From: Erick B. (erickbe@yahoo.com)
Date: Fri Oct 04 2002 - 02:24:02 GMT-3
Thats because UDP is being matched by the first entry
in the ACL. ACL stops processing after a match. IP
covers ICMP, UDP, and TCP.
--- Adarsh Singh <adarshs@hclinfinet.net> wrote:
> Hi ,=20
>
> I have been trying to implement CBWFQ between two
> cisco 1603 routers.
>
>
> PC
> |
>
OAHO(router1)(serial0)------backtoback-------(serial0)OAREMOTE(router2)--=
> --VOIPBOX1(10.66.6.126)
> | (64
> Kbps) =
> |
> |
> =
>
> PC
>
> VOIPBOX2
> (10.66.6.35)
>
> Now the default queing for the two routers is
> Weighted fair quwing .
>
> Now i have reserved 30 Kbps bandwidth between the
> two router for the =
> voice traffic , the voipbox is uing UDP ports
> greater than 20000.
>
> So after configuring the routers , i do a multiple
> ftp sessions between =
> the two PC, so that the traffic between the two
> serial interfaces =
> touches 62 Kbps .
>
> Now when i start talking between the two VOIP boxes
> , i dont see the =
> CBWFQ kicking in & reserving the necessary bandwidth
> as i have =
> provisioned .
>
> I am enclosing both the router configuration :
>
> CONFIG OF OAHO=20
>
> OAHO=20
>
> sh ru=20
> Building configuration...
>
> Current configuration : 1146 bytes
> !
> version 12.1
> no service single-slot-reload-enable
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname OAHO
> !
> !
> !
> class-map voice
> match access-group 101
> !
> !
> policy-map test
> class voice
> priority 40
> !
> ip subnet-zero
> ip tftp source-interface Ethernet0
> !
> !
> interface Ethernet0
> description connected to EthernetLAN_1
> ip address 10.66.6.33 255.255.255.248
> no cdp enable
> !
> interface Serial0
> description connected to Internet
> bandwidth 64
> ip address 10.66.2.98 255.255.255.252
> no ip route-cache
> no ip mroute-cache
> service-policy output test=20
> load-interval 30
> max-reserved-bandwidth 90
> !
> interface BRI0
> no ip address
> shutdown
> ip classless
> ip route 0.0.0.0 0.0.0.0 10.66.2.97
> no ip http server
> !
> access-list 101 permit ip host 10.66.6.35 host
> 10.66.6.126
> access-list 101 permit udp host 10.66.6.35 gt 20000
> host 10.66.6.126 gt =
> 20000
> dialer-list 1 protocol ip permit
> tftp-server flash:c1600-sy-mz.121-15.bin
> !
> line con 0
> exec-timeout 0 0
> password vpn
> login
> line vty 0 4
> exec-timeout 60 0
> password vpn
> login
> transport preferred none
> !
> end
>
> OAHO# show po
> OAHO# show policy-map=20
> Policy Map test
> Weighted Fair Queueing
> Class voice=20
> Strict Priority
> Bandwidth 40 (kbps)
>
> OAHO#show policy-map=20
> Policy Map test
> Weighted Fair Queueing
> Class voice=20
> Strict Priority
> Bandwidth 40 (kbps)
>
> OAHO#show policy-map int se 0
> OAHO#show int se 0
> Serial0 is up, line protocol is up=20
> Hardware is QUICC Serial
> Description: connected to Internet
> Internet address is 10.66.2.98/30
> MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec,=20
> reliability 255/255, txload 3/255, rxload 3/255
> Encapsulation HDLC, loopback not set
> Keepalive set (10 sec)
> Last input 00:00:00, output 00:00:00, output hang
> never
> Last clearing of "show interface" counters
> 00:08:54
> Input queue: 0/75/0/0 (size/max/drops/flushes);
> Total output drops: 0
> Queueing strategy: fifo
> Output queue :0/40 (size/max)
> 30 second input rate 1000 bits/sec, 4 packets/sec
> 30 second output rate 62000 bits/sec, 3
> packets/sec
> 816 packets input, 39184 bytes, 0 no buffer
> Received 69 broadcasts, 0 runts, 0 giants, 0
> throttles
> 0 input errors, 0 CRC, 0 frame, 0 overrun, 0
> ignored, 0 abort
> 717 packets output, 46507 bytes, 0 underruns
> 0 output errors, 0 collisions, 1 interface
> resets
> 0 output buffer failures, 0 output buffers
> swapped out
> 6 carrier transitions
> DCD=3Dup DSR=3Dup DTR=3Dup RTS=3Dup
> CTS=3Dup
> --
>
> OAHO#show queue se 0
> Show queue not supported with FIFO queueing
>
> OAREMOTE CONFIG
>
>
> sh ru=20
> Building configuration...
