Hi, I am trying to mark packets at VAI interfaces and then use this markings to classify traffic in different classes when they exit the router downstream to carrier. I dont see packet being classified at physical interface yet the ip precedence accounting shows correct marking
this is on 7200 12.2(33)SRE6 SP services. Scenario: Traffic IN >>> LNS>>> VAI (policy outbound mark traffic) >>> Physical interface >>(Shaping + queueing) Configuration VAI Class-maps and policy-map class-map match-all GOLD match access-group 101 class-map match-all SILVER match access-group 102 access-list 101 permit icmp host 111.111.111.111 any access-list 102 permit icmp host 222.222.222.222 any policy-map STD_POLICY1 class GOLD set dscp af21 class SILVER set dscp af22 class class-default Show commands for VAI LNS#show policy-map session SSS session identifier 7 - Service-policy output: STD_POLICY1 Class-map: GOLD (match-all) 4135 packets, 4522926 bytes 30 second offered rate 9000 bps, drop rate 0000 bps Match: access-group 101 QoS Set dscp af21 Packets marked 4138 Class-map: SILVER (match-all) 3649 packets, 3831450 bytes 30 second offered rate 9000 bps, drop rate 0000 bps Match: access-group 102 QoS Set dscp af22 Packets marked 3653 Class-map: class-default (match-any) 418 packets, 37270 bytes 30 second offered rate 0000 bps, drop rate 0000 bps Match: any LNS# show access-lists Extended IP access list 101 10 permit icmp host 111.111.111.111 any (4171 matches) Extended IP access list 102 10 permit icmp host 222.222.222.222 any (3685 matches) ==== Physical Interface Class-map and policy-map Configuration: class-map match-all EF match dscp ef class-map match-any CS1 match dscp af11 match dscp af12 match dscp af13 class-map match-any CS2 match dscp af21 match dscp af22 match dscp af23 match dscp cs2 class-map match-any CS3 match dscp af31 match dscp af32 match dscp af33 class-map match-any CS4 match dscp af41 match dscp af42 match dscp af43 policy-map CHILD_POLICY class EF priority percent 10 class CS4 bandwidth percent 30 random-detect dscp-based fair-queue class CS3 bandwidth percent 20 random-detect dscp-based fair-queue class CS2 bandwidth percent 10 fair-queue random-detect dscp-based class CS1 bandwidth percent 5 fair-queue random-detect dscp-based class class-default >> Shaping policy policy-map PARENT_1M_POLICY class class-default shape average 1000000 service-policy CHILD_POLICY SHOW COMMANDS FOR PHYSICAL INT LNS# show policy-map interface FastEthernet0/0 Service-policy output: PARENT_1M_POLICY Class-map: class-default (match-any) 1148 packets, 90689 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: any Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 8439/7685662 shape (average) cir 1000000, bc 4000, be 4000 target shape rate 1000000 Service-policy : CHILD_POLICY queue stats for all priority classes: Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 0/0 Class-map: EF (match-all) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: dscp ef (46) Priority: 10% (100 kbps), burst bytes 2500, b/w exceed drops: 0 Class-map: CS4 (match-any) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: dscp af41 (34) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af42 (36) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af43 (38) 0 packets, 0 bytes 5 minute rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 30% (300 kbps) Exp-weight-constant: 9 (1/512) Mean queue depth: 0 packets dscp Transmitted Random drop Tail/Flow drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob Fair-queue: per-flow queue limit 16 Class-map: CS3 (match-any) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: dscp af31 (26) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af32 (28) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af33 (30) 0 packets, 0 bytes 5 minute rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 20% (200 kbps) Exp-weight-constant: 9 (1/512) Mean queue depth: 0 packets dscp Transmitted Random drop Tail/Flow drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob Fair-queue: per-flow queue limit 16 Class-map: CS2 (match-any) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: dscp af21 (18) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af22 (20) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af23 (22) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp cs2 (16) 0 packets, 0 bytes 5 minute rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 10% (100 kbps) Fair-queue: per-flow queue limit 16 Exp-weight-constant: 9 (1/512) Mean queue depth: 0 packets dscp Transmitted Random drop Tail/Flow drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob Class-map: CS1 (match-any) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Match: dscp af11 (10) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af12 (12) 0 packets, 0 bytes 5 minute rate 0 bps Match: dscp af13 (14) 0 packets, 0 bytes 5 minute rate 0 bps Queueing queue limit 64 packets (queue depth/total drops/no-buffer drops/flowdrops) 0/0/0/0 (pkts output/bytes output) 0/0 bandwidth 5% (50 kbps) Fair-queue: per-flow queue limit 16 Exp-weight-constant: 9 (1/512) Mean queue depth: 0 packets dscp Transmitted Random drop Tail/Flow drop Minimum Maximum Mark pkts/bytes pkts/bytes pkts/bytes thresh thresh prob Class-map: class-default (match-any) 1148 packets, 90689 bytes #####PACKETS MATCHING HERE INSTEAD OF CLASSES ABOVE 5 minute offered rate 0000 bps, drop rate 0000 bps Match: any queue limit 64 packets (queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 8439/7685662 ###PRECEDENCE ACCOUNTING LNS# show int fa0/0 precedence FastEthernet0/0 Output Precedence 0: 697 packets, 46002 bytes Precedence 2: 7062 packets, 7697580 bytes Precedence 6: 430 packets, 51888 bytes So in short the VAI policy is marking packet correctly, IP precedence accounting shows hits but on the main policy it skips its.. Interestingly if i remove VAI policy and mark the packets from an upstream router using extended pings they are identified by the physical interface correctly and matches against appropriate classes. Any hints will be appreciated. Cheers Hitesh _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/