Tuesday, January 7, 2020

Marking ja policing

Hardware: VS-SUP2T-10G and WS-X6724-SFP

Topology: pc (192.168.5.10/24) <----> gi1/8 (C6800 192.168.5.1/24) <--> 0/0

Configurations:

object-group ip address some-group host-info 10.10.10.1 192.168.0.0 255.255.0.0 ip access-list extended priority-traffic permit tcp any any eq domain permit udp any any eq domain permit icmp any any echo permit icmp any any time-exceeded permit icmp any any echo-reply permit ip any addrgroup some-group ip access-list extended other-traffic permit ip any any class-map priority-class-mark_in match access-group name priority-traffic class-map other-class-mark_in match access-group name other-traffic policy-map internet_in class priority-class-mark_in set dscp default class other-class-mark_in set dscp CS1 class-map priority-class-mark_out match ip dscp default class-map other-class-mark_out match ip dscp CS1 policy-map internet_out class priority-class-mark_out police cir 80000000 class other-class-mark_out police cir 20000000 interface GigabitEthernet1/8 ip address 192.168.5.1 255.255.255.0 no ip redirects no ip proxy-arp service-policy input internet_in service-policy output internet_out 

What I want to achieve is that traffic that hits access-list priority-traffic should get 80M data rate and traffic that hits access-list other-traffic should get 20M data rate.

What happens now with current configuration is that everything gets 80M data rate. It doesn’t matter what I put in priority-traffic access-list.

I there something obvious that I am missing? This is my first time creating something with dscp-values.

I have created workaround that works with following configuration, but I’m interested to know what’s wrong with my dscp configuration.

class-map match-all priority-class match access-group name priority-traffic class-map match-all other-class match access-group name other-traffic policy-map internet-traffic class priority-class police cir 80000000 class other-class police cir 20000000 interface GigabitEthernet1/8 service-policy output internet-traffic 


No comments:

Post a Comment