>
> Current configuration : 1316 bytes
> !
> version 12.1
> no service single-slot-reload-enable
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname OAREMOTE
> !
> enable secret 5 $1$r1WR$YWvapuJdPcjur/4S6MRKv.
> !
> username dlinpc password 0 npc
> username noidad32 password 0 d32
> !
> class-map voice
> match access-group 101
> !
> !
> policy-map test
> class voice
> priority 40
> ip subnet-zero
> !
> isdn switch-type basic-net3
> !
> !
> !
> interface Ethernet0
> ip address 10.66.6.121 255.255.255.248
> ip nat inside
> no cdp enable
> !
> interface Serial0
> description connected to Infinet 64K leased line
> for vpn
> bandwidth 64
> ip address 10.66.2.122 255.255.255.252
> no ip route-cache
> no ip mroute-cache
> load-interval 30
> max-reserved-bandwidth 90
> service-policy output test
> clockrate 64000
> !
> interface BRI0
> description connected to NPC/D32
> no ip address
> encapsulation ppp
> isdn switch-type basic-net3
> no fair-queue
> no cdp enable
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 10.66.2.121
> no ip http server
> !
> access-list 101 permit ip host 10.66.6.126 host
> 10.66.6.35
> access-list 101 permit udp host 10.66.6.126 gt 20000
> host 10.66.6.36 gt =
> 20000
> dialer-list 1 protocol ip permit
> !
> line con 0
> exec-timeout 0 0
> password 111
> login
> line vty 0 password 111
> login
> !
> end
>
> OAREMOTE# show po
> OAREMOTE# show policy-map=20
> Policy Map test
> Weighted Fair Queueing
> Class voice=20
> Strict Priority
> Bandwidth 40 (kbps)
> OAREMOTE#show po
> OAREMOTE#show policy-map int se 0
> Serial0 output : test
> Weighted Fair Queueing
> Class voice=20
> Strict Priority
> Output Queue: Conversation 24=20
> Bandwidth 40 (kbps) Packets Matched 40
> (total drops/bytes drops) 5/380
> OAREMOTE#sjh=08 =08=08 =08=FF
>
> User Access Verification
>
> Password: =07=FF
> OAHO>telnet 10.66.6.12=08 =08=08 =08121
> Trying 10.66.6.121 ... Open
>
>
> =20
>
> OAREMOTE#show policy-map=20
> Policy Map test
> Weighted Fair Queueing
> Class voice=20
> Strict Priority
> Bandwidth 40 (kbps)
> OAREMOTE#show po
> OAREMOTE#show policy-map int se 0
> Serial0 output : test
> Weighted Fair Queueing
> Class voice=20
> Strict Priority
> Output Queue: Conversation 24=20
> Bandwidth 40 (kbps) Packets Matched 40
> (total drops/bytes drops) 5/380
> =20
> =20
> =20
> =20
> Now when i even see the access-list 101 , i dont see
> any match for the =
> UDP packets while talking , i fail to undertand that
> because when i do =
> debug ip packet detail , i see the udp ports been
> used while talking =
> between the voip box .
> =20
> Can some one help me out with this....needed help
> urgently .
This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:38 GMT-3