From: Erick B. (erickbe@yahoo.com)
Date: Fri Oct 04 2002 - 13:05:38 GMT-3
Try making your classes and ACLs more detailed.
class-map match-all voip_traffic
  match access-group 100
class-map match-all voip_control
  match access-group 101
policy-map llq_256_voice_3calls
  class voip_traffic
    priority 134
  class voip_control
   bandwidth 8
  class class-default
   fair-queue
access-list 100 permit ip any any precedence critical
access-list 100 permit udp any any range 16384 32767
access-list 100 permit ip any any dscp ef
access-list 100 permit udp any range 16384 32767 any
access-list 101 permit tcp any range 2000 2002 any
access-list 101 permit tcp any any range 2000 2002
access-list 101 permit tcp any range 11000 11999 any
access-list 101 permit tcp any any range 11000 11999
access-list 101 permit tcp any any eq 1720
access-list 101 permit tcp any eq 1720 any
--- Adarsh Singh <adarshs@hclinfinet.net> wrote:
> Hi Erik
> 
> I am  getting the matched packets on the access-list
> for the ip packets, but
> still when i start the voice conversation between
> the two boxes, it is not
> reserving the 40 Kbps , when the ftp is going on ,
> the  traffic reaches to
> 62 Kbps , and the voice breaks while talking ,pls do
> suggest what to do.
> 
> Rgds
> Adarsh Singh
> ----- Original Message -----
> From: "Erick B." <erickbe@yahoo.com>
> To: "Adarsh Singh" <adarshs@hclinfinet.net>; "CCIE
> Group Study (E-mail)"
> <ccielab@groupstudy.com>
> Sent: Friday, October 04, 2002 10:54 AM
> Subject: Re: CBWFQ not working on 1603 for
> VOICE--HELP NEEDED URGENTLY
> 
> 
> > Thats because UDP is being matched by the first
> entry
> > in the ACL. ACL stops processing after a match. IP
> > covers ICMP, UDP, and TCP.
> >
> > --- Adarsh Singh <adarshs@hclinfinet.net> wrote:
> > > Hi ,=20
> > >
> > > I have been trying to implement CBWFQ between
> two
> > > cisco 1603 routers.
> > >
> > >
> > >               PC
> > >                |
> > >
> >
>
OAHO(router1)(serial0)------backtoback-------(serial0)OAREMOTE(router2)--=
> > > --VOIPBOX1(10.66.6.126)
> > >     |                                           
> (64
> > > Kbps)               =
> > >                                                 
>  |
> > >     |
> > >                     =
> > >
> > > PC
> > >
> > > VOIPBOX2
> > > (10.66.6.35)
> > >
> > > Now the default queing  for the two routers is
> > > Weighted fair quwing .
> > >
> > > Now i  have reserved 30 Kbps bandwidth between
> the
> > > two router for the =
> > > voice traffic , the voipbox is uing UDP ports
> > > greater than 20000.
> > >
> > > So after configuring the routers , i do a
> multiple
> > > ftp sessions between =
> > > the two  PC, so that the traffic between the two
> > > serial interfaces =
> > > touches 62 Kbps .
> > >
> > > Now when i  start talking between the two VOIP
> boxes
> > > , i dont see the =
> > > CBWFQ kicking in & reserving the necessary
> bandwidth
> > > as i have =
> > > provisioned .
> > >
> > > I am enclosing both the router configuration :
> > >
> > > CONFIG OF OAHO=20
> > >
> > > OAHO=20
> > >
> > > sh ru=20
> > > Building configuration...
> > >
> > > Current configuration : 1146 bytes
> > > !
> > > version 12.1
> > > no service single-slot-reload-enable
> > > service timestamps debug uptime
> > > service timestamps log uptime
> > > no service password-encryption
> > > !
> > > hostname OAHO
> > > !
> > > !
> > > !
> > > class-map voice
> > >   match access-group 101
> > > !
> > > !
> > > policy-map test
> > >   class voice
> > >     priority 40
> > > !
> > > ip subnet-zero
> > > ip tftp source-interface Ethernet0
> > >  !
