QoS Session NCS-215

ftp://ftp-eng.cisco.com/mmontane/networkershandouts.zip http://www.cisco.com/univercd/cc/td/doc/product/voic e/ip_tele/avvidqos/index.htm

OSI QoS

QoS 3

Si Si Si Si WAN QoS QoS QoS 3 VoIP WRED 3 VoIP WRED QoS QoS QoS. QoS. QoS WAN QoS WAN IP VC Citrix IP IP VC Cireix IP IP VC Cireix IP

IP QoS WAN QoS VoIP

PCM (64Kbps)IP 64Kbps 80Kbps PCM VoIP ( 50pps) G.711 80Kbps GW DSP CODEC 30 msec 1 G.729A 20 msec IP FAX ; 2

384 Kbps (30 fps) (CIF) I 1024 1518 I 1024 1518 600Kbps 0pps 5pps P B 128 256 32Kbps I P B

(CIF) 1025 1500 37% 65 128 1% 513 1024 20% 129 256 34% 257-512 8%

QoS Citrix DLSw+ PeopleSoft Oracle ERP PC / FTP Napster KaZaa Morpheus Grokster

WAN MTU MTU IP UDP 4-5 TCP 1MB

Citrix : / Citrix WAN MTU TCP TCP ACK

IP QoS WAN QoS VoIP

2 3 2 802.1Q/p PREAM. SFD DA SA Type TAG 4 PT DATA FCS CoS (802.1D ) PRI CFI VLAN ID ToS 1 Len 3 IPV4 ID Offset TTL Proto FCS IP-SA IP-DA Data 7 6 5 4 3 2 1 0 IP DSCP DSCP IPV4: MSB IP ( D.S. 2 )

(PHB) EF (DSCP) 101110 Prêt Prêt Prêt (CS) 4 AF41 AF42 AF43 100010 100100 100110 (CS) 3 AF31 AF32 AF33 011010 011100 011110 (CS) 2 AF21 AF22 AF23 010010 010100 010110 (CS) 1 AF11 AF12 AF13 001010 001100 001110 000000

DSCP Decimal Binary IP PREC Binary (PHB) (DSCP) <BE1 2 000010 0 000 <BE2 4 000100 0 000 <BE3 EF 6 000110 0101110000 BE 0 000000 0 000 AF11 10 001010 1 001 AF12 12 001100 High Drop 1 001 Prêt Prêt Prêt AF13 14 001110 1 001 AF21 18 010010 2 010 (CS) 4 AF22 AF41 20 AF42 010100 AF43 2 100010 010 100100 100110 AF23 22 010110 2 010 (CS) 3 AF31 AF32 AF33 011010 011100 011110 AF31 26 011010 3 011 AF32 28 011100 3 011 (CS) 2 AF21 AF22 AF23 010010 010100 010110 AF33 30 011110 3 011 AF41 34 100010 4 100 (CS) 1AF42 AF11 36 AF12 100100 AF13 4001010100001100 001110 AF43 38 100110 4 100 EF 46 101110 5000000101

Si http://www.cisco.com/warp/public/cc/so/cuso/epso/entdes/highd_wp.htm http://www.cisco.com/warp/public/cc/so/neso/lnso/cpso/camp_wp.htm TX / RPT

WAN QoS 2 3 802.1Q VLAN /

WAN QoS Enabled WAN WAN CBWFQ LLQ VoIP ATM/FR VoIP, 768Kbps WAN LFI VoIP LFI crtp

IPSec VPN VoIP VPN Crypto FIFO crypto (CAR crypto ) pre-classify IP IP mc MoH, IPSec GRE crtp IPSec Session VVT-216: IPSec VPN Session VVT-201: / SOHO IPSec VPN

IP QoS WAN QoS VoIP

QoS VLAN=81 ( ) VLAN=100 6500 (PFC) 6500 (PFC) VLAN=80 (Citrix) IOS 6500 6500 (PFC) Si VVID=110 4000 Si VVID=111 6500 7200/7500 3550 WAN 2950 3524 XL VVID=112 VLAN=10 VLAN=11 VLAN=12

IP Catalyst 6000 VLAN = 110 PC VLAN = 10 (PVID) 802.1p 2 CoS 802.1Q IP 10.1.110.3 PC 171.1.10.3 VLAN (PVID); PC IP ; CCM 3.1(x) ; : PC NIC full/100, half/100 http://www.cisco.com/warp/customer/473/3.htm http://www.cisco.com/warp/customer/473/46.html

PC CoS : ASIC CoS 0 IP ASIC COS = 5 COS = 5 COS = 7 COS = 0 set port qos <mod/port> trust-ext IP PC cat6k set port qos <mod/port> trust cat6k ( ), trust-cos, trust-ipprec, trust-dscp 6k 10/100 ACL

IP AP WLAN AP QoS AP VoIP / 802.11 QoS ; AP + Spectralink QoS ESE Brian Cox VoIP WLAN

/ L3 Aware IP VC H.323 PC VC WAN PQ DSCP AF41 : VVT-130: IP VVT-230: IP VVT-330: IP

DLSw+ L3 Aware IP 5 PQ trust-ipprec DLSw+ dlsw DLSw+ ; DLSw+ IP Prec dlsw remote-peer 0 tcp 171.70.234.121 priority dlsw tos map high 2 medium 2 normal 2 low 2 DLSw+ DSCP IP ;

IP QoS WAN QoS VoIP

QoS?!

