Cisco Switching/Routing :: 3750E ACL Marked Traffic Are Not In Correct Queue
Apr 22, 2012
We tested a QoS in a Cisco 3750E, IOS: 12.2(58)SE2.Voice traffice in the correct Q without any problem, but all the others traffic the Defualt Q (0), tried to capture the traffic and tcp/udp port are correct.Any thing wrong with my ACL or DSCP - CoS?? ( that ACL works fin on 4500 and 6500) [code]
I have a device which will be sending voice and data packets and is able to mark the packets with DSCP values. Voice, 18 and Data 42.If this was a straight through network, I'd be clear on how to handle this, but.....I will be putting this traffic into a VLAN to isolate it from some other traffic on the network. What is the best way to prioritize this traffic inside the VLAN? Will the Cisco switch look at and respect the DSCP values inside the VLAN and prioritize accordingly inside the VLAN? Or, do I need to do some sort of DSCP to 802.1p mapping? Another option I would be fine with would be mapping the DSCP values for voice and data to two different VLANs and then giving the voice VLAN priority over the data VLAN .... I'm using 3750E switches.
i have a 3560 connecting to a sp with limited bandwidth. i have one interface on the switch whose traffic i do not want to drop. i want this traffic to go into the high priority queue. i am not sure how this should be configured, but here is my best guess and my current qos configuration on the switch:
1. Any reason COS 3 is not marked outbound on this traffic? I'm determining this by doing a wireshark off of interface g8/1. The traffic appears to be marked on the ingress correctly but does not maintain its mark on the egress. I can confirm this with equipment on other Ethernet links in produciton as well as my test port listed in the config below with wireshark.
FYI: Unfortunately with my cards in the 6509 I cannot port mirror and see outbound multicast (determined through a TAC case). Because the STB does not understand tagged traffic I setup the native vlan for it to function. To see the multicast with tags I temporarily remove the native command and do the wireshark to see the multicast. It still shows a COS setting of 0. I will try to attach a capture of a multicast packet.
I ran into this recently with a client of mine. When uploading files (either via FTP or through a shared drive in terminal services) from the site any files larger than 200MB or so would hang in the middle of the upload as the TCP session timed out because the traffic was cut off. I started pulling apart the config on the 2911 edge router to determine what the issue was.
I trace the issue down to this particular policy which was created by CCP: sdmappfwp2p_CCP_LOW (When this policy was removed from the wan interface the issue vanished). The default config of this policy was as follows:
policy-map sdmappfwp2p_CCP_LOW class sdm_p2p_edonkey drop class sdm_p2p_gnutella drop class sdm_p2p_kazaa drop class sdm_p2p_bittorrent drop
I first removed the highlighted drop command from the edonkey class and reapplied the inspection policy to the WAN port and the issue remained resolved!
While this fixed the issue and I was able to block eDonkey traffic with just a simple outgoing ACL to block tcp port 4662 I find it very strange that a eDonkey inspection policy would cause such problems for eDonkey traffic. I know for sure this is the only change made on the router and I'm just scratching my head at what I've found. Is it a bug with NBAR? Mostly I'm just curious as the issue is already resolved.
I need to use cisco 3750E switch on core. I want to know whether BGP is supported on this model or not?Currently i have c3750e-universalk9-mz.150-2.SE/c3750e-universalk9-mz.150-2.SE.bin" preinstalled. and i checked BGP is not supported on this IOS image.
Quick question here. Using 3750E series switches with multiple VLANS configured. These switches serve as our 'core'. I have SVIs configured for the different VLANs and add inbound ACLs in each of the SVIs to control traffic between VLANS. This switch also terminates a P2P Ethernet link which connects to our Colo facility. The port used for this is configured as an L3 port. I noticed today that I was able to send traffic across this L3 link that I thought should have been blocked by an ACL I had in place but it wasn't. So the traffic flowed from a port in say VLAN 20 across this L3 link (assigned with an IP address). Would this traffic flow not cause traffic to be checked against an ACL applied in the inbound direction on the SVI of VLAN 20 (int vlan 20)? Traffic does get checked when routing between SVIs. Why would it not get checked when routing between SVI and L3 interface?
I am in the process of upgrading our network switches and wondering if the .lic file will work with the new software or if I have to rehost for the move to 15.0. Its a remote site and I would like to get some solid info before I pull the trigger.
Also which IOS should I be upgrading to?
c3750e-ipbasek9-mz.150-2.SE.bin or c3750e-universalk9-mz.150-2.SE.bin
have 2 3750's one is an 3750E the other one is a G... Since they are 2 different versions Do I need to correct ios for each for example my 3750E switch i would have
IP BASE c3750e-ipbasek9-mz.122-53.SE2.bin and for my 3750G switch should i use
We're seeing "OutDiscard" error on a LAN switch connected to newly migrated Cisco IP phones. All the other error counters are clean except for the OutDiscard. (please see attached "show int count err" output.) [URL].
