troubleshooting Question

Per-Tunnel QoS for DMVPN

Avatar of jamwalk123
jamwalk123 asked on
VPNCiscoNetwork Architecture
2 Comments1 Solution1447 ViewsLast Modified:
Hi
I am trying to implement Per-Tunnel QoS for DMVPN but the spoke part of the config is not accepted on the Cisco 877 Tunnel 0 Interface. does anybody know what software version is required to implement the following command:
Spoke 1:
Conf t
Int Tunnel 0
ip nhrp group **group is not an accepted command**

Below is the config plan I am working to and the 'sh ver' info of the routers that wont accept the 'ip nhrp group' command
Many Thanks,
Jaime

QoS on DMVPN to stop printing from slowing Citrix down
HUB configuration


QoS


class-map citrix-printing
 match access-group name printing

class-map citrix-and-all-other
 match access-group name general

ip access-list extended printing
 permit tcp any any eq 9100
ip access-list extended general
 permit ip any any

*This can be narrowed down to specific ports eg Citrix Ports: UDP 1604 and TCP 1494, Telnet, ping, RDP, file sharing, LDAP, SMTP, POP3, etc…*

policy-map control-printing
 class citrix-printing
 bandwidth percent 20
 class citrix-and-all-other
 bandwidth percent 80

Mapping an NHRP Group to a QoS Policy on the Hub

On hub….

Conf t
Int tunnel 0
ip nhrp map group spoke_print_control service-policy output control-printing
end

Verifying Per-Tunnel QoS for DMVPN
To verify the configuration of Per-Tunnel QoS for DMVPN, perform the steps in this section.
SUMMARY STEPS
1.  enable
2.  show dmvpn detail
3.  show ip nhrp
4.  show ip nhrp group-map [group-name]
5.  show policy-map multipoint [tunnel tunnel-interface-number]
6.  show tunnel endpoints

On the spoke…..

Conf t
Int Tunnel 0
ip nhrp group spoke_print_control
end


doesn’t work on:

SheffHO-DMVPNtest#sh ver    
Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(20)T, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Fri 11-Jul-08 06:08 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

SheffHO-EZVPNtest uptime is 2 weeks, 1 day, 4 hours, 0 minutes
System returned to ROM by power-on
System restarted at 10:53:13 UTC Mon Jul 25 2011
System image file is "flash:c870-advsecurityk9-mz.124-20.T.bin"

Or….

1801-SheffHO#sh ver
Cisco IOS Software, C180X Software (C180X-ADVIPSERVICESK9-M), Version 12.4(11)T, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Sat 18-Nov-06 14:31 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YH8, RELEASE SOFTWARE (fc2)

1801-SheffHO uptime is 8 weeks, 6 days, 18 hours, 8 minutes
System returned to ROM by Reload Command at 20:45:37 UTC Tue Jun 7 2011
System image file is "flash:c180x-advipservicesk9-mz.124-11.t.bin"
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 2 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros