RE: MATCH VLAN on 3560

From: Antonio Soares (amsoares@netcabo.pt)
Date: Thu Feb 14 2008 - 10:36:38 ARST


From the 3560 Software Configuration Guide:

"Note Do not use the show policy-map interface privileged EXEC command to
display classification information for incoming traffic. The control-plane
and interface keywords are not supported, and the statistics shown in the
display should be ignored."

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12244se/scg/swqo
s.htm

You should use "show mls qos" commands to help you see what's happening.

Regards,

Antonio Soares
CCIE #18473 (R&S),CCNP,CCIP,JNCIA-ER,JNCIS-ER
http://pwp.netcabo.pt/amsoares/

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Daniel Valle
Sent: quinta-feira, 14 de Fevereiro de 2008 0:32
To: ccielab@groupstudy.com
Subject: Fwd: MATCH VLAN on 3560

GS,

sorry for the flood :) I realized that it does work. but it is really
strange bc the sh policy-map interface vlanxx does not match anything... if
we set class-maps to match acls, it does not match the acl either ( xxx
matches) .. however, if I make few debugs in the routers connected to the
switch , I see that it does make what I'm configuring it to do.

is ther any way to see that the policy is being matched in the switch for
such qos per-vlan per-port queueing ? one quick example.

!
policy-map COS
  class class-default
   set ip precedence 7
!
interface FastEthernet0/3
description --- TO R3 trunk
 switchport trunk encapsulation dot1q
 switchport mode trunk
 mls qos vlan-based
!
interface Vlan13
 no ip address
 service-policy input COS
!
SW3#sh policy-map interface vlan13
 Vlan13
  Service-policy input: COS
    Class-map: class-default (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any
        0 packets, 0 bytes
        5 minute rate 0 bps
SW3#
********************
IN R3
!
interface FastEthernet0/1.13
 encapsulation dot1Q 13
 ip address 2.2.13.3 255.255.255.0
 ip access-group 101 in
!
R3#sh access-lists 101
Extended IP access list 101
    10 permit ip any any precedence routine log
    20 permit ip any any precedence priority log
    30 permit ip any any precedence immediate log
    40 permit ip any any precedence flash log
    50 permit ip any any precedence flash-override log
    60 permit ip any any precedence critical log
    70 permit ip any any precedence internet log
    80 permit ip any any precedence network log (9000 matches) R3#

Does anyone know why this happens ? Thanks in advance,

Thanks

Daniel.
---------- Forwarded message ----------
From: Daniel Valle <danielfrvalle@gmail.com>
Date: Feb 13, 2008 8:04 PM
Subject: Fwd: MATCH VLAN on 3560
To: "ccielab@groupstudy.com" <ccielab@groupstudy.com>

I just tested that and it does not work....

Do you guys know how we can do the per port-per vlan matching in a 3560 ?

---------- Forwarded message ----------
From: Daniel Valle <danielfrvalle@gmail.com>
Date: Feb 13, 2008 7:36 PM
Subject: Re: MATCH VLAN on 3560
To: "ccielab@groupstudy.com" <ccielab@groupstudy.com>

I found my answer

http://www.groupstudy.com/archives/ccielab/200708/msg00262.html

Thanks !!

  On Feb 13, 2008 7:21 PM, Daniel Valle <danielfrvalle@gmail.com> wrote:

> Hi GS,
>
> How do I do a match vlan in a 3560 ? 3550 is easy as we have the match
> vlan key word. However I don't see that in a 3560. Is the only way to
> match such traffic via regular IP acl or we have another way to do
> that ? I know we have some messages regarding that as I found som in
> the website, However, I could't find this specific answer.
>
>
> Thanks in Advance
>
>
> Daniel



This archive was generated by hypermail 2.1.4 : Sat Mar 01 2008 - 16:54:48 ARST