Re: 3560G QoS thing

From: Joseph Saad (joseph.samir.saad@gmail.com)
Date: Thu Oct 25 2007 - 02:46:32 ART


Option I seems a little messy. You're tagging L2 with an DSCP value while
DSCP is only for IP-based traffic. Also you are tagging an L2 frame on the
inbound (typically you need to mark the CoS Value only on Trunk ports) which
will eventually be discarded on the outbound port. Doesn't make sense, this
is better achieved by a variation of option 3.

I'd go for option II, if you have no other classes defined. But I'd also
combine it with not-trusting the CoS values.

For option III, you must enable "mls qos" for it to work. This will work for
tagged and untagged frames. CoS-to-DSCP map will take care of setting the
DSCP value on egress port based on CoS value of the port. If the output port
is trunking the CoS Value will also be maintained.

with " no msl qos trust" configured, "mls qos cos override" is redundant.

Some little concepts:

CoS fields exists only on Trunking packets.

You can set a CoS Value for a port (Not a packet)

DSCP values will be derived based on the Port's CoS Value or incoming
packet's CoS value if you are trunking and choose to trust the incoming
traffic CoS values.

DSCP/IPP fields is part of IP header.

Non-IP-Traffic, it would be meaningless to set DSCP/IPP.

if Egress port is trunking, you would mark the packets with CoS for non-IP
Traffic.

Note: I am not taking voice into account at all.

Look at Catalyst 3560 QoS configuration guide.

Feel free to comment.
Joseph.

On 10/25/07, Usankin, Andrew <Andrew.Usankin@twtelecom.com> wrote:
>
> Hi experts!
>
> I have a question of what is the best way to do the following.
>
> Say I need to mark all traffic coming from server port to CS5.
>
> 1.
> mac access-list extended MATCH-ALL-LAYER2
> permit any any
> !
> ip access-list extended MATCH-ALL-LAYER3
> permit ip any any
> !
> class-map match-all L2-TRAFFIC
> match access-group name MATCH-ALL-LAYER2
> class-map match-all L3-TRAFFIC
> match access-group name MATCH-ALL-LAYER3
> !
> !
> policy-map SET-ALL-TRAFFIC-TO-5
> class L2-TRAFFIC
> set dscp cs5
> class L3-TRAFFIC
> set dscp cs5
> Then just apply this policy on interface inbound.
>
> 2.
> policy-map SET-ALL-TRAFFIC-TO-5
> class class-default
> set dscp cs5
> Then again just apply this policy on interface inbound.
>
> 3.
> interface fa0/0
> no msl qos trust
> mls qos cos 5
> mls qos cos override
>
> I'd realy appreciate any ideas on what I'm missing here. Thanks!
>
> Andrew
>
> The content contained in this electronic message is not intended to
> constitute formation of a contract binding TWTC. TWTC will be
> contractually bound only upon execution, by an authorized officer, of
> a contract including agreed terms and conditions or by express
> application of its tariffs.
>
> This message is intended only for the use of the individual or entity
> to which it is addressed. If the reader of this message is not the
> intended recipient, or the employee or agent responsible for
> delivering the message to the intended recipient, you are hereby
> notified that any dissemination, distribution or copying of this
> message is strictly prohibited. If you have received this
> communication in error, please notify us immediately by replying to
> the sender of this E-Mail or by telephone.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Fri Nov 16 2007 - 13:11:18 ART