1 2 RR/WRR/PQ

6k cat6k-access> (enable) sh mac 5/1 1 2 Port Rcv-Unicast Rcv-Multicast Rcv-Broadcast -------- -------------------- -------------------- -------------------- 5/1 267223 37 4 Port Xmit-Unicast Xmit-Multicast Xmit-Broadcast -------- -------------------- -------------------- -------------------- 5/1 28748894 5206 72 RR/WRR/PQ Port Rcv-Octet Xmit-Octet -------- -------------------- -------------------- 5/1 17178128 1840430081 MAC Dely-Exced MTU-Exced In-Discard Out-Discard -------- ---------- ---------- ---------- ----------- 5/1 0 0 0 262140

4k SUPIII 4006-SUPIII-Access#sh int g3/2 count all... Port InPkts 1549-9216 OutPkts 1549-9216 1 2 RR/WRR/PQ Port InPkts 1549-9216 OutPkts 1549-9216 Gi3/2 0 0 Port Tx-Bytes-Queue-1 Tx-Bytes-Queue-2 Tx-Bytes-Queue-3 Tx-Bytes-Queue-4 Gi3/2 0 0 0 0 Port Tx-Drops-Queue-1 Tx-Drops-Queue-2 Tx-Drops-Queue-3 Tx-Drops-Queue-4 Gi3/2 0 0 0 0 Port Rx-No-Pkt-Buff RxPauseFrames TxPauseFrames PauseFramesDrop Gi3/2 0 0 0 0

Si Si QoS Si Si

QoS Catalyst / 2900/3500 2Q1T 2950 4Q (Priority Schedule or WRR) 3550 1P3Q2T or 4Q2T 4000/SUPII 2Q1T 4000/SUPIII 1P3Q2T (priority config) 6500 2Q2T TX (10/100 classic) 1Q4T RX (10/100 classic) 1P2Q2T TX (gig classic) 1P1Q4T RX (gig classic) / 4000/SUPIII 1P3Q2T 6500 2Q2T TX (10/100 classic) fabric) 1Q4T RX (10/100 classic) 1P2Q2T TX (gig classic) 1P1Q4T RX (gig classic) 1P3Q1T TX (10/100 1P1Q RX (10/100 fabric) 1P2Q1T TX (gig fabric) 1P1Q8T RX (gig fabric)

Catalyst 3500-XL/2900 QoS (8m dram) 2 (2Q1T) CoS 0-3 =, 4-7 = CoS QoS (802.1p) CoS 3524-PWR 3524-PWR CoS GigaStack: Pt-2-Pt Si Si Si 3524-PWR

Catalyst 3500/2900 XL 3500/2900 XL Si interface FastEthernet0/1 power inline auto speed auto switchport trunk encapsulation dot1q switchport trunk native vlan 12 switchport mode trunk switchport voice vlan 112 switchport priority extend cos 0 spanning-tree portfast interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk 3524-PWR Si 3550 3524-PWR Si 3524-PWR vlan database (EXEC Mode) vlan 112

Catalyst 2950 QoS 4 ( Si WRR) ACL, gt, eq DSCP (13) 802.1p DSCP ACL QoS 6500 6500 DSCP, CoS ( ) DSCP CoS 2950 ( / ) 2950 2950 CoS DSCP / DSCP CoS 3 /4

Catalyst 2950 2950 mls qos map cos-dscp 0 10 18 26 34 46 48 56 mls qos!! interface GigabitEthernet0/12 description Uplink to no ip address mls qos trust dscp!! interface FastEthernet0/1 description To IP Phone no ip address mls qos trust cos switchport voice vlan 111 switchport access vlan 11 switchport priority extend cos 0 Si Si 3550 Si 2950 2950 2950

Catalyst 3550 QoS 4 (1P3Q2T 4Q2T) PQ CoS 5 4 PQ priority-queue out CoS wwr-queue 4 5 ( ) ( ) 802.1p DSCP ACL QoS DSCP CoS ( ) DSCP CoS ( / ) CoS DSCP/ DSCP CoS (2002 3/4 ) 3/4 Si 6500 6500 3550 3550 3550

Catalyst 3550 mls qos map cos-dscp 0 10 18 26 34 46 48 56 mls qos!! interface GigabitEthernet0/12 description Uplink to no ip address flowcontrol send off mls qos trust dscp wrr-queue cos-map 4 5 priority-queue out! interface Fastthernet0/1 description to IP Phone no ip address mls qos trust CoS wrr-queue cos-map 4 5 priority-queue out switchport voice vlan 111 switchport access vlan 11 switchport priority extend cos 0 Si 6500 6500 3550 3550 3550

Catalyst 3550 mls qos map cos-dscp 0 10 18 26 34 46 48 56 mls qos! class-map match-all VoIP-Bearer match access-group name VoIP-Bearer class-map match-all Mission-Critical match access-group name Mission-Critical class-map match-all VoIP-Control match access-group name VoIP-Control! policy-map VoIP-Policy class VoIP-Control set ip dscp 26 class VoIP-Bearer set ip dscp 46 class Mission-Critical set ip dscp 18! interface GigabitEthernet0/1 description Classification no ip address flowcontrol send off service-policy in VoIP-Policy wrr-queue cos-map 4 5 priority-queue out Si 6500 6500 3550 3550 3550

Catalyst 4000 QoS (SUPII) 2 (2Q1T) CoS (802.1p) QoS QoS, CoS 1 Si Si ; CoS CoS CoS PEM Si 4000

Catalyst 4000 (SUPII) Cat4K cat4k> (enable) set qos enable cat4k> (enable) set qos map 2q1t 1 1 cos 0-1 cat4k> (enable) set qos map 2q1t 2 1 cos 2-3 cat4k> (enable) set qos map 2q1t 2 1 cos 4-5 cat4k> (enable) set qos map 2q1t 2 1 cos 6-7 Si Si Si cat4k> (enable) show qos info runtime Run time setting of QoS: QoS is enabled All ports have 2 transmit queues with 1 drop thresholds (2q1t). Default CoS = 0 Queue and Threshold Mapping: Queue Threshold CoS ----- --------- --------------- 1 1 0 1 2 1 2 3 4 5 6 7 2 4000

Catalyst 4000 QoS (SUPIII) 4 (1P3Q2T 4Q2T) PQ CoS 5 3 PQ tx-queue 3 Priority high ( ) ( ) 802.1p DSCP ACL QoS ( ) DSCP CoS ( / ) DSCP CoS CoS DSCP / DSCP CoS PEM 3/4 Si Si 4000SUPIII Si

Catalyst 4000 (SUPIII) qos map cos 1 to dscp 10 qos map cos 2 to dscp 18 qos map cos 3 to dscp 26 qos map cos 4 to dscp 34 qos map cos 5 to dscp 46 qos!! interface GigabitEthernet1/1 description Uplink to Distribution qos trust dscp no snmp trap link-status tx-queue 3 priority high!! interface FastEthernet4/1 description To IP Phone qos trust cos no snmp trap link-status switchport voice vlan 111 switchport vlan 11 switchport priority extend cos 0 tx-queue 3 priority high Si Si 4000 Si

Catalyst 4000 (SUPIII) qos map cos 2 to dscp 18 qos map cos 3 to dscp 26 qos map cos 4 to dscp 34 qos map cos 5 to dscp 46 qos! class-map match-all VoIP-Bearer match access-group name VoIP-Bearer class-map match-all Mission-Critical match access-group name Mission-Critical class-map match-all VoIP-Control match access-group name VoIP-Control! policy-map VoIP-Policy class Mission-Critical set ip dscp 18 class VoIP-Control set ip dscp 26 class VoIP-Bearer set ip dscp 46! interface GigabitEthernet1/1 qos trust cos service-policy in VoIP-Policy tx-queue 3 priority high Si Si 4000 Si

6500 QoS (PFC) SUP,, 802.1p DSCP ACL QoS ( ) DSCP CoS DSCP CoS ( ) CoS DSCP/ DSCP CoS DSCP IP Prec CoS / : trust-cos ( RX PQ) 10/100 ACL CoS ( ) WRR ( ) Si Si 6500 Si

Catalyst 6500 Cat6K Si cat6k-access> (enable) set qos enable cat6k-access> (enable) set qos acl ip ACL_IP-PHONES trust-cos ip any any cat6k-access> (enable) set qos acl ip ACL_VIDEO-CONF trust-ipprec ip host 10.70.247.200 any cat6k-access> (enable) set qos acl ip ACL_IPTV trust-ipprec ip any any cat6k-access> (enable) set port qos 5/1-48 trust trust-cos cat6k-access> (enable) set port qos 5/1-48 vlan-based cat6k-access> (enable) set port qos 4/2,4 port-based cat6k-access> (enable) commit qos acl all cat6k-access> (enable) set qos acl map ACL_IP-PHONES 110 cat6k-access> (enable) set qos acl map ACL_VIDEO-CONF 4/2 cat6k-access> (enable) set qos acl map ACL_IPTV 4/4 cat6k-access> (enable) set qos map 1p2q2t tx 2 1 cos 3 cat6k-access> (enable) set qos map 2q2t tx 2 1 cos 3 cat6k-distrib> (enable) set qos cos-dscp-map 0 10 18 26 34 46 48 56 cat6k-distrib> (enable) set qos ipprec-dscp-map 0 10 18 26 34 46 48 56 cat6k-access> (enable) set port qos 1/1-2 trust trust-cos Si 6500 Si

Si Si QoS Si Si Access

Catalyst 4000 QoS (SUPIII) 4 (1P3Q2T 4Q2T) PQ CoS 5 3 PQ tx-queue 3 Priority high ( ) ( ) 802.1p DSCP ACL QoS ( ) DSCP CoS DSCP CoS ( / ) CoS DSCP/ DSCP CoS 32g max Si Si Si SUPIII 4006

Catalyst 4000 (SUPIII) Si qos map cos 1 to dscp 10 qos map cos 2 to dscp 18 qos map cos 3 to dscp 26 qos map cos 4 to dscp 34 qos map cos 5 to dscp 46 qos! interface GigabitEthernet4/1 qos trust cos no snmp trap link-status tx-queue 3 priority high! interface GigabitEthernet4/2 qos trust dscp no snmp trap link-status tx-queue 3 priority high Si 4000 Si

6500 QoS Sup,, Si CoS DSCP ACL QoS ( ) DSCP CoS DSCP CoS ( / Si Si ) CoS DSCP/ DSCP CoS DSCP IP Prec CoS : trust-cos ( RX PQ) 6500 10/100 ACL CoS ( ) WRR ( )

Catalyst 6500 Cat6K Si cat6k-distrib> (enable) set qos map 1p2q2t tx queue 2 1 cos 3 cat6k-distrib> (enable) set qos map 2q2t tx queue 2 1 cos 3 cat6k-distrib> (enable) set qos ipprec-dscp-map 0 10 18 26 34 46 48 56 cat6k-distrib> (enable) set qos cos-dscp-map 0 10 18 26 34 46 48 56 cat6k-distrib> (enable) set port qos 1/1-2,3/2 trust trust-cos cat6k-distrib> (enable) set port qos 1/1-2,3/2 vlan-based cat6k-distrib> (enable) set port qos 9/1 trust trust-dscp cat6k-distrib> (enable) set port qos 9/1 port-based cat6k-distrib> (enable) set qos acl ip ACL_TRUST-WAN trust-dscp ip any any cat6k-distrib> (enable) commit qos acl ACL_TRUST-WAN cat6k-distrib> (enable) set qos acl map ACL_TRUST-WAN 9/1 6500

Catalyst 6500 Cat6K mls qos mls qos map ip-prec-dscp 0 10 18 26 34 46 48 56 mls qos map cos-dscp 0 10 18 26 34 46 48 56 int range gigabitethernet 1/1-2 wrr-queue cos-map 2 1 3 wrr-queue cos-map 2 2 4 Si -IOS 6500! Trust CoS from the PFC enabled Access Switch interface GigabitEthernet2/1 description trunk port to PFC enabled cat6k-access no ip address wrr-queue cos-map 2 1 3 wrr-queue cos-map 2 2 4 mls qos vlan-based mls qos trust cos switchport switchport trunk encapsulation dot1q switchport mode trunk

Catalyst 6500 ( ) Cat6K! Trust CoS from the Layer 2 only Catalyst 4000 Access Switch interface GigabitEthernet2/2 description trunk port to layer 2-only cat4k no ip address wrr-queue cos-map 2 1 3 wrr-queue cos-map 2 2 4 mls qos vlan-based mls qos trust cos switchport switchport trunk encapsulation dot1q switchport mode trunk! Trust CoS from the Layer 2 only 3500 Access Switch interface GigabitEthernet3/1 description trunk port to layer 2-only 3500 no ip address wrr-queue cos-map 2 1 3 wrr-queue cos-map 2 2 4 mls qos vlan-based mls qos trust cos switchport switchport trunk encapsulation dot1q switchport mode trunk Si -IOS 6500

QoS?!

IP QoS WAN QoS VoIP

WAN QoS 75% LLQ 33% LLQ WAN VoIP /ATM 768Kbps LFI IP LFI TX WAN (Cytrix DLSW+ ) hog = BE crtp

3 2 WFQ PQ PQ VC VoIP- l PQ MC- CBWFQ LTBE TX

3 2 WFQ 12.2 PQ 7200 PQ VC PQ ; ATM 12.2 PQ TX VoIP- MC- CBWFQ t LTBE

LLQ WAN VoIP class-map VoIP-Bearer match ip dscp EF class-map VoIP-Control match ip dscp AF31 class-map Video match ip dscp AF41 class-map mc-data match ip dscp AF21 match ip precedence 2! policy-map QoS-Policy class VoIP-Bearer priority percent 17 class Video priority percent 16 30000 class VoIP-Control bandwidth percent 2 class mc-data bandwidth percent 25 class class-default random-detect dscp-based fair-queue! * FTP : 12.2(5.6) 1 QoS- ATM: 12.2(3) ATM1/0.1 QoS- VoIPovFR: 12.2(3) map-class frame voipofr frame cir 128000 frame mincir 1280 frame bc 1280 frame frag 160 QoS-

VoIP CODEC G.711 20 msec 160 50 80 kbps G.711 G.729A G.729A CODEC 30 msec 20 msec 240 33 20 50 30 msec 30 33 t 14 74 kbps 24 kbps 18 kbps ATM PPP - 53 6 4 48 G.711 at 50 pps 85.6 kbps 82.4 kbps 106 kbps 81.6 kbps G.711 at 33 pps G.729A at 50 pps G.729A at 33 pps 2 77.6 kbps 29.6 kbps 75.5 kbps 84 kbps 26.4 kbps 42.4 kbps 22.2 kbps 20 kbps 28 kbps 75 kbps 25.6 kbps 19.5 kbps

768 kbps MTU MTU 56 kbps 1500 214 ms MTU MTU MTU 64 128 256 512 1024 1500 56 kbps 9 ms 18 ms 36 ms 72 ms 144 ms 214 ms 64 kbps 128 kbps 256 kbps 512 kbps 768 kbps 8 ms 4 ms 2 ms 1 ms 640 used 16 ms 8 ms 4 ms 2 ms 1.2 ms 32 ms 16 ms 8 ms 4 ms 2.6 ms 64 ms 32 ms 16 ms 8 ms 5 ms 128 ms 64 ms 32 ms 16 ms 10 ms 187 ms 93 ms 46 ms 23 ms 15 ms MTU 10ms VC 56 kbps 70 64 kbps 80 128 kbps 160 256 kbps 320 512 kbps 640 768 kbps 1000 1536 kbps 2000

TX- VoIP QoS TX- FIFO E-2-E * TX- a PPP 6 MLPPP ATM TX- ( ) 2 8192 VC 64 ( T1 ) TX- /CIR/PVC ( ) 128 kbps 3 192 kbps 256 kbps 512 kbps 768 kbps 3 3 3 3

WAN QoS VoIP IOS 12.2(5.6) LFI crtp MLPPP =< 768kb FTP

PPP QoS interface Multilink1 ip address 10.1.61.1 255.255.255.0 no ip mroute-cache load-interval 30 service-policy output QoS-Policy ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave multilink-group 1! interface Serial0 bandwidth 256 no ip address encapsulation ppp no ip mroute-cache load-interval 30 no fair-queue ppp multilink multilink-group 1

WAN QoS VoIP IOS 12.2(5.6) LFI crtp VC CIR - CRC Bc = CIR/100 Be = 0 MINCIR >= s FRF.12 < 768kbps = Max_Allowed_Jitter / (1 / I kbps) FTP

? VoIP QoS 128 kbps 256 kbps 512 kbps 768 kbps, ATM T1 T1 1. 2. 3.?

? VoIP QoS 256 kbps? ESE ; 512 kbps T1, ATM 768 kbps 128 kbps T1 1. 2. 3.?

(FRTS) = Bc CIR 125ms = 7000 bits 56000 bps 0 bits 7k 14k 21k 28k 35k 42k 49k 56k T1 : CRC 4.5ms 0ms 125 250 375 500 625 750 875 1000 1 7000bits (Bc) 4.5ms 104.5

QoS interface Serial1 no ip address encapsulation frame-relay load-interval 30 frame-relay traffic-shaping! interface Serial1.71 point-to-point bandwidth 256 ip address 10.1.71.1 255.255.255.0 frame-relay interface-dlci 71 class VoIP! map-class frame-relay VoIP frame-relay cir 250880 frame-relay bc 2509 frame-relay be 0 frame-relay mincir 250000 no frame-relay adaptive-shaping service-policy output QoS-Policy frame-relay fragment 320

QoS interface Serial1 no ip address encapsulation frame-relay load-interval 30 frame-relay traffic-shaping 2 1! interface Serial1.71 point-to-point bandwidth 256 ip address 10.1.71.1 255.255.255.0 frame-relay interface-dlci 71 class VoIP! map-class frame-relay VoIP frame-relay cir 250880 frame-relay bc 2509 frame-relay be 0 frame-relay mincir 250000 no frame-relay adaptive-shaping service-policy output QoS-Policy frame-relay fragment 320 CRC 2 1 CRC CIR 95% Shape to CIR * Frame_Sz/[Frame_Sz + (Flags+CRC)] 256000*320 / (320+4) = 252840

QoS interface Serial1 no ip address Format encapsulation load-interval Flag 30 Header traffic-shaping 2 Data Variable CRC 1! CIR 99% 98% 97% 96% interface Serial1.71 point-to-point 56 kbps bandwidth 256 52968 55440 54880 54320 ip address 10.1.71.1 255.255.255.0 64 kbps 60952 63360 62720 62080 interface-dlci 71 class 128 kbps VoIP 124872 126720 125440 124160! 256 kbps 252832 253440 250880 248320 map-class VoIP 512 kbps 508816 cir 250880 506880 501760 496640 bc 2509 768 kbps 764936 760320 752640 744960 be 0 mincir 250000 no adaptive-shaping service-policy = ( X output QoS-Policy ) ( + 4 ) fragment 320 2 Flag 1 96% 95% 94% 53760 61440 122880 Allow 240640 for 238080 Flags and 481280 CRC 476160 95% 721920 of of 714240 CIR 245760 491520 737280 52640 60160 120320 52080 59520 119040 Shape to CIR * _Sz/[ _Sz + (Flags+CRC)] 256000*320 / (320+4) = 252840

WAN QoS ATM VoIP 12.2(3) ATM FRF.8 VC VC CIR - CRC MLPPP Bc = CIR/100 ATM Be = 0 MINCIR >= LFI 12.2(3) ATM MLPPP crtp FTP

ATM QoS Remote Frame-Relay Configuration interface Serial6/0 description T1 to Frame Relay switch no ip address encapsulation frame-relay load-interval 30 no arp frame-relay frame-relay traffic-shaping! interface Serial6/0.73 point-to-point description 3640 no arp frame-relay frame-relay interface-dlci 73 ppp Virtual- Template2 class VoIP-256kbs! interface Virtual-Template2 bandwidth 254 ip address 10.1.37.51 255.255.255.0 service-policy output QoS-Policy ppp authentication chap ppp chap hostname R72HQ ppp chap password 7 05080F1C2243 ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave Central ATM Configuration Central ATM Configuration interface ATM2/0 no ip address no ip mroute-cache no shutdown atm pvc 1 0 16 ilmi no atm ilmi-keepalive! interface ATM2/0.37 point-to-point pvc cisco37 0/37 tx-ring-limit 3 abr 256 256 protocol ppp Virtual-Template2!! interface Virtual-Template2 bandwidth 254 ip address 10.1.37.52 255.255.255.0 service-policy output QoS-Policy ppp authentication chap ppp chap hostname HQ_7200 ppp chap password 7 05080F1C2243 ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave

WAN QoS ATM ATM VoIP 12.2(3) ATM MCR/SCR LFI crtp VC 12.2(3) ATM MLPPP 12.2(4)XV2 FTP

PPPoATM MLPPP ATM PVC 56 kbps 64 kbps 192 kbps 256 kbps 320 kbps 384 kbps 448 kbps 512 kbps 576 kbps 640 kbps 704 kbps 768 kbps PPP ( ) 2 2 6 7 9 11 12 14 16 17 19 21 12 msec 10 msec 11 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 57 kbps 68 kbps 202 kbps 260 kbps 337 kbps 414 kbps 452 kbps 529 kbps 606 kbps 644 kbps 721 kbps 798 kbps 13.7 msec 12.0 msec 128 kbps 4 11 msec 132 kbps 12.0 msec 12.0 msec 10.5 msec 10.8 msec 11.0 msec 10.3 msec 10.5 msec 10.7 msec 10.2 msec 10.4 msec 10.5 msec 48 10m

ATM QoS interface ATM2/0 interface ATM2/0 no ip address no ip mroute-cache atm pvc 1 0 16 ilmi no atm ilmi-keepalive! interface ATM2/0.37 point-to-point pvc cisco37 0/37 tx-ring-limit 3 vbr-nrt 128 128 protocol ppp Virtual-Template2! interface Virtual-Template2 bandwidth 132 ip address 10.1.37.52 255.255.255.0 service-policy output QoS-Policy ppp authentication chap ppp chap hostname HQ_7200 ppp chap password 7 05080F1C2243 ppp multilink ppp multilink fragment-delay 11 ppp multilink interleave

WAN QoS ATM ATM VoIP PVC ATM MCR/SCR LFI crtp Vc VBR-NRT PVC /

ATM VC vc-class atm atm-bundle broadcast oam-pvc manage 1 oam retry 3 3 1 encapsulation aal5snap protocol ip inarp broadcast oam-bundle manage 1 vc-class atm priority-class vbr-nrt 1000 1000 100 precedence 4-7! vc-class atm default-class ubr 10000 precedence other! interface ATM1/0 no ip address no atm ilmi-keepalive! interface ATM1/0.1 multipoint ip address 10.0.0.1 255.255.255.0 bundle Denver class-bundle atm-bundle protocol ip 1.100.200.2 broadcast pvc-bundle Denver-priority 0/207 class-vc priority-class pvc-bundle Denver-default 0/206 class-vc default-class!! bundle RTP class-bundle atm-bundle protocol ip 1.100.100.2 broadcast pvc-bundle RTP-priority 0/307 class-vc priority-class pvc-bundle RPT-default 0/306 class-vc default-class

QoS WAN VoIP QoS LLQ LFI 1700, 2600, 3600, 3700, Cat4224 L2 QoS L3 L2 VoIP Catalyst Catalyst 2950, 3550, 3524-XL Catalyst 4000 Catalyst 6500 NBAR LTBE

802.1Q VLAN=70 Aux VLAN=170 nterface FastEthernet1/0 description Catalyst 4000 Branch Office Switch no ip address ip route cache policy no ip mroute-cache load-interval 30 speed 100 full-duplex nterface FastEthernet1/0.70 description native subnet 10.1.70.0 data encapsulation dot1q 70 ip address 10.1.70.1 255.255.255.0 service-policy output output-l3-to-l2 no ip mroute-cache cat4k> (enable) set vlan 70 name data70 cat4k> (enable) set vlan 170 name voice170 cat4k> (enable) set vlan 70 2/1-48 cat4k> (enable) set port host 2/1-48 cat4k> (enable) set port auxiliaryvlan 2/1-48 170 cat4k> (enable) set port speed 2/1-49 auto cat4k> (enable) set trunk 2/49 on dot1q 1-1005 nterface FastEthernet1/0.170 description native subnet 10.1.170.0 voice encapsulation dot1q 170 ip address 10.1.170.1 255.255.255.0 service-policy output output-l3-to-l2

3 2 WAN IOS 12.1(5)T* mod-cli class-map L3-to-L2-VoIP-RTP match ip dscp EF class-map L3-to-L2-Video-Conf match ip dscp AF41 class-map L3-to-L2-VoIP-Control match ip dscp AF31! policy-map output-l3-to-l2 class L3-to-L2-VoIP-RTP set cos 5 class L3-to-L2-Video-Conf set cos 4 class L3-to-L2-VoIP-Control set cos 3! interface e0/0 service-policy output output-l3-to-l2

VC IP WAN VLAN=70 10.1.70.200 Aux VLAN=170 GK/ GK WAN GK Aux VLAN=170 VLAN=70

WAN WAN class-map Video-Conf match access-group 102! policy-map QoS-Policy class Video-Conf priority 450 30000 class class-default fair-queue!! Video-Conf Traffic access-list 102 permit ip host 10.70.249.200 any dscp af41 10.70.249.200 GK H323 proxy! interface FastEthernet1/0.249 descrip native subnet 10.70.249.0 data encapsulation dot1q 70 ip address 10.70.249.1 255.255.255.0 service-policy output output-l3-to-l2 no ip mroute-cache h323 interface h323 qos ip-precedence 4 h323 h323-id vail-px@vail.com h323 gatekeeper ipaddr 10.70.249.254

NBAR,, ATM Napster, KaZaa, Morpheus, Grokster Citrix / / PDLM http://www.cisco.com/cgi-bin/tablebuild.pl/pdlm

NBAR P2P PDLM http://www.cisco.com/cgi-bin/tablebuild.pl/pdlm PDLM RAM ip nbar pdlm flash:gnutella.pdlm match protocol class-map match-any protocol P2P match protocol gnutella match protocol fasttrack match protocol napster ( KaZaa, Morphius Groekster) (napster.pdlm IOS 12.2) WRED DSCP policy-map P2P class P2P set dscp 2 policy-map P2P class P2P set dscp 2

WAN QoS LLQ/CBWFQ, FRF.12, MLPPP, WRED VoIP Hog LTBE

IP QoS WAN QoS VoIP

ATM 255

QoS QoS RTP ( ) (ToS 5) (RTP ) 0.4 36% 0% ( ) 7500 7200 3660 PVC 128 kbps 256 kbps 768 kbps 1536 kbps 128 kbps 256 kbps 768 kbps 1536 kbps 128 kbps 256 kbps 768 kbps 1536kbps ( ) ( ) 0.40 2.20 13.00 17.50 1.40 2.30 34.50 36.58 1.38 2.26 11.79 12.35 0.00 00.0 00.0 00.0 00.0 0.00 0.00 0.00 0.00 0.00 0.00 0.00

QoS RTP PVC msec ( ) msec ( ) 7500 7200 3660 128 kbps 256 kbps 768 kbps 1536 kbps 128 kbps 256 kbps 768 kbps 1536 kbps 128 kbps 256 kbps 768 kbps 1536kbps 1861.00 1050.00 621.00 462.00 1851.53 1048.24 347.25 182.54 1862.42 1047.74 482.86 258.74 22.60 21.80 22.80 17.50 24.21 23.82 22.04 23.63 24.28 22.44 22.15 22.08 < 50 msec

QoS (RTP ) PVC msec ( ) msec ( ) 7500 7200 3660 128 kbps 256 kbps 768 kbps 1536 kbps 128 kbps 256 kbps 768 kbps 1536 kbps 128 kbps 256 kbps 768 kbps 1536kbps 22.40 19.30 14.40 10.00 21.90 19.50 17.10 11.70 22.29 19.30 12.12 7.51 2.45 2.70 3.93 3.70 2.55 2.67 3.71 3.30 2.47 2.79 3.72 3.44 < 5 msec

CPU 7500/VIP4-80 QoS LLQ/LFI CPU PPS RTP Qos Impact to PPS on 7500/VIP-4-80 pps 45000 40000 35000 30000 25000 20000 15000 10000 5000 0 11849 7500 Baseline 7500 QoS Enabled 19768 24592 35106 32706 40992 41765 34057 128K 256K 768K 1536K PVC Bandwidth

CPU 7200 NPE-400 QoS VC, QoS 7200 PPS pps 35000 30000 25000 20000 15000 10000 5000 13054 Qos Impact to PPS on 7200 w/npe-400 18788 31352 7200 Baseline 7200 QoS Enabled 26344 26469 27336 26190 19616 0 128K 256K 768K 1536K PVC Bandwidth

QoS 1751 12.2(7.5)T 2651, ATM 12.2(7.6) 3640, ATM 12.2(7.6) 3725, ATM (DS3) 12.2(7.6)T1 4224 12.2(2)YC 128k 256k 768k 2.048M 4.5 M 2 4 12 28 80 RTP Chariot proc cpu

2651 CPU QoS + crtp x CPU (one minute avg.) 100 90 80 70 60 50 40 30 20 10 0 9.4 11.2 6 2651 CPU by WAN Media Type (QoS and crtp Enabled) FrameRelay ATM Leased Line 18.2 15.1 9.9 41 35.5 50 44.1 24 24.1 90.1 79.2 128K 256K 768K 2.048M 4.5M Link Speed 70.6

3725 CPU QoS + crtp x CPU (one minute avg.) 35 30 25 20 15 10 5 0 2 2 3725 CPU by WAN Media Type (QoS and crtp Enabled) FrameRelay ATM Leased Line 1.9 2.8 3.7 3 7 9.1 7.8 11.2 9 12.4 24.7 23.6 128K 256K 768K 2.048M 4.5M Link Speed 31.3

IP QoS WAN QoS VoIP

? VPN DSL : VC PPPoATM (?) ISDN: ( FTP ) VVT-216: IPSec VPN VVT-201: / SOHO IPSec VPN

Crypto VPN VPN VPN VPN VPN Client VPN

VoIP + Crypto:? Crypto / QoS + VPN IOS VPN crypto SP

: IPSec VoIP VoIP Packet X RTP UDP IP 12 8 20 IPSec GRE 76/80X ( ) VoIP ATM IPSec MLPPP CODEC IP UDP RTP and IPSec PPP ATM Cells 53b Cells 48b Payload G.711 at 50 pps 112 kbps 114.40 kbps 127.20 kbps G.729A at 50 pps 54.4 kbps 56.8 kbps 63.6 kbps

SOHO CPE PIX 501 806/1710 PIX 501 806/1710 827 9x5 DSL VPN 3002 PIX 501 DSL DSL VPN 3002 PIX 501 DSL PIX 501 80x ISDN,

DSL 827 PIX 501 DSL 806/1710 DSL LLQ/CBWFQ (MLPPP) PPPoATM PPPoEthernet

PPPoATM MLPPP ATM PVC PPP ( ) 56 kbps 64 kbps 192 kbps 256 kbps 320 kbps 384 kbps 448 kbps 512 kbps 576 kbps 640 kbps 704 kbps 768 kbps 2 2 6 7 9 11 12 14 16 17 19 21 12 msec 10 msec 11 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 10 msec 57 kbps 68 kbps 202 kbps 260 kbps 337 kbps 414 kbps 452 kbps 529 kbps 606 kbps 644 kbps 721 kbps 798 kbps 13.7 msec 12.0 msec 128 kbps 4 11 msec 132 kbps 12.0 msec 12.0 msec 10.5 msec 10.8 msec 11.0 msec 10.3 msec 10.5 msec 10.7 msec 10.2 msec 10.4 msec 10.5 msec 48 10ms

PPPoATM (827) class-map match-all voice match ip dscp EF class-map match-all signaling match ip dscp AF31! policy-map telework class voice priority 64 class signaling bandwidth 8 class class-default fair-queue! interface ATM0 no ip address pvc 1/100 vbr-rt 128 128 tx-ring-limit 3 encapsulation aal5mux ppp dialer dialer pool-member 1 bandwidth 132 ip address negotiated ip nat outside encapsulation ppp no ip mroute-cache load-interval 30 dialer pool 1 dialer-group 1 service-policy output telework no cdp enable ppp authentication chap callin ppp chap hostname 827a ppp chap password 7 104D000A0618 ppp multilink ppp multilink fragment-delay 11 ppp multilink interleave

DSL PIX 501 827 DSL 806/1710 DSL LLQ/CBWFQ (MLPPP) PPPoATM PPPoEthernet

10/100m 128k DSL 806/1710 DSL QoS

PPPoEthernet (806) class-map match-any shaped match any class-map match-all VoIP-Bearer match ip dscp EF class-map match-all VoIP-Control match ip dscp AF31! policy-map QoS-Policy class VoIP-Bearer priority percent 33 class VoIP-Control bandwidth percent 2 class class-default fair-queue random-detect dscp-based policy-map Traffic-Shaper class shaped bandwidth 256 shape peak 256000 service-policy QoS-Policy! interface Ethernet1 ip address dhcp service-policy out Traffic-Shaper

