Cisco WAN :: QOS Marking Query Of 7206VXR
Nov 2, 2011
We have subscribed for MPLS links from Service provider we have a DC where the core connectivity is 90 MB and Remote branch location Connectivity is 64 Kbps. We are in process of enabling QOS for our links with co-ordination with Service provider ; as per our finding the branches have more RX traffic (downloading) so after discussion with provider we were advised to mark traffic from the core end and give it to the provider.The provider at its PE will honor the marking and set some B/W percentages and prioroty based on the DSCP marking values.
We need to mark this traffic so it is feasible to mark the traffic at the core DC router which has the below H/W details,Cisco 7206VXR (NPE-G2) processor (revision A) with 917504K/65536K bytes of memory.
Processor board ID 36161439
MPC7448 CPU at 1666Mhz, Implementation 0, Rev 2.2
6 slot VXR midplane, Version 2.11
or is it feasible to mark the traffic at the core switch.
View 6 Replies
ADVERTISEMENT
Oct 12, 2012
i'm doing B.E., final year.My project is IP TRACEBACK.so we hav to mark packets in router.Is it possibe to mark packet in cisco packet tracer?
View 1 Replies
View Related
May 17, 2011
1) which DSCP marking to use for ex90s(HD video)?
2) as a test we are planning do to deploy ex90 at few of locations. at location 1 we will do DSCP EF marking while at the other location we will do DSCP AF41 for video..assume, LOC1 calls LOC2: so, when video traffic from LOC1 arrives to LOC2 will it be marked as EF? and when traffic from LOC2 arrives LOC1 then traffic will be marked as AF41? if yes, then will there be any issue sometimes in case if we run out of bandwidth for EF?
View 2 Replies
View Related
Aug 22, 2011
I have a weird issue with a QOS policy that I have implemented. Details are below.
This is basically the policy I have created. It is running on a Cisco 877 router (running Advance IP Services 12.4). The internet connection is an Internode ADSL service.
class-map match-any VOIP
match access-group name VOICE-OUT
!
!
[Code]....
View 14 Replies
View Related
May 29, 2012
I have a Cisco 3725 router with IOS version "Cisco IOS Software, 3700 Software (C3725-ADVIPSERVICESK9-M), Version 12.4(12)". And this router is serving as a CE route for our MPLS connection to the service Provider. We do also have multiple VRFs ( around 10) and the WAN interface is DS3. So we created point-to-point subinterfaces and we put them in different vrfs. We have now transitioned to a new ISP and the ISP requested us to mark all of our outgoing traffics with DSCP AF31. So I have created the following policy-map
policy-map TRAFFIC-OUT-WAN-AF31
class TRAFFIC-OUT-WAN
set ip dscp af31
class-map match-any TRAFFIC-OUT-WAN
match any
Now we do have multiple GRE tunnel interfaces sourced from one of the WAN subinterface ( which is a member of VRF A). So the moment I applied the the policy-map on this WAN sub-interface (using the syntax "service-policy out TRAFFIC-OUT-WAN-AF31"), most of the GRE tunnels went down. And there is eBGP running on top of these GRE tunnels.
View 5 Replies
View Related
Jun 14, 2012
I am running 1.1.24 and spa303 phones I have a qos policy setup to mark all packets
The following is my qos
information 192.168.1.15/24
makring enabled
cos/DSCO DSCO
Value 0xb8
On my upstream device I only allow traffic that is marked with this dscp value. No traffic is coming through. RTP traffic is marked because it comes off the phone marked but I would expect the qos Policy so mark everything going to that ip space to be marked.
View 1 Replies
View Related
Nov 25, 2012
I want to mark traffic on Cisco 3020 switch entering to interface gigabitEthernet 0/1 ingress direction with DSCP values. interface gigabitEthernet 0/1 is in access mode and in vlan 10.
This is my config:
access-list 1 permit host 10.10.1.1
class-map match-all ipclass1
match access-group 1
[Code].....
View 2 Replies
View Related
Feb 20, 2011
My new small router 866vae crashes and makes cold reboots every 20-30 minutes. I updated IOS, but it didn't work. The logs show texts like this:
Possible software fault. Upon reccurence,crashinfo, "show tech" and contact Cisco Technical Support. http serverip http access-class 23ip http authentication localip http secure-serverip http timeout-policy idle 60 life 86400 requests 10000!ip dns serverip nat inside source list 101 interface Dialer0 overload!dialer-list 1 protocol ip permitmac-address-table aging-time 15no cdp run!access-list 23 permit 192.168.1.0 0.0.0.255access-list 101 permit ip 192.168.1.0 0.0.0.255 anyaccess-list 111 permit udp any eq bootps any eq bootpcaccess-list 111 permit tcp any anyaccess-list 111 permit udp any anyaccess-list 111 permit icmp any any echo-replyaccess-list 111 permit icmp any any time-exceededaccess-list 111 permit icmp any any unreachableaccess-list 111 permit icmp any any administratively-prohibitedaccess-list 111 permit icmp any any echoaccess-list 111 permit gre any any!control-plane!!line con 0login localno modem enableline aux 0line vty 0 4access-class 23 inprivilege level 15login localtransport input telnet!scheduler allocate 60000 1000!end
View 10 Replies
View Related
Jul 21, 2012
i did on cisco 2960S switch at user ingress interface. but the marking is not showing in show policy-map interface gig 1/0/10 interface and ACL is not showing any match.
I also had a config reference from 2960S cisco guide.
access-list 103 permit tcp any any eq 80
access-list 104 permit tcp any any eq 23
access-list 105 permit icmp host 172.24.68.4 any
class-map IN_HTTP
match access-group 103
class-map IN_TELNET
match access-group 104(code)
View 1 Replies
View Related
Oct 9, 2011
anyway to implement priority marking on the voice packets on the IP communcicator which installed in a laptop (running Data VLAN in the switch)?
View 1 Replies
View Related
Jan 29, 2012
I have a pair of Nexus 7K's running 5.1(3). I have a handful of edge devices that I need to mark ingress traffic, and need to mark both DSCP and CoS. Right now, I have a working config that marks DSCP appropriately.While that works dor DSCP, the MQC will not allow me to mark both DSCP and COS in the same class, and unlike IOS, it appears that Nexus does not have a default DSCP-to-COS mapping. My understanding is this can be solved using table maps, but I don't see how that can solve my problem in this specific scenario (it appears I can do marking or table-map mutation, but not both?). How I can accomplish both?
View 5 Replies
View Related
Jun 8, 2013
I have a 3750G switch running 12.2(44)SE6 my customer has some Cisco EX90 and ex-Tandberg VC units connected to the switch in a dedicated VLAN 600. The switch is then connected to the WAN router which has its own VLAN 6
From sh mls qos interface x/x/x statistics I can see that the traffic is marked by the VC units as DSCP 34 however when I run this command on the interface to the CE router the marking has been lost.
Similarly in the opposite direction incoming from the CE router I can see the marking coming from across the MPLS ok but when I check the output to the VC unit the marking has been lost.
This would indicate that in the process of routing between VLAN's the DSCP marking has been lost.
how to correct this issue. Because my interfaces are in different VLAN's do I need to VLAN based QoS?
View 3 Replies
View Related
Aug 17, 2011
when using egress netflow (v9) and output marking.
The topologie : Server <-----> R1 1>-----<1 R2 2>----<2 R3
R2 is a 7200 with c7200p-adventerprisek9-mz.124-15.T11.bin What I'm doing :- R2 forwards ping packets from Server to R3. When they arrive on R2, icmp packets are marked with CS3
- I change the DSCP to CS4 on R2 before forwarding packet to R3. I'm using for that an output service-policy on the R2-2 interface like this : interface ATM2/0.36 point-to-point
ip address 192.168.1.1 255.255.255.252
ip flow ingress
ip flow egress
[Code]....
View 3 Replies
View Related
Feb 6, 2013
in switch 2960s ( c2960s-universalk9-mz.122-55.SE5 ) , i want to marking the traffic between two hosts (Data replication), i choose to use " mac access-list" to classify my trafic before apply the policy marking . but did'nt work . c
! my mac ACL
mac access-list extended test
permit host 000a.1a41.aa52 host 000a.1a41.1bc2
!
class-map match-all test
match access-group name test
[code]....
View 4 Replies
View Related
Dec 12, 2011
If i require ACS 5.3 in HA. Do i need to procure two ACS with the add-on licenses?
View 1 Replies
View Related
Feb 8, 2011
i have a query regarding the no. of isakmp policy priority creating..when i create a new policy in ASA 5500 firewall, i get the below error...i assume it will support only 20 nos, where as we can use between 1-65535.. can anyone from cisco confirm it...running version is 8.x & VPN Plus license.Policy limit reached. No more than 20 isakmp policies can be configured.”
View 2 Replies
View Related
Jun 5, 2012
I inherited a PIX 506 with 6.3. I will admit my background is more towards switching/routing. But while I know it is dinosaur, I need to maintain for partner interoperability. I just want to confirm that what I am thinking is correct and inf not how I can correct it.My thought is that since the access-list command doesn't list "eq" at the end, all ports and protocols are allowed?The other thing I am not used to is that the access-list has not id/number included in the command, so I assume that access-group specifies this functionality.
Here is a snippet of the current config:
object-group network Ext_Net network-object 192.168.0.0 255.255.255.255
object-group network Int_Net network-object 10.0.0.0 255.255.240.0
object-group network DNS network-object 192.168.0.254 255.255.255.255 network-object 192.168.0.253 255.255.255.255
object-group network Servers network-object 192.168.0.25 255.255.255.255 network-object 192.168.0.62 255.255.255.255 network-
[code].....
View 2 Replies
View Related
Feb 8, 2011
I am setting up a Linux apache and bind server to test the behaviour of Windows XP,Vista, 7 and Mac OS X.I have setup a apache and bind already and they were tested individually. I used Firefox and IE to access the apache page by type in the IPv6 address and the page was showed correctly. And I have tried to query the AAAA record of a local zone "testing.com" in my Bind server using nslookup and the result is good too.However, it is strange that I cannot get it work if I type in the FQDN "http://testing.com" in Firefox and IE. I tried to capture the IPv6 traffic in Wireshark (Attached in this post) and there are no DNS query when I try to access the page. Is there anything that I have to set to get it work properly?(Actually I have tested the same thing on Mac OS X and Vista too but the result is the same)Below is my Windows 7 network setting and some nslookup query:
C:Usersvmware>ipconfig /all
Windows IP Configuration"
Host Name . . . . . . . . . . . . : vmware-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
[code]....
View 7 Replies
View Related
Aug 22, 2011
I am in the process of planning our new network. Our business is changing from hosting its own data centre, to moving it to a professional facility. We have 120 users, over 100 servers (physical and virtual) and three sites (main premise, data centre, dr site). The new network will connect all three. Our new WAN links are almost ordered. We will be making use of a managed MPLS IP VPN, with a 100M access rate at each site. I am currently focusing on the desing of the network at the main business premise. We have a significant investment in Cisco 2960 & 3750 switches and Fortinet firewall appliances. I plan to re-use these in the design.
Our current LAN is very flat and I want to segment the network. My plan is to create a number of VLANs, enable the Inter VLAN routing on the 3750 and then attach the 3750 to the Fortinet appliance which will provide stateful firewalling and traffic policin based on the VLAN (subnet) addresses. It is important that the traffic be routed as quickly as possible from this site to our prod and dr data centres.The 2960's act as the access layer, the 3750 as the distribution layer. The 2960's will connect via port channels (layer 2) to the 3750's and the VLAN interfaces will be configured on the 3750.
I was then planning on creating a VLAN on the 3750 to connect to the Fortigate appliance with a /29 address to limit the addresses used whilst also providing some flexibility for any future design changes.I want to implement a little security between the VLANs on the 3750 switches. I have a question about this coming up.I then plan to use the Fortigate appliance to do basic traffic policing based on source/destination addresses.
The WAN routers will connect to the Fortinet appliance on a Gigabit copper interface. The WAN routers will run HSRP between themselves and only one router will be active at any one time. The failover will be managed by the Fortigate and Cisco routers.I plan to define those addresses hosted at the other data centres and associate them with the interface associated with the WAN.I will then define the routing on the firewall for the two other data centres through summary routes for each of the sites. We will run static routing from the Cisco 3750 to the Fortigate and Fortigate to WAN router. We have no other networks/sites and won't have any others in the future.
View 25 Replies
View Related
Sep 29, 2011
I have a wireless network with WLC and WCS and ACS integrated for user authentication.Web login has been enabled on the WLC and authentication of Username is done through ACS.
Q1. For specific SSID (TEST) specific username (Tom) is used for authentication,where as Tom cannot be used for authentication for any other SSID.
Q2. Weblogin page pushed by WLC is https on virtual IP 1.1.1.1 want it to be pushed through http protocol.
View 1 Replies
View Related
Aug 27, 2011
We have Cisco 7609 Router and one 6 Mbps link which is on ethernet . When we are trerminating on Gigaethernet of 7609 router it is not coming up. While same link is showing up and working fine on other routers which is having Ethernet interface.
View 1 Replies
View Related
May 29, 2011
I have a Linksys RV042 and I came aceoss the setting " Dynamic IP+Domain Name(FQDN) authentication" setting under the Local Security Gateway type. How this option actually works. I tried googling but couldn't find a proper link.
View 1 Replies
View Related
Mar 2, 2013
Interface Utilization report displays the interface utilization data for each device polled for the Interface Utilization template. The information is presented using the percentage specifier.
For eg its displayed % (Rx Max%,Rx Avg%,RxMin%,
Tx Max%,Tx Avg%,TxMin%)
I wants report should have the data(interface utilization In Bytes of data)Can we display the data instead of the percentage?
