

Policy Source

 

config

 

runtime

 

config

 

runtime

-----

--------------

--------------

-------------

-------------

2/1

 

 

 

 

 

 

vlan-based

COPS

 

local

vlan-based

 

Port

TxPort Type

RxPort Type

Trust Type

Trust Type

Def CoS

Def CoS

 

 

 

 

 

 

 

 

 

config

runtime

config

runtime

-----

------------

 

 

 

 

------------ ------------ -------------

-------

-------

2/1

 

 

 

 

 

 

 

trust-cos

trust-cos*

0

0

 

 

2q2t

1q4t

Port

Ext-Trust

Ext-Cos

 

 

 

 

-----

---------

 

 

-------

 

 

 

 

 

2/1

untrusted

0

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

(*)Runtime trust type set to untrusted.

 

 

 

Config:

 

 

 

 

 

 

 

Port

ACL name

 

 

 

Type

 

 

 

----- -------------------------------- ----

 

 

 

No ACL is mapped to port 2/1.

 

 

 

 

Runtime:

 

 

 

 

 

 

 

Port

ACL name

 

 

 

Type

 

 

 

----- -------------------------------- ----

No ACL is mapped to port 2/1.

CatOS> (enable)

QoS Configurations on Catalyst Switches 733

From the show port qos 2/1 commands, you can see that the QoS is enabled and applied to this port on a VLAN basis. This is a result of the command set port qos 2/1-48 vlan-based entered earlier in the examples to assign QoS to the IP Phones connected to ports 2/1 through 2/48. The TX port type and RX port type list the queues and thresholds in use for interface 2/1. The runtime trust state is currently untrusted. As discussed in the “Trust Boundaries” section, a QoS ACL resolves this issue.

In the “Configuring QoS ACLs” section, a QoS ACL named IP-PHONES was created and associated with VLAN 110. Port 2/1 is a member of this VLAN, so why is the show port qos 2/1 saying that there is no ACL mapped to port 2/1? The answer to this question is that the IP-PHONES ACL was mapped to the VLAN and not to port 2/1. An ACL is listed only if the ACL was mapped to the specific port selected.

As seen in Example 10-28, the show qos info runtime command provides much of the same information obtained with the show port qos command.

Example 10-28 The show qos info runtime Command

CatOS> (enable) show qos info runtime 2/1

Run time setting of QoS:

QoS is enabled

Policy Source of port 2/1: Local

Tx port type of port 2/1 : 2q2t

Rx port type of port 2/1 : 1q4t

Interface type: vlan-based

ACL attached:

The qos trust type is set to trust-cos.

Warning: Runtime trust type set to untrusted.

Default CoS = 0

Queue and Threshold Mapping for 2q2t (tx):

Queue

Threshold

CoS

 

-----

---------

---------------

1

1

0

1

 

1

2

2

 

 

2

1

3

4

5

2

2

6

7

 

Queue

and Threshold Mapping for 1q4t (rx):

 

 

 

 

Queue

Threshold

CoS

 

-----

---------

---------------

1

1

0

1

 

1

2

2

 

 

1

3

3

4

5

1

4

6

7

 

. . .

 

 

 

 

CatOS> (enable)

The commands have a few notable differences. The show qos info runtime command lists the default CoS, typically set to 0, and the active CoS to transmit and receive queue mappings. In

734 Chapter 10: LAN QoS

this example, any frame that arrives with a CoS value of 3, 4, or 5 is placed in Queue 2, threshold 1. This matches the configuration from the “CoS-to-Egress Queue Mapping” section.

The show qos statistics l3stats command shows a summary of all IP packets that have had their CoS/ToS fields modified by the Layer 3 switching engine as well as any packet drops resulting from policing, as shown in Example 10-29.

Example 10-29 Show QoS Layer 3 Statistics

CatOS> (enable) show qos statistics l3stats

Packets dropped

due

to policing:

0

IP

packets with

ToS

changed:

10473

IP

packets with

CoS

changed:

4871

Non-IP

packets with CoS changed:

0

CatOS>

(enable)

 

 

 

The show qos statistics command displays detailed information about the number of packets that have been dropped from each queue and threshold. In Example 10-30, all packets dropped are in the first drop threshold of TX Queue 1.

