there is something I find strange on C6500 about QoS: C6500 derive an internal DSCP value for it's internal use, but when configuring the qos mapping on output interfaces, only a cos value (I guess, an internal cos value) can be used. Is it a misunderstanding from me, or is it really illogic?
View 2 RepliesThe Cisco 3560 uses a relatively simple classification scheme, assuming you consider only what happens when the forwarding decision has been made. These switches make most internal QoS decisions based on an internal DSCP setting. The internal DSCP is determined when the frame is forwarded. What internal DSCP setting means?
View 5 Replies View RelatedI'm going to start the evaluation of implementing the virtualization of our campus LAN using MPLS.We'll get many inter-VLAN routing domains per VRF on the same LAN infrastructure.The LAN infrastructure is based on C6500 implementing VSS.Do you have experience with this kind of setup?Any known/faced issue that might prevent the setup of MPLS on VSS enabled C6500?
View 4 Replies View Relatedhow is calculated heat dissipation of ethernet modules for c6500? For example, heat dissipation of WS-X6908-10G-2T - 2083.32 BTU/hour.. This heat dissipation of the empty module, without transceivers? Or including all installed transceivers?
View 3 Replies View RelatedMy C6500 is having relatively high CPU (no spikes, but constantly)
I'm under the impression that cef is causing this problem because alot of packets are being processed or send to/from the CPU. [code]
I did a netdr and I can see that the majority of packets going to the CPU are packets for which I have an entry in the CEF table.What can be a reason why those packets don't get hardware switches?I'm running Version 12.2(33)SXH5 - Sup720-10G.
I want to see net flow data.I have configured this command on the c6500.but I can to see data only below...How can I configration ip cache flow on the C6500? what is the problem?
int gi4/31
ip add x.x.x.x
ip route-cache flow
c6500# show ip cache flow
Displaying software-switched flow entries on the MSFC in Module 5:
[code].....
For C6500 chassis, sup-fould like to know the dirrerence between supervisor engiene 720 sup-bootflash and sup-bootdisk?
View 3 Replies View RelatedTrying to migrate the config run on IOS 12.1 to 12.2 ?It seems there's no snmop traps isdn command support on 12.2.
where i can enable trap on ISDN over IOS 12.2 (33) sxj1 running on C6500 chassis?
I am trying to filter ARP answer arriving on a C6500 trunk port, for a specific vlan.Filtering conditions are:
- packet arrive from vlan ID x on the trunk (on only for this vlan ID)
- source MAC address = xx:xx:xx:xx:xx:xx
Thae aim is that the C6500 with never enter into its CAM table this MAC address.I looked at several methos like service policy or vlan filter, but no solution for the moment.
I am getting a very strange problem where 4500 switch is remarking the packet with dscp 1 to 0.
Let me explaint the setup. I have two PCs connected on same switch but on different modules. PC1 is conencted to Gi4/19 and PC2 is connected to
Gi2/43. Both the ports has been configured to trust the dscp. Below are the configuration:
interface GigabitEthernet4/19
switchport access vlan 6
switchport mode access
[Code].....
i did on cisco 2960S switch at user ingress interface. but the marking is not showing in show policy-map interface gig 1/0/10 interface and ACL is not showing any match.
I also had a config reference from 2960S cisco guide.
access-list 103 permit tcp any any eq 80
access-list 104 permit tcp any any eq 23
access-list 105 permit icmp host 172.24.68.4 any
class-map IN_HTTP
match access-group 103
class-map IN_TELNET
match access-group 104(code)
I have a pair of Nexus 7K's running 5.1(3). I have a handful of edge devices that I need to mark ingress traffic, and need to mark both DSCP and CoS. Right now, I have a working config that marks DSCP appropriately.While that works dor DSCP, the MQC will not allow me to mark both DSCP and COS in the same class, and unlike IOS, it appears that Nexus does not have a default DSCP-to-COS mapping. My understanding is this can be solved using table maps, but I don't see how that can solve my problem in this specific scenario (it appears I can do marking or table-map mutation, but not both?). How I can accomplish both?
View 5 Replies View RelatedI've been working on a 3560 that doesn't seem to map dscp values to a new value: mls qos map dscp-mutation ToR1 22 24 to 46
[Code]....