> > > !
> > > interface Ethernet0
> > >  description connected to EthernetLAN_1
> > >  ip address 10.66.6.33 255.255.255.248
> > >  no cdp enable
> > > !
> > > interface Serial0
> > >  description connected to Internet
> > >  bandwidth 64
> > >  ip address 10.66.2.98 255.255.255.252
> > >  no ip route-cache
> > >  no ip mroute-cache
> > >  service-policy output test=20
> > >  load-interval 30
> > >  max-reserved-bandwidth 90
> > >  !
> > > interface BRI0
> > >  no ip address
> > >  shutdown
> > > ip classless
> > > ip route 0.0.0.0 0.0.0.0 10.66.2.97
> > > no ip http server
> > > !
> > > access-list 101 permit ip host 10.66.6.35 host
> > > 10.66.6.126
> > > access-list 101 permit udp host 10.66.6.35 gt
> 20000
> > > host 10.66.6.126 gt =
> > > 20000
> > > dialer-list 1 protocol ip permit
> > > tftp-server flash:c1600-sy-mz.121-15.bin
> > > !
> > > line con 0
> > >  exec-timeout 0 0
> > >  password vpn
> > >  login
> > > line vty 0 4
> > >  exec-timeout 60 0
> > >  password vpn
> > >  login
> > >  transport preferred none
> > > !
> > > end
> > >
> > > OAHO#  show po
> > > OAHO#  show policy-map=20
> > >  Policy Map test
> > >   Weighted Fair Queueing
> > >     Class voice=20
> > >       Strict Priority
> > >       Bandwidth 40 (kbps)
> > >
> > > OAHO#show policy-map=20
> > >  Policy Map test
> > >   Weighted Fair Queueing
> > >     Class voice=20
> > >       Strict Priority
> > >       Bandwidth 40 (kbps)
> > >
> > > OAHO#show policy-map int se 0
> > > OAHO#show int se 0
> > > Serial0 is up, line protocol is up=20
> > >   Hardware is QUICC Serial
> > >   Description: connected to Internet
> > >   Internet address is 10.66.2.98/30
> > >   MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec,=20
> > >      reliability 255/255, txload 3/255, rxload
> 3/255
> > >   Encapsulation HDLC, loopback not set
> > >   Keepalive set (10 sec)
> > >   Last input 00:00:00, output 00:00:00, output
> hang
> > > never
> > >   Last clearing of "show interface" counters
> > > 00:08:54
> > >   Input queue: 0/75/0/0
> (size/max/drops/flushes);
> > > Total output drops: 0
> > >   Queueing strategy: fifo
> > >   Output queue :0/40 (size/max)
> > >   30 second input rate 1000 bits/sec, 4
> packets/sec
> > >   30 second output rate 62000 bits/sec, 3
> > > packets/sec
> > >      816 packets input, 39184 bytes, 0 no buffer
> > >      Received 69 broadcasts, 0 runts, 0 giants,
> 0
> > > throttles
> > >      0 input errors, 0 CRC, 0 frame, 0 overrun,
> 0
> > > ignored, 0 abort
> > >      717 packets output, 46507 bytes, 0
> underruns
> > >      0 output errors, 0 collisions, 1 interface
> > > resets
> > >      0 output buffer failures, 0 output buffers
> > > swapped out
> > >      6 carrier transitions
> > >      DCD=3Dup  DSR=3Dup  DTR=3Dup  RTS=3Dup
> > > CTS=3Dup
> > >  --
> > >
> > > OAHO#show queue se 0
> > > Show queue not supported with FIFO queueing
> > >
> > > OAREMOTE CONFIG
> > >
> > >
> > > sh ru=20
> > > Building configuration...
> > >
> > > Current configuration : 1316 bytes
> > > !
> > > version 12.1
> > > no service single-slot-reload-enable
> > > service timestamps debug uptime
> > > service timestamps log uptime
> > > no service password-encryption
> > > !
> > > hostname OAREMOTE
> > > !
> > > enable secret 5 $1$r1WR$YWvapuJdPcjur/4S6MRKv.
