Here are some hints for you to research: I believe there is an error in one of the class-maps. See if you can find it or agree.
I believe you have too much extra stuff configured, let’s eliminate the unneeded stuff. How about use match IP protocol instead of access-lists? Are you sure your access-list is correct for the inbound / outbound traffic you have? I think the data vlan people are going to be pissed and complain about slowness. I know it’s a lab. I believe you can get the entire config down to a much simplier 10-15 lines instead of all the stuff you have. From: ccie_voice-boun...@onlinestudylist.com [mailto:ccie_voice-boun...@onlinestudylist.com] On Behalf Of Alex Hannah Sent: Wednesday, November 11, 2009 2:41 PM To: ccie_voice@onlinestudylist.com Subject: [OSL | CCIE_Voice] 3750 QoS Question Hello everyone. I am attempting to create the following QoS policy on a 3750 port with an IP Phone plugged in behind it. The policy will police signalling ( SCCP ) 32k down to 8k and remark to DSCP 8. I have read through most of the SRND guide for the 3750, the model I am following is the: 2970/3560/3750—Conditionally-Trusted IP Phone + PC + Scavenger (Basic) Model Configuration on page 105 of the 3.3 QoS SRND. Can anyone validate my work below and let me know if you think this meets those requirements? Also, in this scenerio, Auto Qos would not need to be applied over top of it correct? mls qos map cos-dscp 0 8 16 24 32 46 48 56 mls qos map policed-dscp 0 24 to 8 class-map match-all VVLAN-VOICE !Was in SRND but not using match access-group name VVLAN-VOICE match ip dscp ef class-map match-all VVLAN-CALL-SIGNALING !Was in SRND but not using match access-group name VVLAN-CALL-SIGNALLING match ip dscp cs3 af31 class-map match-all VVLAN-ANY match access-group name VVLAN-ANY policy-map IPPHONE+PC-BASIC class VVLAN-VOICE set ip dscp 46 police 128000 8000 exceed-action drop class VVLAN-CALL-SIGNALING set ip dscp 24 police 32000 8000 exceed-action policed-dscp-transmit class VVLAN-ANY set ip dscp 0 police 32000 8000 exceed-action policed-dscp-transmit class class-default set ip dscp 0 police 5000000 8000 exceed-action policed-dscp-transmit interface FastEthernet0/1 service-policy input IPPHONE+PC-BASIC ip access list extended VVLAN-VOICE permit udp x.x.x.x 0.0.0.255 any range 16384 32767 ip access list extended VVLAN-CALL-SIGNALING permit tcp x.x.x.x 0.0.0.255 any range 2000 2002 ip access list extended VVLAN-ANY permit ip x.x.x.x 0.0.0.255 any Thanks, Alex
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