On the router on the other side, I created an acl that matched on dscp 46, but it doesn't match on it. I've tried moving the mutation map to the ingress interface and I've tried setting dscp with a service policy instead of marking COS and using internal dscp. Where is the mutation map supposed to be placed: ingress or egress? Also, I added an entry in the acl on the router to see if I was mapping to dscp 24, and I am:
[Code]....
So it seems like the mutation map is being ignored completely. Any reason why?
I am reading through a QOS Document and they want me to trust the DSCP value from an IP phone (Siemens) but UN trust the PC DSCP value. How can I trust one thing but not the other? I am using a 2960 Cisco switch with IP base IOS.
View 2 Replies View Relatedi have Catalyst2950SI with iOS12.1, connect a wifi-access-point to f1/1(dot1q trunk port),and connect another L2SW to f1/2(dot1q trunk port),and IP phone, MobileCamera connects to wifi-access-point,IP phone has dscp=40 value on its own packet,but MobileCamera doesn't have any dscp value or cos.now, i wanna do QoS by that dscp, So i type as below,
interface 1/1
switchport mode trunk
mls qos trust dscp
interface 1/2
switchport mode trunk
mls qos trust cos
I have a problem with dscp preservation on a WS-C3750X-48 catalyst; in my little diagram, his name will be SW2, so I have this:SW1 <-> SW2 <-> RT1. some phone connected to SW1 mark with dscp EF (46) the voice traffic.The "mls qos" was enabled on SW1 and SWt. The interlink switch ports has the "mls qos trust dscp" option, the phone port and the router port also.And the problem is I can see the dscp marking on the SW2 when I span the voice vlan on this switch but the dscp was removed ( DSCP set to 0) on the router port ( span on the router port for look )If I made also a packet capture on the router RT1, I see the DSCP was effectively reset to zero.If I disable the "mls qos" on SW2, of course all is fine and the dscp was preserved and forwarded to the router. [code]
View 2 Replies View RelatedI am trying to mark http packets from a web server with DSCP ef, but when I am doing a traffic capture all http packets have tos 0x0.I am able to mark UDP and ICMP packets originated from this server, but not any TCP traffic.The web server is in VLAN 20This is my config mls qos ip access-list extended MARK-HTTP-ACL permit tcp host 10.10.10.10 eq www. [code]
View 4 Replies View RelatedI'm working on a catalyst c3750 and for my work i need to prioritize certain streams independent of their bandwith usage.
The streams are the following:
- voice
- video
- data
I created policy maps based on vlans like below:
policy-map VOICE
class class-default
set precedence 5
policy-map VIDEO
[Code]...
i would like to know the possibility to use mls qos trust dscp with service-policy in the IOS ver.12.2(25)SEE2.The specific version is not possible to configure like below.
Cat3750(config-if)#do sh run int f1/0/1
Building configuration...
[code]....
I am begining to work to apply Qos on switchs (C2960 & C6500), and I still have a doubt about the necessity to consider the cos value. I indeed want to apply Qos for ToIP, Video, perhaps create a scavenger class, ans in all cases, I classify my packets with TCP/UDPB port and mark them with DSCP. So is it really necessary to study all the DSCP/CoS mapping problematics ? Is it not possible to make the configurations only on the base of the DSCP field?
View 3 Replies View RelatedWhen configuring QoS on 3750s/3560s, we're mapping packets to particular interface output queues with commands such as: [code] The command to see what's actually being enqueued, dropped, etc. is: [code]
Note that these queues are numbered 0 - 3, and not 1 - 4. We've been assuming that the first queue number in the "mls qos" (i.e., 1) command maps to the first queue (i.e., 0) in the "show mls qos" command.
I have a Nexus 5500 which is the core of our network and we have access layer switches uplinked to it. I know by default the qos markings will be trusted.
1. On a trunk uplink from an access layer switch to the Nexus, I have "mls qos trust dscp". Will the DSCP marking be preserved when it reaches the Nexus?
2. How do I do prioritization of voice traffic on an uplink on Nexus based on DSCP EF?
I have made some test and i noticed that qos input policy does not classify the icmp packet based on their dscp.The "match dscp ef" or "match precedence 5" is not working only the "match protocol icmp" shows hits.