According to the link above, the common cause of such discards can be to free up buffer space.(Am I seeing a switch buffer issue?) How to identify/resolve the cause of the OutDiscard.The switch is 3750-E running c3750e-universalk9-mz.122-44.SE6.bin
I am seeing on my 3750E series switches (WS-C3750E-48TD). I have multiple VLANs configured on here, one which is used as a 'workstation' VLAN. I have an inbound ACL applied to the VLAN interface *(int vlan 50 to be exact). This list is admittedly long at roughly 6000 ACE's. Now I just recently installed these switches as they replaced some 4507R switches which we moved to our new centralized DC. Here is the issue I am having. This same ACL was applied to the same VLAN interface on the 4507s when they were doing the work of the 3750s. What I used to be able to do was actually edit the ACL by removing it with no ip access-list extended WS-In and then followed up by the ip access-list extended WS-In ......and the lines I wanted in the ACL. I know I could use the line numbers to edit the ACL but this worked OK for me. When I would do this on the 4507R, the ACL was still applied to the interface but traffic never seemed affected by the removal and re-adding of the ACL. I did this by copying and pasting the ACL into a terminal window. It seemed as though on the 4507 the ACL was not compiled until the entire thing was in loaded in and therefore traffic was not processed by the ACL until the load was done
I have a 3750E stackable swtch and I need to configure neflow on it. Are there any IOS versions that support netflow on the 3750E? Is there any possible to configure netflow on a 3750E? I do not see any netflow commands available on the switch?
I have 3750E swiches with IOS v. 12.2(55)SE3. Couple servers connect to ths switch, after ping of IP this servers I can see mac addresses in mac address table.
For instance: sw1#show mac address-table vlan 20 Mac Address Table -------------------------------------------
Vlan Mac Address Type Ports(code) ---- ----------- -------- -----
When ip generate traffic to this server this mac address appear in table again on shot time (less than 10 seconds).
I had a lot of problems with TCAM table in the past and made changes in SDM ended whit that. But now want to be proactive and anticipate the problems in my TCAM table.
If the my template is "default desktop" they support a number of indirect IPv4 routes of 2k. I wanna know automatically by my management tools if this number reaches 1.9k.
That way I can take corrective actions before the problems starts on my network.
I have a RVS4000 connected to my cable modem which I use as my gateway, the IP address of the RVS is 192.168.3.254
I have a 2811 with 3 subinterfaces of which I can ping all of them from my PC which at the minute is in VLAN 1, the only network that can connect to the outside world is VLAN 1, how can I enable the other 2 vlans to connect to the internet?
My set-up details are
Router
interface FastEthernet0/0.1 description *** Data Network*** encapsulation dot1Q 1 native
After I added the 3rd 3750E to my stack on Sunday I can no longer save my configs with 'copy run start' or 'write mem':
#copy running-config startup-config Destination filename [startup-config]? Building configuration... nv_done: unable to open "flash:/config.text.new" nv_done: unable to open "flash:/private-config.text.new" nv_done: unable to open "flash:/multiple-fs.new"[OK]
I am working on a QoS design which I hope to test at some point, but at this stage its from the books.My question is how to decide which queue and threshold to use for video traffic, then lower priority traffic.I understand the shaping and sharing commands, its the queuing and threshold bit I'm not clear on.The plan is to use the priority-queue for EF marked voice, this will be policed on ingress to provide an upper limit to EF traffic levels, then my second priority traffic will be video. Which queue will get serviced first once the priority queue is empty, and how do I decide which threshold to allocate my video traffic to? The document ion is not at all clear, I want to prioritse my traffic in the following order:
1 voice, use the priority queue 2 video, this to get serviced ahead of data, after voice. 3 interactive data 4 Bulk data 5 Best effort
So Q1 settings are ignored due to priority queue. Q2 gets 70%, Q3 25% etc.Is it as simple as putting video into Q2 T1, then interactive data into Q2 T2, will Q2T1 get a higher priority over Q2 T2 once the PQ is serviced?
