Solved

Verifying CISCO Catalyst DSCP Values

Posted on 2009-07-02
22
1,652 Views
Last Modified: 2012-05-07
i am trying a simple test and banging my head against the wall. basically as a test i am trying to mark all http traffic as dscp ef. i realize the priority is overly high etc but basically i dont think the packets are being marked. please look at my config and let me know what i can do to verify this

!
class-map match-any WEB
 match access-group 101
!
!
policy-map WEB
 class WEB
  set ip dscp ef
!
!
interface GigabitEthernet0/6
 description ESX-Team Member 1
 switchport mode access
 no cdp enable
 channel-group 1 mode on
 service-policy input WEB
!
interface GigabitEthernet0/7
 description ESX-Team Member 2
 switchport mode access
 no cdp enable
 channel-group 1 mode on
 service-policy input WEB
!

access-list 101 permit tcp any any eq www

when i do:

PSC-Switch#sh policy-map interface gi0/6
 GigabitEthernet0/6

  Service-policy input: WEB

    Class-map: WEB (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: access-group 101
        0 packets, 0 bytes
        5 minute rate 0 bps

    Class-map: class-default (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any
        0 packets, 0 bytes
        5 minute rate 0 bps

i have read that the command is unsupported, so i am not overly concerned with the fact that the packets are zero. but when i do a:

sh mls qos int gi0/6 stat
sh mls qos int gi0/7 stat

the dscp values for ef are not incremented, even when i send web traffic to and from the port. am i checking it the wrong way or is this not working?

0
Comment
Question by:Baran711
  • 12
  • 10
22 Comments
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24764027
I noticed you have an etherchannel setup.  Did you add the service policy to the port channel interface that was created as a result of the etherchannel setup?
0
 

Author Comment

by:Baran711
ID: 24764083
QoS: policymap is supported on physical, VLAN, and ES interfaces only

while that may be relevant here, this latest attempt was out of desperation. i have tried this on non port channel interfaces with the same result. i am either marking this wrong or trying to verifiy it wrong i think. it hasnt been an isolated incident.
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24764152
I have run into this more than once on routers.  Where I wasn't seeing the traffic that I was supposed to see in qos policies like you have.  It turned out to be IOS related.  If you haven't yet upgrade your IOS to the latest version for the switch.  Just a thought.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:Baran711
ID: 24764213
i am currently running the latest ios. i have similar class maps on the router and they are fine if i do the marking there. not sure why it doesnt mark on the switch though.
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24766215
Hey I think I know what might be your problem.

You did a permit tcp any any eq www

so this is tcp any source any dest with a destination port of 80

But you specified this as an input policy map.  It looks like you have ESX servers there so I am assuming that the web servers are on those ports.

So the traffic you will see coming input will be source of ESX with a SOURCE port of 80 and destination of the client with a destination port of random.  You see what I mean.

You may need to make the acl  tcp any eq www any if my assumptions are correct.
0
 

Author Comment

by:Baran711
ID: 24767968
i tried the new acl, i even currently have access-list 101 permit ip any any

the counters still dont increment! what is so weird si that the dscp ef count is 102 still. i have no clue what the 102 packets were in the first place since i cant make that increase past 102 no matter what i do!
0
 

Author Comment

by:Baran711
ID: 24767996
check this out, according to this none of the interfacs have recieved packets except for the vlan they belong to:

PSC-Switch#sh int stat
Vlan1
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor       8417     661826       3773     639502
             Route cache          0          0          0          0
                   Total       8417     661826       3773     639502
GigabitEthernet0/1
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0        788      50432
             Route cache          0          0          0          0
                   Total          0          0        788      50432
GigabitEthernet0/2
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0          0          0
             Route cache          0          0          0          0
                   Total          0          0          0          0
GigabitEthernet0/3
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0          0          0
             Route cache          0          0          0          0
                   Total          0          0          0          0
GigabitEthernet0/4
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0      18531    1185984
             Route cache          0          0          0          0
                   Total          0          0      18531    1185984
GigabitEthernet0/5
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       1508      96512
             Route cache          0          0          0          0
                   Total          0          0       1508      96512
GigabitEthernet0/6
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       3106     198784
             Route cache          0          0          0          0
                   Total          0          0       3106     198784
GigabitEthernet0/7
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       3106     198784
             Route cache          0          0          0          0
                   Total          0          0       3106     198784
GigabitEthernet0/8
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0        526     207344
             Route cache          0          0          0          0
                   Total          0          0        526     207344
Port-channel1
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0      15452     988928
             Route cache          0          0          0          0
                   Total          0          0      15452     988928
PSC-Switch#
PSC-Switch#
PSC-Switch#
PSC-Switch#
PSC-Switch#sh int stat
Vlan1
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor       8465     664826       3812     645779
             Route cache          0          0          0          0
                   Total       8465     664826       3812     645779
GigabitEthernet0/1
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0        807      51648
             Route cache          0          0          0          0
                   Total          0          0        807      51648
GigabitEthernet0/2
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0          0          0
             Route cache          0          0          0          0
                   Total          0          0          0          0
GigabitEthernet0/3
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0          0          0
             Route cache          0          0          0          0
                   Total          0          0          0          0
GigabitEthernet0/4
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0      18550    1187200
             Route cache          0          0          0          0
                   Total          0          0      18550    1187200
GigabitEthernet0/5
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       1508      96512
             Route cache          0          0          0          0
                   Total          0          0       1508      96512
GigabitEthernet0/6
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       3111     199104
             Route cache          0          0          0          0
                   Total          0          0       3111     199104
GigabitEthernet0/7
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       3111     199104
             Route cache          0          0          0          0
                   Total          0          0       3111     199104
GigabitEthernet0/8
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0        527     207742
             Route cache          0          0          0          0
                   Total          0          0        527     207742
Port-channel1
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0      15472     990208
             Route cache          0          0          0          0
                   Total          0          0      15472     990208
PSC-Switch#

this is my first qos deployment, it just seems fundamentally broken =)
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24768005
What model of switch is this?
0
 

Author Comment

by:Baran711
ID: 24768084
I have tried this on a 3750e and a 2960g.
0
 

Author Comment

by:Baran711
ID: 24768113
is there a debug command that will allow me to see packets with the dscp value? I have seen a lot about setting up qos but very little reg verifying it
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24768184
do this:

show mls qos

qos is disabled by default on a 3750.
0
 

Author Comment

by:Baran711
ID: 24768220
I did enable it. I will get the output for you when I am back at my desk
0
 

Author Comment

by:Baran711
ID: 24769054
ok a few things:
PSC-Switch#sh mls qos
QoS is enabled
QoS ip packet dscp rewrite is enabled

i blew away my qos config and did an autoqos voip cisco phone on the 2 ports. i have the same results here is the relevent config and output. it seems like even ciscos cookie cutter config shows the same results. can anyone verify that the commands i am running to try to show traffic work for them?

autoqos config:

mls qos map policed-dscp  24 26 46 to 0
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue input bandwidth 90 10
mls qos srr-queue input threshold 1 8 16
mls qos srr-queue input threshold 2 34 66
mls qos srr-queue input buffers 67 33
mls qos srr-queue input cos-map queue 1 threshold 2 1
mls qos srr-queue input cos-map queue 1 threshold 3 0
mls qos srr-queue input cos-map queue 2 threshold 1 2
mls qos srr-queue input cos-map queue 2 threshold 2 4 6 7
mls qos srr-queue input cos-map queue 2 threshold 3 3 5
mls qos srr-queue input dscp-map queue 1 threshold 2 9 10 11 12 13 14 15
mls qos srr-queue input dscp-map queue 1 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue input dscp-map queue 1 threshold 3 32
mls qos srr-queue input dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue input dscp-map queue 2 threshold 2 33 34 35 36 37 38 39 48
mls qos srr-queue input dscp-map queue 2 threshold 2 49 50 51 52 53 54 55 56
mls qos srr-queue input dscp-map queue 2 threshold 2 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31
mls qos srr-queue input dscp-map queue 2 threshold 3 40 41 42 43 44 45 46 47
mls qos srr-queue output cos-map queue 1 threshold 3 5
mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 2 4
mls qos srr-queue output cos-map queue 4 threshold 2 1
mls qos srr-queue output cos-map queue 4 threshold 3 0
mls qos srr-queue output dscp-map queue 1 threshold 3 40 41 42 43 44 45 46 47
mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 3 threshold 3 32 33 34 35 36 37 38 39
mls qos srr-queue output dscp-map queue 4 threshold 1 8
mls qos srr-queue output dscp-map queue 4 threshold 2 9 10 11 12 13 14 15
mls qos srr-queue output dscp-map queue 4 threshold 3 0 1 2 3 4 5 6 7
mls qos queue-set output 1 threshold 1 138 138 92 138
mls qos queue-set output 1 threshold 2 138 138 92 400
mls qos queue-set output 1 threshold 3 36 77 100 318
mls qos queue-set output 1 threshold 4 20 50 67 400
mls qos queue-set output 2 threshold 1 149 149 100 149
mls qos queue-set output 2 threshold 2 118 118 100 235
mls qos queue-set output 2 threshold 3 41 68 100 272
mls qos queue-set output 2 threshold 4 42 72 100 242
mls qos queue-set output 1 buffers 10 10 26 54
mls qos queue-set output 2 buffers 16 6 17 61
mls qos