We need to classify the different icmp packets based on dscp ( TOS ) for measurement purpose.CISCO 7200, 12.4.25d and 12.4.20T have a same behavior.
How the dscp-cos or cos-dscp mapping takes place in c892 router? There is no command like "sh mls qos maps" in c892 like we have in c2951 or c3925.
View 3 Replies View RelatedI have lets say a /24 directly connected via a vlan on a C6500 in the network.I'm trying to migrate some servers/devices away from it , however I need to move parts of it away bit by bit ( For example a /32 or a /30 that make up the /24 )Ive tried a direct ip route x.x.x.x 255.255.255.255 y.y.y.y and even a ip route x.x.x.x 255.255.255.255 y.y.y.y 1
Yet it still prefers the directly connected range ( as I pretty much expected. )
Is there any way I get it to prefer a static route over a directly connected?
Have a Rev. B1 w/207NA on Time Warner with a Moto Surfboard SB5150.Working with TiVo's, we've been through hell and back trying to resolve why Multi Room Viewing doesn't seem to want to work - but only one way! The newest TiVo's their Premiere model with HD and all the bells and whistles, it sees the other TiVo and all the other software that can send programs back and forth with it.
I brought on a Series 2, which is an older model that's non HD and has some older software in it. While the Premiere and the other PC's/Software around the building's network can 'see' the Series 2 and it can 'see' the other shared PC's, etc. the thing can't 'see' the Premiere.This has been going on for awhile, I've worked with TiVo Support also to unlock ports, IP addresses and anything else we could think of. Still no luck. Then we had a strange occurance!
The DIR-655 seemed to 'lock up' or disconnect from the Net. One day I was surfing the Now Playing menu in the Series 2 and the other TiVo wasn't showing as usual. I checked it again during a commercial for something totally different and suddenly noticed there it was!! I thought it was weird, so I went out front to check with the person using the main TiVo if they had made any changes or done anything - they hadn't, but did mention their Net connection was gone.
I turned around and looked at the 655's status lights and noticed while all the rest were fine - the WAN/Net status light was totally out. Not a single blink. And then I looked at the Moto cable modem and noticed it's 'activity' light was also totally dormant. I twisted the Moto to get a better look at it and things started working again, I tightened the cable modem cable on the rear and that was it.
From that point on - once again, the front TiVo won't show on the back TiVo! Does every other way, but not that. In our discussions on TiVo we thought it could've been the cable modem firewall or something, but I retested it and this time it had NO effect. Tried not only taking out the cable-cable but the Ethernet cable as well to ensure all were tested. Still didn't now up. What I thought was going on was the 655 had turned into a giant 'Hub', which would've caused the TiVo's to use their old-fashioned Beacon software to 'find' each other. When the 655 software kicked back in from that glitch, the hub setup would've obviously stopped and the 655's software settings would've kicked back in.
I have a complete list of the ports internally that need to be open for those two TiVo's to communicate, but I can't find anything in the 2.07NA GUI (or Help manuals) that tell me how to write a rule to open those ports internally. I wouldn't think there's any internal blocking or firewalling going on (I have it set to allow communications between clients on the internal Net) but there's so many settings in this GUI it makes your head spin!
I am implementing a guest wireless network to work alongside my internal network. The guest network will use the existing switching network and will be separated by VLANs. I have the ASA set so that traffic can get to it and out to the Internet. I can set up a workstation on the same VLAN as my guest network and can route inside my network (strictly doing this for testing purposes). Where I am having problems is with the Catalyst 4506 switches and the ip routing. I had two separate "ip route" statements defined on my switches.
ip route 10.200.2.0 255.255.255.0 10.200.2.254
ip route 0.0.0.0 0.0.0.0 10.100.100.254
I have discovered that the traffic is always following the default route despite the fact that my IP address on my test workstation falls in the 10.200.2.x network. I was looking at documentation and found that it is possible to set up policy-based routing on the core switches. Can you have two "ip route" statements defined like this to segreate traffic or do I have to use PBR for routing (or a combination) in this case? If I define PBR then how does that impact my existing routing? I need to make sure that I can still route the existing traffic while I'm configuring this change.