Example 10-30 The show qos statistics Command

CatOS> (enable) show qos statistics 2/1

Tx port type of port 2/1 : 2q2t

Q # Threshold #:Packets dropped

--- -----------------------------------------------

1 1:393210 pkts, 2:0 pkts

21:0 pkts, 2:0 pkts

Rx port type of port 2/1 : 1q4t

Q #

Threshold #:Packets

dropped

---

-----------------------------------------------

1

1:0 pkts, 2:0 pkts,

3:0 pkts, 4:0 pkts

CatOS> (enable)

The show qos map runtime command enables you to display the CoS/DSCP/IP precedence mappings within the Catalyst 6500. You can now display the mappings configured in the “Layer 2-to-Layer 3 Mapping” section of this chapter.

Example 10-31 show the CoS value of 3 is mapped to the DSCP decimal value of 26 (AF31), whereas the CoS value of 5 is mapped to the DSCP decimal value of 46 (EF).

QoS Configurations on Catalyst Switches 735

Example 10-31 The show qos map runtime cos-dscp-map Command

Cat65k-Access> (enable) show qos map runtime cos-dscp-map

CoS - DSCP map: CoS DSCP

--- ----

00

18

216

326 -> 26 = AF31

432

546 -> 46 = EF

6 48

756

Console > (enable)

Example 10-32 shows the DSCP decimal values 24 through 31 are mapped to the CoS value of 3, whereas the DSCP decimal values 40 through 47 are mapped to the CoS value of 5.

Example 10-32 The show qos map runtime dscp-cos-map Command

CatOS>

(enable)

 

 

show qos map runtime dscp-cos-map

 

DSCP - CoS map:

 

 

DSCP

CoS

---

---

 

 

0-7

0

 

 

 

8-15

1

 

 

 

16-23

2

 

 

 

 

 

 

 

 

24-31

3

-> 26 = AF31

32-39

4

 

 

 

40-47

5

-> 46 = EF

48-55

6

 

 

 

56-63

7

 

 

 

CatOS>

(enable)

 

 

 

 

 

Example 10-33 shows the IP precedence value of 3 mapped to the DSCP value of 26 (AF31), whereas the IP precedence value of 5 is mapped to the DSCP value of 46 (EF).

Example 10-33 The show qos map runtime ipprec-dscp-map Command

Cat65k-Access> (enable) show qos map runtime ipprec-dscp-map

IP-Precedence - DSCP map: IP-Prec DSCP

------- ----

00

1 8

216

continues

736 Chapter 10: LAN QoS

Example 10-33 The show qos map runtime ipprec-dscp-map Command (Continued)

326 -> 26 = AF31

432

546 -> 46 = EF

6 48

756

Cat65k-Access> (enable)

Configuration of a Catalyst Switch Using IOS

This section explores the configuration of a Catalyst IOS switch in the access and distribution layers. Assume that your IP telephony network is configured as depicted in Figure 10-12.

Figure 10-12 Catalyst IOS Switch

IP WAN

PSTN

 

 

 

 

 

 

Port 5

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Port 1

 

Ports 11-20

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

802.1q Trunk

 

 

 

 

 

 

 

 

 

 

 

CallManager 1

 

 

IP

 

 

 

 

 

 

 

 

 

 

 

 

IP Phone

 

 

PC

 

 

 

 

 

 

 

 

 

VLAN 110

VLAN 10

 

 

 

 

 

Port 2

 

Port 10

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

CallManager 2

Catalyst OS Switch

 

 

 

 

 

 

 

Video Server

 

In this example, CallManager 1 is connected to port 1, CallManager 2 is connected to port 2, and 10 IP Phones are connected to ports 11 through 20 respectively. Each IP Phone has a PC attached to the IP Phone switch port. And an IP video server is also connected to port 10.

The Catalyst 6500, 4500 with the Supervisor III or IV Engine, 3550, and 3524 are examples of Catalyst IOS switches. The QoS required to minimize delay, jitter, and packet drops for these switches can be broken down into the following tasks:

Configuring voice VLANs for a Catalyst IOS switch