From: McCallum, Robert (robert.mccallum@thus.net)
Date: Sat Mar 20 2004 - 13:32:32 GMT-3
Sorry Mark I misunderstood.  I have seen this in 12.2(20)S1, 12.0(26)S and other service provider trains.  This is a bug I will search for the Tac case that I raised for this - there is no fix for it essentially and is exactly the same for gigabit subinterfaces - only difference is that I set things
like that on inbound (from a customer point of view) i.e. customerpays for no qos so I take all their traffic and set it to mpls exp 0.  This doesn't work on sub interfaces and also pxf enabled routers.
Robert McCallum 
CCIE #8757 R&S
01415663448
07818002241 
> -----Original Message-----
> From: Marko Berend [mailto:marko.berend@storm.hr] 
> Sent: 20 March 2004 09:57
> To: ccielab@groupstudy.com
> Subject: RE: Service-policy from the router
> 
> 
> class-map match-all telnet
>   match access-group 103
> !
> policy-map test
>   class telnet
>    set ip precedence 7
> !
> interface FastEthernet0/0
>  ip address 139.10.45.4 255.255.255.0
>   service-policy output test
> ------------------------
> 
> The result:
> 
> R4#telnet 139.10.11.11
> Trying 139.10.11.11 ...
> % Connection refused by remote host
> 
> (this is telnet via f0/0)
> 
> R4#sh access-lists
> Extended IP access list 103
>     permit tcp any any eq telnet (1 match)
> 
> R4#sh policy-map int f0/0
>  FastEthernet0/0
> 
>   Service-policy output: test
> 
>     Class-map: telnet (match-all)
>       1 packets, 60 bytes
>       5 minute offered rate 0 bps, drop rate 0 bps
>       Match: access-group 103
>       QoS Set
>         ip precedence 7
>           Packets marked 0
> 
>     Class-map: class-default (match-any)
>       18 packets, 1228 bytes
>       5 minute offered rate 0 bps, drop rate 0 bps
>       Match: any
> 
> 
> As you can see NO packets marked, yet 1 hit in the access list.
> 
> 
> 	-----Original Message-----
> 	From: Richard Dumoulin [mailto:richard.dumoulin@vanco.es]
> 	Sent: Saturday, March 20, 2004 10:36 AM
> 	To: Marko Berend; ccielab@groupstudy.com
> 	Subject: RE: Service-policy from the router
> 
> 
> 
> 	Just an idea. NBAR uses cef, so could you just use an 
> acl to match your interesting traffic and see if it works ?
> 
> 	--Richard
> 
> 	-----Mensaje original-----
> 	De: Marko Berend [mailto:marko.berend@storm.hr]
> 	Enviado el: sabado, 20 de marzo de 2004 10:32
> 	Para: ccielab@groupstudy.com
> 	Asunto: RE: Service-policy from the router
> 
> 
> 	Robert,
> 
> 	This does not work either.
> 	My packet decodings look like this:
> 
> 	Type of Service: %00000000
> 
> 	BTW why input when the router is generating the traffic 
> and sending it
> 	out?
> 
> 	Thanks,
> 	Marko
> 
> 	-----Original Message-----
> 	From: McCallum, Robert [mailto:robert.mccallum@thus.net]
> 	Sent: Saturday, March 20, 2004 10:25 AM
> 	To: Marko Berend; ccielab@groupstudy.com
> 	Subject: RE: Service-policy from the router
> 
> 
> 	You need to do service policy INPUT not output.
> 
> 	Robert McCallum
> 	CCIE #8757 R&S
> 	01415663448
> 	07818002241
> 
> 	> -----Original Message-----
> 	> From: Marko Berend [mailto:marko.berend@storm.hr]
> 	> Sent: 20 March 2004 09:14
> 	> To: ccielab@groupstudy.com
> 	> Subject: RE: Service-policy from the router
> 	>
> 	>
> 	> William,
> 	>
> 	> ACL's are also interface based, yet they don't work for local
> 	> traffic out. Test the marking with service-policy and see for
> 	> yourself.
> 	>
> 	> Maybe I am missing something in my config (previous post)?
