Cisco Router not matching DSCP 46

Hi, i have a strange Problem with a cisco 2610 IOS 12.3(12a)

It does not Match DSCP 46 Packets:

Class-map: voice (match-any) 273150 packets, 64008642 bytes 5 minute offered rate 89000 bps, drop rate 0 bps Match: access-group name acl_qos_voice 273150 packets, 64008642 bytes 5 minute rate 89000 bps Match: dscp ef 0 packets, 0 bytes 5 minute rate 0 bps Match: ip dscp ef 0 packets, 0 bytes 5 minute rate 0 bps Queueing Strict Priority Output Queue: Conversation 72 Bandwidth 30 (%) Bandwidth 172 (kbps) Burst 4300 (Bytes) (pkts matched/bytes matched) 331/76127 (total drops/bytes drops) 0/0

dscp ef 0 packets

the Policy map looks like this:

class-map match-any normal match access-group name acl_qos_normal class-map match-any ipsec match access-group name acl_qos_ipsec class-map match-any voyager match access-group name acl_qos_voyager class-map match-any voice match access-group name acl_qos_voice match dscp ef match ip dscp ef ! ! policy-map dsl_queueing class voice priority percent 30 class ipsec priority percent 25 class normal bandwidth percent 10 class voyager bandwidth percent 5 class class-default fair-queue policy-map dsl_speed class class-default shape average 576000 service-policy dsl_queueing

But my Cat 3550 tells me on the Interface connected to the Router:

CIS-3550#sh mls qos interface fa0/24 statistics FastEthernet0/24 Ingress dscp: incoming no_change classified policed dropped (in bytes) 46: 0 0 0 0 0 Others: 69112633 68466461 646172 0 0 Egress dscp: incoming no_change classified policed dropped (in bytes) 46: 18067975 n/a n/a 0 0 Others: 40577073 n/a n/a 0 0

So this tells me that packets are marked.

Why doesent the router recognize dscp?

Jens

Reply to
Jens Haase
Loading thread data ...

Please post the ACL's for review.

URB

Reply to
URB

ip access-list extended acl_qos_ipsec permit ahp any any permit esp any any permit udp any any eq isakmp permit udp any eq isakmp any permit udp any any eq non500-isakmp permit udp any eq non500-isakmp any ip access-list extended acl_qos_normal permit tcp any any eq www permit tcp any any eq 443 permit tcp any any eq ftp-data permit tcp any any eq ftp permit tcp any any eq telnet permit tcp any any eq 22 ip access-list extended acl_qos_voice permit ip any any tos min-delay permit ip any any tos 12 permit ip any any dscp ef permit udp any any eq 5060 permit udp any eq 5060 any ip access-list extended acl_qos_voyager permit tcp host 192.168.1.6 eq www any permit tcp host 192.168.1.6 eq 443 any permit tcp host 192.168.1.6 eq ftp-data any permit tcp host 192.168.1.6 eq ftp any

Jens

Reply to
Jens Haase

This might be interesting too:

Extended IP access list acl_qos_voice 10 permit ip any any tos min-delay (210 matches) 20 permit ip any any tos 12 (309837 matches) 30 permit ip any any dscp ef 40 permit udp any any eq 5060 (1920 matches) 50 permit udp any eq 5060 any

No matches with dscp ef

Jens

Reply to
Jens Haase

Are you 110% sure that your packets are marked with dscp ? Have you tested with some tools that you know marks DSCP ?

Alternavtively, could it be a trust problem ?

HTH Martin

Reply to
Martin Bilgrav

URB schrieb:

OK I found my mistake:

class-map match-any voice match access-group name acl_qos_voice match dscp ef !

the access-list acl_qos_voice matches packtes with tos 12 and min-delay first, so the packets don't reach the second match statement anymore. After removing the first match statement it matches dscp:

Class-map: voice (match-any) 319570 packets, 75589137 bytes 5 minute offered rate 6000 bps, drop rate 0 bps Match: dscp ef 1782 packets, 404347 bytes 5 minute rate 6000 bps Queueing Strict Priority Output Queue: Conversation 72 Bandwidth 30 (%) Bandwidth 172 (kbps) Burst 4300 (Bytes) (pkts matched/bytes matched) 383/87930 (total drops/bytes drops) 0/0

Shame on me!

Jens

Reply to
Jens Haase

Shame on me, I found my mistake, see my other post.

Jens

Reply to
Jens Haase

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.