Question

Cisco IOS QoS Configuration

Asked by: John_Czerwinski

I need help configuring QoS on a Cisco 2821 router.  Our Internet connection is an ADSL (6Mb/s DOWN / 768Kb/s UP).  There are about 50+ users competing for the bandwidth and we've had many occurances of people downloading large files and causing critical applications to fail.

I've set up QoS on the router (see configuration below), which has help but we still have "run away" applications that cause the ADSL to be completely saturated.



access-list 99 remark Access List 99 for QoS_Level_3
access-list 99 permit 38.101.234.230
access-list 99 permit 38.101.234.205


class-map match-any QoS_Level_0
 description Non Business Related
 match protocol netshow
 match protocol rtsp
 match protocol vdolive
 match protocol winmx
class-map match-any QoS_Level_1
 description Busines Business Related - Low Bandwidth
 match protocol novadigm
 match protocol ntp
 match protocol secure-ftp
 match protocol tftp
 match protocol ftp
class-map match-any QoS_Level_2
 description Busines Busines Related - Medium or Spare Bandwidth
 match protocol pop3
 match protocol http
 match protocol secure-http
 match protocol irc
 match protocol h323
 match protocol nntp
 match protocol secure-irc
 match protocol secure-pop3
 match protocol skinny
 match protocol ssh
 match protocol xwindows
class-map match-any QoS_Level_3
 description Business Critical - High Bandwidth
 match access-group name TFS
 match protocol exchange
 match protocol snmp
 match protocol ldap
 match protocol pop3
 match protocol secure-imap
 match protocol secure-ldap
 match protocol secure-telnet
 match protocol smtp
 match protocol sqlnet
 match protocol sqlserver
 match protocol syslog
 match protocol telnet
 match protocol icmp
 match access-group 99
 match protocol secure-http
class-map match-any QoS_Level_4
 description Business Related - Streaming Multimedia
class-map match-any QoS_Level_5
 description Business Related - Interactive Media and Voice
class-map match-any QoS_Level_6
 description Layer 3 Network Control Reserved Traffic
 match protocol bgp
 match protocol dhcp
 match protocol dns
 match protocol eigrp
 match protocol ospf
 match protocol rip
class-map match-any QoS_Level_7
 description Layer 2 Network Control Reserved Traffic



!
!
policy-map QoS_Levels
 class QoS_Level_3
    bandwidth percent 54
 class QoS_Level_0
    bandwidth percent 1
 class QoS_Level_1
    bandwidth percent 5
 class QoS_Level_2
    bandwidth percent 10
 class QoS_Level_4
    bandwidth percent 10
 class QoS_Level_5
    bandwidth percent 10
 class QoS_Level_6
    bandwidth percent 5
 class QoS_Level_7



policy-map QoS_Internet_Access
 class class-default
   police cir 6000000
     conform-action transmit
     exceed-action drop
    shape average 6000000
  service-policy QoS_Levels



interface GigabitEthernet0/0.3
 description ASA
 bandwidth 6000
 encapsulation dot1Q 3
 ip address xxxx
 ip access-group 111 out
 ip accounting output-packets
 ip nbar protocol-discovery
 service-policy output QoS_Internet_Access

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-11-08 at 14:48:39ID24882088
Tags

QoS Traffic Shapping bandwidth management queue router Cisco 2821

Topic

Network Routers

Participating Experts
3
Points
500
Comments
10

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. QOS for voice data on a Cisco 1841 router
    Need to setup QOS on a cisco 1841 router connecting two offices with a full T1 P2P line. I have users at remote location running citrix and just installed VOIP phone system. Now I want to setup QOS to give priority for voice data over other network traffic. What commands d...
  2. Cisco QOS WAN Interface Bandwidth Allocation
    Hi, I have a 2 x Cisco 871 Router that I am configuring to be at either end of a 10mbps leased line. I am using QoS on both routers to guarantee bandwidth to Citrix ICA and VOIP data. My confusion is that the QoS bandwidth is calculating based on the WAN interface max speed...
  3. Cisco QOS Tagging Issue
    I'm implementing QOS on a cisco 2811 router with the following class-maps and policy-maps below. One of the issues I'm having is that its tagging the initial ftp handshake but when the download starts its not tagging the ftp data download under the ftp class, but instead tag...
  4. Cisco 871 QOS over 100mb Leased Line
    Hi, I have a 2 x Cisco 871 Router that I am configuring to be at either end of a 100mbps leased line. I am using QoS on both routers to guarantee bandwidth to Citrix ICA. Strange thing is, is that I'm getting a really poor transfer rate when copying a file from one side o...
  5. h323 voice gateway config
    Hi, I'm trying to configure a 2811 Router as an H323 Voice Gateway in our 7.0 Cluster, but the gateway does not register in Call Manager. Any guidelines on a step by step config of a gateway from scratch. connectivity is not an issue. i tried replicating most config from an ...
  6. VoIP & QoS Issues
    This is an exceedingly long and trouble fraught install, which I will attempt to sum up in short order. The Voice/Data provider for a pair of bonded T1s has neglected to order our circuits in the 'Voice' network, and we have merely been provided with public T1s, which were i...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: predragpetrovicPosted on 2009-11-08 at 16:00:46ID: 25772644

Hi could you please define what exactly are you trying to achieve ?