We currently have a site with a very simple topology that uses a 3750X switch stack for a collapsed core. Everyday, the users have a conference call and experience poor voice quality.Its not bad when users call from several conference phones, but when everyone calls in on individual phones, there is choppy and almost inaudible voice quality experienced. The voice traffic flow would be as follows: Phone <-> 3750 switch <-> Voice GW We have packet captures showing that RTP packet loss is occuring from the phone to the voice gateway, but none from the voice gateway to the phones. We also have drops in the output queues that match drops on the asics. I can reset the counters and they will be clear until the call, and then they increment significantly during the call. The voice gateway and phones are non-Cisco. The switch stack has 6 switches. We are trusting the DSCP settings on the phones. All the queue drops from the phones are usually in queues 0-3, but all drops on the voice gateway is in queue 0. Below are the QoS settings; they are mostly default and we have not changed any queuing, thresholds, or buffers. Should we specify larger buffers and threshold for a designated queue and send EF traffic to that queue?
MySwitch#sh mls qos QoS is enabled QoS ip packet dscp rewrite is disabled Typical Port GigabitEthernet1/0/4 trust state: trust dscp
We're having some issues with a 3560 CPE. It's uplink is a GE fiber link, customer port is FE RJ45. We see a lot of TX-frames being dropped at the FE port,but none at the GE port. Even when the customer is only at ~50Mbit/s downstream traffic. When customer sending ~50Mbit/s upstream, there are no TX- drops at the GE link. Is this a normal behaviour? From what I know the physical medium shouldn't have any inpact on this since drops occurs in the port- asic, and not in physical transmission.Do the buffer-sizes between GE and FE differ? What could we do to optimize the flow and reduce drops? QoS is set to off and no modifications on the queues have been made on the interfaces.
We are upgrading from 3550 - 3560 switches.On the 3550's we have this on each interface: [code] The 3550's wont accept the wrr-queue commands. How to set these on the 3560's.
I have a 2921 where I am shaping some traffic based on sub net on my lan. I have applied the shaping policy to the lan interface in the outgoing direction.
Topology is as follows: ISP - ASA - ROUTER - LAN Policy map: Policy Map shape-lan [code]....
I am seeing a lot of no-buffer drops on the policy and I am wondering what the best solution is to solve this: Class-map: tc-class (match-any) 8730680 packets, 10803689863 bytes 5 minute offered rate 4453000 bps, drop rate 0 bps [code]....
Should I just be increasing the queue-limit or should I be changing something else?
I've been working on breaking down and understanding the default auto qos configuration on a Cisco 3750 in the hopes of putting together a QoS strategy that will fit our environment. I'm having some difficulty understanding how the "mls qos queue-set output" syntax works.
From another post, at [URL], the author offers the following example and explanation;
How come there is syntax stating "threshold 2" when in the succeeding part the 400 refers to thresshold 1 and threshold 2 again? The syntax 400 400 is, apparently, already referring to thresshold 1 and 2, no?
One one of our Cisco 6509s I've globally enabled QoS and set a port to "trust cos". However when I look at the queueing for that interface, I notice that the receive queue thresholds have not changed to the default.
I'm kind of new to QoS so I'm not sure if I'm missing something.
We are using a Cisco 6509 running 12.2(33)SXI3 using the WS-X6724-SFP card. I thought I'd be seeing the default tail-drop thresholds, but instead I still see the defaults as if QoS were not enabled:
Queueing Mode In Rx direction: mode-cos Receive queues [type = 1q8t]: Queue Id Scheduling Num of thresholds
I am not able to find the exact bug for Cisco 3750E stack - Debug Exception (Could be NULL pointer dereference) Exception (0x2000) error. Closest i can find is CSCsa72400 which only affects ver 12.2(20)SE4.All the stacks (3 switches) are running 12.2(50)SE3, It appears that the switch 1 crashed and reloaded. My hunch is its software but i cant find any related bugs. It could be hardware issue as well ?
What is meaning backup on HSRP statas?There are 5 vlans.The other four vlans aren't backup status.Only one of five vlans display messeages. When I reload Catalyst3750E-1,debug log. [code]
9x3750E stacked switch (WS-C3750E-48PD-SF0) (15.0(1)SE2 C3750E-UNIVERSALK9-M) 2x10Gbe uplinks from EMC NAS
At a basic level, we have found that the 10Gbe uplinks have slow read performance with or without a port-channel configured (2-3 minutes for a 700MB file to desktop from the NAS) We switched back to testing a 1Gbe and the read speed is normal. Another anomaly is Win7 / 2008 machines read speed is fine from the NAS while the 10Gbe uplinks are in production?!
Write speed is great on 10Gbe. Only read speed is affected!! the switch is not reporting anything abnormal. We looked at SMB/SMB2 as another possible cause...
mls qos is enabled on the switch but not sure if this is affecting performance.
Is the ANY config that I need to carry out on the interfaces to get the read speed working as it should for both Win7 and WinXP. (MTU is 1500 throughout the enterprise, NAS included).