Prioritize TCP/UDP Port 5060 Traffic on Cisco

Our office(s) look like this

LAN --> CAT3550 --> PIX --> Internet

We are looking at hosted VoIP phones and have been tasked with prioritizing port 5060 traffic.  How do I do this?
LVL 20
RPPreacherAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lrmooreCommented:
What version PIX OS do you have?
Anything less than ver 7.x has zero capability to prioritize traffic
Regardless, once the traffic hits the Internet router, all prioritization is lost
0
RPPreacherAuthor Commented:
Agreed on all points; however, the Cat 3550 is a L3 switch and is capable of QoS.

I have never implemented it and am looking for a configuration example.
0
calvinetterCommented:
If you can live with QoS for only the internal subnets, as lrmoore mentioned above, the following URL should get you started.  If you need config specifics, lrmoore or others can help you:

  Configuring QoS (Catalyst 3550, using Enhanced image: IOS 12.1(12c)EA1):
http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a0080115928.html

Note that different models of Catalyst support different QoS features, so what works on one platform won't necessarily work on the 3550, or vice versa.

cheers
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

lrmooreCommented:
Thanks, calvinetter..

I would suggest using the AutoQos features, or download Cisco Network Assistant and use it to configure QoS using SmartPorts.

Just a side note:
QoS only takes effect if and when there is contention on the network.
Assuming that you only have one C3550 switch I seriously doubt that the backplane of that switch is anywhere near even 10% of capacity.
The only place it could possibly have any affect is as it leaves the switch going to another network (like through the Internet to it's hosted home server). Even then, with a 100Mb connection between the switch and the pix, the output queues are never backed up to the extent that it is even possible to prioritize the voip traffic. Every single packet is handed off as fast as it can come in anyway, regardless of how that packet is prioritized. That's kind of like having a 10-lane super highway with 8 cars on it and saying "ok, all Volkswagens have priority on this highway". What good does that do?
I'm not trying to pull your chain or anything else. I'm just a firm believer of not doing anything to any configuration that is not absolutely necessary. I conform to the KISS theology. The simpler the configs and network, the easier it is to troubleshoot.


0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RPPreacherAuthor Commented:
Agree -- however we are an architectural firm.  We move 100MB CAD files moment to moment and during these file accesses our VoIP is CRUSHED.

TAC just responded with a solution, assuming TAC works, I will be awarding the points to lrmoore because he is the page editor and I am an A**kisser...

(just kidding about the reason)
0
calvinetterCommented:
LOL RPPreacher!
0
lrmooreCommented:
Understand! If TAC provides you with a solution, will you post it here for posterity?

Thanks!
0
RPPreacherAuthor Commented:
TAC solution

class-map match-all voip
 match access-group name voip
!
!
policy-map voip
 class voip
  priority <bandwidth_Kbps>
 class class-default
  fair-queue

interface S0/0
 service-policy output voip

ip access-list extended voip
 permit tcp any any eq 5060
 permit udp any any eq 5060
 permit tcp any eq 5060 any
 permit udp any eq 5060 any
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking Protocols

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.