Re: per vlan based qos classification/marking on 3560?

From: Petr Lapukhov <petr_at_internetworkexpert.com>
Date: Thu, 10 Sep 2009 12:39:28 -0700

Hi,

In order to see QoS marking stats you need to use the command "show
mls qos interface fastEthernet 0/x statistics " on _physical_
interfaces. However, this command displays the aggregate stats for the
port (incoming/outgoing) and might be confusing sometimes when you
have multiple traffic flows. The "classic" MQC show commands (e.g.
show policy-map interface) are not relevant when it comes to "MLS QoS"
:) For more examples of traffic policing in 3550/3560 (including
per-port/per-VLAN policing) you may check the following post:

http://blog.internetworkexpert.com/2008/09/11/comparing-traffic-policing-features-in-the-3550-and-3560-switches/

Also, a working alternative to monitoring the traffic marking with
show commands in the switch is configuring an ingress policy-map in
the attached router (making sure the marked traffic goes to that
router). Assign class-map matching the respective DSCP values to the
policy-map, and you can see the packet statistics. I use this methond
extensively for verifications in our VOL1 QoS section.

HTH,

-- 
Petr Lapukhov, petr_at_INE.com
CCIE #16379 (R&S/Security/SP/Voice)
Internetwork Expert, Inc.
http://www.INE.com
Toll Free: 877-224-8987
Outside US: 775-826-4344
2009/9/10 Mark Matters <markccie_at_gmail.com>:
> I was thinking about something else. I stand corrected.
>
> After reading what All from NJ posted I remember a discussion here that the
> sho policy-map feature is broken on some switches. There was a thread on
> this recently.   If memory serves me correctly the switch might not display
> the output your looking for but it is working.
>
>
> On Thu, Sep 10, 2009 at 3:01 PM, Mark Matters <markccie_at_gmail.com> wrote:
>
>> Sorry I do not have an example handy. I'll try and find one.
>>
>> Take a look into vlan maps.
>>
>> It will be something like this.
>> acl
>> vlan-map
>> vlan access filter.
>>
>>
>> *As I learn more I remember less. I guess my token bucket is rather small.
>> *
>>
>>
>>
>> On Thu, Sep 10, 2009 at 2:46 PM, CCIE League <ccieleague_at_ymail.com> wrote:
>>
>>> Experts,
>>>
>>> How to classify & mark all traffic for only vlan 99 with anything e.g. ip
>>> prec 5 on a "3560" switch... SW4?
>>>
>>>
>>> Setup:
>>>
>>>  Vlan99----SW1-----isl trunk and ether channel-----SW4
>>>
>>>
>>> - i have enabled "mls qos vlan-based" on the ALL trunk ports on SW4. Can't
>>> use "mls qos vlan-based" on Port Channel?
>>>
>>> - SW4 can reach vlan99 via IGP... traffic destined to vlan 999 routed via
>>> vlan 100.
>>>
>>> - I have created ACL ANY1 with permit any on SW4
>>>
>>> - Defined Class-map CM_ANY
>>>     match access-group name ANY1
>>>
>>> - Defined Policy-map PM_MARK
>>>   Class CM_ANY
>>>    set ip prece 5
>>>
>>> - Created int vlan 99 on SW4
>>>
>>> - Under int vlan 99
>>>   service-policy input PM_MARK
>>>
>>> #show policy-map interface vlan 99  doesn't show any packets marked!! All
>>> is showing 0.
>>>
>>>
>>> Have i missed anything? Any tricks?
>>>
>>>
>>> Followed steps on:
>>> http://blog.internetworkexpert.com/tag/per-vlan/
>>>
>>> I have also tried to use Class-map with "match interface f0/19 - f0/24 as
>>> mentioned in example 6.
>>>
>>> Ta,
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Thu Sep 10 2009 - 12:39:28 ART

This archive was generated by hypermail 2.2.0 : Sun Oct 04 2009 - 07:42:03 ART