> > > !
> > > username dlinpc password 0 npc
> > > username noidad32 password 0 d32
> > > !
> > > class-map voice
> > >   match access-group 101
> > > !
> > > !
> > > policy-map test
> > >   class voice
> > >     priority 40
> > > ip subnet-zero
> > > !
> > > isdn switch-type basic-net3
> > > !
> > > !
> > > !
> > > interface Ethernet0
> > >  ip address 10.66.6.121 255.255.255.248
> > >  ip nat inside
> > >  no cdp enable
> > > !
> > > interface Serial0
> > >  description connected to Infinet 64K leased
> line
> > > for vpn
> > >  bandwidth 64
> > >  ip address 10.66.2.122 255.255.255.252
> > >  no ip route-cache
> > >  no ip mroute-cache
> > >  load-interval 30
> > >  max-reserved-bandwidth 90
> > >  service-policy output test
> > >  clockrate 64000
> > >  !
> > > interface BRI0
> > >  description connected to NPC/D32
> > >  no ip address
> > >  encapsulation ppp
> > >  isdn switch-type basic-net3
> > >  no fair-queue
> > >  no cdp enable
> > > !
> > > ip classless
> > > ip route 0.0.0.0 0.0.0.0 10.66.2.121
> > > no ip http server
> > > !
> > > access-list 101 permit ip host 10.66.6.126 host
> > > 10.66.6.35
> > > access-list 101 permit udp host 10.66.6.126 gt
> 20000
> > > host 10.66.6.36 gt =
> > > 20000
> > > dialer-list 1 protocol ip permit
> > > !
> > > line con 0
> > >  exec-timeout 0 0
> > >  password 111
> > >  login
> > > line vty 0 password 111
> > >  login
> > > !
> > > end
> > >
> > > OAREMOTE#   show po
> > > OAREMOTE#   show policy-map=20
> > >  Policy Map test
> > >   Weighted Fair Queueing
> > >     Class voice=20
> > >       Strict Priority
> > >       Bandwidth 40 (kbps)
> > > OAREMOTE#show po
> > > OAREMOTE#show policy-map int se 0
> > >  Serial0  output : test
> > >   Weighted Fair Queueing
> > >     Class voice=20
> > >       Strict Priority
> > >       Output Queue: Conversation 24=20
> > >         Bandwidth 40 (kbps) Packets Matched 40
> > >         (total drops/bytes drops) 5/380
> > > OAREMOTE#sjh=08 =08=08 =08=FF
> > >
> > > User Access Verification
> > >
> > > Password: =07=FF
> > > OAHO>telnet 10.66.6.12=08 =08=08 =08121
> > > Trying 10.66.6.121 ... Open
> > >
> > >
> > > =20
> > >
> > > OAREMOTE#show policy-map=20
> > >  Policy Map test
> > >   Weighted Fair Queueing
> > >     Class voice=20
> > >       Strict Priority
> > >       Bandwidth 40 (kbps)
> > > OAREMOTE#show po
> > > OAREMOTE#show policy-map int se 0
> > >  Serial0  output : test
> > >   Weighted Fair Queueing
> > >     Class voice=20
> > >       Strict Priority
> > >       Output Queue: Conversation 24=20
> > >         Bandwidth 40 (kbps) Packets Matched 40
> > >         (total drops/bytes drops) 5/380
> > > =20
> > > =20
> > > =20
> > > =20
> > > Now when i even see the access-list 101 , i dont
> see
> > > any match for the =
> > > UDP packets while talking , i fail to undertand
> that
> > > because when i do =
> > > debug ip packet detail , i see the udp ports
> been
> > > used while talking =
> > > between the voip box .
> > > =20
> > > Can some one help me out with this....needed
> help
> > > urgently .
> >
> >
> >
> > __________________________________________________
> > Do you Yahoo!?
> > New DSL Internet Access from SBC & Yahoo!
> > http://sbc.yahoo.com
This archive was generated by hypermail 2.1.4 : Tue Nov 05 2002 - 08:35:39 GMT-3