 

by: ludo_friendPosted on 2009-11-08 at 17:24:43ID: 25772898

you have specified your input service policy as an output service policy on ge0/0.3

interface GigabitEthernet0/0.3
 no service-policy output QoS_Internet_Access
 service-policy input QoS_Internet_Access

your bandwidth command should really be broken up into receive and send on asynchronous connections as well - otherwise your outbound qos policy will be based around 6000k instead of 768k

interface gigabitEthernet0/0.3
 bandwidth 768
 bandwidth receive 6000
 
hope I've helped!
I also find that its better to drop 100kbit or so off the bandwidth command to account  - see how you go on that one first though.

 

by: ludo_friendPosted on 2009-11-08 at 17:26:44ID: 25772905

sorry, didn't finish that sentence off.
I also find that its better to drop 100kbit or so off the bandwidth command to account  - see how you go on that one first though.
--

I also find that its better to drop 100kbit or so off the bandwidth command to account for overhead and errors... 100k might be a little much, play with it a little yourself.. you don't want to be reserving more bandwidth that you can actually use.

 

by: ludo_friendPosted on 2009-11-08 at 17:28:54ID: 25772913

actually - I probably should have checked this first... I'm assuming your network looks something like

[dsl router]
   |
[ASA]
  |
[c2800]
  |
[people]

is this correct?

 

by: ikalmarPosted on 2009-11-08 at 22:09:28ID: 25773676

Please configure input service policy on 2800 inside leg to shape 768Kb/s UP the traffic.....

 

by: John_CzerwinskiPosted on 2009-11-09 at 06:35:04ID: 25776215

Yes, the topology is:
[dsl router]
   |
[ASA]
  |
[c2800] (Gig0/0.3)
  |
[people]

So if I understand this, 6 Mb/s Down should be reflected as the INPUT on Gig0/0.3 and I should have another policy with bandwidth reflecting the 786 Kb/s Up (OUTPUT on the GIG0/0.3)?


What am I trying to acheive?
I'm trying to implement QoS to not have non-business critical traffic consume the entire aDSL line.  The most important traffic is HTTPS (see access-list 99), Exchange, etc.  Everytime someone downloads a file (FTP, sFTP, bit-torrent, eDonkey, etc) it eats up the entire DSL line.

Thanks
-John

 

by: ludo_friendPosted on 2009-11-09 at 15:16:54ID: 25781114

yes, the policy should be INPUT, as its coming IN to the cisco 2811 from the cisco ASA on ge0/0.3. You could also do this with an OUTPUT policy on the interface facing your client pcs.

yes, you should have another policy for the 768k upload, especially if you are running voice. As a bare  minimum I'd run fair queuing on the output service policy, although you should really prioritize your voice traffic

 

by: John_CzerwinskiPosted on 2009-11-10 at 12:45:59ID: 25789631

When I change the service-policy to input, I receive the following: Traffic Shaping feature not supported in input policy.


interface GigabitEthernet0/0.3
 description ASA
 bandwidth 768
 bandwidth receive 6000
 encapsulation dot1Q 3
 service-policy output QoS_DSL_input <-- When I change this to "input" I receive: Traffic Shaping feature not supported in input policy.


policy-map QoS_DSL_input
 class class-default
   police cir 6000000
     conform-action transmit
     exceed-action drop
    shape average 6000000
  service-policy QoS_Levels


 

by: ludo_friendPosted on 2009-11-10 at 18:13:50ID: 25791843

you can only shape what you send, not receive..  you can police what you receive, but not shape.

so your options are these, put the output policy on the interface facing your clients, or put the policy on the interface facing your router on the ASA

 

by: John_CzerwinskiPosted on 2009-11-11 at 08:06:45ID: 25796167

Ok, I've put a policing policy on the input (ASA to Internet).  Can I put in an output on the user side of things as well?  If so, the router has multiple sub-interfaces, one of which is on an internet LAN with servers (Sharepoint, etc).  I'm afraid if I configure for output (786Kb/s which is the upload speed for the DSL) it will choke the 100 Mb/s LAN that the servers are on.

Can I give internal networks 100Mb/s then choke the Internet at 786Kb/s?

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...