Re: [c-nsp] N7k: Attaching a service-policy to an SVI
We need to keep in mind this isn't ios. They have cleaned up a lot of this from ios and I welcome it. > > VLAN service policies are applied in vlan config mode, not under the SVI. This allows you to tie a policy to a vlan without forcing you to create an SVI. Here the N7K does stray from _normal_ cisco logic, but it works as designed. > > > 7010-A(config)# vlan 99 > 7010-A(config-vlan)# service-policy ? > input Input Service Policy > output Output Service Policy > type Specify the type of this policy > > > 7010-A(config-vlan)# service-policy input foo > 7010-A(config-vlan)# > > /Sven > > > On 2 sep 2010, at 18.00, cisco-nsp-requ...@puck.nether.net wrote: > >> -- >> >> Message: 1 >> Date: Thu, 2 Sep 2010 16:07:45 +0100 >> From: Matthew Melbourne >> To: "Arie Vayner (avayner)" >> Cc: cisco-nsp@puck.nether.net >> Subject: Re: [c-nsp] N7k: Attaching a service-policy to an SVI >> Message-ID: >> >> Content-Type: text/plain; charset=ISO-8859-1 >> >> The service-policy command doesn't appear to be there under the SVI... > > > ___ > cisco-nsp mailing list cisco-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] N7k: Attaching a service-policy to an SVI
VLAN service policies are applied in vlan config mode, not under the SVI. This allows you to tie a policy to a vlan without forcing you to create an SVI. Here the N7K does stray from _normal_ cisco logic, but it works as designed. 7010-A(config)# vlan 99 7010-A(config-vlan)# service-policy ? input Input Service Policy output Output Service Policy typeSpecify the type of this policy 7010-A(config-vlan)# service-policy input foo 7010-A(config-vlan)# /Sven On 2 sep 2010, at 18.00, cisco-nsp-requ...@puck.nether.net wrote: > -- > > Message: 1 > Date: Thu, 2 Sep 2010 16:07:45 +0100 > From: Matthew Melbourne > To: "Arie Vayner (avayner)" > Cc: cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] N7k: Attaching a service-policy to an SVI > Message-ID: > > Content-Type: text/plain; charset=ISO-8859-1 > > The service-policy command doesn't appear to be there under the SVI... ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] N7k: Attaching a service-policy to an SVI
Am I misreading, or did he say it wasn't under the 'interface vlan', but under the 'vlan' itself? :) I just looked on mine, and it's under the vlan config (Version 4.2(3) software). NEX7000EDC1(config)# vlan 4 NEX7000EDC1(config-vlan)# ? ip Configure IP features media Media type of the VLAN nameAscii name of the VLAN no Negate a command or set its defaults remote-span Enable remote span VLAN service-policy Configure service policy for an interface shutdownShutdown VLAN switching state Operational state of the VLAN end Go to exec mode exitExit from command interpreter pop Pop mode from stack or restore from name pushPush current mode to stack or save it under name where Shows the cli context you are in Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Matthew Melbourne Sent: Thursday, September 02, 2010 9:08 AM To: Arie Vayner (avayner) Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] N7k: Attaching a service-policy to an SVI The service-policy command doesn't appear to be there under the SVI... nx01(config)# int vlan 304 nx01(config-if)# ? bandwidth Set bandwidth informational parameter carrier-delay Specify delay for interface transitions delay Specify interface throughput delay descriptionInterface specific description hsrp HSRP interface configuration commands inheritInherit a port-profile ip Configure IP features ipv6 Configure IPv6 features isis IS-IS configuration commands load-interval Specify interval for load calculation for an interface mac-addressManually set interface MAC address medium Configure Interface medium mode mtuSet the interface Maximum Transmission Unit (MTU) no Negate a command or set its defaults shutdown Enable/disable an interface snmp Modify SNMP interface parameters vrfConfigure VRF parameters vrrp VRRP configuration commands endGo to exec mode exit Exit from command interpreter popPop mode from stack or restore from name push Push current mode to stack or save it under name where Shows the cli context you are in On 2 September 2010 14:43, Arie Vayner (avayner) wrote: > Matt, > > You should be able to apply the qos policy on the "vlan" (as opposed to > "interface vlan"): > Let me know if it works for you. > > This is the doc, but I think it might be wrong (for the syntax) - let me > know, and I will see internally. > http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/qos/con > figuration/guide/cpl.html#wp1056677 > > Arie > > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Matthew > Melbourne > Sent: Thursday, September 02, 2010 14:18 > To: cisco-nsp@puck.nether.net > Subject: [c-nsp] N7k: Attaching a service-policy to an SVI > > Hi, > > Is it possible to attach a QoS service policy (in this case a simple > ICMP policier) to a VLAN interface on the N7k platform (NX-OS > 5.0(2a))? The docs suggest it is possible, but the service-policy > command doesn't appear to be available in interface configuration mode > for an SVI (the command is present under a physical interface). > > Cheers, > > Matt > > -- > Matthew Melbourne > ___ > cisco-nsp mailing list cisco-...@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > -- Matthew Melbourne ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] N7k: Attaching a service-policy to an SVI
The service-policy command doesn't appear to be there under the SVI... nx01(config)# int vlan 304 nx01(config-if)# ? bandwidth Set bandwidth informational parameter carrier-delay Specify delay for interface transitions delay Specify interface throughput delay descriptionInterface specific description hsrp HSRP interface configuration commands inheritInherit a port-profile ip Configure IP features ipv6 Configure IPv6 features isis IS-IS configuration commands load-interval Specify interval for load calculation for an interface mac-addressManually set interface MAC address medium Configure Interface medium mode mtuSet the interface Maximum Transmission Unit (MTU) no Negate a command or set its defaults shutdown Enable/disable an interface snmp Modify SNMP interface parameters vrfConfigure VRF parameters vrrp VRRP configuration commands endGo to exec mode exit Exit from command interpreter popPop mode from stack or restore from name push Push current mode to stack or save it under name where Shows the cli context you are in On 2 September 2010 14:43, Arie Vayner (avayner) wrote: > Matt, > > You should be able to apply the qos policy on the "vlan" (as opposed to > "interface vlan"): > Let me know if it works for you. > > This is the doc, but I think it might be wrong (for the syntax) - let me > know, and I will see internally. > http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/qos/con > figuration/guide/cpl.html#wp1056677 > > Arie > > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Matthew > Melbourne > Sent: Thursday, September 02, 2010 14:18 > To: cisco-nsp@puck.nether.net > Subject: [c-nsp] N7k: Attaching a service-policy to an SVI > > Hi, > > Is it possible to attach a QoS service policy (in this case a simple > ICMP policier) to a VLAN interface on the N7k platform (NX-OS > 5.0(2a))? The docs suggest it is possible, but the service-policy > command doesn't appear to be available in interface configuration mode > for an SVI (the command is present under a physical interface). > > Cheers, > > Matt > > -- > Matthew Melbourne > ___ > cisco-nsp mailing list cisco-...@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > -- Matthew Melbourne ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] N7k: Attaching a service-policy to an SVI
Hi Matt, Arie, Yes, the documentation is incorrect in that section, I will work to get that updated. Arie is right, you apply qos service policies to the vlan itself, not the SVI, in NXOS. That's to decouple SVI creation and policy application for vlans. For an L2 switchport, L3 interface, or L3 subinterface: int x/y[.z] service-policy in|out foo For an entire VLAN: vlan x service-policy in|out foo Note however that in an upcoming release (5.1) we will be changing that to be in line with the new IOS convention of putting VLAN config under the "vlan-configuration" mode, like this: vlan configuration x service-policy in|out foo That change is to decouple VLAN creation and policy application for VLANs (specifically to support VTP client, where you may want to tie a policy to a VLAN that has not been learned through VTP yet). Hope that helps, Tim At 06:43 AM 9/2/2010, Arie Vayner (avayner) vociferated: Matt, You should be able to apply the qos policy on the "vlan" (as opposed to "interface vlan"): Let me know if it works for you. This is the doc, but I think it might be wrong (for the syntax) - let me know, and I will see internally. <http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/qos/con>http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/qos/con figuration/guide/cpl.html#wp1056677 Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [<mailto:cisco-nsp-boun...@puck.nether.net>mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Matthew Melbourne Sent: Thursday, September 02, 2010 14:18 To: cisco-nsp@puck.nether.net Subject: [c-nsp] N7k: Attaching a service-policy to an SVI Hi, Is it possible to attach a QoS service policy (in this case a simple ICMP policier) to a VLAN interface on the N7k platform (NX-OS 5.0(2a))? The docs suggest it is possible, but the service-policy command doesn't appear to be available in interface configuration mode for an SVI (the command is present under a physical interface). Cheers, Matt -- Matthew Melbourne ___ cisco-nsp mailing list cisco-nsp@puck.nether.net <https://puck.nether.net/mailman/listinfo/cisco-nsp>https://puck.nether.net/mailman/listinfo/cisco-nsp archive at <http://puck.nether.net/pipermail/cisco-nsp/>http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net <https://puck.nether.net/mailman/listinfo/cisco-nsp>https://puck.nether.net/mailman/listinfo/cisco-nsp archive at <http://puck.nether.net/pipermail/cisco-nsp/>http://puck.nether.net/pipermail/cisco-nsp/ Tim Stevenson, tstev...@cisco.com Routing & Switching CCIE #5561 Distinguished Technical Marketing Engineer, Cisco Nexus 7000 Cisco - http://www.cisco.com IP Phone: 408-526-6759 The contents of this message may be *Cisco Confidential* and are intended for the specified recipients only. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] N7k: Attaching a service-policy to an SVI
Matt, You should be able to apply the qos policy on the "vlan" (as opposed to "interface vlan"): Let me know if it works for you. This is the doc, but I think it might be wrong (for the syntax) - let me know, and I will see internally. http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/qos/con figuration/guide/cpl.html#wp1056677 Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Matthew Melbourne Sent: Thursday, September 02, 2010 14:18 To: cisco-nsp@puck.nether.net Subject: [c-nsp] N7k: Attaching a service-policy to an SVI Hi, Is it possible to attach a QoS service policy (in this case a simple ICMP policier) to a VLAN interface on the N7k platform (NX-OS 5.0(2a))? The docs suggest it is possible, but the service-policy command doesn't appear to be available in interface configuration mode for an SVI (the command is present under a physical interface). Cheers, Matt -- Matthew Melbourne ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
[c-nsp] N7k: Attaching a service-policy to an SVI
Hi, Is it possible to attach a QoS service policy (in this case a simple ICMP policier) to a VLAN interface on the N7k platform (NX-OS 5.0(2a))? The docs suggest it is possible, but the service-policy command doesn't appear to be available in interface configuration mode for an SVI (the command is present under a physical interface). Cheers, Matt -- Matthew Melbourne ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
