troubleshooting Question

QoS and ACLs

Avatar of orus
orus asked on
Voice Over IPNetwork ArchitectureNetworking Hardware-Other
15 Comments1 Solution949 ViewsLast Modified:
I am trying to see if we are doing QoS to best practices. We use Avaya phones, which tag the traffic themselves. On our Cisco switches, I have trust dscp on every switchport. Is this correct? ( I used the auto voip command as well)

The router is matching on dscp ef and dscp af, but I don't think we need to match on af according to Cisco. Can someone look at the code and let me know if we should be doing something different?

Thank you

ps: All our voice traffic is on 172.16.11.0 subnet. Thats why the ACL is matching on it


class-map match-all CM4-Priority-Apps
 description ***** Priority-Applications Class Map *****
 match access-group 100
class-map match-all CM5-VoIP-RTP
 description *******  Avaya VoIP RTP Class Map  ********
 match access-group 100
class-map match-any VOICE
 match ip precedence 5
 match ip dscp ef
class-map match-any VOICE_SIGNALING
 match ip precedence 3
 match ip dscp af31
class-map match-all CM3-VoIP-Control
 description ********  VoIP Control Class Map  *********
 match access-group 100
!
!
policy-map VOIP_WAN
 class VOICE
  priority percent 40
 class VOICE_SIGNALING
  bandwidth percent 5
 class class-default
  fair-queue
  random-detect
policy-map QoS-Policy
 description ***** Ensured Marking *****
 class CM5-VoIP-RTP
  set ip dscp ef


access-list 100 permit ip 172.16.11.0 0.0.0.255 any
access switch


interface GigabitEthernet1/0/2
 switchport trunk native vlan 10
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 queue-set 2
 priority-queue out
 mls qos trust dscp
 auto qos voip trust
core switch (router connects to this guy)


interface GigabitEthernet4/24
 description **** SL MPLS ROUTER ****
 switchport mode access
 switchport nonegotiate
 service-policy output autoqos-voip-policy
 speed 1000
 duplex full
 qos trust dscp
 auto qos voip trust
 tx-queue 3
   bandwidth percent 33
   priority high
   shape percent 33
 spanning-tree portfast
 spanning-tree bpduguard enable
end
ASKER CERTIFIED SOLUTION
Alex Bahar

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 15 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 15 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros