Qos Lab Guide

Transcript

QOS Implementing Cisco Quality of Service Version 2.2 Lab Guide Editorial, Production, and Graphic Services: 06.28.06 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 European Headquarters Cisco Systems International BV Haarlerbergpark Haarlerbergweg 13-19 1101 CH Amsterdam The Netherlands www-europe.cisco.com Tel: 31 0 20 357 1000 Fax: 31 0 20 357 1100 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA www.cisco.com Tel: 408 526-7660 Fax: 408 527-0883 Asia Pacific Headquarters Cisco Systems, Inc. 168 Robinson Road #28-01 Capital Tower Singapore 068912 www.cisco.com Tel: +65 6317 7777 Fax: +65 6317 7799 Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed on the Cisco.comWebsiteatwww.cisco.com/go/offices. Argentina • Australia • Austria • Belgium • Brazil • Bulgaria • Canada • Chile • China PRC • Colombia • Costa Rica • Croatia • Cyprus • Czech Republic • Denmark • Dubai, UAE • Finland • France • Germany • Greece • Hong Kong SAR • Hungary • India • Indonesia • Ireland Israel • Italy • Japan • Korea • Luxembourg • Malaysia • Mexico • The Netherlands • New Zealand • Norway • Peru • Philippines Poland • Portugal • Puerto Rico • Romania • Russia • Saudi Arabia • Scotland • Singapore • Slovakia • Slovenia • South Africa Spain • Sweden • Switzerland • Taiwan • Thailand • Turkey • Ukraine • United Kingdom • United States • Venezuela • Vietnam • Zimbabwe © 2006 Cisco Systems, Inc. All rights reserved. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0601R) DISCLAIMER WARRANTY: THIS CONTENT IS BEING PROVIDED “AS IS.” CISCO MAKES AND YOU RECEIVE NO WARRANTIES IN CONNECTION WITH THE CONTENT PROVIDED HEREUNDER, EXPRESS, IMPLIED, STATUTORY OR IN ANY OTHER PROVISION OF THIS CONTENT OR COMMUNICATION BETWEEN CISCO AND YOU. CISCO SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE. This learning product may contain early release content, and while Cisco believes it to be accurate, it falls subject to the disclaimer above. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. QOS Lab Guide Overview This guide presents the instructions and other information concerning the activities for this course. You can find the solutions in the lab activity Answer Key. Outline This guide includes these activities: „ Case Study 2-1: QoS Mechanisms „ Lab 2-1: QoS Lab Setup and Initialization „ Lab 2-2: Baseline QoS Measurement „ Lab 3-1: Configuring QoS with AutoQoS „ Case Study 4-1: Classification and Marking „ Lab 4-1: Classification and Marking Using MQC „ Lab 4-2: Classification Using NBAR „ Lab 4-3: Configuring QoS Preclassify „ Lab 4-4: LAN-Based Packet Classification and Marking „ Lab 5-1: Configuring Basic Queuing „ Lab 5-2: Configuring LLQ „ Lab 5-3: Configuring Queuing on a Catalyst Switch „ Case Study 6-1: WRED Traffic Profiles „ Lab 6-1: Configuring DSCP-Based WRED „ Lab 7-1: Configuring Class-Based Policing „ Lab 7-2: Configuring Class-Based Shaping „ Lab 8-1: Configuring Class-Based Header Compression „ Lab 8-2: Configuring LFI The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Case Study 2-1: QoS Mechanisms This case study enables you to practice the skills and knowledge learned in the modules “Introduction to QoS” and “The Building Blocks of QoS.” Activity Objective In this activity, you will correctly identify which QoS mechanisms can be used, and where QoS mechanisms should be applied to the network to implement an administrative QoS policy. After completing this activity, you will be able to meet these objectives: „ Review customer QoS requirements „ Identify QoS service class requirements „ Identify where QoS mechanisms should be applied to the network to meet customer requirements „ Present a solution to the case study Visual Objective The figure illustrates what you will accomplish in this activity. Visual Objective for Case Study 2-1: QoS Mechanisms 1. Review customer QoS requirements. Completely read the customer requirements provided. 2. Identify QoS service class requirements. With the aid of your partner, identify the service classes required to implement the administrative QoS policy based on customer requirements. 3. Identify network locations where QoS classification and marking should be applied. Identify locations in the network where the QoS classification and marking mechanisms should be applied to properly implement the administrative QoS policy. 4. Present your solution. After the instructor presents a solution to the case study, present your solution to the class with your partner. © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—2 Required Resources These are the resources and equipment required to complete this activity. 2 „ Case Study Activity: QoS Mechanisms „ A workgroup consisting of two learners Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Apply QoS Mechanisms This case study activity provides information regarding the QoS administrative policy requirements of a large, multisite network. Your task is to work with a partner to evaluate the QoS requirements, and based on the requirements, identify where QoS mechanisms should be applied. You will discuss your solution with the instructor and other classmates, and the instructor will present a solution for the case study to the class. Task 1: Apply QoS Mechanisms Step 1 Review customer QoS requirements. Company Background Nuevo Health Care Systems (NHCS) provides health care information to health care professionals in ten major regions of the country. Customer Situation The NHCS network currently has limited bandwidth capacity in its WAN links, and the company does not envision being able to increase bandwidth in the near future. All ten remote sites (two are pictured in the network illustration) connect to the central site through a service provider through a Frame Relay, Layer 2, 768-kbps link service. The NHCS headquarters site also connects to the service provider via a Frame Relay, Layer 2, and 768-kbps link. NHCS LAN bandwidth is 10 Mbps. NHCS connects to the Internet through its headquarters site. Since the installation of a new IP telephony system, NHCS has been encountering the following increasingly serious problems with their network: „ Users of the ERP applications have been complaining of unacceptable response times. Their subsecond response time has now stretched to multiple seconds in many cases and up to a minute in some cases. „ Key patient information files that used to arrive almost instantly are now taking 10 to 15 minutes to be transferred from headquarters to users at the remote sites. (These are moderate sized, mostly text files.) „ Patient graphics files (x-rays, MRIs) that used to take 20 to 30 minutes to transfer between the remote sites and headquarters now often have to be transferred overnight. (This is acceptable because these files are usually not needed immediately and tend to be extremely large graphics files.) „ Users of the new IP telephony devices are the most upset. The quality of their calls is very poor, and their calls often just drop. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 3 Nuevo Health Systems Applications © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—3 The key applications running on NHCS network are shown in the figure. Nuevo Health Care Systems Network n Device number on Problem Spreadsheet © 2006 Cisco Systems, Inc. All rights reserved. 4 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. QoS v2.2—4 © 2006 Cisco Systems, Inc. Device Number Device Type 1 IP Phone 2 LAN switch 3 Customer edge router 4 Service provider router Step 2 Identify QoS service class requirements. Given the NHCS network as described, how would you recommend classifying network traffic? Traffic Classification and Prioritization Type of Traffic (Application) Step 3 Traffic Priority (Rank from 1 to 5) Identify network locations where QoS mechanisms should be applied. Given the NHCS network as described, how would you recommend deploying QoS mechanisms? Check each box (X) where you believe that QoS mechanisms could be applied to effectively resolve QoS problems at NHCS. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 5 Where to Apply QoS Mechanisms: Classification and Marking Device No. Network Device Interface 1 IP Phone—Interface to workstation 1 IP Phone—Interface to switch 2 Switch—Interface to IP Phone 2 Switch—Interface to customer edge router 3 Customer edge router— Interface to switch 3 Customer edge router— Interface to WAN (service provider router) 4 Service provider router— Interface to customer edge router Classification on Input Classification on Output Marking on Input Marking on Output Where to Apply QoS Mechanisms: Congestion Management and Avoidance Device No. 6 Network Device Interface 2 Switch—Interface to IP Phone 2 Switch—Interface to customer edge router 3 Customer edge router— Interface to switch 3 Customer edge router— Interface to WAN (service provider router) 4 Service provider router— Interface to customer edge router Congestion Management on Input Congestion Management on Output Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Congestion Avoidance on Input Congestion Avoidance on Output © 2006 Cisco Systems, Inc. Where to Apply QoS Mechanisms: Traffic Policing and Traffic Shaping Device Network Device Interface No. 2 Switch—Interface to IP Phone 2 Switch—Interface to customer edge router 3 Customer edge router—Interface to switch 3 Customer edge router—Interface to WAN (service provider router) 4 Service provider router—Interface to customer edge router Traffic Policing on Input Traffic Policing on Output Traffic Shaping on Input Traffic Shaping on Output Where to Apply QoS Mechanisms: Link Efficiency Device Network Device Interface No. 2 Switch—Interface to IP Phone 2 Switch—Interface to customer edge router 3 Customer edge router—Interface to switch 3 Customer edge router—Interface to WAN (service provider router) 4 Service provider router— Interface to customer edge router Step 4 Compression on Input Compression on Output LFI on Input LFI on Output Present your solution. Together with your partner, present your solution to the class. Include the following information: „ Customer service class requirements „ Network diagrams indicating where classification and marking should be applied „ Justification for differences from the solution presented by the instructor Activity Verification You have completed this activity when the instructor has verified your case study solution and you have justified any major deviations from the solution supplied by the instructor. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 7 Case Study 2-1 Answer Key: QoS Mechanisms Your case study discussion and solution should include: „ Traffic classification and prioritization „ Location of QoS mechanisms for — Classification and marking — Congestion management and avoidance — Link efficiency Traffic Classification and Prioritization Type of Traffic (Application) Traffic Priority IP Telephony Highest—1 ERP High—2 Patient information files Moderate—3 Patient graphics files Low—4 Browser traffic Low—4 Where to Apply QoS Mechanisms: Classification and Marking Device Network Device Interface Classification on Input 1 IP Phone—Link to workstation X 1 IP Phone—Link to switch X 2 Switch—Link to IP Phone X 2 Switch—Link to customer edge router X 3 Customer edge router—Link to switch X 3 Customer edge router—Link to WAN (service provider router) X 4 Service provider router—Link to customer edge router X No. Note 8 Classification on Output Marking on Input Marking on Output X* No, trusted* *The IP Phone will normally be set to re-mark any traffic coming from its downstream workstation (the IP Phone connection to the workstation is “untrusted”). The switch will not re-mark traffic coming from the IP Phone (traffic from the IP Phone is “trusted”). Further explanation of “trusted” and “untrusted” interfaces is provided in the “Classification and Marking” module of this course. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Where to Apply QoS Mechanisms: Congestion Management and Avoidance Device No. Network Device Interface Congestion Management on Input Congestion Management on Output Congestion Avoidance on Input Congestion Avoidance on Output 2 Switch—Link to IP Phone X 2 Switch—Link to customer edge router X 3 Customer edge router— Link to switch X 3 Customer edge router— Link to WAN (service provider router) X Possible 4 Service provider router—Link to customer edge router X Possible Possible Where to Apply QoS Mechanisms: Traffic Policing and Traffic Shaping Device Network Device Interface Traffic Policing on Input 2 Switch—Link to IP Phone X 2 Switch—Link to customer edge router 3 Customer edge router—Link to switch 3 Customer edge router—Link to WAN (service provider router) 4 Service provider router—Link to customer edge router No. Traffic Policing on Output Traffic Shaping on Input Traffic Shaping on Output X Possible X © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Possible Lab Guide 9 Where to Apply QoS Mechanisms: Link Efficiency Device Network Device Interface No. Compression on Output 2 Switch—Link to IP Phone 2 Switch—Link to customer edge router 3 Customer edge router—Link to switch 3 Customer edge router—Link to WAN (service provider router) X 4 Service provider router—Link to customer edge router X Note 10 Compression on Input LFI on Input LFI on Output X X Because this is a Frame Relay network, the service provider will pass frames through transparently without compressing or fragmenting the frames. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 2-1: QoS Lab Setup and Initialization Complete this lab activity to practice what you learned in the modules “Introduction to QoS” and “The Building Blocks of QoS.” Activity Objective In this activity, you will prepare your student workgroup for the lab practice exercises that accompany the Implementing Cisco Quality of Service (QOS) v2.2 course. After completing this activity, you will be able to meet these objectives: „ Configure your workgroup routers for basic network connectivity „ Configure your workgroup switch for basic network connectivity „ Verify network connectivity using the Cisco IOS tools: ping and traceroute Visual Objective The figures illustrate what you will accomplish in this activity. The lab topology for the course is split into a number of workgroups and three separate backbones. Each workgroup is designated to service two students and has been designed to interface with two traffic generation backbones named “Traffic Gen 1” and “Traffic Gen 2” and a shared provider backbone named “Provider.” Visual Objective for Lab 2-1: QoS Lab Setup and Initialization © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—5 The figure shows the physical topology of a single workgroup and its connectivity into the three lab backbones. Each workgroup consists of two user-controlled Cisco 2610XM routers © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 11 and one user-controlled Cisco 2950T-24 workgroup switch. Each student workgroup connects to each backbone as shown in the figure. Although depicted as two different workgroup switches in the “Logical Lab Backbone” figure, each student workgroup consists of a single workgroup switch configured to support two different virtual LANs. In this figure, the single workgroup switch has been depicted as two different switches to simplify the diagram only. Notice that the same name has been used to identify the Cisco 2950T, indicating that it is, in fact, the same device. Traffic for each pod can bypass the high-speed service provider backbone (using the slow 384kbps link) or travel via the high-speed provider backbone itself (using the fast 768-kbps serial link). Traffic flow through both the slow and fast serial links will be tested in the QoS labs. In this figure, the logical topology configuration of each workgroup and the devices contained within each of the three lab backbones is shown. In the Provider Backbone in the figure, each of the backbone routers (SPNorth and SPSouth) contains a serial connection to each workgroup. The QoS lab uses the two routers called Pagent-1 and Pagent-2 to generate traffic from different applications, including SQL, Napster, FTP, Citrix, HTTP, Microsoft Outlook, and Kazaa. The two routers called Callgen-1 and Callgen-2 are used in the lab to generate (G.711) VoIP traffic. Note 12 The SPNorth router, the SPSouth router, the core switch, and the traffic generation routers (Pagent-1, Pagent-2, Callgen-1, and Callgen-2) are preconfigured and managed by the instructor. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Logical Lab Backbone Topology © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—6 Each Pagent and Callgen router is set up with connections to eight VLANs (one for each lab workgroup) as follows: „ Pagent-1 and Callgen-1 are configured with VLANs 11 to 18. „ Pagent-2 and Callgen-2 are configured with VLANs 21 to 28. Traffic flow to and from the Pagent and Callgen lab routers is designed to traverse the network through each workgroup as follows: „ Pagent-1 and Callgen-1 (VLAN 11) send traffic to Pagent-2 and Callgen-2 (VLAN 21) via pod 1. „ Pagent-1 and Callgen-1 (VLAN 12) send traffic to Pagent-2 and Callgen-2 (VLAN 22) via pod 2. „ Pagent-1 and Callgen-1 (VLAN 13) send traffic to Pagent-2 and Callgen-2 (VLAN 23) via pod 3. „ Pagent-1 and Callgen-1 (VLAN 14) send traffic to Pagent-2 and Callgen-2 (VLAN 24) via pod 4. „ Pagent-1 and Callgen-1 (VLAN 15) send traffic to Pagent-2 and Callgen-2 (VLAN 25) via pod 5. „ Pagent-1 and Callgen-1 (VLAN 16) send traffic to Pagent-2 and Callgen-2 (VLAN 26) via pod 6. „ Pagent-1 and Callgen-1 (VLAN 17) send traffic to Pagent-2 and Callgen-2 (VLAN 27) via pod 7. „ Pagent-1 and Callgen-1 (VLAN 18) send traffic to Pagent-2 and Callgen-2 (VLAN 28) via pod 8. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 13 The logical configuration of each of these VLANs is as follows: Lab VLAN Logical Address Assignments Workgroup Pod VLANs Assigned IP Subnets 1 11 and 21 10.1.1.0/24 (VLAN 11) and 10.3.1.0/24 (VLAN 21) 2 12 and 22 10.1.2.0/24 (VLAN 12) and 10.3.2.0/24 (VLAN 22) 3 13 and 23 10.1.3.0/24 (VLAN 13) and 10.3.3.0/24 (VLAN 23) 4 14 and 24 10.1.4.0/24 (VLAN 14) and 10.3.4.0/24 (VLAN 24) 5 15 and 25 10.1.5.0/24 (VLAN 15) and 10.3.5.0/24 (VLAN 25) 6 16 and 26 10.1.6.0/24 (VLAN 16) and 10.3.6.0/24 (VLAN 26) 7 17 and 27 10.1.7.0/24 (VLAN 17) and 10.3.7.0/24 (VLAN 27) 8 18 and 28 10.1.8.0/24 (VLAN 18) and 10.3.8.0/24 (VLAN 28) Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for the QoS course „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ 14 — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Command List The table describes the commands used in this activity. QoS Course Lab Setup and Initialization Lab Router Commands Command Description hostname name Specifies or modifies the host name enable secret password Configures the password for users to enter enable mode interface interface-id Enters interface configuration mode and the physical interface identification [no] ip address ip-address mask Sets a primary or secondary IP address for an interface clock rate bps Configures the clock rate for the hardware connections on serial interfaces bandwidth kbps Sets and communicates to higher-level protocols the current bandwidth value for an interface encapsulation encapsulationtype Sets the encapsulation method used by the interface show ip interface [brief] [type] [number] Lists a summary of interface IP information and status router ospf process-id Configures an OSPF routing process network ip-address wildcardmask area area-id Defines the interfaces on which OSPF protocol runs and defines the area ID for those interfaces show ip ospf neighbor Displays OSPF-neighbor information on a per-interface basis shutdown Disables an interface copy running-config startupconfig Saves your entries in the configuration file QoS Course Lab Setup and Initialization Lab Switch Commands Command Description hostname name Specifies or modifies the host name enable secret password Configures password for users to enter enable mode interface interface-id Enters interface configuration mode and the physical interface identification show ip interface [brief] [type] [number] Lists a summary of interface IP information and status show interfaces [interfaceid] Displays the administrative and operational status of all interfaces or a specified interface copy running-config startupconfig Saves your entries in the configuration file © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 15 Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor Task 1: Configure Routers and Switch and Verify Connectivity You will configure your workgroup routers for basic network connectivity. Activity Procedure Complete these steps: Step 1 Step 2 Step 3 Note 16 Configure the host name and passwords on both of the workgroup routers in your assigned workgroup pod as shown in this table (where x is your assigned workgroup pod number). Host Name Enable Secret Password VTY Login Password WGxR1 cisco cisco WGxR2 cisco cisco Configure the IP address on the S0/0, S0/1, and Fa0/0 interfaces of the workgroup routers in your assigned workgroup pod as shown in this table. Interface WGxR1 WGxR2 Fa0/0 10.1.x.1/24 10.3.x.2/24 S0/0 10.2.x.1/24 10.2.x.2/24 S0/1 10.4.x.1/24 10.5.x.2/24 Configure the clock rate on the S0/0 serial interface of your WGxR1 router to 384 kbps. Interface WGxR1 S0/0 clock rate S0/0 384000 bps In the service provider backbone, each of the backbone routers (SPNorth, SPSouth) contains a serial connection to each workgroup router. The “Sy/x” table lists the IP addressing requirements of these connections. Both service provider routers are the data DCE with the clock rate configured by the instructor as 768 kbps. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Sy/x SPNorth IP Address SPSouth IP Address S0/0 – to pod 1 10.4.1.100 10.5.1.100 S0/1 – to pod 2 10.4.2.100 10.5.2.100 S0/2 – to pod 3 10.4.3.100 10.5.3.100 S0/3 – to pod 4 10.4.4.100 10.5.4.100 S1/0 – to pod 5 10.4.5.100 10.5.5.100 S1/1 – to pod 6 10.4.6.100 10.5.6.100 S1/2 – to pod 7 10.4.7.100 10.5.7.100 S1/3 – to pod 8 10.4.8.100 10.5.8.100 Step 4 Configure the S0/0 and S0/1 serial interfaces of your workgroup routers for PPP encapsulation and set the bandwidth to match the clock rate configured in Step 3 of this lab exercise. Step 5 Administratively enable the S0/0, S0/1, and Fa0/0 interfaces on both of your workgroup routers and verify that these interfaces are all in the “up” state (administratively up, line protocol up). If the Fa0/0 interface is down, log in to your workgroup switch to ensure that the switch port is also administratively enabled. WGxR1#show ip interface brief Interface FastEthernet0/0 Serial0/0 Serial0/1 Virtual-Access1 IP-Address 10.1.x.1 10.2.x.1 10.4.x.1 unassigned OK? YES YES YES YES Method NVRAM NVRAM NVRAM unset Status up up up up Protocol up up up up Method NVRAM NVRAM NVRAM unset Status up up up up Protocol up up up up WGxR2#show ip interface brief Interface FastEthernet0/0 Serial0/0 Serial0/1 Virtual-Access1 Step 6 IP-Address 10.3.x.2 10.2.x.2 10.5.x.2 unassigned OK? YES YES YES YES Configure an OSPF routing process on your workgroup routers and place the S0/0, S0/1, and Fa0/0 interfaces into OSPF area 0. router ospf 1 network 10.0.0.0 0.255.255.255 area 0 Step 7 Verify that both OSPF neighbors of your workgroup routers are in the “FULL” state. Each of your workgroup routers should have a “FULL” neighbor relationship to the service provider router and to the other workgroup router in your pod. WGxR1#show ip ospf neighbor Neighbor ID 10.10.10.100 10.5.x.2 Pri 0 0 State FULL/FULL/- Dead Time Address 00:00:37 10.4.x.100 00:00:36 10.2.x.2 Interface Serialy/z Serial0/0 WGxR2#show ip ospf neighbor Neighbor ID Pri State Dead Time Address © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Interface Lab Guide 17 10.10.10.200 10.4.x.1 0 0 FULL/FULL/- 00:00:31 00:00:33 10.5.x.100 10.2.x.1 Serialy/z Serial0/0 Step 8 Verify that the serial ports on both of your workgroup routers (WGxR1 and WGxR2) have their queuing strategy set to WFQ. Step 9 Configure the host name and password on the workgroup switch in your assigned workgroup pod as shown in this table. Host Name Enable Secret Password WGxS1 cisco Activity Verification You have completed this task when you attain this result: „ You have configured your workgroup routers for basic network connectivity. Task 2: Configure Workgroup Switch for Connectivity You will configure your workgroup switch for basic network connectivity. Activity Procedure Complete these steps: Step 1 From the global configuration mode, configure the VTP domain name and mode, and VLANs 1x and 2x on your workgroup switch. vtp domain qos vtp mode transparent ! vlan 1x name vlan1x vlan 2x name vlan2x ! end Step 2 Configure 802.1Q trunking and access ports on the workgroup switch by configuring the Fa0/1, Fa0/2, and Fa0/3 interfaces of your workgroup switch as follows: „ Fa0/1 is an 802.1Q trunk connected to the core switch. Only VLANs 1x and 2x should be allowed on the trunk. „ Fa0/2 should be an access port in VLAN 1x connected to the WGxR1 router. „ Fa0/3 should be an access port in VLAN 2x connected to the WGxR2 router. interface FastEthernet0/1 description - to core sw switchport trunk allowed vlan 1x,2x switchport mode trunk no ip address ! interface FastEthernet0/2 description - to WGxR1 switchport access vlan 1x switchport mode access no ip address ! 18 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. interface FastEthernet0/3 description - to WGxR2 switchport access vlan 2x switchport mode access no ip address Step 3 Verify that the Fa0/1, Fa0/2, and Fa0/3 interfaces on the workgroup switch are all up. Administratively enable any interfaces in the shutdown state. WGxS1#sh ip int brief Interface Protocol Vlan1 FastEthernet0/1 FastEthernet0/2 FastEthernet0/3 FastEthernet0/4 IP-Address unassigned unassigned unassigned unassigned unassigned OK? YES YES YES YES YES Method manual unset unset unset unset Status administratively down down up up up up up up down down [rest omitted] Note Step 4 In the lab, there is no requirement to ping to or from the workgroup switch. The workgroup switch will not need an IP address configured on Interface VLAN 1 and will not need an IP default gateway configuration. From your WGxS1 switch, use the show interface fa0/x switchport command to verify that the Fa0/1 interface 802.1Q trunking is on and only allow VLANs 1x and 2x on the trunk. WGxS1#sh int fa 0/1 switchport Name: Fa0/1 Switchport: Enabled Administrative Mode: trunk Operational Mode: trunk Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: On Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Administrative private-vlan host-association: none Administrative private-vlan mapping: none Operational private-vlan: none Trunking VLANs Enabled: 1x,2x Pruning VLANs Enabled: 2-1001 Protected: false Voice VLAN: none (Inactive) Appliance trust: none Step 5 Verify that the Fa0/2 interface is in VLAN 1x. WGxS1#sh int fa 0/2 switchport Name: Fa0/2 Switchport: Enabled Administrative Mode: static access Operational Mode: static access Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: native Negotiation of Trunking: Off Access Mode VLAN: 1x (VLAN001x) Trunking Native Mode VLAN: 1 (default) Administrative private-vlan host-association: none Administrative private-vlan mapping: none Operational private-vlan: none Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Protected: false © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 19 Voice VLAN: none (Inactive) Appliance trust: none Step 6 Verify that the Fa0/3 interface is in VLAN2x. WGxS1#sh int fa 0/3 switchport Name: Fa0/3 Switchport: Enabled Administrative Mode: static access Operational Mode: static access Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: native Negotiation of Trunking: Off Access Mode VLAN: 2x (VLAN002x) Trunking Native Mode VLAN: 1 (default) Administrative private-vlan host-association: none Administrative private-vlan mapping: none Operational private-vlan: none Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Protected: false Voice VLAN: none (Inactive) Appliance trust: none Activity Verification You have completed this task when you attain this result: „ You have configured your workgroup switch for basic network connectivity. Task 3: Verify Network Connectivity You will verify network connectivity using the Cisco IOS tools: ping and traceroute. Activity Procedure Complete these steps: Step 1 From the WGxR1 router, perform the following pings to confirm connectivity and routing protocol operation: „ Ping the SPNorth router (10.4.x.100). WGxR1#ping 10.4.x.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.4.x.100, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms „ Ping the SPSouth router Internet connection (10.10.10.200). WGxR1#ping 10.10.10.200 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.10.200, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms 20 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. „ Ping the WGxR2 router (10.2.x.2). WGxR1#ping 10.2.x.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.2.x.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 16/16/16 ms „ Ping the Pagent-1 (10.1.x.10) and Callgen-1 (10.1.x.11) routers. WGxR1#ping 10.1.x.10 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.x.10, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 40/47/56 ms WGxR1#ping 10.1.x.11 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.x.11, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms Step 2 From the WGxR2 router, perform the following pings to confirm connectivity and routing protocol operation: „ Ping the SPSouth router (10.5.x.100). WGxR2#ping 10.5.x.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.5.x.100, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms „ Ping the SPNorth router Internet connection (10.10.10.100). WGxR2#ping 10.10.10.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.10.100, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms Ping the Pagent-2 (10.3.x.10) and Callgen-2 (10.3.x.11) routers. „ Ping the Pagent-2 (10.3.x.10) and Callgen-2 (10.3.x.11) routers. WGxR2#ping 10.3.x.10 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.3.x.10, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 40/47/56 ms WGxR2#ping 10.3.x.11 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.3.x.11, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms Step 3 On the WGxR1 and WGxR2 routers, administratively disable the serial 0/0 interface. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 21 Step 4 From the WGxR1 router, use Telnet to connect to the Pagent-1 router (10.1.x.10) and perform a traceroute to the Pagent-2 router (10.3.x.10) to confirm that the path from Pagent-1 to Pagent-2 flows through your pod (via the SPNorth and SPSouth routers). Use the diagram in Figure 3 to verify your traceroute. WGxR1#telnet 10.1.x.10 Trying 10.1.x.10 ... Open User Access Verification Username: super Password: bowl pagent-1>traceroute 10.3.x.10 Type escape sequence to abort. Tracing the route to 10.3.x.10 1 2 3 4 5 10.1.x.1 68 msec 64 msec 60 msec 10.4.x.100 44 msec 56 msec 56 msec 10.10.10.200 48 msec 52 msec 48 msec 10.5.x.2 44 msec 52 msec 52 msec 10.3.x.10 32 msec * 44 msec pagent-1>exit [Connection to 10.1.1.10 closed by foreign host] WGxR1# Step 5 From the WGxR1 router, use Telnet to connect to the Callgen-1 (10.1.x.11) router and perform a traceroute to the Callgen-2 router (10.3.x.11) to confirm that the path from Callgen-1 to Callgen-2 flows through your pod (via the SPNorth and SPSouth routers). Use the diagram in Figure 3 to verify your traceroute. WGxR1>telnet 10.1.x.11 Trying 10.1.x.11 ... Open User Access Verification Username: super Password: bowl callgen-1>traceroute 10.3.x.11 Type escape sequence to abort. Tracing the route to 10.3.x.11 1 2 3 4 5 10.1.x.1 68 msec 64 msec 60 msec 10.4.x.100 44 msec 56 msec 56 msec 10.10.10.200 48 msec 52 msec 48 msec 10.5.x.2 44 msec 52 msec 52 msec 10.3.x.11 32 msec * 44 msec callgen-1>exit [Connection to 10.1.x.10 closed by foreign host] WGxR1# Step 6 On the WGxR1 and WGxR2 routers, administratively enable the serial 0/0 interface. Step 7 Use Telnet to connect to the Pagent-1 router (10.1.x.10) and perform a traceroute to the Pagent-2 router (10.3.x.10) to confirm that the path from Pagent-1 to Pagent-2 now flows through your pod and via the slow 384-kbps serial connection between your WGxR1 and WGxR2 routers. Use the diagram in Figure 3 to verify your traceroute. WGxR1#telnet 10.1.x.10 Trying 10.1.x.10 ... Open User Access Verification Username: super 22 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Password: bowl pagent-1>traceroute 10.3.x.10 Type escape sequence to abort. Tracing the route to 10.3.x.10 1 10.1.x.1 56 msec 52 msec 60 msec 2 10.2.x.2 116 msec 252 msec 48 msec 3 10.3.x.10 128 msec * 104 msec pagent-1>exit [Connection to 10.1.x.10 closed by foreign host] WGxR1# Step 8 Save your running configurations of the workgroup routers and the workgroup switch to the startup configuration in NVRAM. Step 9 Notify your instructor when you have completed this initial setup lab. Activity Verification You have completed this task when you attain these results: „ Pings from the WGxR1 router to the SPNorth, WGxR2, Pagent-1, and Callgen-1 routers are successful. „ Pings from the WGxR2 router to the SPSouth, Pagent-2, and Callgen-2 routers are successful. „ A traceroute from the Pagent-1 router to the Pagent-2 router flows through your pod (via the SPNorth and SPSouth routers) with the S0/0 interface in the shutdown state. „ A traceroute from the Callgen-1 router to the Callgen-2 router flows through your pod (via the SPNorth and SPSouth routers) with the S0/0 interface in the shutdown state. „ A traceroute from the Pagent-1 router to the Pagent-2 router flows through your pod 384kbps serial link with all WGxR1 and WGxR2 serial interfaces administratively enabled. Lab 2-1 Answer Key: QoS Lab Setup and Initialization When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. WG1R1 hostname WG1R1 ! enable secret 5 $1$n4//$vbCjudYcBR3yNPJqI.1tT0 ! ip subnet-zero ! interface FastEthernet0/0 ip address 10.1.1.1 255.255.255.0 duplex auto speed auto ! interface Serial0/0 bandwidth 384 ip address 10.2.1.1 255.255.255.0 encapsulation ppp clockrate 384000 no fair-queue ! interface Serial0/1 bandwidth 768 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 23 ip address 10.4.1.1 255.255.255.0 encapsulation ppp ! router ospf 1 log-adjacency-changes network 10.0.0.0 0.255.255.255 area 0 ! ip http server ip classless ! line con 0 line aux 0 line vty 0 4 password cisco login ! end WG1R2 hostname WG1R2 ! enable secret 5 $1$07qt$nKIz/sUIIRYMZ7urfJPtp1 ! ip subnet-zero ! interface FastEthernet0/0 ip address 10.3.1.2 255.255.255.0 duplex auto speed auto ! interface Serial0/0 bandwidth 384 ip address 10.2.1.2 255.255.255.0 encapsulation ppp no fair-queue ! interface Serial0/1 bandwidth 768 ip address 10.5.1.2 255.255.255.0 encapsulation ppp ! router ospf 1 log-adjacency-changes network 10.0.0.0 0.255.255.255 area 0 ! line con 0 line aux 0 line vty 0 4 password cisco login ! end WG1S1 hostname WG1S1 ! enable secret 5 $1$Yq48$E3tAlJjcYAP9qJpdmr0nu. ! vlan 11 name vlan11 ! vlan 21 name vlan21 ip subnet-zero vtp domain qos vtp mode transparent ! interface FastEthernet0/1 switchport trunk allowed vlan 11,21 24 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. switchport mode trunk no ip address ! interface FastEthernet0/2 switchport access vlan 11 switchport mode access no ip address ! interface FastEthernet0/3 switchport access vlan 21 switchport mode access no ip address ! interface Vlan1 no ip address no ip route-cache shutdown ! ! line con 0 line vty 5 15 ! end © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 25 Lab 2-2: Baseline QoS Measurement Complete this lab activity to practice what you learned in the modules “Introduction to QoS” and “The Building Blocks of QoS.” Activity Objective In this activity, you will create a baseline measurement of network traffic for use in evaluating the effectiveness of applied QoS mechanisms. After completing this activity, you will be able to meet these objectives: „ Clear interface counters on Cisco routers and switches „ Identify interface statistics, which are meaningful in traffic baselines „ Use Cisco IOS monitoring commands and network connectivity tools (ping command) to gather network response time data Visual Objective The figure illustrates what you will accomplish in this activity. In this lab, when the connectivity is properly established for your pod, you will record traffic statistics without any QoS configuration on your workgroup routers or workgroup switch. This record of the workgroup traffic statistics will form a rough baseline QoS measurement for your pod. For this lab, no special tools, such as QPM, will be used to monitor QoS statistics. Instead, Cisco IOS show commands and extended pings are used to form a rough baseline measurement. 26 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Company Background E-Commerce University is one of the most respected private universities in California based on its progressive educational offerings, which include a Master of Science degree in ECommerce Administration and Implementations. E-Commerce University has a northern and southern campus. The northern campus is located in Seattle, Washington, and the southern campus is located in Santa Monica, California. Each of the campuses has a population of 500 students and a faculty staff of 50 professors and administrators. Customer Situation The E-Commerce University network currently has limited bandwidth capacity on its 384-kbps leased line PPP WAN link that connects the northern and southern campuses, and the university does not envision being able to increase bandwidth in the near future. Both campuses also have a 768-kbps Internet connection. The preferred traffic path between the E-Commerce University campuses is the 384-kbps link, because the 768-kbps link connects to the Internet and will have a high path cost, even though it is a directly connected link with a higher bandwidth of 768 kbps. The university has recently implemented these three new applications: „ An IP telephony system between the northern and southern campus „ An Oracle (SQL) student administration database system „ Wireless Internet access for the students and faculties Some of the other key applications currently running on the E-Commerce University network that the university IT staff is aware of include the following: „ Faculty remote access (Citrix) „ MS Outlook e-mail (Microsoft Exchange) „ Web server for accessing university information (HTTP) „ Online courseware transfer between the northern and southern campuses (FTP) Because of the deployment of these applications, the E-Commerce University has been encountering these increasingly serious problems with their network: „ Users of the Oracle (SQL) student administrations database system have been complaining of unacceptable response times. Their subsecond response time has now stretched to multiple seconds in many cases and up to a minute in some cases. „ Users of the new IP telephony devices are the most upset. The quality of their calls is very poor, and their calls often just drop. Customer Requirements At this point, E-Commerce University is most concerned about the low VoIP voice quality and has called upon you (the new network engineer they hired in the last month) to perform a baseline measurement of the VoIP traffic via the low-speed 384-kbps leased line connection between the northern and southern campuses. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 27 Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS course „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Baseline QoS Measurement Lab Commands Command Description show ip interface [brief] [type] [number] Lists a summary of an interface IP information and status clear counters Clears the interface counters show interfaces [interfaceid] Displays the administrative and operational status of all interfaces or a specified interface shutdown Disables an interface copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor Task 1: Baseline Measurement of Network Traffic You will clear interface counters on Cisco routers and switches. Activity Procedure Complete these steps: 28 Step 1 Verify that the S0/0 and S0/1 interfaces on both of your workgroup routers (WGxR1 and WGxR2) are administratively enabled. Step 2 Clear the interface counters on both of your workgroup routers using the clear counters command. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Note At this time, your instructor has not yet started the Pagent and Callgen router traffic generations. Activity Verification You have completed this task when you attain this result: „ You have cleared interface counters on Cisco routers and switches. Task 2: Identify Interface Statistics You will identify interface statistics. Activity Procedure Complete these steps: Step 1 From the WGxR1 workgroup router, perform an extended ping to the WGxR2 router serial 0/0 interface, then record the ping response time in the table at the end of the lab. For the extended ping, use a repeat count of 100 and a datagram size of 160. WGxR1#ping Protocol [ip]: Target IP address: 10.2.x.2 Repeat count [5]: 100 Datagram size [100]: 160 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 100, 160-byte ICMP Echos to 10.2.x.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (100/100), round-trip min/avg/max = 8/8/13 ms Step 2 Repeat the extended ping two more times and record your results in the table at the end of this lab. Step 3 Repeat Step 1 and Step 2, but ping from the WGxR2 to WGxR1 serial 0/0 interface and record the response time results in the table at the end of this lab. Step 4 From both of your workgroup routers, issue the show interfaces serial 0/0 command and record the highlighted stats below in the table at the end of the lab. WGxR1#show interfaces serial0/0 Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: to WGxR2 Internet address is 10.2.3.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation PPP, LCP Open Open: CDPCP, IPCP, loopback not set Last input 00:00:03, output 00:00:01, output hang never Last clearing of "show interface" counters 00:00:12 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queuing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/21/32 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 288 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 3 packets input, 429 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 29 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 3 packets output, 184 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Step 5 Clear the interface counters on both of your workgroup routers using the clear counters command. Step 6 Notify your instructor when you are done with the prior steps. Your instructor will start both Pagent and Callgen traffic generators. Your instructor will advise you when all traffic streams are operational. Activity Verification You have completed this task when you attain this result: „ You have identified interface statistics. Task 3: Use Commands and Tools to Gather Network Response Time Data After Both Pagent and Callgen Traffic Generators Are Sending Traffic You will use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data. Activity Procedure Complete these steps: Step 1 Caution From the WGxR1 workgroup router, perform an extended ping to the WGxR2 router serial 0/0 interface, then record the ping response time in the table at the end of the lab. For the extended ping, use a repeat count of 100 and a datagram size of 160. Before initiating the extended ping command, wait for the Pagent and Callgen traffic to run for at least one minute so that the traffic generation can stabilize. WGxR1#ping Protocol [ip]: Target IP address: 10.2.x.2 Repeat count [5]: 100 Datagram size [100]: 160 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 100, 160-byte ICMP Echos to 10.2.x.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (100/100), round-trip min/avg/max = 12/62/220 ms Caution 30 After the Pagent traffic generation has been started, it is important that the Pagent routers not be used for network measurements using ping and traceroute commands, because the Pagent routers maintain a very high CPU load in generating the traffic demands for the QoS course labs. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 2 Repeat the extended ping command two more times and record your results in the table at the end of this lab. Step 3 Repeat Step 1 and Step 2 but ping from the WGxR2 to WGxR1 serial 0/0 interface and record the response time results in the table at the end of this lab. Step 4 From both of your workgroup routers, issue the show interfaces serial 0/0 command and record the highlighted statistics below in the table at the end of the lab. WGxR1#show interfaces serial 0/0 Hardware is PowerQUICC Serial Description: to wgxr1 Internet address is 10.2.x.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 130/255, rxload 37/255 Encapsulation PPP, LCP Open Open: CDPCP, IPCP, loopback not set Last input 00:00:02, output 00:00:00, output hang never Last clearing of "show interface" counters 00:01:20 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 1023 Queueing strategy: weighted fair Output queue: 0/1000/64/1023 (size/max total/threshold/drops) Conversations 0/32/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 288 kilobits/sec 5 minute input rate 57000 bits/sec, 116 packets/sec 5 minute output rate 196000 bits/sec, 211 packets/sec 6595 packets input, 800344 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 9418 packets output, 826272 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Note The traffic sent between Pagent-1 and Pagent-2 is set up so that the traffic rate varies constantly and will be different between Pagent-1 and Pagent-2. When the traffic rate from Pagent-1 to Pagent-2 is high and increasing, the traffic rate from Pagent-2 to Pagent-1 will be low and decreasing, and vice versa. As a result, the drop rate on your workgroup router serial 0/0 interface may be different between your workgroup R1 and R2 routers. Note For Callgen, both Callgen routers will generate VoIP calls at a constant rate. Step 5 Compare the resulting statistics with and without the Pagent and Callgen traffic generations enabled. You should notice that many of the pings would have a longer response time in the event of congestion on the low bandwidth 384-kbps PPP serial link. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 31 Baseline QoS Measurement Lab Results These four tables are used to record the results of your lab testing in this exercise. Record your extended ping results in these two tables: WGxR1 to WGxR2 QoS Baseline Ping Results Packet Size 160 bytes Without Pagent and Callgen With Pagent and Callgen min/avg/max min/avg/max success rate % success rate % Extended ping 1 Extended ping 2 Extended ping 3 Extended ping 1 Extended ping 2 Extended ping 3 WGxR2 to WGxR1 QoS Baseline Ping Results Packet Size 160 bytes Without Pagent and Callgen With Pagent and Callgen min/avg/max min/avg/max success rate % success rate % Extended ping 1 Extended ping 2 Extended ping 3 Extended ping 1 Extended ping 2 Extended ping 3 32 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Record your WGxR1 show interfaces serial 0/0 command results in this table. WGxR1 QoS Baseline show interfaces Command Results Without Pagent and Callgen With Pagent and Callgen Queuing Strategy Reliability, Txload, Rxload Total Output Drops Output Queue: size/max total Output Queue: threshold/drops Packets Output Drop % (Calculated by you as: Total Output Drop / Packets Output) Record your WGxR2 show interfaces serial 0/0 command results in this table. WGxR2 QoS Baseline show interfaces Command Results Without Pagent and Callgen With Pagent and Callgen Queuing Strategy Reliability, Txload, Rxload Total Output Drops Output Queue: size/max total Output Queue: threshold/drops Packets Output Drop % (Calculated by you as: Total Output Drop / Packets Output) Activity Verification You have completed this task when you attain this result: „ You have successfully completed the QoS baseline measurement by recording ping and interface statistics both before and after network traffic generation. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 33 Lab 2-2 Answer Key: Baseline QoS Measurement When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. Sample WGxR1 to WGxR2 QoS Baseline ping Results Packet Size Without Pagent and Callgen With Pagent and Callgen 160 bytes min/avg/max min/avg/max Extended ping 1 8/8/12 8/43/120 Extended ping 2 8/8/12 16/42/116 Extended ping 3 8/9/16 12/43/112 success rate % success rate % Extended ping 1 100% 100% Extended ping 2 100% 100% Extended ping 3 100% 100% Sample WGxR1 QoS Baseline show interfaces Results 34 Without Pagent and Callgen With Pagent and Callgen Queuing Strategy WFQ (fair queue) WFQ (fair queue) Reliability, Txload, Rxload 255, 1, 1 255, 209, 39 Total Output Drops 0 1975 Output Queue: size/max total 0/1000 61/1000 Output Queue: threshold/drops 64/0 64/1975 Packets Output 3001 131760 Drop % (Calculated by you as: Total Output Drop / Packets Output) 0/3001 = 0 1975/131760 = 1.5% Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 3-1: Configuring QoS with AutoQoS Complete this lab activity to practice what you learned in the module “Introduction to Modular QoS CLI and AutoQoS.” Activity Objective In this activity, you will configure QoS for VoIP on Cisco IOS routers and Catalyst switches using AutoQoS. After completing this activity, you will be able to meet these objectives: „ Configure AutoQoS on Cisco IOS routers „ Configure AutoQoS on the Catalyst 2950 workgroup switch „ Use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data Visual Objective The figure illustrates what you will accomplish in this activity. From the baseline measurement results, the E-Commerce University IT staff has determined that the drop rate and the latency of the VoIP traffic must be improved. At this point, the ECommerce University has called upon you (the new CCNA network engineer they hired last month) to improve the voice quality as quickly as possible over the weekend. By the way, the E-Commerce University network is built using Cisco Catalyst 2950 switches, Cisco 2610XM routers, and Cisco Aironet Wireless Access Points. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 35 Through Cisco online e-learning, you discovered the new AutoQoS for VoIP feature that allows automated configuration of quality of service (QoS) on the network and provides a means for simplifying the implementation and provisioning of QoS for VoIP traffic. Because you have only a limited amount of time to implement a solution, you have decided to go ahead and use AutoQoS and then test and compare the VoIP QoS results to see if AutoQoS can be used to solve the problem. Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring QoS with AutoQoS Lab Router Commands 36 Command Description show running-config Displays the contents of the currently running configuration file ip cef Enables CEF on the router interface interface-id Enters interface configuration mode and the physical interface identification auto qos voip Configures the AutoQoS-VoIP feature on an interface show auto qos [interface [interface-type]] Displays the configuration created by the AutoQoS-VoIP feature on a specific interface or all interfaces show ip interface [brief] [type] [number] Lists a summary of an interface IP information and status show interfaces multilink [interface-id] Displays the administrative and operational status of all interfaces or a specified interface clear counters Clears the interface counters encapsulation encapsulationtype Sets the encapsulation method used by the interface copy running-config startupconfig Saves your entries in the configuration file Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Configuring QoS with AutoQoS Lab Switch Commands Command Description interface interface-id Enters interface configuration mode and the physical interface identification auto qos voip Configures AutoQoS for VoIP within a QoS domain show auto qos [interface [interface-id]] Displays AutoQoS configuration that is applied copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor Task 1: Configuring AutoQoS on Cisco IOS Routers In this task, you will enable the AutoQoS for VoIP feature on your workgroup router low bandwidth PPP serial interface. Activity Procedure Complete these steps: Step 1 Display and examine the running configuration of your WGxR1 router. Step 2 Enable CEF on your WGxR1 router. Step 3 Enable the AutoQoS for VoIP feature for traffic on the S0/0 interface of WGxR1 only. Do not configure AutoQoS to trust DSCP markings. Step 4 Display and examine the resulting AutoQoS configuration after enabling AutoQoS. The following example outputs are from WG1. ip access-list extended AutoQoS-VoIP-RTCP permit udp any any range 16384 32767 ! ip access-list extended AutoQoS-VoIP-Control permit tcp any any eq 1720 (3 matches) permit tcp any any range 11000 11999 permit udp any any eq 2427 permit tcp any any eq 2428 permit tcp any any range 2000 2002 permit udp any any eq 1719 permit udp any any eq 5060 ! class-map match-any AutoQoS-VoIP-RTP-UnTrust match protocol rtp audio match access-group name AutoQoS-VoIP-RTCP ! class-map match-any AutoQoS-VoIP-Control-UnTrust match access-group name AutoQoS-VoIP-Control ! class-map match ip match ip match ip match-any AutoQoS-VoIP-Re-mark dscp ef dscp cs3 dscp af31 ! © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 37 policy-map AutoQoS-Policy-UnTrust class AutoQoS-VoIP-RTP-UnTrust priority percent 70 set dscp ef class AutoQoS-VoIP-Control-UnTrust bandwidth percent 5 set dscp af31 class AutoQoS-VoIP-Re-mark set dscp default class class-default fair-queue Serial0/0 ! interface Serial0/0 no ip address encapsulation ppp no fair-queue ppp multilink multilink-group 2001100114 ! interface Multilink2001100114 bandwidth 384 ip address 10.2.1.1 255.255.255.0 service-policy output AutoQoS-Policy-UnTrust ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave ip rtp header-compression iphc-format ! rmon event 33333 log trap AutoQoS description "AutoQoS SNMP traps for Voice Drops" owner AutoQoS rmon alarm 33334 cbQosCMDropBitRate.1145.1147 30 absolute rising-threshold 1 33333 falling-threshold 0 owner AutoQoS Step 5 Repeat Steps 1 through 4 for WGxR2. Step 6 Issue the show ip interface brief command on WGxR1 and ensure that the Multilink interface is up. The Multilink interface is required for PPP multilink and interleaving operation. Notice that the S0/0 IP address assignment is automatically moved to the Multilink interface. WGxR1#show ip interface brief Note Step 7 Interface IP-Address OK? Method Status Protocol FastEthernet0/0 10.1.1.1 YES NVRAM up up Serial0/0 unassigned YES unset up up Serial0/1 10.4.1.1 YES NVRAM administratively down down Virtual-Access1 unassigned YES unset up up Multilink2001100114 10.2.1.1 YES unset up up Because Callgen is used to generate the VoIP traffic, the voice quality of the VoIP phone calls cannot be tested directly. Therefore, after AutoQoS has been enabled, you will modify the resulting QoS configurations to make the ping traffic (icmp echo and reply) to have the same EF PHB as the VoIP traffic. In this way, you can compare the extended ping responses with AutoQoS enabled to the responses before AutoQoS was enabled. On the WGxR1 router, modify the ip access-list extended AutoQoS-VoIP-RTCP to include the ping traffic (icmp echo and echo reply). ip access-list extended AutoQoS-VoIP-RTCP permit udp any any range 16384 32767 permit icmp any any echo 38 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. permit icmp any any echo-reply Step 8 Repeat Step 7 for the WGxR2 router. Activity Verification You have completed this task when you attain these results: „ You have successfully enabled the AutoQoS for VoIP feature on both WGxR1 and WGxR2. „ You have configured ping (ICMP echo and reply) to belong to the same traffic class as VoIP traffic. Task 2: Configuring AutoQoS on the Catalyst 2950 Switch In this task, you will enable the AutoQoS for VoIP feature on your workgroup Catalyst 2950 switch. Activity Procedure Complete these steps: Step 1 Display and examine the running configuration of your WGxS1 switch. Step 2 Enable the AutoQoS for VoIP feature for traffic on the Fa0/1 interface of WGxS1 and trust the CoS markings from the core switch. Step 3 Display and examine the resulting AutoQoS configuration after enabling AutoQoS. Notice that the 2950 is now configured for WRR queuing with queue 4 setup as the expedite queue (weight = 0). WRR queuing will be covered in the module “Congestion Management.” Initial configuration applied by AutoQoS: wrr-queue bandwidth 20 1 80 0 no wrr-queue cos-map wrr-queue cos-map 1 0 1 2 4 wrr-queue cos-map 3 3 6 7 wrr-queue cos-map 4 5 mls qos map cos-dscp 0 8 16 26 32 46 48 56 ! interface FastEthernet0/1 mls qos trust cos auto qos voip trust Activity Verification You have completed this task when you attain this result: „ You have successfully enabled the AutoQoS for VoIP feature on WGxS1. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 39 Task 3: QoS Baseline with AutoQoS In this task, you will use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data. You will compare the results of the traffic statistics of the network baseline statistics captured in Lab Exercise 2-2 and the network statistics after the application of AutoQoS. Activity Procedure Complete these steps: Step 1 Refer to Lab 2-2 and copy the baseline traffic information with the Pagent and Callgen traffic generation running into the tables at the end of this lab. Step 2 From the WGxR1 workgroup router, perform an extended ping to the WGxR2 router serial 0/0 interface, then record the ping response time in the table at the end of the lab. For the extended ping, use a repeat count of 100 and a datagram size of 160. WGxR1#ping Protocol [ip]: Target IP address: 10.2.x.2 Repeat count [5]: 100 Datagram size [100]: 160 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 100, 160-byte ICMP Echos to 10.2.x.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (100/100), round-trip min/avg/max = 28/49/89 ms Step 3 Repeat the extended ping two more times and record your results in the table at the end of this lab. Step 4 Repeat Steps 2 and 3, but ping from the WGxR2 to WGxR1 serial 0/0 interface and record the response time results in the table at the end of this lab. Step 5 Clear the interface counters on both of your workgroup routers using the clear counters command. Step 6 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 7 From both of your workgroup routers, issue the show interfaces multilink command and record the highlighted statistics below in the table at the end of the lab. WGxR1#show interfaces Multilink2001100114 MMultilink2001100114 is up, line protocol is up Hardware is multilink group interface Internet address is 10.2.x.2/24 MTU 1500 bytes, BW 384 Kbit, DLY 100000 usec, reliability 255/255, txload 23/255, rxload 5/255 Encapsulation PPP, LCP Open, multilink Open Open: IPCP, loopback not set DTR is pulsed for 2 seconds on reset 40 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Last input 00:00:09, output never, output hang never Last clearing of "show interface" counters 00:01:15 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 1415 Queueing strategy: weighted fair Output queue: 151/1000/64/1415/3541 (size/max total/threshold/drops/interleaves) Conversations 21/30/128 (active/max active/max total) Reserved Conversations 1/1 (allocated/max allocated) Available Bandwidth 1 kilobits/sec 5 minute input rate 9000 bits/sec, 19 packets/sec 5 minute output rate 35000 bits/sec, 37 packets/sec 4926 packets input, 217664 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 11486 packets output, 1358207 bytes, 0 underruns 0 output errors, 0 collisions, 4 interface resets 0 output buffer failures, 0 output buffers swapped out Step 8 Compare the results of the traffic statistics from Lab 2-2 QoS Baseline Measurement to the results from this lab. Is the ping maximum response time shorter than before AutoQoS was enabled? Explain. ___________________________________________________________ Is the drop rate higher, lower, or about the same as before AutoQoS was enabled? Explain. ____________________________________________________ Step 9 Remove the AutoQoS configuration on your workgroup switch and workgroup routers. WGxS1(config)#int fa0/1 WGxS1(config-if)#no auto qos voip WGxS1(config-if)#end WGxS1#show auto qos AutoQoS is disabled Note If a newer IOS version on the Catalyst 2950 is used, the no auto qos voip command will not remove the global QoS configurations that were enabled by AutoQoS. You need to remove them manually. (Refer to Task 2, Step 3 for the global QoS configurations.) WGxR1(config)#int s0/0 WGxR1(config-if)#no auto qos voip WGxR2(config)#int s0/0 WGxR2(config-if)#no auto qos voip Note When removing AutoQoS from WGxR1 and WGxR2, the encapsulation on your serial interfaces may be returned to HDLC, the Cisco default serial interface encapsulation. Be sure to reconfigure your serial interfaces for PPP encapsulation on both WGxR1 and WGxR2. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 41 Step 10 On both of your workgroup routers, issue the show ip interface brief command and ensure that the serial 0/0 interface is up. The Multilink interface should be removed when AutoQoS has been disabled. WGxR1#sh ip int brief Interface IP-Address OK? Method Protocol YES NVRAM up Serial0/0 10.2.x.1 YES unset Serial0/1 10.4.1.1 YES NVRAM administratively down down Virtual-Access1 unassigned YES unset Step 11 Status FastEthernet0/0 10.1.1.1 up up up up up Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Configuring QoS with AutoQoS Lab Results Record your extended ping results in the two tables below: WGxR1 to WGxR2 AutoQoS ping Results Packet Size 160 bytes Without AutoQoS (From Lab 2-2) With AutoQoS (This Lab) min/avg/max min/avg/max success rate % success rate % Extended ping 1 Extended ping 2 Extended ping 3 Extended ping 1 Extended ping 2 Extended ping 3 42 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. WGxR2 to WGxR1 AutoQoS ping Results Packet Size 160 bytes Without AutoQoS (From Lab 2-2) With AutoQoS (This Lab) min/avg/max min/avg/max success rate % success rate % Extended ping 1 Extended ping 2 Extended ping 3 Extended ping 1 Extended ping 2 Extended ping 3 Record your WGxR1 show interfaces multilink results in this table: WGxR1 AutoQoS show interfaces Results Without AutoQoS (From Lab 2-2) show interface s0/0 With AutoQoS (This Lab) show interface multilink Queuing Strategy Reliability, Txload, Rxload Total Output Drops Output Queue: size/max total Output Queue: threshold/drop/interleaves Packets Output Drop % (Calculated by you as: Total Output Drop / Packets Output) © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 43 Record your WGxR2 show interfaces serial 0/0 results in this table: WGxR2 AutoQoS show interfaces Results Without AutoQoS (From Lab 2-2) show interface s0/0 With AutoQoS (This Lab) show interface multilink Queuing Strategy Reliability, Txload, Rxload Total Output Drops Output Queue: size/max total Output Queue: threshold/drop/interleaves Packets Output Drop % (Calculated by you as: Total Output Drop / Packets Output) Activity Verification You have completed this task when you attain these results: „ You have successfully completed the QoS baseline measurement after enabling AutoQoS by recording ping and interface statistics. „ You have compared the results of the traffic measurement to those from the QoS Baseline Lab and correctly answered the questions contained within the lab. „ You have successfully removed AutoQoS configuration from your workgroup routers and switch. Lab 3-1 Answer Key: Configuring QoS with AutoQoS When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. Step 1 The following configuration is entered to enable AutoQoS on the WGxR1 and WGxR2 routers: interface serial 0/0 auto qos voip ip access-list extended AutoQoS-VoIP-RTCP permit udp any any range 16384 32767 permit icmp any any echo permit icmp any any echo-reply Step 2 The following configuration is entered to enable AutoQoS on the WGxS1 switch: interface fastethernet 0/1 auto qos voip trust Step 3 44 The following are the answers to the questions in this lab exercise: Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Is the ping maximum response time shorter than before AutoQoS was enabled? Explain. Yes, because ping was moved into the expedited forwarding class with VoIP traffic. The minimum time may be higher because the traffic generation tools are generating traffic at different data rates. Is the drop rate higher, lower, or about the same as before AutoQoS was enabled? Explain. The drop rate is about the same because AutoQoS only affects the voice over IP traffic and not the data traffic. The VoIP traffic load in the lab is minimal compared to the data. The following are sample QoS Lab results: Sample WGxR1 to WGxR2 AutoQoS ping Results Packet Size Without AutoQoS (From Lab 2-2) With AutoQoS (This Lab) 160 bytes min/avg/max min/avg/max Extended ping 1 8/43/120 32/54/88 Extended ping 2 16/42/116 32/53/88 Extended ping 3 12/43/112 32/54/88 success rate % success rate % Extended ping 1 100% 100% Extended ping 2 100% 100% Extended ping 3 100% 100% Sample WGxR1 AutoQoS show interfaces Results Without AutoQoS (From Lab 2-2) show interface s0/0 With AutoQoS (This Lab) show interface multilink Queuing Strategy WFQ (fair queue) WFQ (fair queue) Reliability, Txload, Rxload 255, 209, 39 255, 245, 41 Total Output Drops 1975 216 Output Queue: size/max total 61/1000 161/1000 Output Queue: threshold/drop/interleaves 64/1975 64/216/8534 Packets Output 131760 20530 Drop % (Calculated by you as: Total Output Drop / Packets Output) 1975/131760 = 1.5% 216/20530=1.1% © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 45 Case Study 4-1: Classification and Marking This case study enables you to practice the skills and knowledge learned in the module “Classification and Marking.” Activity Objectives In this activity, you will define a QoS policy that assigns network traffic to service classes and identify where classification and marking should be applied to the network. Upon completing this activity, you will be able to meet these objectives: „ Review customer QoS requirements „ Identify QoS service class requirements „ Identify network locations where classification and marking should be applied „ Present a solution to the case study Visual Objective The figure illustrates what you will accomplish in this activity. Visual Objective for Case Study 6-1: WRED Traffic Profiles 1. Review customer QoS requirements. Completely read the customer requirements provided. 2. Identify QoS service class requirements. With the aid of your partner, identify the service classes required to implement the administrative QoS policy based on customer requirements. 3. Create WRED traffic profiles. Create the WRED traffic profiles required to properly implement the administrative QoS policy. 4. Present Your Solution. After the instructor presents a solution to the case study, present your solution to the class with your partner. © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—29 Required Resources These are the resources and equipment required to complete this activity: 46 „ Case Study Activity: Classification and Marking with QoS Service Classes „ A workgroup consisting of two learners Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Case Study Classification and Marking This case study provides information regarding the QoS administrative policy requirements of a large, multisite network. Your task is to work with a partner to evaluate the QoS requirements, and based on these requirements, identify where QoS classification and marking mechanisms should be applied. You will discuss your solution with the instructor and other classmates, and the instructor will present a solution for the case study to the class. Task 1: Classification and Marking The activity includes these tasks: Step 1 Review customer QoS requirements: Completely read the customer requirements provided. This case study involves analyzing an administrative QoS policy of the JC Whitney Corporation, a fictitious manufacturer of medical equipment. The company has provided you with a brief description of their requirements. It is your task to provide the network engineers from JC Whitney with a QoS solution to meet their requirements. Read the customer requirements and discuss them with your partner. Identify the different types of traffic in use in the JC Whitney network and the different service classes required to implement their administrative QoS policy. Company Background JC Whitney Corporation is a leading manufacturer of medical equipment used in outpatient surgical centers throughout the United States. The company headquarters are located in Eugene, Oregon. In addition to the headquarters facility, JC Whitney consists of five manufacturing facilities and 120 regional sales and distribution centers. The network at each of the manufacturing facilities is similar to the JC Whitney corporate network. The regional sales and distribution centers are very low-cost, low-overhead sites. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 47 JC Whitney Regional Sales Office Network © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—17 The regional sales and distribution center networks are shown in the figure. The manufacturing strategy of JC Whitney is to leverage the expertise of contract manufacturers through its extensive extranet of partners. Currently, the JC Whitney extranet consists of nine contract manufacturers and suppliers that are all connected using a national service provider backbone. 48 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. JC Whitney Extranet Network © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—14 The service provider currently uses MPLS on its backbone as shown in the figure. Customer Situation JC Whitney has recently opened up Internet access to its regional manufacturing facilities and to its regional sales and distribution centers. As a result, access times to many of the company mission-critical applications such as sales and manufacturing databases have increased dramatically. In addition, response time between the corporate headquarters and JC Whitney extranet partners has increased, causing database queries to time out in some instances. No new applications have been added to the network other than enabling corporate-wide Internet access. The JC Whitney network engineering staff explains their network applications in this manner: „ JC Whitney has standardized on OSPF as its routing protocol and therefore uses it on all routers company-wide. „ The corporate headquarters and the five manufacturing facilities use VoIP for all intrasite and intersite communications. „ The entire ERP database for the company is located at the corporate site. All sites (manufacturing, regional sales and distribution centers, and extranet partners), use this centralized database for inventory control, sales data, invoicing, and so on. Without complete access and reachability to the ERP database and its applications, JC Whitney could not manufacture product, ship inventory, or bill for its services. „ E-mail is another application that is used heavily at JC Whitney. The exchange servers and mail gateways are all located in the server farm at the corporate headquarters location. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 49 „ Internet services have recently been introduced company-wide. One of its largest uses has been messaging between regional sales and distribution centers and between corporate staff and manufacturing. No internal messaging service currently exists at JC Whitney. As a result, the productivity gains realized by this Internet service have become somewhat important to the company. No other business applications currently exist on the Internet. „ Although the JC Whitney manufacturing facilities operate 24 hours per day, seven days per week, the evening shifts have a reduced staff and line output. As a result, database synchronization and server backups are performed during the evening hours. A TCP-based backup application manages file transfers between manufacturing sites and the corporate headquarters using an automated version of FTP. Database synchronization is also TCPbased and has no critical bandwidth or latency requirements. Working with the network engineering staff at JC Whitney and the service provider, you have been enlisted to assist JC Whitney by defining QoS requirements for their network. Their first priority is to determine what service classes to use and to identify where QoS classification and marking mechanisms should be configured in the network to enable the JC Whitney administrative QoS policy, resolving the response time issues that they are experiencing. Step 2 Identify QoS service class requirements: With the aid of your partner, identify the service classes required to implement the administrative QoS policy based on customer requirements. Identify the different service classes required to implement the JC Whitney administrative QoS policy. Use the QoS Service Classes table to help you with your answer choices. Write your answers in the table below. JC Whitney Service Classes Customer Traffic 50 Service Class Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. QoS Service Classes PHB DSCP DSCP Value Intended Protocols and Applications Service Class EF EF 101110 Interactive voice Voice Bearer AF1 AF11 AF12 AF13 001010 001100 001110 Intranet, general data service Bulk Data AF2 AF21 AF22 AF23 010010 010100 010110 Database access, transaction services, interactive traffic, preferred data service Transactional AF3 AF31 AF32 AF33 011010 011100 011110 Locally defined mission-critical applications MissionCritical AF4 AF41 AF42 AF43 100010 100100 100110 Interactive video and associated voice Interactive Video CS6 Class 6 110000 Border Gateway Protocol (BGP), OSPF, etc. Routing (Reserved) CS4 Class 4 100000 Often proprietary Streaming Video CS3 Class 3 011000 Session initiation protocol (SIP), H.323, etc. Voice Signaling CS1 Class 1 001000 User-selected service, point-to-point applications Default Default (BestEffort) Class 0 000000 Unspecified traffic, email Less-thanBest Effort Data (Scavenger) Best-Effort Service Class and Configuration Admission Control = RSVP Queuing = Priority Queuing = Rate Based Active Queue Mgt = WRED minth AF13 < maxth AF13 <= minth AF12 < maxth AF12 <= minth AF11 < maxth AF11 Queuing = Rate Based Active Queue Mgt = WRED minth AF23 < maxth AF23 <= minth AF22 < maxth AF22 <= minth AF21 < maxth AF21 Queuing = Rate Based Active Queue Mgt = WRED minth AF33 < maxth AF33 <= minth AF32 < maxth AF32 <= minth AF31 < maxth AF31 Admission Control = RSVP Queuing = Rate Based Active Queue Mgt = WRED minth AF43 < maxth AF43 <= minth AF42 < maxth AF42 <= minth AF41 < maxth AF41 Queuing = Rate Based Small guaranteed minimum rate Active Queue Mgt = RED minth < maxth, but minth is deep to minimize loss Admission Control = RSVP Queuing = Rate Based Active Queue Mgt = RED minth < maxth Queuing = Rate Based Small guaranteed minimum rate Active Queue Mgt = RED minth < maxth, but minth is deep to minimize loss Queuing = Rate Based No bandwidth guarantee Active Queue Mgt = RED minth < maxth Queuing = Rate Based Minimal bandwidth guarantee Active Queue Mgt or Per-flow fair queuing Active Queue Mgt = RED minth < maxth In order to provide end-to-end QoS, multiple markers may be required. For each service class required for the JC Whitney network, complete the table below with the appropriate value of each specified marker. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 51 JC Whitney QoS Service Class Requirements L 3 Classification Service Class Step 3 DSCP PHB DSCP IP Precedence L 2 Classification CoS MPLS EXP Identify network locations where classification and marking should be applied: Identify locations in the network where the QoS classification and marking mechanisms should be applied to properly implement the administrative QoS policy. Using the information provided in the review of customer QoS requirements for this case study; use the diagrams of the JC Whitney network below to indicate trust boundaries, where classification and marking should be applied, markers in use, and locations where QoS markers change to ensure end-to-end QoS. Use the example shown to assist you in completing this activity. Indicate the following on the network diagram provided: 52 „ Trust boundaries „ QoS markers in use „ Network locations where classification and marking should be used „ Locations where QoS markers change Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Example Network © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—15 The figure illustrates a sample network showing trust boundaries, where classification and marking should be applied, and markers in use. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 53 JC Whitney Corporate Headquarters Network The JC Whitney network consists of a converged voice and data network. Because voice is a business-critical application, all voice traffic should be treated appropriately. The user community at JC Whitney ranges from novice data-entry clerks to advanced systems programmers. As a result, security measures require that user workstations should not be allowed to set packet priorities. JC Whitney Corporate Network © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—16 Use the network diagram of the JC Whitney corporate network to indicate the following: 54 „ Trust boundaries „ QoS markers in use „ Network locations where classification and marking should be used „ Locations where QoS markers change Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. JC Whitney Regional Sales and Distribution Center Networks The JC Whitney regional sales and distribution center networks are very low-overhead operations. Each sales office is staffed with three to nine employees. Distribution centers are similar to sales offices, but can be supported by up to 20 employees. The network at each center consists of a basic 10/100 Mbps desktop switch that is used to connect the office workstations to the corporate headquarters or a regional manufacturing facility via a Frame Relay-connected low-end router. JC Whitney Regional Sales Office Network © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—17 Use the network diagram of the JC Whitney corporate network to indicate the following: „ Trust boundaries „ QoS markers in use „ Network locations where classification and marking should be used „ Locations where QoS markers change Step 4 Present your solution: Together with your partner, present your solution to the class. Include this information: „ Customer service class requirements „ Network diagrams indicating where classification and marking should be applied „ Justification for differences from the solution presented by the instructor Activity Verification You have completed this activity when the instructor has verified your case study solution and you have justified major deviations from the solution supplied by the instructor. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 55 Case Study 4-1 Answer Key: Classification and Marking Identify QoS Service Class Requirements JC Whitney Service Classes Customer Traffic Service Class OSPF Routing Protocol Reserved Voice over IP Voice Bearer Voice Signaling (Skinny, SIP, etc.) Voice Signaling ERP (Transactional Database) Transactional Data E-mail Best-Effort Data Internet (Browsing, Messaging) Bulk Data Backup, Synch (FTP Bulk transfer) Bulk Data JC Whitney QoS Service Class Requirements L 3 Classification Service Class DSCP PHB DSCP IP Precedence CoS MPLS EXP CS 6 48 (110 000) 6 6 6 EF 46 (101 110) 5 5 5 Voice Signaling CS3 24 (011 000) 3 3 3 Transactional Data AF21 18 (010 010) 2 2 2 Bulk Data AF11 10 (001 010) 1 1 1 Default 0 (000 000) 0 0 0 Reserved Voice Bearer Best-Effort Data 56 L 2 Classification Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Identify Network Locations Where Classification and Marking Should be Applied Case Study Results: JC Whitney Service Classes © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—18 Case Study Results: QoS Service Class Requirements © 2006 Cisco Systems, Inc. All rights reserved. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. QoS v2.2—19 Lab Guide 57 Case Study Results: JC Whitney Corporate Network © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—20 Case Study Results: JC Whitney Regional Sales Office Network © 2006 Cisco Systems, Inc. All rights reserved. 58 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. QoS v2.2—21 © 2006 Cisco Systems, Inc. Lab 4-1: Classification and Marking Using MQC Complete this lab activity to practice what you learned in the lesson “Using MQC for ClassBased Marking” in the module “Classification and Marking.” Activity Objective In this activity, you will configure classification using MQC and marking using class-based marking. After completing this activity, you will be able to meet these objectives: „ Configure an IP extended access list matching specific traffic for use in MQC classification „ Configure MQC classification „ Configure class-based marking Visual Objective The figure illustrates what you will accomplish in this activity. From the AutoQoS results, the E-Commerce University IT staff has determined that the VoIP voice quality is now satisfactory. Because you did such a great job so far, the E-Commerce University is now calling upon you to also improve the response time of the Oracle (SQL) student administration database application over their spring break. Because AutoQoS only works for voice traffic currently, you decide to remove the AutoQoS configurations and to manually implement the proper QoS mechanisms using MQC. As you have learned in the Cisco QoS course, one of the first steps to implement QoS is to properly classify and mark the traffic. Therefore, you decide the first step now for you is to implement the proper classification and marking. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 59 To ease into the QoS implementation, you decide to first approach the classification and marking of the applications you feel are the bulk of the university traffic (FTP and HTTP). Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Classification and Marking Using MQC Lab Commands 60 Command Description access-list access-listnumber {deny | permit} tcp src src-wildcard [operator [port]] dest dest-wildcard [operator [port]] Defines an extended IP access list for TCP-based traffic class-map class-map-name Creates a class map to be used for matching packets to a specified class match access-group {accessgroup | name access-groupname} Configures the match criteria for a class map on the basis of the specified ACL policy-map policy-map-name Creates or modifies a policy map that can be attached to one or more interfaces class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class set dscp dscp-value Marks a packet by setting the DSCP service-policy {input | output} policy-map-name Attaches a policy map to an input interface or VC, or an output interface or VC show access-lists [accesslist-number | access-listname] Displays the contents of current access lists show class-map [class-mapname] Displays all class maps and their matching criteria show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Command Description show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity. „ Your assigned workgroup pod number provided by the instructor. Task 1: IP Extended Access List You will configure an IP extended access list matching specific traffic for use in MQC classification. Activity Procedure Complete these steps: Step 1 Connect to the WGxR1 router. Configure an IP extended access list to match all FTP traffic. Step 2 On the WGxR1 router, configure a second IP extended access list to match all HTTP (WWW) traffic. Step 3 Display and verify your IP extended access list configuration. Extended IP access list 101 10 permit tcp any any eq ftp 20 permit tcp any any eq ftp-data Extended IP access list 102 10 permit tcp any any eq www Activity Verification You have completed this task when you attain this result: „ You have configured an IP extended access list matching specific traffic for use in MQC classification. Task 2: Configure MQC Classification You will configure MQC classification. Activity Procedure Complete these steps: Step 1 Create two new class maps called match-ftp and match-www to match the FTP and WWW traffic, respectively. Step 2 Display and verify your class-map configuration. Class Map match-any class-default (id 0) © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 61 Match any Class Map match-all match-ftp (id 1) Match access-group 101 Class Map match-all match-www (id 2) Match access-group 102 62 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Activity Verification You have completed this task when you attain this result: „ You have configured MQC classification. Task 3: Configure Class-Based Marking You will configure class-based marking. Activity Procedure Complete these steps: Step 1 Create a policy map on your workgroup WGxR1 router, named mark-apps, that includes the two newly configured traffic classes (match-ftp and match-www). Use class-based marking to mark the FTP traffic to AF 11 and the WWW traffic to DSCP 0. Step 2 Display and verify your policy-map configuration. Policy Map mark-apps Class match-ftp set dscp af11 Class match-www set dscp default Step 3 Apply the policy map to the FastEthernet 0/0 interface of your WGxR1 router in the inbound direction. Step 4 Display and verify your service policy. FastEthernet0/0 Service-policy input: mark-apps Class-map: match-ftp (match-all) 320 packets, 19200 bytes 5 minute offered rate 1000 bps, drop rate 0 bps Match: access-group 101 QoS Set dscp af11 Packets marked 320 Class-map: match-www (match-all) 172 packets, 10320 bytes 5 minute offered rate 1000 bps, drop rate 0 bps Match: access-group 102 QoS Set dscp default Packets marked 172 Class-map: class-default (match-any) 12591 packets, 827819 bytes 5 minute offered rate 26000 bps, drop rate 0 bps Match: any Step 5 Step 6 How many packets have been matched and marked on WGxR1 for each traffic class? Class ftp __________________ Class www __________________ Class class-default __________________ Repeat Steps 1 through 9 for workgroup router WGxR2. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 63 Step 7 Step 8 How many packets have been matched and marked on WGxR2 for each traffic class? Class ftp __________________ Class www __________________ Class class-default __________________ Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain these results: „ You have correctly created MQC classification for FTP and HTTP traffic. „ You have correctly configured MQC marking to mark FTP traffic as AF11 and HTTP traffic as DSCP 0. „ You have correctly enabled MQC classification and marking by applying the service policy to both workgroup routers. Lab 4-1 Answer Key: Classification and Marking Using MQC When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. access-list 101 permit tcp any any eq ftp access-list 101 permit tcp any any eq ftp-data access-list 102 permit tcp any any eq www class-map match-all match access-group class-map match-all match access-group match-www 102 match-ftp 101 policy-map mark-apps class match-ftp set dscp af11 class match-www set dscp default interface FastEthernet0/0 service-policy input mark-apps 64 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 4-2: Classification Using NBAR Complete this lab activity to practice what you learned in the lesson “Using NBAR for Classification” in the module “Classification and Marking.” Activity Objective In this activity, you will configure classification using NBAR. After completing this activity, you will be able to meet these objectives: „ Discover network applications and traffic using NBAR protocol discovery „ Configure class-based marking using NBAR classification Visual Objective The figure illustrates what you will accomplish in this activity. After studying your current classification and marking strategy, you realize that using extended IP access lists cannot properly classify all the traffic now running on the network. One issue is that there are too many applications being classified into the class-default. Therefore, you decide to configure NBAR for your classification requirements. Before you configure protocol matching with NBAR, you decide first to analyze the network using NBAR protocol discovery to validate your assumptions about the traffic currently traversing the network. After all traffic has been properly identified, you plan to configure a new class-based marking policy to classify and mark the applications running on the network. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 65 Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Classification and Marking Using NBAR Lab Commands 66 Command Description no service-policy {input | output} policy-map-name Removes a service policy from an input or output interface [no] ip nbar protocoldiscovery Configures NBAR to discover traffic for all protocols known to NBAR on a particular interface show ip nbar protocoldiscovery [interface interface-spec] Displays the statistics gathered by the NBAR protocol discovery feature clear ip nbar protocoldiscovery Clears NBAR protocol discovery statistics ip access-list {standard | extended} access-list-name Defines an IP access list by name permit tcp source sourcewildcard destination destination-wildcard [operator [port]] Sets conditions to allow a packet to pass a named IP access list permit udp source sourcewildcard destination destination-wildcard [operator [port]] Sets conditions to allow a packet to pass a named IP access list class-map class-map-name Creates a class map to be used for matching packets to a specified class match protocol protocol-name Configures the match criteria for a class map on the basis of the specified protocol match access-group {accessgroup | name access-groupname} Configures the match criteria for a class map on the basis of the specified ACL policy-map policy-map-name Creates or modifies a policy map that can be attached to one or more interfaces Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Command Description class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class set dscp dscp-value Marks a packet by setting the DSCP service-policy {input | output} policy-map-name Attaches a policy map to an input interface or VC, or an output interface or VC show class-map [class-mapname] Displays all class maps and their matching criteria show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity. „ Your assigned workgroup pod number provided by the instructor Task 1: Discover Applications and Traffic Using NBAR You will discover network applications and traffic using NBAR protocol discovery. Activity Procedure Complete these steps: Step 1 Disable the existing inbound service policy on the FastEthernet 0/0 interface of your WGxR1 router. Step 2 Verify that Cisco Express Forwarding is enabled on your WGxR1 router. Step 3 Enable NBAR protocol discovery on the FastEthernet 0/0 interface of your WGxR1 router. Step 4 Clear the NBAR protocol discovery counters on WGxR1. Step 5 Wait for the interface counters to accumulate traffic statistics for at least one minute. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 67 Step 6 Display the NBAR protocol discovery traffic statistics of all NBAR discovered protocols. FastEthernet0/0 Input Packet Count Byte Count 5 minute bit rate (bps) --------------- -----------------------sqlnet 157 9420 1000 citrix 201 13642 1000 http 86 13353 0 napster 98 5880 0 Protocol Output Packet Count Byte Count 5 minute bit rate (bps) -----------------------404 60678 3000 547 51549 3000 255 59838 3000 272 54727 3000 [rest omitted] Step 7 In the space provided below, list the protocols discovered by NBAR protocol discovery: 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. Step 8 Disable NBAR protocol discovery from the FastEthernet 0/0 interface on WGxR1. Step 9 Repeat Steps 1 through 8 for workgroup router WGxR2. Activity Verification You have completed this task when you attain this result: „ 68 You have properly configured NBAR protocol discovery to identify network applications. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 2: Configure Classification Using NBAR You will configure classification of discovered applications using NBAR classification. Activity Procedure Complete these steps: Step 1 Note On the WGxR1 router, configure NBAR classification and MQC marking to classify inbound traffic on the FastEthernet 0/0 interface and mark it as outlined in the table below. Completion of this lab step will require the configuration of five new class maps (one for each service class) and the configuration of a policy map (called marknbar) that marks traffic in each class appropriately. Remember that by default a class map is set to match all. If you are matching multiple protocols in the same class, remember to use match-any instead of match-all. Class Name (class-map name) Protocol PHB real-time rtp/rtcp EF real-time icmp EF mission-critical sqlnet AF 31 voice-control (port specific tcp and udp) interactive citrix AF 21 bulk ftp AF 11 scavenger kazaa2 CS 1 scavenger napster CS 1 class-default all others BE When using NBAR to match RTP packets, one limitation is that protocol matching for RTP does not match control packets. This is somewhat of an advantage in that it is preferred that voice bearer traffic be separated from voice control traffic because each traffic type receives different QoS treatment (EF for voice bearer and AF31 for voice control). Create the following named access list for matching RTCP traffic: ip access-list extended VoIP-RTCP permit udp any any range 16384 32767 Match the named access list, VoIP-RTCP, into the real-time traffic class along with the RTP and ICMP traffic. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 69 The mission-critical class should be configured to contain both the sqlnet traffic and voice-control traffic. Use this ACL to match voice control traffic when creating the mission-critical class on your router: ip access-list extended Voice-Control permit tcp any any eq 1720 permit tcp any any range 11000 11999 permit udp any any eq 2427 permit tcp any any eq 2428 permit tcp any any range 2000 2002 permit udp any any eq 1719 permit udp any any eq 5060 Note Step 2 Recall that ICMP traffic has been placed in the real-time class as a means of measuring QoS performance. Display and verify your class map configuration. Class Map match-all bulk (id 8) Match protocol ftp Class Map match-any real-time (id 5) Match protocol rtp Match protocol icmp Match access-group name VoIP-RTCP Class Map match-any mission-critical (id 6) Match protocol sqlnet Match access-group name Voice-Control Class Map match-all interactive (id 7) Match protocol citrix Class Map match-any scavenger (id 9) Match protocol kazaa2 Match protocol napster [rest omitted] Step 3 Display and verify your policy map configuration. Policy Map mark-nbar Class real-time set dscp ef Class mission-critical set dscp af31 Class interactive set dscp af21 Class bulk set dscp af11 Class scavenger set dscp cs1 Class class-default set dscp default 70 Step 4 Apply the policy map to the FastEthernet 0/0 interface of your WGxR1 router in the inbound direction. Step 5 Wait for the interface counters to accumulate traffic statistics for at least one minute. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 6 Display and verify your service policy on interface FastEthernet 0/0. FastEthernet0/0 Service-policy input: mark-nbar Class-map: real-time (match-any) 542 packets, 115388 bytes 5 minute offered rate 4000 bps, drop rate 0 bps Match: protocol rtp 4 packets, 856 bytes 5 minute rate 0 bps Match: protocol icmp 1 packets, 70 bytes 5 minute rate 0 bps Match: access-group name AutoQoS-VoIP-RTCP 537 packets, 114462 bytes 5 minute rate 4000 bps QoS Set dscp ef Packets marked 542 Class-map: mission-critical (match-any) 366 packets, 54424 bytes 5 minute offered rate 4000 bps, drop rate 0 bps Match: protocol sqlnet 331 packets, 50194 bytes 5 minute rate 3000 bps Match: access-group name Voice-Control 35 packets, 4230 bytes 5 minute rate 2000 bps QoS Set dscp af31 Packets marked 366 Class-map: interactive (match-all) 262 packets, 15720 bytes 5 minute offered rate 2000 bps, drop rate 0 bps Match: protocol citrix QoS Set dscp af21 Packets marked 295 [rest omitted] Step 7 Note Step 8 How many packets have been matched and marked for each of the traffic classes? Class real-time _______________________________ Class mission-critical _______________________________ Class interactive _______________________________ Class bulk _______________________________ Class scavenger _______________________________ Class class-default _______________________________ If the real-time, mission-critical, and scavenger classes have no matches, verify your classmap configuration to ensure they are set to match-any and not match-all. Repeat Steps 1 through 6 for workgroup router WGxR2. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 71 Step 9 How many packets have been matched and marked for each of the traffic classes? Class real-time _______________________________ Class mission-critical Class interactive _______________________________ _______________________________ Class bulk _______________________________ Class scavenger _______________________________ Class class-default Step 10 _______________________________ Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain these results: „ You have correctly configured NBAR classification. „ You have correctly configured class-based marking of NBAR classified traffic. Lab 4-2 Answer Key: Classification Using NBAR When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. WG1R1(config)#int fa 0/0 WG1R1(config-if)#no service-policy input mark-apps WG1R1(config-if)#ip nbar protocol-discovery NBAR should have discovered the following protocols: HTTP citrix sqlnet napster netbios FTP exchange kazaa2 LDAP RTP Unknown ip access-list extended VoIP-RTCP permit udp any any range 16384 32767 ! ip access-list extended Voice-Control permit tcp any any eq 1720 permit tcp any any range 11000 11999 permit udp any any eq 2427 permit tcp any any eq 2428 permit tcp any any range 2000 2002 permit udp any any eq 1719 permit udp any any eq 5060 ! class-map match-all bulk match protocol ftp class-map match-any real-time 72 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. match protocol rtp match protocol icmp match access-group name VoIP-RTCP class-map match-any mission-critical match protocol sqlnet match access-group name Voice-Control class-map match-all interactive match protocol citrix class-map match-all default match any class-map match-any scavenger match protocol kazaa2 match protocol napster ! policy-map mark-nbar class real-time set dscp ef class mission-critical set dscp af31 class interactive set dscp af21 class bulk set dscp af11 class scavenger set dscp cs1 class class-default set dscp default ! interface FastEthernet0/0 service-policy input mark-nbar © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 73 Lab 4-3: Configuring QoS Preclassify Complete this lab activity to practice what you learned in the lesson “Configuring QoS Preclassify” in the module “Classification and Marking.” Activity Objective In this activity, you will configure and examine QoS preclassify. After completing this activity, you will be able to meet these objectives: „ Configure a GRE tunnel „ Configure QoS preclassify on a Cisco IOS router using a GRE tunnel „ Monitor QoS preclassify configurations Visual Objective The figure illustrates what you will accomplish in this activity. The E-Commerce University IT staff has decided to implement a GRE tunnel between the north and south campus via the existing 768-kbps Internet connection. After the GRE tunnel is set up and working properly, IPSec will also be enabled over the GRE tunnel. At this point, the E-Commerce University IT staff needs you to first configure and test the GRE tunnel (without IPSec). The university plans to send different types of traffic over the tunnel and would like to be able to differentiate between different traffic flows so that QoS can be applied. In this lab, you will configure and verify the QoS preclassify feature for traffic classification over a GRE tunnel. 74 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Required Resources These are the resources and equipment required to complete this activity. „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring VPN QoS Lab Commands Command Description interface interface-id Enters interface configuration mode and the physical interface identification qos pre-classify Enables QoS preclassification ip cef Enables CEF on the router [no] shutdown Disables an interface show ip interface [brief] [type] [number] Lists a summary of an interface IP information and status copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity. „ Your assigned workgroup pod number provided by the instructor © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 75 Task 1: Configure GRE Tunnel You will configure a GRE tunnel. Activity Procedure Complete these steps: Step 1 Verify that the S0/0 and S0/1 interfaces of your workgroup WGxR1 and WGxR2 routers are UP. WGxR1#show ip interface brief Interface IP-Address OK? Method Status Protocol FastEthernet0/0 10.3.x.2 YES NVRAM up up Serial0/0 10.2.x.2 YES unset up Serial0/1 10.5.x.2 YES NVRAM up up up Step 2 Verify that CEF switching is still enabled on both workgroup routers in your pod. Step 3 Configure a GRE tunnel between your WGxR1 and WGxR2 routers via the service provider core as follows: ! WGxR1 ! interface Tunnel0 ip unnumbered fastethernet0/0 tunnel source Serial0/1 tunnel destination 10.5.x.2 ! WGxR2 ! interface Tunnel0 ip unnumbered fastethernet0/0 tunnel source Serial0/1 tunnel destination 10.4.x.1 Step 4 Configure a static route via the tunnel 0 interface to the 10.1.x.0 or 10.3.x.0 subnet on the respective WGxR router as follows: ! WGxR1 ! ip route 10.3.x.0 255.255.255.0 Tunnel0 ! WGxR2 ! ip route 10.1.x.0 255.255.255.0 Tunnel0 76 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 5 Display the tunnel interface and verify that it is UP and operational. WGxR2#show interface tunnel 0 Tunnel0 is up, line protocol is up Hardware is Tunnel Interface is unnumbered. Using address of FastEthernet0/0 (10.3.x.2) MTU 1514 bytes, BW 9 Kbit, DLY 500000 usec, reliability 255/255, txload 81/255, rxload 196/255 Encapsulation TUNNEL, loopback not set Keepalive not set Tunnel source 10.5.x.2 (Serial0/1), destination 10.4.x.1 Tunnel protocol/transport GRE/IP, key disabled, sequencing disabled Tunnel TTL 255 Checksumming of packets disabled, fast tunneling enabled Last input 00:00:03, output 00:00:04, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/0 (size/max) 5 minute input rate 25000 bits/sec, 9 packets/sec 5 minute output rate 39000 bits/sec, 23 packets/sec 87865 packets input, 12254589 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 282049 packets output, 54114890 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets Step 6 Use Telnet to connect to the Callgen-1 (10.1.x.11) router and perform a traceroute to the Callgen-2 (10.3.x.11) router. Verify that the path goes thru your GRE tunnel. Callgen-1>traceroute 10.3.x.11 Type escape sequence to abort. Tracing the route to 10.3.x.11 1 10.1.x.1 4 msec 0 msec 0 msec 2 10.3.x.11 140 msec * 8 msec Step 7 Use Telnet to connect to the Callgen-2 router and perform a traceroute to the Callgen-1 router. Verify that the path goes through your GRE tunnel. Callgen-2>traceroute 10.1.x.11 Type escape sequence to abort. Tracing the route to 10.1.x.11 1 10.3.x.2 60 msec 56 msec 64 msec 2 10.1.x.11 60 msec * 56 msec Step 8 Issue the show queue serial0/1 command to display the WFQ information for the serial 0/1 interface. WGxR1#show queue serial0/1 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 9269 Queueing strategy: weighted fair Output queue: 42/1000/64/9269 (size/max total/threshold/drops) Conversations 1/31/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 576 kilobits/sec (depth/weight/total drops/no-buffer drops/interleaves) 41/32384/9269/0/0 Conversation 95, linktype: ip, length: 206 source: 10.5.8.2, destination: 10.4.8.1, id: 0xC2FA, ttl: 255, prot: 47 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 77 You may have to run the show queue interface command a few times until you catch an active flow. If you are not able to see packets in the queue after several attempts, log onto your other workgroup router and repeat Step 8. Note How many active flows does the router see? ____________________________ Notice that when QoS preclassify is not configured, the output interface sees only one flow, which is Protocol 47 (GRE). Activity Verification You have completed this task when you attain this result: „ You have successfully configured a tunnel interface between WGxR1 and WGxR2 through the service provider backbone. Task 2: Configure QoS Preclassify You will configure QoS preclassify on a Cisco IOS router. Activity Procedure Complete this step: Step 1 Configure the QoS preclassify feature on the tunnel interface. Activity Verification You have completed this task when you attain this result: „ 78 You have successfully enabled the QoS preclassify feature on the tunnel interface. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 3: Monitor QoS Preclassify You will monitor QoS preclassify operations. Activity Procedure Complete these steps: Step 1 Issue the show queue serial0/1 command again to display the WFQ information for the serial 0/1 interface. WGxR1#show queue serial0/1 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 117791 Queueing strategy: weighted fair Output queue: 157/1000/64/117791 (size/max total/threshold/drops) Conversations 21/31/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 576 kilobits/sec (depth/weight/total drops/no-buffer drops/interleaves) 7/32384/0/0/0 Conversation 119, linktype: ip, length: 72 source: 10.1.1.10, destination: 10.3.1.10, id: 0xFF4C, ttl: 254, TOS: 104 prot: 6, source port 1063, destination port 1521 (depth/weight/total drops/no-buffer drops/interleaves) 7/32384/0/0/0 Conversation 212, linktype: ip, length: 196 source: 10.1.1.10, destination: 10.3.1.10, id: 0xE642, ttl: 127, TOS: 72 prot: 6, source port 1102, destination port 1494 (depth/weight/total drops/no-buffer drops/interleaves) 7/32384/0/0/0 Conversation 64, linktype: ip, length: 79 source: 10.1.1.10, destination: 10.3.1.10, id: 0x908A, ttl: 126, TOS: 184 prot: 17, source port 49590, destination port 49602

Note You may have to run the show queue interface command a few times until you catch some active flows. What happens when QoS preclassify is configured on the tunnel interface? ________________________________________________________________ Can WFQ now distinguish between different application flows? Or does WFQ still only see one flow, protocol 47 (GRE)? ___________________________________________________________________ © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 79 Step 2 On the WGxR1 and WGxR2 routers, remove the static route via the tunnel interface. Step 3 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ You have successfully examined the difference in traffic flows with and without the QoS preclassify feature enabled. Lab 4-3 Answer Key: Configuring QoS Preclassify When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. WGxR1: interface Tunnel0 ip unnumbered FastEthernet0/0 qos pre-classify tunnel source Serial0/1 tunnel destination 10.5.x.2 ! ip route 10.3.x.0 255.255.255.0 Tunnel0 WGxR2: interface Tunnel0 ip unnumbered FastEthernet0/0 qos pre-classify tunnel source Serial0/1 tunnel destination 10.4.x.1 ! ip route 10.1.x.0 255.255.255.0 Tunnel0 The following are the answers to the questions in this lab exercise: What happens when QoS preclassify is configured on the tunnel interface? The original packet headers are visible to the tunnel 0 interface and therefore useable for QoS manipulation. Can WFQ now distinguish between different application flows? Or does WFQ still only see one flow, protocol 47 (GRE)? Multiple flows are now visible. 80 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 4-4: LAN-Based Packet Classification and Marking Complete this lab activity to practice what you learned in the lesson “Configuring LAN Classification and Marking” in the module “Classification and Marking.” Activity Objective In this activity, you will configure LAN-based classification and marking. After completing this activity, you will be able to meet these objectives: „ Configure a trust boundary on a Catalyst 2950 switch to only trust Cisco IP Phones „ Configure CoS-to-DSCP mapping on a Catalyst 2950 switch „ Configure IP access lists and class-based marking on a Catalyst 2950 switch to mark traffic „ Verify the QoS markings from the workgroup switch using the workgroup routers Visual Objective The figure illustrates what you will accomplish in this activity. Your research into classification and marking policy has you concerned that students might inject their traffic into the network with CoS and DSCP markings that are not in accordance with the new QoS policy. Not forgetting the QoS requirements of the Cisco IP Phones connected in the wiring closet, you decide to establish a trust boundary that extends to these IP phones. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 81 In addition, you also wish to classify and mark traffic as close to the source as possible. Studying the default CoS-to-DSCP marking maps on your Catalyst 2950 switches, you discover that CoS 5 (which is set in your IP Phone endpoints automatically) is currently mapped to DSCP 40. You would like this to map to EF (DSCP 46) and decide to change the default CoSto-DSCP mapping in your Catalyst 2950 switches. Another issue is that the network also contains IP voice gateway devices that generate G.711 voice traffic, but cannot mark CoS or DSCP. You will have to implement classification and marking at your trust boundary using access lists to accommodate these voice gateways. Required Resources These are the resources and equipment required to complete this activity. „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. LAN Based Packet Classification and Marking Lab Commands 82 Command Description mls qos trust [cos | device cisco-phone | dscp] Configures the port trust state switchport priority extend {cos value | trust} Sets a port priority for the incoming untagged frames or the priority of frames received by the IP Phone connected to the specified port mls qos map {cos-dscp dscp1...dscp8 | dscp-cos dscp-list to cos} Defines the CoS-to-DSCP map or DSCP-to-CoS map access-list access-listnumber {deny | permit | remark} {source sourcewildcard | host source | any} Configures a standard IP ACL class-map class-map-name Creates a class map to be used for matching packets to the class whose name you specify match {access-group aclindex | access-group name acl-name | ip dscp dscplist} Defines the match criteria to classify traffic policy-map policy-map-name Creates or modifies a policy map that can be attached to multiple interfaces Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Command Description class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class set ip dscp new-dscp Classifies IP traffic by setting a DSCP value service-policy input policymap-name Applies a policy map defined by the policy-map command to the input of a particular interface show access-lists [name | number] Displays ACLs configured on the switch show class-map [class-mapname] Displays QoS class maps show policy-map [policy-mapname] Displays QoS policy maps show mls qos maps [cos-dscp | dscp-cos] Displays QoS mapping information show mls qos interface [interface-id] Displays QoS information at the interface level copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity. „ Your assigned workgroup pod number provided by the instructor Task 1: Configure Trust Boundary You will configure a trust boundary on a Catalyst 2950 switch to only trust Cisco IP Phones. Activity Procedure Complete this step: Step 1 Assuming there is a Cisco IP Phone connected to your workgroup WGxS1 switch FastEthernet 0/1 port, establish a trust boundary on your workgroup WGxS1 switch FastEthernet 0/1 interface by setting your workgroup WGxS1 switch FastEthernet 0/1 interface to only trust CoS from the Cisco IP Phone. Note Because there is not a Cisco IP Phone connected to your workgroup switch in the lab, all the incoming frames will have the CoS value set to the default port CoS of 0 by your workgroup switch. Activity Verification You have completed this task when you attain this result: „ You have properly configured a trust boundary on the WGxS1 switch to only trust Cisco IP Phones. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 83 Task 2: Configure CoS-to-DSCP Mapping You will configure CoS-to-DSCP mapping on a Catalyst 2950 switch. Activity Procedure Complete these steps: Step 1 Display the default CoS-to-DSCP mapping on your workgroup WGxS1 switch. Dscp-cos map: dscp: 0 8 10 16 18 24 26 32 34 40 46 48 56 --------------------------------------cos: 0 1 1 2 2 3 3 4 4 5 5 6 7 Cos-dscp map: cos: 0 1 2 3 4 5 6 7 -----------------------------dscp: 0 8 16 24 32 40 48 56 What is the default mapping of CoS 5? CoS 5 = DSCP _____ What is the DSCP PHB represented by the default mapping of CoS 5 on the Catalyst 2950? ___________________________________________ Step 2 Notice from Step 2 that the Catalyst 2950 default CoS-to-DSCP mapping does not map CoS 5 to DSCP 46. On your WGxS1 switch, change the default CoS-to-DSCP mapping to map CoS 5 to DSCP 46, because the downstream devices are expecting voice (CoS 5) traffic to be marked with DSCP 46 (EF). All other CoS-to-DSCP mappings can remain at their default values. Step 3 Display and verify the new CoS-to-DSCP mapping on your workgroup WGxS1 switch. Verify that CoS 5 is now being mapped to DSCP 46. Dscp-cos map: dscp: 0 8 10 16 18 24 26 32 34 40 46 48 56 --------------------------------------cos: 0 1 1 2 2 3 3 4 4 5 5 6 7 Cos-dscp map: cos: 0 1 2 3 4 5 6 7 -----------------------------dscp: 0 8 16 24 32 46 48 56 Activity Verification You have completed this task when you attain this result: „ 84 You have properly configured the CoS-to-DSCP mapping on WGxS1 to map CoS 5 to DSCP 46. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 3: Configure IP Access Lists and Class-Based Marking You will configure IP access lists and class-based marking on a Catalyst 2950 switch to mark traffic. Activity Procedure Complete these steps: Step 1 Assume that the Callgen routers (10.1.x.11 and 10.3.x.11) are the voice gateways described earlier and the Callgen routers are not marking voice traffic with DSCP 46 (EF). On your WGxS1 switch, create a policy map called mark-callgen, which uses two access lists and class-based marking to mark all the traffic from the Callgen routers (10.1.x.11 and 10.3.x.11) to DSCP 46 (EF). Name the two new service classes callgen1 and callgen2. Apply your class-based marking policy to the FastEtherent 0/1 interface on your WGxS1 switch in the inbound direction. Step 2 Display and verify your IP access-list configuration. Standard IP access list 1 permit 10.1.x.11 Standard IP access list 2 permit 10.3.x.11 Step 3 Display and verify your class-map configuration. Class Map match-any class-default (id 0) Match any Class Map match-all callgen1 (id 2) Match access-group 1 Class Map match-all callgen2 (id 3) Match access-group 2 Step 4 Display and verify the configuration of your class-based marking policy. Policy Map mark-callgen class callgen1 set ip dscp 46 class callgen2 set ip dscp 46 Step 5 Display and verify that your service policy is properly applied to the Fa0/1 interface in the inbound direction, and also verify the trust setting and the default CoS value. FastEthernet0/1 Attached policy-map for Ingress: mark-callgen trust state: not trusted trust mode: trust cos COS override: dis default COS: 0 pass-through: none trust device: cisco-phone © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 85 Activity Verification You have completed this task when you attain this result: „ You have correctly configured IP access lists and class-based marking on WGxS1 to mark traffic from the Callgen routers DSCP 46. Task 4: Verify QoS Markings You will verify the QoS markings from the workgroup switch using the workgroup routers. Activity Procedure Complete these steps: Step 1 To verify that the Catalyst 2950 classification and marking configuration is working correctly, you will configure a class map on your workgroup router to count marked packets. These verification steps should be performed on both workgroup routers WGxR1 and WGxR2. Step 2 On WGxR1, configure a new class map called match-sw-ef to match DSCP 46 traffic from the WGxS1 switch. Step 3 On WGxR1, configure a second new class map called match-sw-be to match DSCP 0 traffic from the WGxS1 switch. Step 4 Display and verify the two new class maps configured on WGxR1. Class Map match-all match-sw-ef (id 4) Match ip dscp ef Class Map match-all match-sw-be (id 5) Match ip dscp default Class Map match-any class-default (id 0) Match any Step 5 Configure a new policy map called verify-mark on WGxR1, which contains the two new traffic classes, match-sw-ef and match-sw-be. Step 6 Display and verify the policy-map configuration on WGxR1. Policy Map verify-mark Class match-sw-ef Class match-sw-be Step 7 Caution Step 8 86 Disable the existing inbound service policy on the FastEthernet 0/0 interface of WGxR1. Do not remove the actual policy map, which contains the real-time, mission-critical, interactive, bulk, and scavenger traffic classes, as you will use this policy map in later labs. Apply the new verify-mark policy to the FastEthernet 0/0 interface of WGxR1 in the inbound direction. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 9 Display and verify that the policy map is being applied correctly on the FastEthernet 0/0 interface. FastEthernet0/0 Service-policy input: verify-mark Class-map: match-sw-ef (match-all) 332 packets, 69798 bytes 5 minute offered rate 0 bps Match: ip dscp ef Class-map: match-sw-be (match-all) 10854 packets, 652290 bytes 5 minute offered rate 26000 bps Match: ip dscp default Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any How many packets have been matched for each of the traffic classes? Traffic Class WGxR1 WGxR2 match-sw-ef match-sw-be default Step 10 Repeat Steps 1 through 9 for router WGxR2. Step 11 Remove the inbound service policy from the FastEthernet 0/0 interface on both the WGxR1 and WGxR2 routers. Step 12 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ You have correctly verified the QoS markings from WGxS1 by configuring a QoS policy on WGxR1 and WGxR2 to count marked packets. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 87 Lab 4-4 Answer Key: LAN-Based Packet Classification and Marking When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. class-map match-all callgen2 match access-group 2 class-map match-all callgen1 match access-group 1 ! ! policy-map mark-callgen class callgen1 set ip dscp 46 class callgen2 set ip dscp 46 ! mls qos map cos-dscp 0 8 16 24 32 46 48 56 ! interface FastEthernet0/1 service-policy input mark-callgen mls qos trust device cisco-phone mls qos trust cos ! access-list 1 permit 10.1.1.11 access-list 2 permit 10.3.1.11 88 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 5-1: Configuring Basic Queuing Complete this lab activity to practice what you learned in the lesson “Configuring FIFO and WFQ” of the module “Congestion Management.” Activity Objective In this activity, you will configure WFQ on a router to improve QoS. After completing this activity, you will be able to meet these objectives: „ Configure FIFO queuing on Cisco routers „ Configure WFQ on Cisco routers „ Use the proper show commands to monitor and verify the WFQ operation „ Use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data Visual Objective The figure illustrates what you will accomplish in this activity. Once the proper classification and marking are implemented, the next step in completing the ECommerce University QoS policy is to implement queuing mechanisms. Being an adventurous network engineer, and to gain a better understanding of the various queuing mechanisms, you decide to first explore two of the more basic queuing methods: FIFO and WFQ. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 89 Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring Basic Queuing Lab Commands Command Description shutdown Disables an interface show interfaces [type number] Displays statistics for all interfaces configured on the router or access server interface interface-id Enters interface configuration mode and the physical interface identification [no]fair-queue [congestivediscard-threshold [dynamicqueues [reservable-queues]]] Enables WFQ for an interface clear counters Clears the interface counters show queue interface-name interface-number Displays the contents of packets inside a queue for a particular interface copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity. „ 90 Your assigned workgroup pod number provided by the instructor Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 1: Configure FIFO Queuing You will configure FIFO queuing on Cisco routers. Activity Procedure Complete these steps: Step 1 Knowing that the S0/0 interface on WGxR1 is 384 kbps, what will be the default queuing mechanism? _____________________________________________ Step 2 Verify your answer by displaying the current queuing mechanism on the S0/0 interface of WGxR1. Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: to WGxR2 Internet address is 10.2.1.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 73/255, rxload 170/255 Encapsulation HDLC, loopback not set Keepalive set (10 sec) Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 00:03:57 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 1358 Queueing strategy: weighted fair Output queue: 0/1000/64/1358 (size/max total/threshold/drops) Conversations 0/31/128 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 288 kilobits/sec 5 minute input rate 256000 bits/sec, 281 packets/sec 5 minute output rate 111000 bits/sec, 177 packets/sec 76914 packets input, 9858156 bytes, 0 no buffer Received 28 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 44293 packets output, 2764269 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Step 3 Disable WFQ on the serial 0/0 interface of the WGxR1 and WGxR2 routers. Which queuing method is S0/0 using now after WFQ was disabled? _________________________________________________ Step 4 Display the current queuing mechanism on the workgroup WGxR1 router S0/0 interface to verify your answer. Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: to WGxR2 Internet address is 10.2.8.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 239/255, rxload 48/255 Encapsulation PPP, LCP Open Open: CDPCP, IPCP, loopback not set Last input 00:00:04, output 00:00:00, output hang never Last clearing of "show interface" counters 21:01:49 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3041005 Queueing strategy: fifo Output queue: 18/40 (size/max) 5 minute input rate 73000 bits/sec, 207 packets/sec 5 minute output rate 360000 bits/sec, 353 packets/sec 19158035 packets input, 1358704729 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 1 input errors, 0 CRC, 1 frame, 0 overrun, 0 ignored, 0 abort 25555103 packets output, 2871522779 bytes, 0 underruns © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 91 0 output errors, 0 collisions, 5 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Step 5 Perform an extended ping from WGxR1 to WGxR2 using a repeat count of 100 and a size of 160 bytes and record the results in the table at the end of this lab. WGxR1#ping Protocol [ip]: Target IP address: 10.2.x.2 Repeat count [5]: 100 Datagram size [100]: 160 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 100, 160-byte ICMP Echos to 10.2.1.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (100/100), round-trip min/avg/max = 8/15/168 ms Step 6 Repeat the extended ping two more times and record your results in the table at the end of this lab. Step 7 Repeat Steps 5 and 6, but ping from WGxR2 to WGxR1 serial 0/0 interface and record the response time results in the table at the end of this lab. Step 8 What are some disadvantages of using FIFO queuing for the voice and missioncritical traffic? ___________________________________________________ Activity Verification You have completed this task when you attain this result: „ You have successfully configured FIFO queuing on WGxR1 and WGxR2. Task 2: Configure WFQ You will configure WFQ on Cisco routers. Activity Procedure Complete this step: Step 1 Reenable WFQ on the serial 0/0 interface of both WGxR1 and WGxR2. Use the default congestion discard threshold and the default maximum conversations. Activity Verification You have completed this task when you attain this result: „ 92 You have successfully configured WFQ on WGxR1 and WGxR2. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 3: Monitor and Verify WFQ You will use the proper show commands to monitor and verify the WFQ operation. Activity Procedure Complete these steps: Step 1 Display the interface statistics of the serial 0/0 interface. Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: to WGxR2 Internet address is 10.2.8.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 243/255, rxload 48/255 Encapsulation PPP, LCP Open Open: CDPCP, IPCP, loopback not set Last input 00:00:01, output 00:00:00, output hang never Last clearing of "show interface" counters 19:29:36 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 2678190 Queueing strategy: weighted fair Output queue: 184/1000/64/2677828 (size/max total/threshold/drops) Conversations 21/26/128 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 288 kilobits/sec 5 minute input rate 73000 bits/sec, 206 packets/sec 5 minute output rate 366000 bits/sec, 347 packets/sec 17972092 packets input, 1304053724 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttl 22:46:55: %SYS-5-CONFIG_I: Configured from console by consolees 1 input errors, 0 CRC, 1 frame, 0 overrun, 0 ignored, 0 abort 23553094 packets output, 2617787163 bytes, 0 underruns 0 output errors, 0 collisions, 3 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Step 2 What is the default CDT? ___________________________________________________________ Step 3 What is the default number of maximum conversations on the S0/0 interface? ___________________________________________________________ Step 4 Change the maximum number of conversations on the S0/0 interface of WGxR1 and WGxR2 to 1024. Step 5 Display the interface statistics of the serial 0/0 interface and verify that the maximum conversations have been correctly changed. Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: to WGxR2 Internet address is 10.2.8.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 243/255, rxload 48/255 Encapsulation PPP, LCP Open Open: CDPCP, IPCP, loopback not set Last input 00:00:06, output 00:00:00, output hang never Last clearing of "show interface" counters 19:32:41 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 2689808 Queueing strategy: weighted fair Output queue: 101/1000/64/2689446 (size/max total/threshold/drops) Conversations 15/29/1024 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 288 kilobits/sec 5 minute input rate 73000 bits/sec, 211 packets/sec 5 minute output rate 367000 bits/sec, 361 packets/sec © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 93 18011990 packets input, 1305889643 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 thrott 22:50:00: %SYS-5-CONFIG_I: Configured from console by consoleles 1 input errors, 0 CRC, 1 frame, 0 overrun, 0 ignored, 0 abort 23620090 packets output, 2626292704 bytes, 0 underruns 0 output errors, 0 collisions, 4 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Step 6 What is a benefit of increasing the maximum conversations? ________________________________________________________ Step 7 Clear the interface counters on your WGxR1 and WGxR2 routers. Step 8 Examine the active dynamic queues set up by WFQ. You may only see flows on one of your workgroup routers because of the traffic flow patterns between the Pagent-1 and Pagent-2 routers. Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 3227345 Queueing strategy: weighted fair Output queue: 34/1000/64/3226983 (size/max total/threshold/drops) Conversations 5/30/1024 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 288 kilobits/sec (depth/weight/total drops/no-buffer drops/interleaves) 1/32384/26/0/0 Conversation 85, linktype: ip, length: 44 source: 10.1.1.10, destination: 10.3.1.10, id: 0xFF4C, ttl: 254, TOS: 0 prot: 6, source port 1063, destination port 1521 (depth/weight/total drops/no-buffer drops/interleaves) 27/32384/416/0/0 Conversation 97, linktype: ip, length: 97 source: 10.1.1.10, destination: 10.3.1.10, id: 0xE642, ttl: 127, TOS: 0 prot: 6, source port 1102, destination port 1494 (depth/weight/total drops/no-buffer drops/interleaves) 8/32384/350/0/0 Conversation 57, linktype: ip, length: 279 source: 10.1.1.10, destination: 10.3.1.10, id: 0x908A, ttl: 126, TOS: 0 prot: 17, source port 49590, destination port 49602 How many packets have been dropped? _________________________ What is the number of active conversations? _____________________ What is the number of maximum active conversations? _____________ What is the maximum number of total conversations? ______________ What is the available bandwidth and how is it calculated? _____________________________________________________________ What is the significance of the weight in these conversations? _____________________________________________________________ What factor or factors can influence the weight? ____________________________ Activity Verification You have completed this task when you attain this result: „ 94 You have examined WFQ router parameters and monitored command output and successfully answered the questions contained in this lab exercise. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 4: Gather Network Response Time Data You will use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data. Activity Procedure Complete these steps: Step 1 Perform an extended ping from WGxR1 to WGxR2 using a repeat count of 100 and a size of 160 bytes and record the results in the table at the end of this lab. WGxR1#ping Protocol [ip]: Target IP address: 10.2.x.2 Repeat count [5]: 100 Datagram size [100]: 160 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 100, 160-byte ICMP Echos to 10.2.1.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (100/100), round-trip min/avg/max = 12/57/192 ms Step 2 Repeat the extended ping two more times and record your results in the table at the end of this lab. Step 3 Repeat Steps 1 and 2, but ping from the WGxR2 to WGxR1 serial 0/0 interface and record the response time results in the table at the end of this lab. Did the ping response time improve compared to when FIFO was the queuing method? _________________________________________________________ Step 4 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. WGxR1 RTT Measurement Worksheet Network Situation Ping 1 RTT (min/ave/max) Ping 2 RTT (min/ave/max) Ping 3 RTT (min/ave/max) Before Pagnet / Callgen traffic (from 2-2: Baseline QoS Measurement) After Pagnet and Callgen traffic (from 2-2: Baseline QoS Measurement) After enabling Auto-QoS (from 3-1: Configuring QoS with AutoQoS) FIFO (from 5-1: Configuring Basic Queuing) WFQ (from 5-1: Configuring Basic Queuing) © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 95 WGxR2 RTT Measurement Worksheet Network Situation Ping 1 RTT (min/ave/max) Ping 2 RTT (min/ave/max) Ping 3 RTT (min/ave/max) Before Pagnet / Callgen traffic (from 2-2: Baseline QoS Measurement) After Pagnet and Callgen traffic (from 2-2: Baseline QoS Measurement) After enabling Auto-QoS (from 3-1: Configuring QoS with AutoQoS) FIFO (from 5-1: Configuring Basic Queuing) WFQ (from 5-1: Configuring Basic Queuing) Activity Verification You have completed this task when you attain this result: „ You have compared the round-trip response times for packets traversing a serial interface using FIFO queuing to an interface using WFQ. Lab 5-1 Answer Key: Configuring Basic Queuing When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. Sample WGxR1 RTT Measurement Worksheet Network Situation 96 Ping 1 RTT (min/ave/max) Ping 2 RTT (min/ave/max) Ping 3 RTT (min/ave/max) Before Pagnet / Callgen traffic (from 2-2: Baseline QoS Measurement) 8/8/12 8/8/12 8/9/16 After Pagnet and Callgen traffic (from 2-2: Baseline QoS Measurement) 8/43/120 16/42/116 12/43/112 After enabling Auto-QoS (from 3-1: Configuring QoS with AutoQoS) 32/54/88 32/53/88 32/54/88 FIFO (from 5-1: Configuring Basic Queuing) 28/122/265 44/129/228 28/131/249 WFQ (from 5-1: Configuring Basic Queuing) 12/46/128 16/48/188 12/43/121 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. The following are the answers to the questions in this lab exercise: Knowing that the S0/0 interface on WGxR1 is 384 kbps, what will be the default queuing mechanism? Weighted fair queuing Which queuing method is S0/0 using now after WFQ was disabled? First-in, first-out (FIFO) What are some disadvantages of using FIFO queuing for voice and mission-critical traffic? Smaller packets can suffer excessive delay and variable delay waiting in a FIFO queue behind larger data packets. Aggressive flows can also starve fragile flow types like voice and interactive traffic. What is the default CDT? 64 What is the default number of maximum conversations on the S0/0 interface? 128 What is a benefit of increasing the maximum conversations? The probability that two distinct flows will be classified into the same dynamic queue is reduced. What is the available bandwidth and how is it calculated? Available bandwidth in this case is 288 kbps. Available bandwidth is calculated as 75 percent of the configured interface bandwidth. What is the significance of the weight in these conversations? Weight is used by WFQ to reduce the finish time of queued packets, making them appear smaller than they are to WFQ. This results in faster dispatching of lower weighted packets. What factor(s) can influence the weight? IP precedence or DSCP class selector markings can influence WFQ weight. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 97 Lab 5-2: Configuring LLQ Complete this lab activity to practice what you learned in the lesson “Configuring CBWFQ and LLQ” in the module “Congestion Management.” Activity Objective In this activity, you will configure LLQ on a router to improve QoS. After completing this activity, you will be able to meet these objectives: „ Configure LLQ on a Cisco router to provide bandwidth guarantees „ Use the proper show commands to monitor and verify the LLQ operation „ Use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data Visual Objective The figure illustrates what you will accomplish in this activity. In Lab Exercise 5-1, you examined both FIFO queuing and WFQ. FIFO is a first-come, first-serve queuing strategy. As such, FIFO does not classify traffic into different flows, or provide differentiated treatment to packets. FIFO does not fairly allocate bandwidth among multiple flows. Some flows may receive more bandwidth because they contain larger packets, or because they send more packets (aggressive flows). FIFO does not give priority to voice traffic or mission-critical traffic, because it cannot differentiate between packets from different flows. Therefore, if FIFO is implemented on the serial WAN links, the configuration will not meet the E-Commerce University requirements for the voice and Oracle (SQL) traffic. 98 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. After FIFO queuing, WFQ was enabled on the workgroup routers. With WFQ, packets are automatically classified into a particular dynamic queue based on information contained within the protocol headers. WFQ automatically assigns a weight to the packets. The weight is based on the IP precedence value and the size of the packets. Higher IP precedence and smaller-sized packets will receive better service than lower IP precedence and larger-sized packets. However, WFQ does not provide any hard bandwidth guarantees to voice traffic or to mission-critical traffic. From the traffic measurement results (RTT observations), it was determined that WFQ provided too much latency for EF traffic types. Therefore, in order to improve voice quality and the response time of mission-critical traffic, LLQ must be implemented on the workgroup routers. Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring Queuing Hybrids Lab Commands Command Description class-map class-map-name Creates a class map to be used for matching packets to the class whose name you specify match {access-group aclindex | access-group name acl-name | ip dscp dscplist} Defines the match criteria to classify traffic match [ip] dscp dscp-value Identifies a specific IP DSCP value as a match criterion match protocol protocol-name Configures the match criteria for a class map on the basis of the specified protocol policy-map policy-map-name Creates or modifies a policy map that can be attached to multiple interfaces class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class set ip dscp new-dscp Classifies IP traffic by setting a DSCP value priority{bandwidth-kbps | percent percentage} [burst] Gives priority to a class of traffic belonging to a policy map © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 99 Command Description bandwidth {bandwidth-kbps | remaining percent percentage | percent percentage} Specifies or modifies the bandwidth allocated for a class belonging to a policy map service-policy input policymap-name Applies a policy map defined by the policy-map command to the input of a particular interface access-list access-listnumber {deny | permit} tcp src src-wildcard [operator [port]] dest dest-wildcard [operator [port]] Defines an extended IP access list for TCP-based traffic show access-lists [accesslist-number | access-listname] Displays the contents of current access lists show class-map [class-mapname] Displays all class maps and their matching criteria show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ 100 Your assigned workgroup pod number provided by the instructor Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 1: Configure LLQ You will configure LLQ on a Cisco router to provide bandwidth guarantees. Activity Procedure Complete these steps: Step 1 Connect to your WGxR1 router and verify that the QoS policy map named marknbar is still configured. Apply the existing mark-nbar policy map to the FastEthernet 0/0 interface in the inbound direction. If you do not have the mark-nbar policy, it is shown below: class-map match-any real-time match protocol rtp match protocol icmp match access-group name VoIP-RTCP class-map match-any mission-critical match protocol sqlnet match access-group name Voice-Control class-map interactive match protocol citrix class-map bulk match protocol ftp class-map match-any scavenger match protocol kazaa2 match protocol napster ! policy-map mark-nbar class real-time set ip dscp ef class mission-critical set ip dscp af31 class interactive set ip dscp af21 class bulk set ip dscp af11 class scavenger set ip dscp cs1 Step 2 At this point, what is the expected effect on traffic flow out of the low-speed 384kbps serial link (S0/0) when the mark-nbar service policy is applied on the FastEthernet 0/0 interface of WGxR1 router? Explain. ____________________________________________________________________ © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 101 Step 3 Step 4 Configure five new class maps on your workgroup WGxR1 router as described in this table. When matching ICMP traffic, use an extended ACL instead of NBAR, because NBAR only matches transit traffic. Class Name (class map name) Match Criteria ef-traffic EF, ICMP echo and reply af31-traffic AF 31 af21-traffic AF 21 af11-traffic AF 11 cs1-traffic CS 1 Display and verify your extended IP access list for matching the ping traffic. Extended IP access list 100 10 permit icmp any any echo-reply (100 matches) 20 permit icmp any any echo Step 5 Display and verify the five new class maps configured on your workgroup WGxR1 router. Class Map match-any ef-traffic (id 10) Match dscp ef Match access-group 100 Class Map match-all af21-traffic (id 12) Match dscp af21 Class Map match-all af31-traffic (id 11) Match dscp af31 Class Map match-all af11-traffic (id 13) Match dscp af11 Class Map match-all cs1-traffic (id 14) Match 102 dscp cs1 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 6 Configure a new policy map called llq-policy on your workgroup WGxR1 router, in which each traffic class gets the following bandwidth guarantee: Traffic Class Bandwidth Guarantee ef-traffic 168 kbps maximum af31-traffic 40% of remaining bandwidth minimum af21-traffic 20% of remaining bandwidth minimum af11-traffic 13% of remaining bandwidth minimum cs1-traffic 2% of remaining bandwidth minimum class-default 25% of remaining bandwidth minimum Activity Verification You have completed this task when you attain these results: „ You have configured LLQ on a Cisco router to provide bandwidth guarantees. Task 2: Monitor and Verify LLQ Operation You will use the proper show commands to monitor and verify the LLQ. Activity Procedure Complete these steps: Step 1 Display and verify the llq-policy policy map on your workgroup WGxR1 router. Policy Map llq-policy Class ef-traffic Strict Priority Bandwidth 168 (kbps) Burst 4200 (Bytes) Class af31-traffic Bandwidth remaining 40 (%) Max Threshold 64 (packets) Class af21-traffic Bandwidth remaining 20 (%) Max Threshold 64 (packets) Class af11-traffic Bandwidth remaining 13 (%) Max Threshold 64 (packets) Class cs1-traffic Bandwidth remaining 2 (%) Max Threshold 64 (packets) Class class-default Bandwidth remaining 25 (%) Max Threshold 64 (packets) Step 2 Apply the new llq-policy policy map on your workgroup WGxR1 router S0/0 interface in the outbound direction. Why must the policy be applied in the outbound direction and not the inbound direction? Explain. _______________________________________________ Step 3 Repeat the above LLQ configuration, Task 1 Steps 1 through 6 and Task 2 Steps 1 and 2, for the WGxR2 router. Step 4 Wait for the interface counters to accumulate traffic statistics for at least one minute. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 103 Step 5 Display and verify the outbound service policy on your workgroup WGxR1 router S0/0 interface. Serial0/0 Service-policy output: llq-policy Class-map: ef-traffic (match-any) 332 packets, 66452 bytes 5 minute offered rate 2000 bps, drop rate 0 bps Match: dscp ef 332 packets, 66452 bytes 5 minute rate 2000 bps Match: access-group 100 0 packets, 0 bytes 5 minute rate 0 bps Queueing Strict Priority Output Queue: Conversation 136 Bandwidth 168 (kbps) Burst 4200 (Bytes) (pkts matched/bytes matched) 332/66452 (total drops/bytes drops) 0/0 Class-map: af31-traffic (match-all) 1067 packets, 149314 bytes 5 minute offered rate 4000 bps, drop rate 0 bps Match: dscp af31 Queueing Output Queue: Conversation 137 Bandwidth remaining 40 (%) Max Threshold 64 (packets) (pkts matched/bytes matched) 1248/172788 (depth/total drops/no-buffer drops) 19/0/0 Class-map: af21-traffic (match-all) 1452 packets, 122100 bytes 5 minute offered rate 4000 bps, drop rate 0 bps Match: dscp af21 Queueing Output Queue: Conversation 138 Bandwidth remaining 20 (%) Max Threshold 64 (packets) (pkts matched/bytes matched) 1672/140600 (depth/total drops/no-buffer drops) 33/0/0 Class-map: af11-traffic (match-all) 510 packets, 32499 bytes 5 minute offered rate 2000 bps, drop rate 0 bps Match: dscp af11 Queueing Output Queue: Conversation 139 Bandwidth remaining 13 (%) Max Threshold 64 (packets) (pkts matched/bytes matched) 618/39384 (depth/total drops/no-buffer drops) 0/0/0 Class-map: cs1-traffic (match-all) 891 packets, 197225 bytes 5 minute offered rate 6000 bps, drop rate 4000 bps Match: dscp cs1 Queueing Output Queue: Conversation 140 Bandwidth remaining 2 (%) Max Threshold 64 (packets) (pkts matched/bytes matched) 1089/241224 (depth/total drops/no-buffer drops) 64/725/0 Class-map: class-default (match-any) 2638 packets, 442008 bytes 5 minute offered rate 10000 bps, drop rate 4000 bps Match: any Queueing Output Queue: Conversation 141 Bandwidth remaining 25 (%) Max Threshold 64 (packets) (pkts matched/bytes matched) 3261/539295 (depth/total drops/no-buffer drops) 45/1350/0 Which traffic class or classes, if any, still have drops? _____________ 104 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 6 Display and verify the outbound service policy on your workgroup WGxR2 router S0/0 interface. Which traffic class or classes, if any, still have drops? _____________ Activity Verification You have completed this task when you attain these results: „ You have used the proper show commands to monitor and verify LLQ operation. Task 3: Gather Network Response Time Data You will use Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data. Activity Procedure Complete these steps: Step 1 Perform an extended ping from WGxR1 to WGxR2 using a repeat count of 100 and a size of 160 bytes and record the results in the table at the end of this lab. WGxR1#ping Protocol [ip]: Target IP address: 10.2.x.2 Repeat count [5]: 100 Datagram size [100]: 160 Timeout in seconds [2]: Extended commands [n]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 100, 160-byte ICMP Echos to 10.2.1.2, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!! Success rate is 100 percent (100/100), round-trip min/avg/max = 8/17/68 ms Step 2 Repeat the extended ping two more times and record your results in the table at the end of this lab. Step 3 Repeat Steps 1 and 2, but ping from the WGxR2 to WGxR1 serial 0/0 interface and record the response time results in the table at the end of this lab. Step 4 Compare the ping results to the results from the previous lab exercises (2-2: Baseline QoS Measurement; 3-1: Configuring QoS with AutoQoS). Comparing all the results, which QoS mechanism provides the best response time for VoIP packets? __________________________________________ Step 5 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 105 WGxR1 RTT Measurement Worksheet Network Situation Ping 1 RTT (min/ave/max) Ping 2 RTT (min/ave/max) Ping 3 RTT (min/ave/max) Ping 2 RTT (min/ave/max) Ping 3 RTT (min/ave/max) Before Pagnet / Callgen traffic (from 2-2: Baseline QoS Measurement) After Pagnet and Callgen traffic (from 2-2: Baseline QoS Measurement) After enabling Auto-QoS (from 3-1: Configuring QoS with AutoQoS) FIFO (from 5-1: Configuring Basic Queuing) WFQ (from 5-1: Configuring Basic Queuing) LLQ results from this lab WGxR2 RTT Measurement Worksheet Network Situation Ping 1 RTT (min/ave/max) Before Pagnet / Callgen traffic (from 2-2: Baseline QoS Measurement) After Pagnet and Callgen traffic (from 2-2: Baseline QoS Measurement) After enabling Auto-QoS (from 3-1: Configuring QoS with AutoQoS) FIFO (from 5-1: Configuring Basic Queuing) WFQ (from 5-1: Configuring Basic Queuing) LLQ results from this lab Activity Verification You have completed this task when you attain these results: You have used Cisco IOS monitoring commands and network connectivity tools (ping) to gather network response time data. 106 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 5-2 Answer Key: Configuring LLQ When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. access-list 100 permit icmp any any echo access-list 100 permit icmp any any echo-reply class-map match-any match dscp ef match access-group class-map match-all match dscp af21 class-map match-all match dscp af31 class-map match-all match dscp af11 class-map match-all match dscp cs1 class-map match-all match any ef-traffic 100 af21-traffic af31-traffic af11-traffic cs1-traffic class-default ! policy-map llq-policy class ef-traffic priority 168 class af31-traffic bandwidth remaining class af21-traffic bandwidth remaining class af11-traffic bandwidth remaining class cs1-traffic bandwidth remaining class class-default bandwidth remaining percent 40 percent 20 percent 13 percent 2 percent 25 ! interface Serial0/0 service-policy output llq-policy interface FastEthernet0/0 service-policy input mark-nbar Sample WGxR1 RTT Measurement Worksheet Network Situation Ping 1 RTT (min/ave/max) Ping 2 RTT (min/ave/max) Ping 3 RTT (min/ave/max) Before Pagnet / Callgen traffic (from 2-2: Baseline QoS Measurement) 8/8/12 8/8/12 8/9/16 After Pagnet and Callgen traffic (from 2-2: Baseline QoS Measurement) 8/43/120 16/42/116 12/43/112 After enabling Auto-QoS (from 3-1: Configuring QoS with AutoQoS) 32/54/88 32/53/88 32/54/88 FIFO (from 5-1: Configuring Basic Queuing) 28/122/265 44/129/228 28/131/249 WFQ (from 5-1: Configuring Basic Queuing) 12/46/128 16/48/188 12/43/121 LLQ results from this lab 8/17/72 8/17/56 8/19/77 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 107 The following is the answer to the question in this lab exercise: Comparing all the results, which QoS mechanism provided the best response time for VoIP packets? LLQ 108 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 5-3: Configuring Queuing on a Catalyst Switch Complete this lab activity to practice what you learned in the lesson “Configuring LAN Congestion Management” in the module “Congestion Management.” Activity Objective In this activity, you will configure the two queuing methods available on the Catalyst 2950 switch. After completing this activity, you will be able to meet these objectives: „ Examine queuing configurations resulting from the application of AutoQoS on the Catalyst 2950 switch „ Configure and monitor CoS-to-queue mapping on the Catalyst 2950 switch „ Configure and monitor WRR queuing on the Catalyst 2950 switch Visual Objective The figure illustrates what you will accomplish in this activity. After reviewing the AutoQoS output on the Catalyst 2950 switch, the E-Commerce University IT staff has a few questions about the AutoQoS-generated configurations. After meeting with the IT staff and hopefully answering all questions, the IT staff has decided to change the default Catalyst 2950 queuing from PQ to WRR with an expedite queue so that only voice (CoS 5) frames will receive strict priority, while giving frames with CoS 0 to 4 a lower weight than frames with CoS 6 to 7. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 109 Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Queuing on Catalyst Switches Lab Commands Command Description show wrr-queue cos-map Displays the mapping of the CoS PQs wrr-queue bandwidth weight1...weight4 Assigns WRR weights to the four CoS priority queues no wrr-queue cos-map Sets the CoS map to default setting wrr-queue cos-map quid cos1...cosn Assigns CoS values to the CoS priority queues. quid: The queue ID of the CoS priority queue cos1...cosn: The CoS values that are mapped to the queue ID mls qos map cos-dscp dscp1...dscp8 Defines the CoS-to-DSCP map mls qos trust [cos | device cisco-phone | dscp] Configures the port trust state show wrr-queue bandwidth Displays the WRR bandwidth allocation for the four CoS priority queues copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity. „ 110 Your assigned workgroup pod number provided by the instructor Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 1: Queuing Configurations on the Catalyst 2950 Switch You will examine queuing configurations resulting from the application of AutoQoS on the Catalyst 2950 switch. Activity Procedure Complete these steps: Step 1 In this lab, you will first examine the default PQ on the Catalyst 2950 workgroup switch. Then you will configure and examine WRR on the Catalyst 2950 workgroup switch. What is the default queuing mechanism on the Catalyst 2950 switch? _______________________________________________________ Step 2 Connect to your WGxS1 switch and display the CoS-to-queue mapping. Your output should look similar to the following: CoS Value : Priority Queue: 0 1 1 1 2 2 3 2 4 3 5 3 6 4 7 4 How many output queues per interface are available for the Catalyst 2950? _______ Which queue has the highest priority? __________________ Step 3 In Lab Exercise 3-1, Configuring QoS with AutoQoS, the AutoQoS for VoIP feature was enabled on the Catalyst 2950 switch in your workgroup. By default, AutoQoS enables queuing as shown in the following configuration: WGxS1#show auto qos Initial configuration applied by AutoQoS: wrr-queue bandwidth 20 1 80 0 no wrr-queue cos-map wrr-queue cos-map 1 0 1 2 4 wrr-queue cos-map 3 3 6 7 wrr-queue cos-map 4 5 mls qos map cos-dscp 0 8 16 26 32 46 48 56 ! interface FastEthernet0/1 mls qos trust cos Step 4 What type of queuing is enabled using the above configuration? _____________ Step 5 From the wrr-queue bandwidth 20 1 80 0 command, why is the weight for queue #4 equal to “0”? __________________________________________________ Step 6 What do the following commands accomplish? wrr-queue cos-map 1 0 1 2 4 wrr-queue cos-map 3 3 6 7 wrr-queue cos-map 4 5 ________________________________________________________________ © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 111 Activity Verification You have completed this task when you attain this result: „ 112 You have examined queuing configurations resulting from the application of AutoQoS on the Catalyst 2950 switch. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 2: Configure and Monitor CoS-to-Queue Mapping You will configure and monitor CoS-to-queue mapping on the Catalyst 2950 switch. Activity Procedure Complete this step: Step 1 On the WGxS1 switch, implement WRR queuing as follows: Configure a PQ that services all frames marked CoS 5. Configure WRR queue 3 to service all frames marked CoS 6 and CoS 7 and guarantee a bandwidth of 70. Configure WRR queue 1 to service all frames marked CoS 0 to CoS 4 and guarantee a bandwidth of 30. WRR queue 2 is unused and should be configured as such. Activity Verification You have completed this task when you attain these results: „ You have configured and monitored CoS-to-queue mapping on the Catalyst 2950 switch. Task 3: Configure and Monitor WRR Queuing You will monitor WRR queuing on the Catalyst 2950 switch. Activity Procedure Complete these steps: Step 1 Display and verify that CoS-to-queue mapping has been correctly configured and the frames marked CoS 5 are serviced by the PQ. CoS Value Step 2 : 0 1 2 3 4 5 6 7 Priority Queue: 1 1 1 1 1 4 3 3 Display and verify the weight setting for each queue. WRR Queue: 1 2 3 4 bandwidth: 30 1 70 0 Step 3 Configure the FastEthernet 0/1 interface on WGxS1 to trust the CoS marking. Step 4 Ensure that DSCP EF is marked 46 for incoming frames marked CoS 5. Step 5 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ You have monitored WRR queuing on the Catalyst 2950 switch. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 113 Lab 5-3 Answer Key: Queuing on Catalyst Switches When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. wrr-queue wrr-queue wrr-queue wrr-queue bandwidth cos-map 1 cos-map 3 cos-map 4 30 1 70 0 0 1 2 3 4 6 7 5 The following are the answers to the questions in this lab exercise: What is the default queuing mechanism on the Catalyst 2950 switch? Priority queuing How many output queues per interface are available for the Catalyst 2950? Four Which queue has the highest priority? Queue 4 What type of queuing is enabled using the following configuration? WGxS1#show auto qos Initial configuration applied by AutoQoS: wrr-queue bandwidth 20 1 80 0 no wrr-queue cos-map wrr-queue cos-map 1 0 1 2 4 wrr-queue cos-map 3 3 6 7 wrr-queue cos-map 4 5 mls qos map cos-dscp 0 8 16 26 32 46 48 56 ! interface FastEthernet0/1 mls qos trust cos WRR with an expedite queue From the wrr-queue bandwidth 20 1 80 0 command, why is the weight for queue 4 equal to “0”? Setting the weight of queue 4 to 0 configures queue 4 as a strict priority queue, also known as an expedite queue. What do the following commands accomplish? wrr-queue cos-map 1 0 1 2 4 wrr-queue cos-map 3 3 6 7 wrr-queue cos-map 4 5 These commands map frames with CoS values to specific output queues. 114 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Case Study 6-1: WRED Traffic Profiles This case study enables you to practice the skills and knowledge learned in the module: “Congestion Avoidance.” Activity Objective In this activity, you will create the appropriate WRED traffic profile to properly implement a customer QoS administrative policy. After completing this activity, you will be able to meet these objectives: „ Review customer QoS requirements „ Identify the service classes required to implement the policy „ Create WRED traffic profiles that can be used to implement the policy „ Present a solution to the case study Visual Objective The figure illustrates what you will accomplish in this activity. Visual Objective for Case Study 6-1: WRED Traffic Profiles 1. Review customer QoS requirements. Completely read the customer requirements provided. 2. Identify QoS service class requirements. With the aid of your partner, identify the service classes required to implement the administrative QoS policy based on customer requirements. 3. Create WRED traffic profiles. Create the WRED traffic profiles required to properly implement the administrative QoS policy. 4. Present Your Solution. After the instructor presents a solution to the case study, present your solution to the class with your partner. © 2006 Cisco Systems, Inc. All rights reserved. QoS v2.2—29 Required Resources These are the resources required to complete this activity: „ Case Study Activity: WRED Traffic Profiles „ A workgroup consisting of two learners © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 115 QoS Administrative Policy Requirements This case study activity provides information regarding the QoS administrative policy requirements of a small- to mid-sized network. Your task is to work with a partner to evaluate the QoS requirements, and, based on these requirements, create WRED traffic profiles that you can use to implement the required QoS administrative policy. You will discuss your traffic profile with the instructor and other classmates, and the instructor will present a solution for the case study to the class. Task 1: Creating WRED Traffic Profiles Complete this step: Step 1 Review customer QoS requirements. Completely read the customer requirements provided. Review Customer QoS Requirements This case study involves analyzing an administrative QoS policy of LCR Incorporated, a fictitious manufacturer of recumbent bicycles. The company has provided you with a short description of their requirements. It is your task to provide the network engineers from LCR with a QoS solution to meet their requirements. Read the customer requirements and discuss them with your partner. Identify the different classes of service required and hence the number of WRED traffic profiles required to solve this customer problem. Company Background LCR Incorporated began making recumbent bicycles in the garage of its owner, Patrick Cagney, in 1984. Since that time, the company has grown to be a global provider of recumbent bicycles. Headquartered in St. Petersburg, Florida, LCR has two manufacturing facilities and five sales offices in the United States. Each site uses dedicated 100-Mb switching to the desktop and contains a distributed server farm. Each site connects over a private WAN connection to the corporate headquarters using an IP-enabled Frame Relay service from a global service provider. WAN link speeds are all T1 (1.544 Mbps). Customer Situation LCR Incorporated is currently experiencing application performance problems and has an urgent need to resolve them. Internet usage at LCR is extremely high because most of the sales and customer contacts of the company use the Internet. The company currently has redundant, 3-Mbps Internet connections at its headquarters. Much of the use of the Internet, however, is for non-business-critical applications. Therefore, Internet browsing and non-critical applications should be treated as the lowest priority. 116 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Many of the applications at LCR, such as Oracle and Citrix, are distributed between sites because they require collaboration between members of the LCR staff. Manufacturing and Finance use Oracle databases to manage inventory, shipping, order entry, and customer billing. These systems are integrated across the company and reside in the main data center at the headquarters location. Citrix is heavily used for quality assurance monitoring of manufacturing and its automated systems. LCR has indicated that the Oracle and Citrix transactions are critical to the company. Internet traffic should not be allowed to interfere with Oracle or Citrix transactions. Working with the network engineering staff at LCR and the service provider, you have been enlisted to assist LCR by defining QoS requirements for their network. Their first priority is to deploy active congestion management mechanisms across the provider backbone to ease the congestion issues they are experiencing. Step 2 Identify QoS service class requirements. With the aid of your partner, identify the service classes required to implement the administrative QoS policy based on customer requirements. Identify QoS Service Class Requirements Identify the different traffic classes required to implement the customer administrative QoS policy. Use the table below to help you with your answer choices. Write your answers on the lines below: Customer Traffic: _______________________ PHB: ____________ DSCP: ____________ Customer Traffic: _______________________ PHB: ____________ DSCP: ____________ Customer Traffic: _______________________ PHB: ____________ DSCP: ____________ © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 117 QoS Service Classes PHB DSCP Value Intended Protocols and Applications Service Class EF EF 101110 Interactive voice Voice Bearer AF1 AF11 AF12 AF13 001010 001100 001110 General data service, FTP, backups Bulk Data AF2 AF21 AF22 AF23 010010 010100 010110 Database access, transaction services, interactive traffic, preferred data service Transactional AF3 AF31 AF32 AF33 011010 011100 011110 Locally defined mission-critical applications Missioncritical AF4 AF41 AF42 AF43 100010 100100 100110 Interactive video and associated voice Interactive video CS6 Class 6 110000 BGP, OSPF, etc. Routing (reserved) CS4 Class 4 100000 Often proprietary Streaming video CS3 Class 3 011000 (SIP, H.323, etc. Call signaling CS1 Class 1 001000 User-selected service, PPP Applications Default Default (Best Effort) Class 0 000000 Unspecified traffic, email, Internet Less-thanbest-effort data (Scavenger) Best-effort Step 3 118 DSCP Service Class and Configuration Admission Control = RSVP Queuing = Priority Queuing = Rate Based Active Queue Mgt = WRED minth AF13 < maxth AF13 <= minth AF12 < maxth AF12 <= minth AF11 < maxth AF11 Queuing = Rate Based Active Queue Mgt = WRED minth AF23 < maxth AF23 <= minth AF22 < maxth AF22 <= minth AF21 < maxth AF21 Queuing = Rate Based Active Queue Mgt = WRED minth AF33 < maxth AF33 <= minth AF32 < maxth AF32 <= minth AF31 < maxth AF31 Admission Control = RSVP Queuing = Rate Based Active Queue Mgt = WRED minth AF43 < maxth AF43 <= minth AF42 < maxth AF42 <= minth AF41 < maxth AF41 Queuing = Rate Based Small guaranteed minimum rate Active Queue Mgt = RED minth < maxth, but minth is deep to minimize loss Admission Control = RSVP Queuing = Rate Based Active Queue Mgt = RED minth < maxth Queuing = Rate Based Small guaranteed minimum rate Active Queue Mgt = RED minth < maxth, but minth is deep to minimize loss Queuing = Rate Based No bandwidth guarantee Active Queue Mgt = RED minth < maxth Queuing = Rate Based Minimal bandwidth guarantee Active Queue Mgt or Per-flow fair queuing Active Queue Mgt = RED minth < maxth Create WRED traffic profiles. Create the WRED traffic profiles required to properly implement the administrative QoS policy. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Create WRED Traffic Profiles Create a WRED traffic profile for each of the service classes identified in the previous section. Use the table to assist you in creating your profile. When completing each profile, be sure to draw the traffic profile and include all information on the blank profile graphic provided. Cisco IOS Default WRED Profile Values PHB Minimum Threshold Maximum Threshold Mark Probability af11 32 40 1/10 af12 28 40 1/10 af13 24 40 1/10 af21 32 40 1/10 af22 28 40 1/10 af23 24 40 1/10 af31 32 40 1/10 af32 28 40 1/10 af33 24 40 1/10 af41 32 40 1/10 af42 28 40 1/10 af43 24 40 1/10 cs1 22 40 1/10 cs2 24 40 1/10 cs3 26 40 1/10 cs4 28 40 1/10 cs5 30 40 1/10 cs6 32 40 1/10 cs7 34 40 1/10 EF 36 40 1/10 RSVP 36 40 1/10 Default (BE) 20 40 1/10 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 119 Traffic Profile 1: Traffic Class: ____________________________ PHB: __________________ WRED Traffic Profile Parameters: Minimum Threshold: _____________ Maximum Threshold: _____________ Mark Probability Denominator: __________ Traffic Profile 2: Traffic Class: ____________________________ PHB: __________________ WRED Traffic Profile Parameters: Minimum Threshold: _____________ Maximum Threshold: _____________ Mark Probability Denominator: __________ Drop Probability 100% Average Queue Size 120 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Traffic Profile 3: Traffic Class: ____________________________ PHB: __________________ WRED Traffic Profile Parameters: Minimum Threshold: _____________ Maximum Threshold: _____________ Mark Probability Denominator: __________ Drop Probability 100% Average Queue Size Step 4 Present your solution. After the instructor presents a solution to the case study, present your solution to the class with your partner. Present Your Solution Together with your partner, present your solution to the class. Include the following information: „ Customer service class requirements „ WRED traffic profiles „ Justification for differences from the solution presented by the instructor Activity Verification You have completed this activity when your case study solution has been presented to the class and you have justified any major deviations from the case study solution supplied by the instructor. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 121 Case Study 6-1 Answer Key: WRED Traffic Profiles Your case study discussion and solution should include: Identify Customer QoS Requirements Customer Traffic: Oracle PHB: AF2 DSCP: AF21 Customer Traffic: Citrix PHB: AF2 DSCP: AF22 Customer Traffic: Internet PHB: Default (BE) DSCP: 0 Create WRED Traffic Profiles Traffic Profile 1: Traffic Class: Transactional PHB: AF21 Minimum Threshold: 32 Maximum Threshold: 40 Mark Probability Denominator: 10 Traffic Profile 2: Traffic Class: Transactional PHB: AF22 Minimum Threshold: 28 Maximum Threshold: 40 Mark Probability Denominator: 10 Traffic Profile 3: Drop Probability No Drop Random Drop Tail Drop 100% 28 32 AF22 AF21 Traffic Class: Default PHB: 0 Minimum Threshold: 20 Maximum Threshold: 40 Drop Probability No drop Average Queue Size Mark Probability Denominator: 10 Random drop Full drop 100% 10% 20 122 40 Average Queue Size Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 6-1: Configuring DSCP-Based WRED Complete this lab activity to practice what you learned in the lesson “Configuring Explicit Congestion Notification” in the module “Congestion Avoidance.” Activity Objective In this activity, you will build a WRED traffic profile, given a set of parameters, and configure DSCP-based WRED with ECN support to match that traffic profile. After completing this activity, you will be able to meet these objectives: „ Configure DSCP-based CB-WRED „ Monitor DSCP-based CB-WRED „ Configure DSCP-based CB-WRED with ECN „ Monitor DSCP-based CB-WRED with ECN Visual Objective The figure illustrates what you will accomplish in this activity. After LLQ was successfully implemented, the voice quality definitely improved. But after monitoring the link utilization on the low-speed 384-kbps link for a week, it has been determined that the average link utilization is low and must be improved. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 123 You recall from the Cisco IOS documentation that global synchronization occurs as waves of congestion crest only to be followed by troughs, during which the transmission link is not fully utilized. Global synchronization of TCP hosts can occur because packets are dropped all at once. Global synchronization happens when multiple TCP hosts reduce their transmission rates in response to packet dropping, and once congestion is reduced, the TCP hosts again increase their transmission rates. The most important point is that the waves of transmission, known as global synchronization, result in significant link under-utilization. In order to reduce TCP global synchronization to improve link utilization, CB-WRED is required to randomly drop packets before the software queue is full. In addition, DSCP-based CB-WRED allows different WRED (drop) profiles for different DSCP values. Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ 124 — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Command List The table describes the commands used in this activity. DSCP-Based WRED with ECN Lab Commands Command Description policy-map policy-map-name Creates or modifies a policy map that can be attached to one or more interfaces class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class random-detect dscp dscpvalue min-threshold max-threshold [mark-probabilitydenominator] Changes the minimum and maximum packet thresholds for the DSCP value random-detect [dscp-based | prec-based] Enables WRED or DWRED random-detect ecn Enables ECN show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface show class-map [class-mapname] Displays QoS class maps copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 125 Task 1: Configure DSCP-Based WRED You will build a WRED traffic profile given a set of parameters and configure DSCP-based WRED. Activity Procedure Complete this step: Step 1 Modify the existing llq-policy policy map on the workgroup WGxR1 router and enable DSCP-based WRED for the af11-traffic, af21-traffic, af31-traffic, cs1-traffic, and the class-default traffic classes, with the following drop thresholds and drop probabilities: PHB Minimum Threshold Maximum Threshold Mark Probability af11 26 40 1/10 af21 30 40 1/10 af31 34 40 1/10 cs1 22 40 1/10 Default (BE) 20 40 1/10 Complete the graph of the traffic profile below for all five WRED classes. Be sure to indicate each class and the mark probability denominator. Drop Probability 100% 20 22 126 26 30 34 40 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Average Queue Size © 2006 Cisco Systems, Inc. Based on the previous WRED profiles, which traffic class will start dropping packets first? ________________________________________________________________________ What does a mark probability of 1/10 mean? ________________________________________________________________________ Why would you not implement WRED for the ef-traffic class? ________________________________________________________________________ © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 127 Activity Verification You have completed this task when you attain this result: „ You have built a WRED traffic profile, given a set of parameters, and configured DSCPbased WRED. Task 2: Monitor DSCP-Based WRED You will display the policy map to monitor DSCP-based WRED. Activity Procedure Complete these steps: Step 1 Display the llq-policy policy map to verify the WRED configurations. Policy Map llq-policy Class ef-traffic Strict Priority Bandwidth 168 (kbps) Burst 4200 (Bytes) Class af31-traffic Bandwidth remaining 40 (%) exponential weight 9 dscp min-threshold max-threshold mark-probability ---------------------------------------------------------af11 1/10 af12 1/10 af13 1/10 af21 1/10 af22 1/10 af23 af31 af32 34 - 40 - 1/10 1/10 1/10 [output omitted] Class af21-traffic Bandwidth remaining 20 (%) exponential weight 9 dscp min-threshold max-threshold mark-probability ---------------------------------------------------------af11 1/10 af12 1/10 af13 1/10 af21 30 40 1/10 af22 1/10 af23 - - 1/10 [output omitted] Class af11-traffic Bandwidth remaining 13 (%) exponential weight 9 dscp min-threshold max-threshold mark-probability ---------------------------------------------------------af11 26 40 1/10 af12 1/10 af13 1/10 [output omitted] Class cs1-traffic Bandwidth remaining 2 (%) exponential weight 9 dscp min-threshold max-threshold 128 mark-probability Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. ---------------------------------------------------------af11 1/10 af12 1/10 af13 1/10 af21 1/10 af22 1/10 af23 1/10 af31 1/10 af32 1/10 af33 1/10 af41 1/10 af42 af43 cs1 cs2 22 - 40 - 1/10 1/10 1/10 1/10 output omitted] Class class-default Bandwidth remaining 25 (%) exponential weight 9 dscp min-threshold max-threshold mark-probability --------------------------------------------------------[output omitted] ef rsvp default - - Step 2 What is the default exponential weight constant? ____________________ 20 40 1/10 1/10 1/10 Are all the drop thresholds and drop probability set correctly? __________ Step 3 Clear the counters on all interfaces on the WGxR1 router. Step 4 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 5 Display the output service policy on the S0/0 interface. Serial0/0 Service-policy output: llq-policy Class-map: ef-traffic (match-any) 2998 packets, 599437 bytes 5 minute offered rate 4000 bps, drop rate 0 bps Match: dscp ef 2998 packets, 599437 bytes 5 minute rate 4000 bps Match: access-group 100 0 packets, 0 bytes 5 minute rate 0 bps Queueing Strict Priority Output Queue: Conversation 136 Bandwidth 168 (kbps) Burst 4200 (Bytes) (pkts matched/bytes matched) 6/1224 (total drops/bytes drops) 0/0 Class-map: af31-traffic (match-all) 24740 packets, 1097866 bytes 5 minute offered rate 13000 bps, drop rate 0 bps Match: dscp af31 Queueing Output Queue: Conversation 137 Bandwidth remaining 40 (%) (pkts matched/bytes matched) 278/12232 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 dscp Transmitted Random drop Tail drop pkts/bytes pkts/bytes pkts/bytes thresh af11 0/0 0/0 0/0 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Minimum Maximum thresh prob 32 40 Mark 1/10 Lab Guide 129 af12 af13 af21 af22 af23 af31 0/0 0/0 0/0 0/0 0/0 24817/1101254 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 28 24 32 28 24 32 40 40 40 40 40 40 1/10 1/10 1/10 1/10 1/10 1/10 [output omitted] Class-map: af21-traffic (match-all) 27575 packets, 1218592 bytes 5 minute offered rate 16000 bps, drop rate 0 bps Match: dscp af21 Queueing Output Queue: Conversation 138 Bandwidth remaining 20 (%) (pkts matched/bytes matched) 387/17032 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 dscp Transmitted Random drop Tail drop pkts/bytes pkts/bytes pkts/bytes af11 0/0 0/0 0/0 af12 0/0 0/0 0/0 af13 0/0 0/0 0/0 af21 27821/1229416 0/0 0/0 af22 0/0 0/0 0/0 Minimum Maximum thresh thresh 32 40 28 40 24 40 32 40 28 40 Mak prob 1/10 1/10 1/10 1/10 1/10 [output omitted] Class-map: af11-traffic (match-all) 12326 packets, 543265 bytes 5 minute offered rate 6000 bps, drop rate 0 bps Match: dscp af11 Queueing Output Queue: Conversation 139 Bandwidth remaining 13 (%) (pkts matched/bytes matched) 232/10208 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 dscp Transmitted Random drop Tail drop pkts/bytes pkts/bytes pkts/bytes af11 12464/549337 0/0 0/0 af12 0/0 0/0 0/0 af13 0/0 0/0 0/0 af21 0/0 0/0 0/0 Minimum Maximum thresh thresh 32 40 28 40 24 40 32 40 Mark prob 1/10 1/10 1/10 1/10 Minimum Maximum thresh thresh 32 40 28 40 24 40 32 40 28 40 24 40 32 40 28 40 24 40 32 40 28 40 24 40 Mark prob 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 [output omitted] Class-map: cs1-traffic (match-all) 5714 packets, 272308 bytes 5 minute offered rate 3000 bps, drop rate 0 bps Match: dscp cs1 Queueing Output Queue: Conversation 140 Bandwidth remaining 2 (%) (pkts matched/bytes matched) 70/3080 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 dscp Transmitted Random drop Tail drop pkts/bytes pkts/bytes pkts/bytes af11 0/0 0/0 0/0 af12 0/0 0/0 0/0 af13 0/0 0/0 0/0 af21 0/0 0/0 0/0 af22 0/0 0/0 0/0 af23 0/0 0/0 0/0 af31 0/0 0/0 0/0 af32 0/0 0/0 0/0 af33 0/0 0/0 0/0 af41 0/0 0/0 0/0 af42 0/0 0/0 0/0 af43 0/0 0/0 0/0 130 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. cs1 5822/277060 0/0 0/0 22 40 1/10 [output omitted] Class-map: class-default (match-any) 11939 packets, 2066458 bytes 5 minute offered rate 68000 bps, drop rate 29000 bps Match: any Queueing Output Queue: Conversation 141 Bandwidth remaining 25 (%) (pkts matched/bytes matched) 14950/2588882 (depth/total drops/no-buffer drops) 58/10269/0 exponential weight: 9 mean queue depth: 43 dscp Transmitted Random drop Tail drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob [output omitted] cs5 cs6 cs7 ef rsvp default 0/0 6/504 0/0 0/0 0/0 4872/1481315 0/0 0/0 0/0 0/0 0/0 254/75741 0/0 0/0 0/0 0/0 0/0 10434/1136558 30 32 34 36 36 20 40 40 40 40 40 40 1/10 1/10 1/10 1/10 1/10 1/10 Do you see any drops from any of the traffic classes? ________________ If so, which one or ones? ___________________________________________________ Note You may see drops on only one of the workgroup routers due to the varying traffic rate from the Pagent routers. How many af31 packets have been transmitted within the af31 traffic class? _____________________________________________________________ How many af21 packets have been transmitted within the af21 traffic class? _____________________________________________________________ How many af11 packets have been transmitted within the af11 traffic class? _____________________________________________________________ How many cs1 packets have been transmitted within the cs1 traffic class? _____________________________________________________________ The class-default traffic class has transmitted packets marked with which DSCP setting? _____________________________________________________________ What types of packets are marked with CS 6 by the Cisco IOS software? _____________________________________________________________ © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 131 Step 6 Repeat Task 1 Step 1 and Task 2 Steps 1 through 5 for the WGxR2 router. The default class has many dropped packets in it. Although WRED congestion avoidance has been applied and is randomly dropping packets in this class, it may be dropping packets unnecessarily. Ideally, the router should mark the traffic using the ECN bits, then send traffic without dropping as the average queue size increases. The ECN bits will notify the end station of congestion. The end station can signal the sender using TCP congestion mechanics to slow down the sender’s traffic rate. Activity Verification You have completed this task when you attain these results: „ You have displayed the policy map to monitor DSCP-based WRED. Task 3: Configure DSCP-Based CB-WRED with ECN You will configure DSCP-based CB-WRED with ECN. Activity Procedure Complete this step: Step 1 Enable WRED ECN for the class-default traffic class on the WGxR1 and WGxR2 routers. Activity Verification You have completed this task when you attain these results: „ You have configured DSCP-based CB-WRED with ECN. Task 4: Monitor DSCP-Based WRED with ECN You will display the policy map to monitor DSCP-based WRED with ECN. Activity Procedure Complete these steps: Step 1 On WGxR1 and WGxR2, display the llq-policy policy map and verify the ECN settings for the class-default traffic class.