I have received a sup720-3B from Cisco with an internal 512MB flash(sup-bootdisk). I want to verify what IOS image is on the disk and do not have an spare 6509 chasis. Can I remove the 512 MB flash disk and insert it to my disk0: on my production 6509 with the sup32 that the 720 will repplace and view what is on the disk without corrupting?
View 7 Replies View RelatedI tried to upgrade the IOS on my internal AP and now I am in a reboot cycle. I have tried to manually boot the old and new IOS images from the rommon but neither are working. here is the output I am getting:
ap: dir flash:
Directory of flash:/
2 -rwx 6563840 <date> ap801-k9w7-tar.124-21a.JY.tar
4 drwx 256 <date> ap801-k9w7-mx.124-21a.JA1
152 -rwx 548 <date> env_vars
153 -rwx 2775 <date> cpconfig-ap801.cfg
154 -rwx 2775 <date> back_up.txt
155 -rwx 3763 <date> config.txt
[code]....
I have an 891W router that requires a firmware update to fix a bug wth the internal AP where all you get when accessing it via the CP Express ("Launch Wireless Application", which is just opening another web browser to your AP) is an Enter button. This issue seems to be common so I found a thread, though for the 881W (but same process) where the fix is to update the AP's firmware.
So I downloaded ap801-rcvk9w8-tar.124-21a.JY.tar from cisco.com, set it up in my tftp server, and at the console ran the following from the router:
Router#service-module wlan-ap 0 session <enter>
This brings me to the AP.
I then type in:
InternalAP#archive download-sw /force-reload /overwrite tftp://192.168.0.71/filename.tar <enter>
It seems to go through the process of re-imaging the fw but the end result now after it is done is that I cannot access the ap at all and the hostname has been screwed up. So now when I go to the AP (via Router#service-module wlan-ap 0 session <enter>), this is what I see:
AP6400.f177.d0ee>
If I type "enable", I get no username prompt but I do get a password prompt, however my pw no longer works. Also the IP address of the AP (192.168.0.2=) is no longe rpingable.
I did save the log of the console session for the (failed??) firmware upgrade process - the only odd thing I recall was that it seemed like it was trying to enter part of the update process commands but instead the router was interpreting them as a DNS lookup or something. Kind of stupid process it seems but anyway I am quite lost. Don't know what it'ssuch a challenge to update firmware.
This isn't a big deal as the rest of the ACL works fine, but this is an annoynace since the web auth redirects to our company website (internal for now) after successful login.We have a Cisco WLC that provides access to our production and guest wireless environments. The guest environment of course is in a separate vlan (10.10.50.0/24). So I created this ACL:
access-list 107 permit udp any host 10.10.2.13 eq bootpc <----internal DHCP server
access-list 107 permit udp any host 10.10.2.13 eq bootps
access-list 107 deny ip any 10.10.0.0 0.0.255.255 <---all internal networks
access-list 107 deny ip any 172.28.16.0 0.0.0.255 <----DR Network
access-list 107 permit ip any any
int vlan 50
Desc "Guest wireless network"
ip access-group 107 in
This ACL basically gives the wireless guests access to an internal DHCP server and full access to the internet. For the 10.10.50.0/24 scope, the DHCP server assigns Internet DNS servers and my rationale is that wireless clients would access it via the external IP address but I suppose it doesn't work quite like that with the website being behind the same router as the client machines.
I have an internal DVR system that I am trying to share to the outside world. We recently put in an ASA5505 and I am having trouble getting the settings correct.I want to use an external IP to access the DVR system from anywhere and have my ASA5505 redirect the traffic to the internal IP address. I assume I need to use a NAT and a route policy however can not figure out how it would be.
View 11 Replies View Relatedi cant resolve one problem in may 1921 isr router, i have a web server in my internal lan , i set up static nat for accessing that web server from outside and it woks fine but i cannot view that site from internal workstations can you suggest me what to do. as i know when request gets to router it performs static nat and sends packet to the web server, but the server responds with its private source address instead the public address witch workstation expects and connection cannot established.
View 3 Replies View Related