View 0 Replies
View Related
Mar 8, 2011
I was unable to telnet in to a SQL server on port 1433 to test the connection from the client PC.the application could connect and this alone verifies it is working on port 1433 for sql.My question is how can a telnet command on a specific port be blocked ?
View 3 Replies
View Related
Sep 23, 2011
I think I know what I'm talking about here, I just need someone to confirm that what I want to do is possible, and the way Im planning on doing it will work..Basically, I have a sky router (sagem model), and the wireless is weak upstairs in my house.So, I have ordered a new access point.What I want to do is keep the same wireless ssid and key etc, so my devices just connect.
View 6 Replies
View Related
May 24, 2011
Is it possible to find out the IP address of a PC connecting via Remote Desktop Connection.Running XP Pro on a network,I have admin rights to the PC's, but no direct access to the servers.Event viewer shows some details, but no IP address.
View 3 Replies
View Related
Dec 10, 2012
I would like to be able to query the dot1dStpPortState obect on the Catalyst 2960-S on our LAN . Im running firmware c2960s-universalk9-mz.122-55.SE2.bin and according to the Cisco SNMP Object Navigator the object is supported (via the BRIDGE-MIB).However when i query using snmpwalk from my workstation :snmpwalk -v 2c -c bic-zua-ro 10.u.y.x 1.3.6.1.2.1.17.2.15.1.3 I receive and error .SNMPv2-SMI::mib-2.17.2.15.1.3 = No Such Instance currently exists at this OID For the sake of comparison, querying our 4700 :snmpwalk -v 2c -c bic-zua-ro 10.u.y.x 1.3.6.1.2.1.17.2.15.1.3 returns (as expected, cropped)
SNMPv2-SMI::mib-2.17.2.15.1.3.1 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.3 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.40 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.67 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.104 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.257 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.258 = INTEGER: 5
SNMPv2-SMI::mib-2.17.2.15.1.3.259 = INTEGER: 5
Is there some special configuration i need to do on our 2960's. The only snmp related settings i can see in the running config is snmp-server community. In this case :
snmp-server community bic-zua-ro RO
View 3 Replies
View Related
Feb 22, 2011
I have a Cisco 7206VXR with NPE-400. The IOS version is 12.4(24)T3. I installed a SA-VAM in the router in slot 6 but getting the following on the console.
AP-Pune-RT#Feb 23 11:16:34.484: %PA-3-NOTSUPPORTED: PA in slot6 (Unknown (type 650)) is not supported on this chassisFeb 23 11:16:34.484: %PA-3-DEACTIVATED: port adapter in bay [6] powered off.Feb 23 11:16:34.584: %PA-2-PABRIDGE: Failed to config bridge for PA 6Feb 23 11:16:35.384: %PA-4-IMPROPER_REMOVAL: Improper removal for slot 6.Feb 23 11:16:35.384: %PA-3-DEACTIVATED: port adapter in bay [6] powered off.Feb 23 11:16:35.468: %CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed connection id=975, sequence number=677864
Is the SA-VAM not supported in the Router 7206VXR?
View 3 Replies
View Related
Apr 21, 2011
Kerio Control with AD, DNS."Failed to send DNS query to server 127.0.0.1: 10049".
View 1 Replies
View Related
Jan 28, 2013
I wanted to know how, if there are any script which will send an alert once a file has reached a destination over an TCP network.
View 3 Replies
View Related
Nov 18, 2012
in my simple network setup, I cannot resolve DNS queries from inside my NATted network. On the router I can ping both IP-addresses and names. Ping from the local machine works for IP-Adresses but not for names. When doing nslookup, addresses are not found and a SERVFAIL message is returned. I use a Cisco ISR 861 Router to connect our local LAN to the Internet (The WAN of the 861 is connected to another DHCP/NAT-Router, which in turn connects to the ISP-Modem). Addresses in the local LAN are DHCP-distributed, the DNS-Servers from my ISP are configured on the Router and the DNS-Information is distributed correctly to my local LAN machines (as I can verify by doing nslookup on Linux).
View 21 Replies
View Related
Oct 30, 2011
I'm looking at a stack of WAP200 and WAP4410N APs. I'd like to use Cacti to track number of associations on each AP.What's the OID I should be querying? Are there multiple OIDs that would correspond to the multiple SSIDs? I'm running 2 SSIDs on all of them, and it would be extra nice to be able to track number of stations on each SSID, though the total number would also be acceptable as well.
View 4 Replies
View Related
Jul 24, 2011
How many routes support 7206VXR with NPE-G2?
View 2 Replies
View Related