Class class-default Bandwidth remaining 25 (%) exponential weight 9 explicit congestion notification dscp min-threshold max-threshold mark-probability ---------------------------------------------------------af11 1/10 af12 1/10 af13 1/10 af21 1/10 af22 1/10 af23 1/10 af31 1/10 af32 1/10 132 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. af33 af41 af42 af43 cs1 cs2 cs3 - 40 1/10 1/10 1/10 1/10 1/10 1/10 1/10 cs4 cs5 cs6 cs7 ef rsvp default 20 1/10 1/10 1/10 1/10 1/10 1/10 1/10 Step 2 Clear the interface counters on both of your workgroup routers using the clear counters command. Step 3 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 4 Display the output service policy on the serial 0/0 interface on both WGxR1 and WGxR2. Serial0/0 Service-policy output: llq-policy

Class-map: class-default (match-any) 13451 packets, 2328036 bytes 5 minute offered rate 68000 bps, drop rate 33000 bps Match: any Queueing Output Queue: Conversation 141 Bandwidth remaining 25 (%) (pkts matched/bytes matched) 16611/2876499 (depth/total drops/no-buffer drops) 0/11398/0 exponential weight: 9 explicit congestion notification mean queue depth: 0 dscp af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef rsvp default Transmitted pkts/bytes 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 7/588 0/0 0/0 0/0 5417/1627803 dscp Random drop pkts/bytes 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 343/110564 Tail drop Minimum Maximum pkts/bytes thresh thresh 0/0 32 40 0/0 28 40 0/0 24 40 0/0 32 40 0/0 28 40 0/0 24 40 0/0 32 40 0/0 28 40 0/0 24 40 0/0 32 40 0/0 28 40 0/0 24 40 0/0 22 40 0/0 24 40 0/0 26 40 0/0 28 40 0/0 30 40 0/0 32 40 0/0 34 40 0/0 36 40 0/0 36 40 11462/1242888 20 40 Mark prob 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 ECN Mark pkts/bytes © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 133 af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef rsvp default 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 Is ECN enabled for the class-default traffic class? ______________________ What is the mean queue depth for the class-default traffic class? ______________ How many ECN-marked packets are there for the class-default traffic class, if any? ___________________________________ No packets are marked ECN, yet there are many random WRED drops in the default class. Explain. ____________________________________________________ Step 5 On WGxR1, display the class map for the ef-traffic service class. Class Map match-any ef-traffic (id 10) Match dscp ef Match access-group 100 Step 6 On WGxR1, remove ICMP packets from the EF service class by removing the match access-group 100 from the ef-traffic class map. Step 7 On WGxR1, display the class map for the ef-traffic service class and verify that ICMP (access-group 100) has been removed. Class Map match-any ef-traffic (id 10) Match dscp ef 134 Step 8 Which traffic class will the ICMP traffic belong to now that it has been removed from the EF service class? _____________________________________________ Step 9 Repeat Steps 5 through 8 for WGxR2. Step 10 Clear the interface counters on both of your workgroup routers using the clear counters command. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 11 From the WGxR1 workgroup router, perform an extended ping to the WGxR2 router serial 0/0 interface, then record the ping response time below. For the extended ping, use a repeat count of 50, a datagram size of 1500, and use extended commands to set the ToS to 0x02. WGxR1#ping Protocol [ip]: Target IP address:10.2.x.2 Repeat count [5]: 50 Datagram size [100]: 1500 Timeout in seconds [2]: Extended commands [n]: y Source address or interface: Type of service [0]: 0x02 Set DF bit in IP header? [no]: Validate reply data? [no]: Data pattern [0xABCD]: Loose, Strict, Record, Timestamp, Verbose[none]: Sweep range of sizes [n]: Type escape sequence to abort. Sending 50, 1500-byte ICMP Echos to 10.2.1.2, timeout is 2 seconds: .!.!..!!.!.!!.!!.!..!..!!.!!.!.!..!!!.!!...!!..!.! Success rate is 52 percent (26/50), round-trip min/avg/max = 84/397/802 ms Ping Response Time ____/____/____ What does setting the ToS byte to 0x02 achieve? ___________________________ Step 12 Display the output service policy on the serial 0/0 interface for the class-default service class only. Serial0/0 Service-policy output: llq-policy Class-map: class-default (match-any) 13805 packets, 2561463 bytes 5 minute offered rate 77000 bps, drop rate 2000 bps Match: any Queueing Output Queue: Conversation 141 Bandwidth remaining 25 (%) (pkts matched/bytes matched) 13788/2560575 (depth/total drops/no-buffer drops) 2/483/0 exponential weight: 9 explicit congestion notification mean queue depth: 10 dscp af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef rsvp default Transmitted pkts/bytes 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 9/756 0/0 0/0 0/0 13741/2556848 Random drop pkts/bytes 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 308/50344 Tail drop pkts/bytes 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 175/27697 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Minimum Maximum thresh thresh 32 40 28 40 24 40 32 40 28 40 24 40 32 40 28 40 24 40 32 40 28 40 24 40 22 40 24 40 26 40 28 40 30 40 32 40 34 40 36 40 36 40 20 40 Mark prob 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 1/10 Lab Guide 135 dscp af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 ef rsvp default ECN Mark pkts/bytes 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 0/0 6/9024 Do you see any ECN-marked packets for the class-default now? __________________ Note You may only see ECN-marked packets on one of the two workgroup routers. Step 13 Return ICMP traffic (match access-group 100) to the EF service class. Step 14 Display the class map for the ef-traffic service class and verify that ICMP traffic is now a member of the EF service class. Class Map match-any ef-traffic (id 10) Match dscp ef Match access-group 100 Step 15 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Step 16 Return ICMP traffic (match access-group 100) to the EF service class. Step 17 Display the class map for the ef-traffic service class and verify that ICMP traffic is now a member of the EF service class. Class Map match-any ef-traffic (id 10) Match dscp ef Match access-group 100 Step 18 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ 136 You have displayed the policy map to monitor DSCP-based WRED with ECN. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 6-1 Answer Key: Configuring DSCP-Based WRED When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. Configuration through Step 7: policy-map llq-policy class ef-traffic priority 168 class af31-traffic bandwidth remaining percent 40 random-detect dscp-based random-detect dscp af31 34 40 10 class af21-traffic bandwidth remaining percent 20 random-detect dscp-based random-detect dscp af21 30 40 10 class af11-traffic bandwidth remaining percent 13 random-detect dscp-based random-detect dscp af11 26 40 10 class cs1-traffic bandwidth remaining percent 2 random-detect dscp-based random-detect dscp cs1 22 40 10 class class-default bandwidth remaining percent 25 random-detect dscp-based random-detect dscp 0 20 40 10 Based on the previous WRED profiles, which traffic class will start dropping packets first? Drop Probability Minimum Threshold Maximum Threshold 100% Mark Probability 10% 20 22 26 30 34 40 Average Queue Size Default (Best Effort) class What does a mark probability of 1/10 mean? When the average queue size is at the maximum threshold, the router will be dropping one out of every ten packets. Why would you not implement WRED for the ef-traffic class? © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 137 It is preferred that no packet dropping occurs in the EF traffic class. What is the default exponential weight constant? 9 What types of packets are marked with CS 6 by the Cisco IOS software? Router control and routing protocol traffic Configuration for remainder of the lab: class class-default bandwidth remaining percent 25 random-detect dscp-based random-detect ecn random-detect dscp 0 20 40 10 No packets are marked ECN, yet there are many random WRED drops in the default class. Explain. The router will only set ECN if the transiting packets are marked so that the endpoints are ECN-capable. Which traffic class will the ICMP traffic belong to now that it has been removed from the EF service class? Default (Best Effort) service class What does setting the ToS byte to 0x02 achieve? It enables ECN in the packet by indicating that the endpoint is ECN-capable. 138 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 7-1: Configuring Class-Based Policing Complete this lab activity to practice what you learned in the lesson “Configuring Class-Based Policing” in the module “Traffic Policing and Shaping.” Activity Objective In this activity, you will configure class-based policing to rate-limit incoming packets on an interface. After completing this activity, you will be able to meet these objectives: „ Configure single-token bucket class-based policing „ Monitor the operation of single-token bucket class-based policing „ Configure dual-token bucket class-based policing „ Monitor the operation of dual-token bucket class-based policing Visual Objective The figure illustrates what you will accomplish in this activity. Because wireless Internet access for students and faculty has been implemented, the peer-topeer file sharing traffic (particularly, Napster and Kazaa) is constantly increasing. Therefore, it is now required to police the Napster and Kazaa traffic using class-based policing inbound to the Fa0/0 interface on the workgroup router. For the Internet connection, most of the traffic from the E-Commerce University is HTTP (web) traffic out to the Internet. The service provider is providing sub-rate access and is implementing an input service policy to police E-Commerce University inbound traffic. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 139 Policing of the HTTP traffic using class-based policing outbound to the S0/1 interface on workgroup routers will be implemented to conserve bandwidth on the E-Commerce University Internet connection. This HTTP policing policy is not placed inbound to the Fa0/0 interface on the workgroup router because intranet HTTP traffic will still be required to flow between the two E-Commerce University campuses across their 384-kbps leased-line connection (S0/0). Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ 140 — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Command List The table describes the commands used in this activity. Configuring Class-Based Policing Lab Commands Command Description policy-map policy-map-name Creates or modifies a policy map that can be attached to one or more interfaces class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class police bps [burst-normal] [burst-max] conform-action action exceed-action action [violate-action action] Configures traffic policing clear counters Clears the interface counters shutdown Disables an interface class-map class-map-name Creates a class map to be used for matching packets to a specified class match protocol protocol-name Configures the match criteria for a class map on the basis of the specified protocol police cir percent percent [bc conform-burst-in-msec] [pir percent percent][be peak-burst-in-msec] Configures traffic policing on the basis of a percentage of bandwidth available on an interface show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface show policy-map policy-map class class-name Displays the configuration for the specified class of the specified policy map show class-map [class-mapname] Displays all class maps and their matching criteria copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 141 Task 1: Configure Single-Token Bucket Class-Based Policing You will configure single-token bucket class-based policing. Activity Procedure Complete this step: Step 1 Modify the existing input service policy mark-nbar on the FastEthernet 0/0 interface of the WGxR1 and WGxR2 routers to police the scavenger traffic class to a maximum rate limit of 8 kbps. All conforming traffic should be sent (transmitted), and all exceeding traffic should be dropped. In this case, do you need to implement a single or dual token bucket? ________________________________________________________ Will this be a single- or dual-rate policing implementation? ________________________________________________________ Activity Verification You have completed this task when you attain these results: „ You have configured single-token bucket class-based policing. Task 2: Monitor Single-Token Bucket Class-Based Policing You will monitor the operation of single-token bucket class-based policing. Activity Procedure Complete these steps: Step 1 Display the mark-nbar policy map and verify the correct policing configuration. Policy Map mark-nbar Class real-time set dscp ef Class mission-critical set dscp af31 Class interactive set dscp af21 Class bulk set dscp af11 Class scavenger set dscp cs1 police cir 8000 bc 1500 conform-action transmit exceed-action drop What is the default value of Bc in bytes and in bits? _________________________ How is the default value of Bc calculated by the Cisco IOS software? _____________________ Based on the default value of Bc, what is the value of the Tc? ____________________ 142 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 2 Clear the interface counters on both of your workgroup routers using the clear counters command. Step 3 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 4 Display the input service policy on the FastEthernet 0/0 interface of your workgroup routers for the scavenger class only. FastEthernet0/0 Service-policy input: mark-nbar Class-map: scavenger (match-any) 4587 packets, 1227926 bytes 5 minute offered rate 41000 bps, drop rate 35000 bps Match: protocol kazaa2 1529 packets, 624944 bytes 5 minute rate 22000 bps Match: protocol napster 3058 packets, 602982 bytes 5 minute rate 20000 bps QoS Set dscp cs1 Packets marked 4719 police: cir 8000 bps, bc 1500 bytes conformed 1350 packets, 83499 bytes; actions: transmit exceeded 3369 packets, 1179763 bytes; actions: drop conformed 8000 bps, exceed 36000 bps Class-map: class-default (match-any) 20994 packets, 3892053 bytes 5 minute offered rate 107000 bps, drop rate 0 bps Match: any How many packets have been dropped in the scavenger traffic class? _________________________________________________________________ What is the conformed bit rate for the scavenger traffic? _________________________________________________________________ What is the exceed bit rate for the scavenger traffic? _________________________________________________________________ Activity Verification You have completed this task when you attain this result: „ You have monitored the operation of single-token bucket class-based policing. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 143 Task 3: Configure Dual-Token Bucket Class-Based Policing You will configure dual-token bucket class-based policing. Activity Procedure Complete these steps: Step 1 On the WGxR1 and WGxR2 routers, configure a new class map called weboutbound and use NBAR to classify all HTTP traffic into that traffic class. Step 2 Display the newly configured class map and verify its configuration. Class Map match-all web-outbound (id 1) Match protocol http Step 3 On the WGxR1 and WGxR2 routers, configure a new policy map called http-police to police the web (HTTP) traffic to a CIR of 50 percent of the link bandwidth (use the Cisco IOS software default for Bc and Be). All conforming traffic should be transmitted (sent), and all exceeding traffic should be re-marked to CS1, then transmitted (sent). All violating traffic should be dropped. In this case, do you need to implement a single or dual token bucket? _______________________________________________________ Activity Verification You have completed this task when you attain this result: „ You have configured dual-token bucket class-based policing. Task 4: Monitor Dual-Token Bucket Class-Based Policing You will monitor the operation of dual-token bucket class-based policing. Activity Procedure Complete these steps: Step 1 Display the newly configured policy map and verify its configuration. Policy Map http-police Class web-outbound police cir percent 50 be 0 conform-action transmit exceed-action set-dscp-transmit cs1 violate-action drop 144 Step 2 Apply the http-police policy map to the S0/1 interface of the WGxR1 and WGxR2 routers in the outbound direction. The http-police policy map is applied to the S0/1 interface and not the tunnel interface (from the QoS Preclassify lab) because the tunnel interface is only used as a backup for the leased line connection between the two E-Commerce University campuses. Step 3 To test this lab, it will be necessary to administratively disable (shut down) the S0/0 interface on the WGxR1 and WGxR2 routers, to force the Pagent HTTP traffic to flow via the S0/1 link. Administratively disable the serial 0/0 interface and clear the interface counters on both the WGxR1 and WGxR2 routers. Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Step 4 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 5 Display the outbound service policy on the Serial 0/1 interface. Class-map: web-outbound (match-all) 754 packets, 409886 bytes 5 minute offered rate 16000 bps, drop rate 4000 bps Match: protocol http police: cir 50 % cir 384000 bps, bc 12000 bytes, be 1500 bytes conformed 664 packets, 332894 bytes; actions: transmit exceeded 40 packets, 1792 bytes; actions: set-dscp-transmit cs1 violated 50 packets, 75200 bytes; actions: drop conformed 14000 bps, exceed 0 bps, violate 4000 bps Class-map: class-default (match-any) 7253 packets, 860150 bytes 5 minute offered rate 29000 bps, drop rate 8000 bps Match: any Are there any violating HTTP packets being dropped? _________________________________________________________ Are there any exceeding HTTP packets being re-marked to CS1, then sent? _________________________________________________________ Are there any conforming HTTP packets being sent? _________________________________________________________ Based on a CIR of 50 percent, what is the CIR (in bps), Bc, and Be (in bytes) computed by the Cisco IOS software? ____________________________________________________ Step 6 Reenable the serial 0/0 interface on both the WGxR1 and WGxR2 routers. Step 7 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ You have monitored the operation of dual-token bucket class-based policing. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 145 Lab 7-1 Answer Key: Configuring Class-Based Policing When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. Configuration in Step 2: policy-map mark-nbar class real-time set dscp ef class mission-critical set dscp af31 class interactive set dscp af21 class bulk set dscp af11 class scavenger set dscp cs1 police cir 8000 conform-action transmit exceed-action drop Configuration for the remainder of the lab: class-map match-all web-outbound match protocol http policy-map http-police class web-outbound police cir percent 50 conform-action transmit exceed-action set-dscp-transmit cs1 violate-action drop The following are the answers to the questions in this lab exercise: In this case, do you need to implement a single or dual token bucket? Single token bucket Will this be a single or dual-rate policing implementation? Single rate policing What is the default value of Bc in bytes and in bits? 1500 bytes or 12,000 bits How is the default value of Bc calculated by the Cisco IOS software? Cir / 32 or 1500 bytes, whichever is larger Based on the default value of Bc, what is the value of Tc? Tc = Bc / CIR = 12000 / 8000 = 1. 5 In this case, do you need to implement a single or dual token bucket? Dual token bucket Based on a CIR of 50 percent, what is the CIR (in bps), Bc, and Be (in bytes), calculated by the Cisco IOS software? CIR = 384,000 bps, Bc = 12,000 bytes, Be = 1500 bytes 146 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Lab 7-2: Configuring Class-Based Shaping Complete this lab activity to practice what you learned in the lesson “Configuring Class-Based Shaping on Frame Relay Interfaces” in the module “Traffic Policing and Shaping.” Activity Objective In this activity, you will configure class-based shaping to rate-limit outgoing packets on an interface. After completing this activity, you will be able to meet these objectives: „ Configure class-based shaping „ Monitor the operation of class-based shaping Visual Objective The figure illustrates what you will accomplish in this activity. After successfully policing the Napster and Kazaa traffic, it was decided by the E-Commerce University IT staff to also shape the FTP traffic across the 384-kbps leased line, because the FTP traffic is also consuming a lot of bandwidth at times. Class-based shaping will be used to apply an upper bandwidth limit to the FTP traffic class. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 147 Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring Class-Based Shaping Lab Commands Command Description show policy-map policy-map class class-name Displays the configuration for the specified class of the specified policy map policy-map policy-map-name Creates or modifies a policy map that can be attached to one or more interfaces class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class shape {average | peak} cir [bc][be] Specifies average or peak rate traffic shaping show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ 148 Your assigned workgroup pod number provided by the instructor Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Task 1: Configure Class-Based Shaping You will configure class-based shaping. Activity Procedure Complete these steps: Step 1 Verify the existing policy map named llq-policy on the WGxR1 and WGxR2 routers, by displaying only the AF11 traffic class. Recall from the Classification and Marking lab exercise that all FTP traffic is marked with AF11. dscp Class af11-traffic Bandwidth remaining 13 (%) exponential weight 9 explicit congestion notification min-threshold max-threshold mark-probability ---------------------------------------------------------af11 26 40 1/10 af12 1/10 af13 1/10 af21 1/10 af22 1/10 af23 1/10 af31 1/10 af32 1/10 af33 1/10 af41 1/10 af42 1/10 af43 1/10 cs1 1/10 cs2 1/10 cs3 1/10 cs4 cs5 cs6 cs7 ef rsvp default Step 2 - - 1/10 1/10 1/10 1/10 1/10 1/10 1/10 On WGxR1 and WGxR2, modify the existing llq-policy policy map to shape the AF11 traffic class to an average rate of 8 kbps. Allow the Cisco IOS software to automatically calculate the Bc and Be value. Activity Verification You have completed this task when you attain these results: „ Successfully configured average-rate shaping on the serial 0/0 interface of WGxR1 and WGxR2 for the AF11 traffic class. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 149 Task 2: Monitor Class-Based Shaping You will monitor the operation of class-based shaping. Activity Procedure Complete these steps: Verify the existing llq-policy policy map and the shaping configuration on your workgroup WGxR1 and WGxR2 routers by displaying only the AF11 traffic class. Step 1 Class af11-traffic Bandwidth remaining 13 (%) exponential weight 9 explicit congestion notification dscp min-threshold max-threshold mark-probability ---------------------------------------------------------af11 26 40 1/10 af12 1/10 af13 1/10 [output omitted] ef rsvp default - - 1/10 1/10 1/10 Traffic Shaping Average Rate Traffic Shaping CIR 8000 (bps) Max. Buffers Limit 1000 (Packets) Verify the shaping configuration on the existing output service policy map on the Serial 0/0 interface of the WGxR1 and WGxR2 routers, by displaying only the AF11 traffic class. Step 2 dscp af11 af12 Serial0/0 Service-policy output: llq-policy Class-map: af11-traffic (match-all) 222923 packets, 10047151 bytes 5 minute offered rate 4000 bps, drop rate 0 bps Match: dscp af11 Queueing Output Queue: Conversation 139 Bandwidth remaining 13 (%) (pkts matched/bytes matched) 13758/827672 (depth/total drops/no-buffer drops) 0/0/0 exponential weight: 9 mean queue depth: 0 Transmitted Random drop Tail drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob 222923/10047151 0/0 0/0 26 40 1/10 0/0 0/0 0/0 28 40 1/10 [output omitted] default 0/0 0/0 0/0 20 40 1/10 [output omitted] Traffic Shaping Target/Average Rate 8000/8000 Adapt Queue Active Depth 0 150 Byte Limit 2000 Sustain bits/int 8000 Excess bits/int 8000 Interval (ms) 1000 Increment (bytes) 1000 Packets Bytes 2682 118008 Packets Delayed 0 Bytes Delayed 0 Shaping Active no Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. What is the Bc and Be value that is automatically determined by the Cisco IOS software? ____________________________________________________________ What is the Tc (time interval)? ___________________________________ Step 3 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ Verified the successful operation of your class-based shaping configuration Lab 7-2 Answer Key: Configuring Class-Based Shaping When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. policy-map llq-policy class ef-traffic priority 168 class af31-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 34 class af21-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 30 class af11-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 26 shape average 8000 class cs1-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 22 class class-default bandwidth remaining percent random-detect dscp-based random-detect ecn random-detect dscp 0 20 40 40 10 40 10 40 10 40 10 20 13 2 25 40 10 The following are the answers to the questions in this lab exercise: What is the Bc and Be value that is automatically determined by the Cisco IOS software? Bc = 8000 bps, Be = 8000 bps What is the Tc (time interval)? 