!
class-map match-all AutoQoS-VoIP-RTP-Trust
 match ip dscp ef
class-map match-all AutoQoS-VoIP-Control-Trust
 match ip dscp cs3  af31
!
!
policy-map AutoQoS-Police-CiscoPhone
 class AutoQoS-VoIP-RTP-Trust
  set dscp ef
  police 320000 8000 exceed-action policed-dscp-transmit
 class AutoQoS-VoIP-Control-Trust
  set dscp cs3
  police 32000 8000 exceed-action policed-dscp-transmit
!


interface GigabitEthernet1/0/5
 switchport access vlan 10
 switchport voice vlan 20
 srr-queue bandwidth share 10 10 60 20
 queue-set 2
 priority-queue out
 mls qos trust device cisco-phone
 mls qos trust cos
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQoS-Police-CiscoPhone
!


interface GigabitEthernet1/0/6
 switchport access vlan 10
 switchport voice vlan 20
 srr-queue bandwidth share 10 10 60 20
 queue-set 2
 priority-queue out
 mls qos trust device cisco-phone
 mls qos trust cos
 auto qos voip cisco-phone
 spanning-tree portfast
 service-policy input AutoQoS-Police-CiscoPhone
!

i made a call from phones on port 5 to 6. call goes through fine, here is what i get:

PSC-Switch#sh policy-map int gi1/0/5
 GigabitEthernet1/0/5

  Service-policy input: AutoQoS-Police-CiscoPhone

    Class-map: AutoQoS-VoIP-RTP-Trust (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp ef (46)

    Class-map: AutoQoS-VoIP-Control-Trust (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp cs3 (24) af31 (26)

    Class-map: class-default (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any
        0 packets, 0 bytes
        5 minute rate 0 bps
PSC-Switch#

this really bothers me:

PSC-Switch#sh int gi1/0/5 stat
GigabitEthernet1/0/5
          Switching path    Pkts In   Chars In   Pkts Out  Chars Out
               Processor          0          0       1277      94132
             Route cache          0          0          0          0
                   Total          0          0       1277      94132
PSC-Switch#

i dont understand how there are no packets or characters incomming to that switch port...

oddly enough this command looks right and does increment:

GigabitEthernet1/0/5 (All statistics are in packets)

  dscp: incoming
-------------------------------

  0 -  4 :          15            0            0            0            0
  5 -  9 :           0            0            0            0            0
 10 - 14 :           0            0            0            0            0
 15 - 19 :           0            0            0            0            0
 20 - 24 :           0            0            0            0          100
 25 - 29 :           0            0            0            0            0
 30 - 34 :           0            0            0            0            0
 35 - 39 :           0            0            0            0            0
 40 - 44 :           0            0            0            0            0
 45 - 49 :           0          255            0            0            0
 50 - 54 :           0            0            0            0            0
 55 - 59 :           0            0            0            0            0
 60 - 64 :           0            0            0            0
  dscp: outgoing
-------------------------------