> 	>
> 	> Thanks, Marko
> 	>
> 	> -----Original Message-----
> 	> From: William Chen [mailto:kwchen@netvigator.com]
> 	> Sent: Friday, March 19, 2004 6:21 PM
> 	> To: SANCHEZ-MONGE,ANTONIO (HP-France,ex2); Marko Berend;
> 	> ccielab@groupstudy.com
> 	> Subject: Re: Service-policy from the router
> 	>
> 	>
> 	> Hi,
> 	>
> 	>    If you think of Qos are mostly interface based. You've
> 	> applied a policy to reserve 20% bandwidth to telnet on an
> 	> interface. Do you think that the router will treat any
> 	> difference between locally generated telnet traffic with
> 	> switched telnet traffic that will go out the same interface?
> 	>
> 	>    It is very easy to lab it, and test it. :-)
> 	>
> 	> Best Regards,
> 	> William Chen
> 	>
> 	> ----- Original Message -----
> 	> From: "SANCHEZ-MONGE,ANTONIO (HP-France,ex2)"
> 	> <antonio.sanchez-monge@hp.com>
> 	> To: "'Marko Berend'" <marko.berend@storm.hr>; 
> <ccielab@groupstudy.com>
> 	> Sent: Saturday, March 20, 2004 1:00 AM
> 	> Subject: RE: Service-policy from the router
> 	>
> 	>
> 	> > Hi Marko,
> 	> >
> 	> > Well with "ip local policy" you can specify a 
> route-map which can do
> 
> 	> > the marking ("set ip precedence ...").
> 	> >
> 	> > If you want more fancy QoS you can use PBR to 
> redirect locally
> 	> > originated traffic to the loopback and use a 
> service policy on it.
> 	> > Never tried it though (too many things to test and 
> only 13 days to
> 	> > take the lab ;)
> 	> >
> 	> > Cheers,
> 	> > Ato.
> 	> >
> 	> > -----Original Message-----
> 	> > From: nobody@groupstudy.com 
> [mailto:nobody@groupstudy.com] On Behalf
> 
> 	> > Of Marko Berend
> 	> > Sent: jueves, 18 de marzo de 2004 11:16
> 	> > To: ccielab@groupstudy.com
> 	> > Subject: Service-policy from the router
> 	> >
> 	> >
> 	> > Hi,
> 	> >
> 	> > Is there a way to enable servicing traffic 
> originated on the router?
> 
> 	> > Something like "ip local policy" for PBR?
> 	> >
> 	> > Specificaly I am interested in ways of marking 
> router originated ip
> 	> traffic
> 	> > (ip precedence) with MQC if possible.
> 	> >
> 	> > Thanks,
> 	> > Marko
> 	> >
> 	> >
> 	> 
> ______________________________________________________________________
> 	> > _
> 	> > Please help support GroupStudy by purchasing your 
> study materials
> 	> from:
> 	> > http://shop.groupstudy.com
> 	> >
> 	> > Subscription information may be found at:
> 	> > http://www.groupstudy.com/list/CCIELab.html
> 	> >
> 	> >
> 	> 
> ______________________________________________________________________
> 	> > _
> 	> > Please help support GroupStudy by purchasing your 
> study materials
> 	> from:
> 	> > http://shop.groupstudy.com
> 	> >
> 	> > Subscription information may be found at:
> 	> > http://www.groupstudy.com/list/CCIELab.html
> 	>
> 	> ______________________________________________________________
> 	> _________
> 	> Please help support GroupStudy by purchasing your study
> 	> materials from: http://shop.groupstudy.com
> 	>
> 	> Subscription information may be found at:
> 	> http://www.groupstudy.com/list/CCIELab.html
> 
> 	
> ______________________________________________________________
> _________
> 	Please help support GroupStudy by purchasing your study 
> materials from:
> 	http://shop.groupstudy.com
> 
> 	Subscription information may be found at:
> 	http://www.groupstudy.com/list/CCIELab.html
> 
> ______________________________________________________________
> _________
> Please help support GroupStudy by purchasing your study 
> materials from: http://shop.groupstudy.com
> 
> Subscription information may be found at: 
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:41 GMT-3