1 second © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 151 Lab 8-1: Configuring Class-Based Header Compression Complete this lab activity to practice what you learned in the lesson “Configuring Class-Based Header Compression” in the module “Link Efficiency Mechanisms.” Activity Objective In this activity, you will configure and monitor class-based RTP header compression on a PPP Frame Relay link. After completing this activity, you will be able to meet these objectives: „ Configure class-based RTP header compression „ Monitor the operation of class-based RTP header compression Visual Objective The figure illustrates what you will accomplish in this activity. One of the E-Commerce University IT staff members was reading a VoIP Cisco Press book and realized that the IP, UDP, and RTP header overhead for voice packets is very high. Therefore, the IT staff decided to implement class-based RTP header compression to reduce the size of the packet headers and the associated overhead on the EF traffic class. 152 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring Class-Based Header Compression Lab Commands Command Description policy-map policy-map-name Creates or modifies a policy map that can be attached to one or more interfaces class {class-name | classdefault} Specifies the name of the class whose policy you want to create or change or specifies the default class compression header ip [rtp | tcp] Configures RTP or TCP IP header compression for a specific class show policy-map [policy-map] Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps show policy-map interface interface-name [input | output] [class class-mapname] Displays the packet statistics of all classes that are configured for all service policies on the specified interface or subinterface clear counters Clears the interface counters copy running-config startupconfig Saves your entries in the configuration file Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 153 Task 1: Configure Class-Based Header Compression You will configure class-based RTP header compression. Activity Procedure Complete this step: Step 1 Modify the existing llq-policy policy map on the WGxR1 and WGxR2 routers to enable class-based RTP header compression on the EF traffic class. Activity Verification You have completed this task when you attain these results: „ You have successfully configured class-based RTP header compression on the serial 0/0 interface of WGxR1 and WGxR2 for the EF traffic service class. Task 2: Monitor Class-Based Header Compression You will monitor the operation of class-based RTP header compression. Activity Procedure Complete these steps: Step 1 Display the llq-policy policy map (just display the ef-traffic class) to verify the class-based RTP header compression configuration on the ef-traffic class. Class ef-traffic Strict Priority Bandwidth 168 (kbps) Burst 4200 (Bytes) compress: header ip rtp Step 2 Clear the interface counters on both of your workgroup routers using the clear counters command. Step 3 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 4 Display the output service policy on the workgroup routers S0/0 interface (only show the ef-traffic class). Serial0/0 Service-policy output: llq-policy Class-map: ef-traffic (match-any) 325 packets, 65932 bytes 5 minute offered rate 2000 bps, drop rate 0 bps Match: dscp ef 325 packets, 65932 bytes 5 minute rate 2000 bps Match: access-group 100 0 packets, 0 bytes 5 minute rate 0 bps Queueing Strict Priority Output Queue: Conversation 136 Bandwidth 168 (kbps) Burst 4200 (Bytes) (pkts matched/bytes matched) 5/830 (total drops/bytes drops) 0/0 compress: 154 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. header ip rtp UDP/RTP compression: Sent: 324 total, 321 compressed, 12135 bytes saved, 52441 bytes sent 1.23 efficiency improvement factor 99% hit ratio, five minute miss rate 0 misses/sec, 0 max rate 2000 bps How many RTP packets were sent? _______________ How many RTP packets were compressed? _________ How many bytes were saved because of RTP header compression? __________ Step 5 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ You have successfully verified the operation of the class-based RTP header compression operation. Lab 8-1 Answer Key: Configuring Class-Based Header Compression When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. policy-map llq-policy class ef-traffic priority 168 compress header ip rtp class af31-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 34 class af21-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 30 class af11-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 26 shape average 8000 class cs1-traffic bandwidth remaining percent random-detect dscp-based random-detect dscp 10 22 class class-default bandwidth remaining percent random-detect dscp-based random-detect ecn random-detect dscp 0 20 40 40 10 40 10 40 10 40 10 20 13 2 25 40 10 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 155 Lab 8-2: Configuring LFI Complete this lab activity to practice what you learned in the lesson “Configuring Link Fragmentation and Interleaving” in the module “Link Efficiency Mechanisms.” Activity Objective In this activity, you will configure and monitor MLP with interleaving on a PPP link. After completing this activity, you will be able to meet these objectives: „ Configure link fragmentation and interleaving on PPP WAN links „ Monitor the operation of link fragmentation and interleaving Visual Objective The figure illustrates what you will accomplish in this activity. After measuring voice packet delay and jitter over their slow WAN link, the E-Commerce IT staff is concerned that the jitter is still too high. The IT staff asks you why there is too much jitter and how it can be reduced. Being well educated by Cisco about CLPs in QoS, you answer, “The LLQ mechanism prioritized voice traffic in the software queue, but the hardware queue (Tx ring) always uses a FIFO scheduling mechanism. Therefore, after packets of different applications leave the software queue, they will mix with other packets in the hardware transmit queue (TxQ), even if their software queue processing was expedited. Thus, a voice packet may be immediately sent to the hardware tx-queue, where two large FTP packets may still be waiting for transmission. The voice packet must wait until the FTP packets are transmitted, thus producing an unacceptable delay in the voice path. Because links are variably used, this delay varies with time and may produce unacceptable jitter in jitter-sensitive applications such as voice.” 156 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Knowing that there will be no budget to upgrade the slow WAN link speed any time soon, you offer to improve voice delay and jitter by implementing MLP with interleaving on the slow WAN link. Required Resources These are the resources and equipment required to complete this activity: „ Lab topology configured for QoS „ Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch „ Classroom reference materials as follows: „ — QoS Student Guide — QoS Lab Guide Student pod workstation with Telnet or console access to workstation pod devices Command List The table describes the commands used in this activity. Configuring LFI Lab Commands Command Description interface interface-id Enters interface configuration mode and the physical interface identification encapsulation encapsulationtype Sets the encapsulation method used by the interface [no] ip address ip-address mask Sets a primary or secondary IP address for an interface bandwidth kbps Sets and communicates to higher-level protocols the current bandwidth value for an interface interface multilink multilink-bundle-number Creates a multilink bundle and enters multilink interface configuration mode ppp multilink Enables MLP on an interface ppp multilink interleave Enables real-time packet interleaving ppp multilink fragment-delay (Optional) Configures a maximum fragment delay. If, for example, you want a voice stream to have a maximum bound on delay of 20 ms and you specify 20 ms using this command, MLP will choose a fragment size based on the configured value. ppp multilink group groupnumber Restricts a physical link to joining only a designated multilink-group interface [no] service-policy {input | output} policy-map-name Attaches a policy map to an input interface or VC, or an output interface or VC © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 157 Job Aid This job aid is available to help you complete the lab activity: „ Your assigned workgroup pod number provided by the instructor Task 1: Configure LFI You will configure link fragmentation and interleaving on PPP WAN links. Activity Procedure Complete these steps: Caution The following steps must be performed in the order shown. Step 1 Remove the IP address from the serial 0/0 interface of the WGxR1 router. Step 2 Create a multilink virtual interface (multilink 1) on the workgroup WGxR1 router. Step 3 Set the bandwidth and IP address on the workgroup WGxR1 router multilink 1 interface as follows: Parameter Value IP Address 10.2.x.1 Subnet Mask 255.255.255.0 bandwidth 384kbps Step 4 Place the workgroup WGxR1 router S0/0 interface into multilink-group 1. Step 5 Repeat steps 1 through 4 for the workgroup WGxR2 router, using this table for Step 3: Step 6 Parameter Value IP Address 10.2.x.2 Subnet Mask 255.255.255.0 bandwidth 384kbps Display the running-config of the S0/0 and the multilink 1 interface to verify the MLP configuration. Current configuration : 166 bytes ! interface Serial0/0 description to wgxr1 bandwidth 384 no ip address service-policy output llq-policy encapsulation ppp ppp multilink multilink-group 1 end Current configuration : 112 bytes ! 158 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. interface Multilink1 bandwidth 384 ip address 10.2.x.1 255.255.255.0 ppp multilink multilink-group 1 end MLP is enabled now but is interleaving also enabled based on the above configuration? _______________ Step 7 Shut down Serial 0/1, then use the show ip interface brief command to verify that the multilink-group 1 interface is UP, has the proper IP address, and that the S0/0 interface is UP. WGxR1#show ip interface brief Interface FastEthernet0/0 Serial0/0 Serial0/1 Multilink1 Virtual-Access1 Step 8 IP-Address 10.1.1.1 unassigned 10.4.1.1 10.2.1.1 unassigned OK? YES YES YES YES YES Method NVRAM manual NVRAM manual unset Status up up administratively up up Protocol up up down up up Ping the multilink 1 interface of WGxR2 from WGxR1. WGxR1>ping 10.2.x.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.2.x.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/7/8 ms Step 9 Ping the multilink 1 interface of WGxR1 from WGxR2. WGxR2>ping 10.2.x.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.2.x.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 4/7/8 ms Step 10 Enter the show ip ospf neighbor command to verify that the OSPF neighbor relationship is now formed over the multilink interface. WGxR2#show ip ospf neighbor Neighbor ID 10.2.1.1 Step 11 Pri 0 State Dead Time FULL/ - 00:00:30 Address 10.2.1.1 Interface Multilink1 Enable PPP multilink interleaving on the multilink 1 interface on both WGxR1 and WGxR2. Use a fragment-delay of 10. What is the unit of the fragment delay? ________________________ Step 12 Disable the output service policy on the S0/0 interface of the WGxR1 and WGxR2 routers. Step 13 Enable the llq-policy on the multilink 1 interface in the outbound direction on WGxR1 and WGxR2. Note Ensure that the OSPF neighbor state is established. You can use the show ip ospf neighbor command to verify this. © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 159 Activity Verification You have completed this task when you attain these results: „ You have configured link fragmentation and interleaving on PPP WAN Links. Task 2: Monitor LFI You will monitor the operation of link fragmentation and interleaving. Activity Procedure Complete these steps: Step 1 Clear the interface counters on both of your workgroup routers using the clear counters command. Step 2 Wait for the interface counters to accumulate traffic statistics for at least one minute. Step 3 What type of queuing is the S0/0 interface using now? ____________. WGxR1#show interface serial0/0 Serial0/0 is up, line protocol is up Hardware is PowerQUICC Serial Description: to wg1r2 MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec, reliability 255/255, txload 16/255, rxload 16/255 Encapsulation PPP, LCP Open, multilink Open, loopback not set Last input 00:00:02, output 00:00:02, output hang never Last clearing of "show interface" counters 00:05:38 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair [suspended, using FIFO] FIFO output queue 0/40, 0 drops 5 minute input rate 25000 bits/sec, 9 packets/sec 5 minute output rate 25000 bits/sec, 5 packets/sec 3219 packets input, 1124012 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 1641 packets output, 1132534 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up Step 4 Display the multilink interface and examine how many packets have been interleaved. Multilink1 is up, line protocol is up Hardware is multilink group interface Internet address is 10.2.x.1/24 MTU 1500 bytes, BW 384 Kbit, DLY 100000 usec, reliability 255/255, txload 145/255, rxload 32/255 Encapsulation PPP, LCP Open, multilink Open Open: IPCP, loopback not set DTR is pulsed for 2 seconds on reset Last input 00:00:07, output never, output hang never Last clearing of "show interface" counters 00:01:24 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 2927 Queueing strategy: weighted fair Output queue: 91/1000/64/2927/3030(size/maxtotal/threshold/drops/interleaves) Conversations 5/6/128 (active/max active/max total) Reserved Conversations 5/5 (allocated/max allocated) Available Bandwidth 32 kilobits/sec 5 minute input rate 49000 bits/sec, 112 packets/sec 5 minute output rate 219000 bits/sec, 183 packets/sec 13826 packets input, 608664 bytes, 0 no buffer 160 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 24456 packets output, 3740947 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Step 5 Use the show ppp multilink command to examine the fragment size in bytes (calculated by the Cisco IOS software based on the fragment delay of 10 ms). WGxR1#show ppp multilink Multilink1, bundle name is wg1r2 Bundle up for 16:55:24, 183/255 load Receive buffer limit 12192 bytes, frag timeout 1000 ms 0/0 fragments/bytes in reassembly list 0 lost fragments, 0 reordered 0/0 discarded fragments/bytes, 0 lost received 0x47C9F received sequence, 0x73936 sent sequence Member links: 1 active, 0 inactive (max not set, min not set) Se0/0, since 03:54:35, 480 weight, 472 frag size Step 6 Save your running configurations of the workgroup routers and the workgroup switch to the startup-config in NVRAM. Activity Verification You have completed this task when you attain this result: „ You have monitored the operation of link fragmentation and interleaving. Lab 8-2 Answer Key: Configuring LFI When you complete this activity, your router configuration will be similar to the following, with differences that are specific to your device or workgroup. WGxR1: interface Multilink1 bandwidth 384 ip address 10.2.x.1 255.255.255.0 service-policy output llq-policy ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave multilink-group 1 ! interface Serial0/0 bandwidth 384 no ip address encapsulation ppp clockrate 384000 ppp multilink multilink-group 1 WGxR2: interface Multilink1 bandwidth 384 ip address 10.2.x.2 255.255.255.0 service-policy output llq-policy ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave multilink-group 1 ! interface Serial0/0 bandwidth 384 no ip address encapsulation ppp ppp multilink multilink-group 1 © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 161 The following are the answers to the questions in this lab exercise: What is the unit of the fragment delay? milliseconds (ms) What type of queuing is the S0/0 interface using now? first-in, first-out (FIFO) Final Workgroup Device Configurations When you complete all activities in this course, your workgroup devices will have the following configurations, with differences that are specific to your device or workgroup. WG1R1: hostname WG1R1 ! enable secret 5 $1$n4//$vbCjudYcBR3yNPJqI.1tT0 ! ip subnet-zero ip cef ! class-map match-all bulk match protocol ftp class-map match-any real-time match protocol rtp match protocol icmp match access-group name VoIP-RTCP class-map match-all match-www match access-group 102 class-map match-all match-ftp match access-group 101 class-map match-all web-outbound match protocol http class-map match-any ef-traffic match dscp ef match access-group 100 class-map match-all af21-traffic match dscp af21 class-map match-all af31-traffic match dscp af31 class-map match-all af11-traffic match dscp af11 class-map match-any mission-critical match protocol sqlnet match access-group name Voice-Control class-map match-all cs1-traffic match dscp cs1 class-map match-all interactive match protocol citrix class-map match-all default match any class-map match-all match-sw-be match dscp default class-map match-all match-sw-ef match dscp ef class-map match-any scavenger match protocol kazaa2 match protocol napster ! policy-map mark-nbar class real-time set dscp ef class mission-critical set dscp af31 class interactive 162 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. set dscp af21 class bulk set dscp af11 class scavenger set dscp cs1 police cir 8000 conform-action transmit exceed-action drop class class-default set dscp default policy-map http-police class web-outbound police cir percent 50 conform-action transmit exceed-action set-dscp-transmit cs1 violate-action drop policy-map mark-apps class match-ftp set dscp af11 class match-www set dscp default policy-map verify-mark class match-sw-ef class match-sw-be policy-map llq-policy class ef-traffic priority 168 compress header ip rtp class af31-traffic bandwidth remaining percent 40 random-detect dscp-based random-detect dscp 10 34 40 10 class af21-traffic bandwidth remaining percent 20 random-detect dscp-based random-detect dscp 10 30 40 10 class af11-traffic bandwidth remaining percent 13 random-detect dscp-based random-detect dscp 10 26 40 10 shape average 8000 class cs1-traffic bandwidth remaining percent 2 random-detect dscp-based random-detect dscp 10 22 40 10 class class-default bandwidth remaining percent 25 random-detect dscp-based random-detect ecn random-detect dscp 0 20 40 10 ! interface Multilink1 bandwidth 384 ip address 10.2.1.1 255.255.255.0 service-policy output llq-policy ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave multilink-group 1 ! interface Tunnel0 ip unnumbered FastEthernet0/0 qos pre-classify tunnel source Serial0/1 tunnel destination 10.5.1.2 ! interface FastEthernet0/0 ip address 10.1.1.1 255.255.255.0 service-policy input mark-nbar duplex auto speed auto ! interface Serial0/0 bandwidth 384 no ip address © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 163 encapsulation ppp clockrate 384000 ppp multilink multilink-group 1 ! interface Serial0/1 bandwidth 768 ip address 10.4.1.1 255.255.255.0 service-policy output http-police encapsulation ppp ! router ospf 1 log-adjacency-changes network 10.0.0.0 0.255.255.255 area 0 ! ip http server ip classless ! ip access-list extended VoIP-RTCP permit udp any any range 16384 32767 ! ip access-list extended Voice-Control permit tcp any any eq 1720 permit tcp any any range 11000 11999 permit udp any any eq 2427 permit tcp any any eq 2428 permit tcp any any range 2000 2002 permit udp any any eq 1719 permit udp any any eq 5060 ! access-list 100 permit icmp any any echo access-list 100 permit icmp any any echo-reply access-list 101 permit tcp any any eq ftp access-list 101 permit tcp any any eq ftp-data access-list 102 permit tcp any any eq www ! line con 0 line aux 0 line vty 0 4 password cisco login ! ! end WG1R2: hostname WG1R2 ! enable secret 5 $1$07qt$nKIz/sUIIRYMZ7urfJPtp1 ! ip subnet-zero ip cef ! class-map match-all bulk match protocol ftp class-map match-any real-time match protocol rtp match protocol icmp match access-group name VoIP-RTCP class-map match-all match-www match access-group 102 class-map match-all match-ftp match access-group 101 class-map match-all web-outbound match protocol http class-map match-any ef-traffic match dscp ef match access-group 100 class-map match-all af21-traffic match dscp af21 class-map match-all af31-traffic match dscp af31 class-map match-all af11-traffic 164 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. match dscp af11 class-map match-any mission-critical match protocol sqlnet match access-group name Voice-Control class-map match-all cs1-traffic match dscp cs1 class-map match-all interactive match protocol citrix class-map match-all default match any class-map match-all match-sw-be match dscp default class-map match-all match-sw-ef match dscp ef class-map match-any scavenger match protocol kazaa2 match protocol napster ! policy-map mark-nbar class real-time set dscp ef class mission-critical set dscp af31 class interactive set dscp af21 class bulk set dscp af11 class scavenger set dscp cs1 police cir 8000 conform-action transmit exceed-action drop class class-default set dscp default policy-map http-police class web-outbound police cir percent 50 conform-action transmit exceed-action set-dscp-transmit cs1 violate-action drop policy-map mark-apps class match-ftp set dscp af11 class match-www set dscp default policy-map verify-mark class match-sw-ef class match-sw-be policy-map llq-policy class ef-traffic priority 168 compress header ip rtp class af31-traffic bandwidth remaining percent 40 random-detect dscp-based random-detect dscp 10 34 40 10 class af21-traffic bandwidth remaining percent 20 random-detect dscp-based random-detect dscp 10 30 40 10 class af11-traffic bandwidth remaining percent 13 random-detect dscp-based random-detect dscp 10 26 40 10 shape average 8000 class cs1-traffic bandwidth remaining percent 2 random-detect dscp-based random-detect dscp 10 22 40 10 class class-default bandwidth remaining percent 25 random-detect dscp-based random-detect ecn random-detect dscp 0 20 40 10 ! © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 165 interface Multilink1 bandwidth 384 ip address 10.2.1.2 255.255.255.0 service-policy output llq-policy ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave multilink-group 1 ! interface Tunnel0 ip unnumbered FastEthernet0/0 qos pre-classify tunnel source Serial0/1 tunnel destination 10.4.1.1 ! interface FastEthernet0/0 ip address 10.3.1.2 255.255.255.0 service-policy input mark-nbar duplex auto speed auto ! interface Serial0/0 bandwidth 384 no ip address encapsulation ppp ppp multilink multilink-group 1 ! interface Serial0/1 bandwidth 768 ip address 10.5.1.2 255.255.255.0 service-policy output http-police encapsulation ppp ! router ospf 1 log-adjacency-changes network 10.0.0.0 0.255.255.255 area 0 ! ip http server ip classless ! ip access-list extended VoIP-RTCP permit udp any any range 16384 32767 ! ip access-list extended Voice-Control permit tcp any any eq 1720 permit tcp any any range 11000 11999 permit udp any any eq 2427 permit tcp any any eq 2428 permit tcp any any range 2000 2002 permit udp any any eq 1719 permit udp any any eq 5060 ! access-list 100 permit icmp any any echo access-list 100 permit icmp any any echo-reply access-list 101 permit tcp any any eq ftp access-list 101 permit tcp any any eq ftp-data access-list 102 permit tcp any any eq www ! line con 0 line aux 0 line vty 0 4 password cisco login ! ! end 166 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc. WG1S1: hostname WG1S1 ! enable secret 5 $1$Yq48$E3tAlJjcYAP9qJpdmr0nu. ! vlan 11 name vlan11 ! vlan 21 name vlan21 wrr-queue bandwidth 30 1 70 0 wrr-queue cos-map 1 0 1 2 3 4 wrr-queue cos-map 3 6 7 wrr-queue cos-map 4 5 ! class-map match-all callgen2 match access-group 2 class-map match-all callgen1 match access-group 1 ! policy-map mark-callgen class callgen1 set ip dscp 46 class callgen2 set ip dscp 46 ! mls qos map cos-dscp 0 8 16 24 32 46 48 56 ip subnet-zero vtp domain qos vtp mode transparent ! interface FastEthernet0/1 switchport trunk allowed vlan 11,21 switchport mode trunk no ip address service-policy input mark-callgen mls qos trust device cisco-phone mls qos trust cos ! interface FastEthernet0/2 switchport access vlan 11 switchport mode access no ip address ! interface FastEthernet0/3 switchport access vlan 21 switchport mode access no ip address ! interface Vlan1 no ip address no ip route-cache shutdown ! access-list 1 permit 10.1.1.11 access-list 2 permit 10.3.1.11 ! line con 0 line vty 5 15 ! end © 2006 Cisco Systems, Inc. The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. Lab Guide 167 168 Implementing Cisco Quality of Service (QOS) v2.2 The PDF files and any printed representation for this material are the property of Cisco Systems, Inc., for the sole use by Cisco employees for personal study. The files or printed representations may not be used in commercial training, and may not be distributed for purposes other than individual self-study. © 2006 Cisco Systems, Inc.