  0 -  4 :         209            0            0            0            0
  5 -  9 :           0            0            0            0            0
 10 - 14 :           0            0            0            0            0
 15 - 19 :           0            0            0            0            0
 20 - 24 :           0            0            0            0           83
 25 - 29 :           0            0            0            0            0
 30 - 34 :           0            0            0            0            0
 35 - 39 :           0            0            0            0            0
 40 - 44 :           0            0            0            0            0
 45 - 49 :           0          254            0            0            0
 50 - 54 :           0            0            0            0            0
 55 - 59 :           0            0            0            0            0
 60 - 64 :           0            0            0            0
  cos: incoming
-------------------------------

PSC-Switch#sh mls qos int gi1/0/5 stat
GigabitEthernet1/0/5 (All statistics are in packets)

  dscp: incoming
-------------------------------

  0 -  4 :          15            0            0            0            0
  5 -  9 :           0            0            0            0            0
 10 - 14 :           0            0            0            0            0
 15 - 19 :           0            0            0            0            0
 20 - 24 :           0            0            0            0          117
 25 - 29 :           0            0            0            0            0
 30 - 34 :           0            0            0            0            0
 35 - 39 :           0            0            0            0            0
 40 - 44 :           0            0            0            0            0
 45 - 49 :           0          356            0            0            0
 50 - 54 :           0            0            0            0            0
 55 - 59 :           0            0            0            0            0
 60 - 64 :           0            0            0            0
  dscp: outgoing
-------------------------------

  0 -  4 :         263            0            0            0            0
  5 -  9 :           0            0            0            0            0
 10 - 14 :           0            0            0            0            0
 15 - 19 :           0            0            0            0            0
 20 - 24 :           0            0            0            0           83
 25 - 29 :           0            0            0            0            0
 30 - 34 :           0            0            0            0            0
 35 - 39 :           0            0            0            0            0
 40 - 44 :           0            0            0            0            0
 45 - 49 :           0          356            0            0            0
 50 - 54 :           0            0            0            0            0
 55 - 59 :           0            0            0            0            0
 60 - 64 :           0            0            0            0
  cos: incoming
-------------------------------

  0 -  4 :          67            0            0          117            0
  5 -  7 :         356            0            0
  cos: outgoing
-------------------------------

  0 -  4 :         387            0            0            0            0
  5 -  7 :         356            0         1482
  output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------
 queue 0:           2           0         356
 queue 1:          32          43        1482
 queue 2:           0           0           0
 queue 3:           0           0         339

  output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------
 queue 0:            0            0            0
 queue 1:            0            0            0
 queue 2:            0            0            0
 queue 3:            0            0            0

Policer: Inprofile:          429 OutofProfile:            0


i may not have a real issue here, it may be a simple case of poor consistancy between the ios sh outputs, hoping somone has run into this before.




0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24769339
I did this same type setup last week on some 3750g switches.  I had esi IP phones.  I ran the auto qos and then had to remove the trust statements as that relies on cdp.  My stats were showing correct.  I did the same thing you did to check it because I wasn't sure if the phones were setting the qos the same way Cisco phones do.   I was using the latest IOS version in an ipbase feature set.  This was just last week.
0
 

Author Comment

by:Baran711
ID: 24772505
I have cisco phones 7975g. are you saying your policy map stats where correct when you did a sh policy-map int? mine def are not. any ideas?
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24772616
Yes the show policy-map int command showed the packets in the correct class maps with qos.  
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24772620
Call TAC
0
 

Author Comment

by:Baran711
ID: 24781060
tac pointed me to this:

http://supportwiki.cisco.com/ViewWiki/index.php/Unable_to_display_QoS_information_at_the_port_level_with_the_show_policy-map_interface_command_in_Catalyst_3750_switch

still doesnt explain why my sh mls qos int are not showing all of the dscp values increasing though.
0
 
LVL 24

Expert Comment

by:Ken Boone
ID: 24781867
Well what does TAC say about the sho mls qos command not showing the stats incrementing?
0
 

Author Comment

by:Baran711
ID: 24782147
still waiting to get a response n that
0
 

Author Comment

by:Baran711
ID: 24868759
please close this, it is a known problem that will be fixed in the next ios release
0
 
LVL 24

Accepted Solution

by:
Ken Boone earned 500 total points
ID: 25704123
My second response indicated that it could be an IOS issue plus I assisted with verifying the configuration which was requested in the ticket.  I spent a lot of time going over this problem to assist.  I also made the suggestion to call TAC once everything was verified. I think points should be awarded.  
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question