CCIE K2+考点分析：MLS QOS MQC的配置实例

四、园区网QOS典型配置


1、语音流量的Qos配置

第一步　在整个交换机上启用Qos

3550G#config t

3550G(config)#mls qos

第二步　配置CoS-ToS
map

3550G(config)#mls qos map cos-dscp 0 8 16 26 34 46 48 56

第三步　LLQ配置部分。启用PQ，并将CoS
5映射到pq 4

3550Gconfig)#interface range g 0/1 - 12

3550G(config-if-range)#priority-queue out

3550G(config-if-range)#wrr-queue cos-map 4 5

第四步　创建ACL并标记语音流量及语音控制流量

3550G(config)#ip access-list extended VOICE

3550G(config-ext-nacl)#remark Match the UDP ports that VoIP uses for Bearer

Traffic

3550G(config-ext-nacl)#permit udp any any range 16384 32767

3550G(config)#ip access-list extended VOICE-CONTROL

3550G(config-ext-nacl)#remark Match VoIP Control Traffic

3550G(config-ext-nacl)#remark SCCP

3550G(config-ext-nacl)#permit tcp any any range 2000 2002

3550G(config-ext-nacl)#remark H323 Fast Start

3550G(config-ext-nacl)#permit tcp any any eq 1720

3550G(config-ext-nacl)#remark H323 Slow Start

3550G(config-ext-nacl)#permit tcp any any range 11000 11999

3550G(config-ext-nacl)#remark H323 MGCP

3550G(config-ext-nacl)#permit udp any any eq 2427

第五步　创建类

3550G(config)#class-map match-all VOICE

3550G(config-cmap)#description VOIP Bearer Traffic

3550G(config-cmap)#match access-group name VOICE

3550G(config)#class-map match-all VOICE-CONTROL

3550G(config-cmap)#description VOIP Control Traffic

3550G(config-cmap)#match access-group name VOICE-CONTROL

第六步　创policy-map并配置dscp
PHB标签

3550G(config)#policy-map ACCESS-C3550-LAN-EDGE-IN

3550G(config-pmap)#class VOICE-CONTROL

3550G(config-pmap-c)#set ip dscp 26

3550G(config-pmap)#class VOICE

3550G(config-pmap-c)#set ip dscp 46

第七步　将policy-map应用到接口上

3550G(config-if)#service-policy input ACCESS-C3550-LAN-EDGE-IN

2、呼叫控制(基于catos)

skinny:

set qos enable

set qos acl ip ACL_IP-PHONES DSCP 26 tcp any any range 2000 2002

set qos acl ip ACL_IP-PHONES trust-cos ip any any

set qos acl ip ACL_VOIP_CONTROL dscp 26 tcp any any range 2000 2002

set port qos 5/1-58 trust trust-cos

set port qos 5/1-48 vlan-based

set port qos 5/1-48 trust-ext untrusted

set port qos 4/2 port-based ///4/2接的CCM

commit qos acl all

set qos acl map ACL_IP-PHONES 110

set qos acl map ACL_VOIP_CONTROL 4/2

H323：

set qos acl ip acl-voip-control dscp 26 tcp any any eq 1720

set qos acl ip acl-voip-control dscp 26 tcp any any ramge 11000 11999

set port qos 4/2 port-based

set port qos 4/3 port-based ///H323 GK

commit qos acl acl-voip-control

set qos acl map acl-voip-control 4/2

set qos acl map acl-voip-control 4/3

MGCP:

set qos acl ip acl-voip-control dscp 26 tcp any any eq 2427

set port qos 4/2 port-based

set port qos 4/4 port-based ///MGCP GK

commit qos acl acl-voip-control

set qos acl map acl-voip-control 4/2

set qos acl map acl-voip-control 4/4

3、关键业务数据(基于IOS)

#conf t

(config)#qos map cos 3 to dscp 26

(config)#qos map cos 4 to dscp 34

(config)#qos map cos 5 to dscp 46

(config)#int fa 3/4

(config-if)#tx-queue 3

(config-if)#priority high

(config)#ip access-list extended GOLD-DATA

(config-ext-nacl)#remark Match IP Address of the application server

(config-ext-nacl)#permit ip any host 192.168.100.1

(config-ext-nacl)#permit ip host 192.168.100.1 any

(config)#class-map match-all GOLD-DATA

(config-cmap)#description Mission Critical Traffic

(config-cmap)#match access-group name GOLD-DATA

(config)#policy-map ACCESS-C4006-LAN-EDGE-IN

(config-pmap)#description Set DSCP PerHopBehavior Label for MissionCritical Traffic

(config-pmap)#class GOLD-DATA

(config-pmap-c)#set ip dscp 18

(config)#int fa 3/4

(config-if)#service-policy input ACCESS-C4006-LAN-EDGE-IN

五、WAN Qos配置与远程办公室Qos配置

在路由器上使用模块化QOS命令行(MQC,12.2T)，配置分为三部分：

class-map：对流量分类

policy-map：对每类流量分配queue，priority关键字表示使用LLQ。

server-policy：将policy-map绑定到接口上。

1、Policy-map配置

class-map match-all VOICE

match ip dscp ef

class-map match-all VIDEO

match ip dscp af41

class-map match-all VOICE-CONTROL

match ip dscp af31

class-map match-any GOLD-DATA

match ip dscp af21

match ip dscp af22

match ip dscp af23

class-map match-any SILVER-DATA

match ip dscp af11

match ip dscp af12

match ip dscp af13

!

policy-map WAN-EDGE

class VOICE

priority percent 17

class VIDEO

priority percent 16 30000

class VOICE-CONTROL

bandwidth percent 2

class GOLD-DATA

bandwidth percent 25

random-detect dscp-based

class SILVER-DATA

bandwidth percent 15

random-detect dscp-based

class class-default

fair-queue

random-detect dscp-based

random-detect dscp-based

random-detect dscp 0 96 128 10

random-detect dscp 2 70 128 10

random-detect dscp 4 58 128 10

random-detect dscp 6 44 128 10

2、PPP配置

interface Multilink 40

bandwidth 4096

ip address 10.200.40.1 255.255.255.252

service-policy output WAN-EDGE

ppp multilink

multilink-group 40

interface Serial1/0

description Link E1-A to BRANCH#40

bandwidth 2048

no ip address

encapsulation ppp

ppp multilink

multilink-group 40

interface Serial1/1

description Link E1-B to BRANCH#40

bandwidth 4096

no ip address

encapsulation ppp

ppp multilink

multilink-group 40

3、FR配置：

interface Serial0/1

description Parent FR Link

no ip address

encapsulation frame-relay

!

interface Serial0/1.50 point-to-point

description FR Link to BRANCH#50

bandwidth 3000

ip address 10.200.50.1 255.255.255.252

frame-relay interface-dlci 211

class REMOTE-BRANCH-3000kbps

map-class frame-relay REMOTE-BRANCH-3000kbps

frame-relay cir 3000000

frame-relay bc 30000

frame-relay be 0

frame-relay mincir 3000000

no frame-relay adaptive-shaping

service-policy output WAN-EDGE

4、ATM配置

interface ATM4/0

bandwidth 3000

no ip address

no atm ilmi-keepalive

!

interface ATM4/0.60 point-to-point

bandwidth 3000

ip address 10.210.60.1 255.255.255.252

pvc BRANCH#60 0/60

vbr-nrt 3000 3000

tx-ring-limit 3

service-policy output WAN-EDGE

5、远程分支办公室配置

ip cef

!

class-map match-all VOICE

match ip dscp ef

class-map match-all VIDEO

match ip dscp af41

class-map match-all VOICE-CONTROL

match ip dscp af31

class-map match-any GOLD-DATA

match ip dscp af21

match ip dscp af22

match ip dscp af23

class-map match-any SILVER-DATA

match ip dscp af11

match ip dscp af12

match ip dscp af13

class-map match-all SAP

match access-group 100

class-map match-all SQLNET

match protocol sqlnet

class-map match-all CITRIX

match protocol citrix

class-map match-any EMAIL

match protocol pop3

match protocol imap

match protocol smtp

class-map match-all TELNET

match protocol telnet

class-map match-all RCMD

match protocol rcmd

class-map match-all FTP

match protocol ftp

class-map match-all BACKUPS

match access-group 101

class-map match-any P2P

match protocol napster

match protocol fasttrack

!

policy-map WAN-EDGE

class VOICE

priority percent 17

class VIDEO

priority percent 16 30000

class VOICE-CONTROL

bandwidth percent 2

class GOLD-DATA

bandwidth percent 25

random-detect dscp-based

class SILVER-DATA

bandwidth percent 15

random-detect dscp-based

class class-default

fair-queue

random-detect dscp-based

random-detect dscp-based

random-detect dscp 0 96 128 10

random-detect dscp 2 70 128 10

random-detect dscp 4 58 128 10

random-detect dscp 6 44 128 10

!

policy-map REMOTE-LAN-EDGE-OUT

class VOICE

set cos 5

class VOICE-CONTROL

set cos 3

class VIDEO

set cos 4

class GOLD-DATA

set cos 2

class SILVER-DATA

set cos 1

class class-default

set cos 0

!

policy-map REMOTE-LAN-EDGE-IN

class SAP

set ip dscp af21

class SQLNET

set ip dscp af22

class CITRIX

set ip dscp af23

class EMAIL

set ip dscp af11

class TELNET

set ip dscp af12

class RCMD

set ip dscp af13

class FTP

set ip dscp 2

class BACKUPS

set ip dscp 4

class P2P

set ip dscp 6

!

!

interface FastEthernet0/0

description CAT3500 REMOTE-BRANCH ACCESS-SWITCH

no ip address

load-interval 30

speed auto

duplex auto

!

interface FastEthernet0/0.50

description NATIVE SUBNET 10.1.50.0 DATA

encapsulation dot1Q 50

ip address 10.1.50.1 255.255.255.0

service-policy output REMOTE-LAN-EDGE

service-policy input REMOTE-LAN-EDGE-IN

!

!

interface FastEthernet0/0.150

description NATIVE SUBNET 10.1.150.0 VOICE

encapsulation dot1Q 150

ip address 10.1.150.1 255.255.255.0

service-policy output REMOTE-LAN-EDGE

interface Multilink1

bandwidth 4096

ip address 10.200.40.2 255.255.255.252

service-policy output WAN-EDGE

ppp multilink

multilink-group 1

!

interface Serial1/0

bandwidth 2048

no ip address

encapsulation ppp

ppp multilink

multilink-group 1

!interface Serial1/1

bandwidth 2048

no ip address

encapsulation ppp

ppp multilink

multilink-group 1

access-list 100 permit tcp any any eq 3200

access-list 101 permit tcp any host 10.1.100.100