SOHO CPE PIX 501 806/1710 827 DSL DSL DSL VPN 3002 PIX 501 PIX 501 806/1710 9x5 VPN 3002 PIX 501 PIX 501 80x ISDN,

PIX 501 806/1710 9xx DSL DSL DOCSIS 1.1 LLQ/CBWFQ DOCSIS

DOCSIS 1.1 03 (Net Access Control) = 1 18 (Maximum Number of CPE) = 10 22 (Upstream Packet Classification Block) CPE DOCSIS S01 (Classifier Reference)= 1 S03 (Flow Reference) = 3 S05 (Rule Priority) = 0 S06 (Activation State) = 1 S09 (IP Packet Classification) T01 (IP ToS Range & Mask) = 160.160.224 T02 (IP Protocol) = 256 S10 (Ethernet LLC Packet Classification) T02 (Source MAC Addr) = 0-8-21-3a-29-7e 23 (Downstream Packet Classification Block) S01 (Classifier Reference)= 13 S03 (Flow Reference) = 6 S05 (Rule Priority) = 0 S06 (Activation State) = 1 S09 (IP Packet Classification) T01 (IP ToS Range & Mask) = 160.160.224 T02 (IP Protocol) = 256 T05 (Destination Address) = 10.91.20.4 T06 (Destination Mask) = 255.255.255.255 T07 (Source Port Start) = 16000 24 (Upstream Service Flow Block) S01 (Flow Reference) = 1 S06 (QoS Parameter Set Type) = 7 S08 (Max Substained Traffic Rate) = 256000 S15 (Service Flow Scheduling Type) = 2 24 (Upstream Service Flow Block) S01 (Flow Reference) = 3 S06 (QoS Parameter Set Type) = 7 S15 (Service Flow Scheduling Type) = 5 S16 (Request/Transmission Policy) = 255 9x5 S17 (Nominal Polling Interval) ubr7246 = 50000 S18 (Tolerated Poll Jitter) = 25000 S19 (Unsolicited Grant Size) = 300 PIX 501 S20 (Nominal Grant Interval) = 20000 S21 (Tolerated Grant Interval) = 4000 S22 (Grant/Interval) = 1 806/1710 25 (Downstream Service Flow Block) S01 (Flow Reference) = 5 S06 (QoS Parameter Set Type) = 7 S08 (Max Substained Traffic Rate) = 512000 25 (Downstream Service Flow Block) S01 (Flow Reference) = 6 S06 (QoS Parameter Set Type) = 7

DOCSIS 1.1 Xtracts 18 (Maximum Number of CPE) = 10 22 (Upstream Packet Classification Block) T01 (IP ToS Range & Mask) = 160.160.224 Match IP Prec 5 T02 (IP Protocol) = 256 T02 (Source MAC Addr) = 0-8-21-3a-29-7e Match MAC 23 (Downstream Packet Classification Block) T01 (IP ToS Range & Mask) = 160.160.224 Match IP Prec 5 T05 (Destination Address) = 10.91.20.4 Match IP address T06 (Destination Mask) = 255.255.255.255 24 (Upstream Service Flow Block) S19 (Unsolicited Grant Size) = 300 Bandwidth S20 (Nominal Grant Interval) = 20000 Timeslot

SOHO CPE PIX 501 806/1710 827 DSL DSL DSL VPN 3002 PIX 501 PIX 501 806/1710 9x5 VPN 3002 PIX 501 Others PIX 501 80x ISDN,

ISDN VoIP 80x ISDN, ( ) LLQ/CBWFQ MLPPP LLQ/CBWFQ 12.2(7a) crtp B ( FTP )

ISDN VoIP class-map match-all VoIP-RTP match ip dscp EF class-map match-all VoIP-Sig match ip dscp AF31! policy-map voice-and-data class VoIP-RTP priority percent 65 class VoIP-Sig bandwidth percent 10! interface BRI0/0 encapsulation ppp dialer pool-member 1 ppp authentication chap interface Dialer1 encapsulation ppp dialer pool 1 dialer remote-name routerb-dialer1 dialer-group 1 dialer string 12345678 service-policy output voice-and-data ppp authentication chap ppp chap hostname routera-dialer1 ppp chap password cisco ppp multilink ppp multilink fragment-delay 10 ppp multilink interleave ppp multilink links minimum 2

( IDSL ) PIX 501 80x ISDN, LLQ/CBWFQ MLPPP

(806) class-map match-any shaped match any class-map match-all VoIP-Bearer match ip dscp EF class-map match-all VoIP-Control match ip dscp AF31! policy-map QoS-Policy class VoIP-Bearer priority percent 33 class VoIP-Control bandwidth percent 2 class class-default fair- random-detect dscp-based policy-map Traffic-Shaper class shaped bandwidth 256 shape peak 256000 service-policy QoS-Policy! interface Ethernet1 ip address service-policy out Traffic-Shaper

LFI PIX 501 806/1710 827 DSL DSL DSL VPN 3002 PIX 501 PIX 501 806/1710 9x5 VPN 3002 PIX 501 PIX 501 80x ISDN,

IP QoS WAN QoS VoIP

?

( ) LAN QoS / LLQ/CBWFQ, PQ, WRR, WRED, LFI FRF.12, MLPPP, QoS

QoS Session

Session