QOS Lab Guide

QOS
Implementing Cisco
Quality of Service
Version 2.2
Lab Guide
Editorial, Production, and Graphic Services: 06.28.06
The PDF files and any printed representation for this material are the property of Cisco Systems, Inc.,
for the sole use by Cisco employees for personal study. The files or printed representations may not be
used in commercial training, and may not be distributed for purposes other than individual self-study.
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
European Headquarters
Cisco Systems International BV
Haarlerbergpark
Haarlerbergweg 13-19
1101 CH Amsterdam
The Netherlands
www-europe.cisco.com
Tel: 31 0 20 357 1000
Fax: 31 0 20 357 1100
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
www.cisco.com
Tel: 408 526-7660
Fax: 408 527-0883
Asia Pacific Headquarters

Cisco Systems, Inc.
168 Robinson Road
#28-01 Capital Tower
Singapore 068912
www.cisco.com
Tel: +65 6317 7777
Fax: +65 6317 7799
Cisco Systems has more than 200 offices in the following countries and regions. Addresses, phone numbers, and fax numbers are listed on the
Cisco.comWebsiteatwww.cisco.com/go/offices.
Argentina Australia Austria Belgium Brazil Bulgaria Canada Chile China PRC Colombia Costa Rica Croatia Cyprus Czech Republic
Denmark Dubai, UAE Finland France Germany Greece Hong Kong SAR Hungary India Indonesia Ireland
Israel Italy Japan Korea Luxembourg Malaysia Mexico The Netherlands New Zealand Norway Peru Philippines
Poland Portugal Puerto Rico Romania Russia Saudi Arabia Scotland Singapore Slovakia Slovenia South Africa
Spain Sweden Switzerland Taiwan Thailand Turkey Ukraine United Kingdom United States Venezuela Vietnam Zimbabwe
2006 Cisco Systems, Inc. All rights reserved. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of
Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access
Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press,
Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare,
GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace,
MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare,
SlideCast, SMARTnet, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates
in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0601R)
DISCLAIMER WARRANTY: THIS CONTENT IS BEING PROVIDED AS IS. CISCO MAKES AND YOU RECEIVE NO WARRANTIES IN
CONNECTION WITH THE CONTENT PROVIDED HEREUNDER, EXPRESS, IMPLIED, STATUTORY OR IN ANY OTHER PROVISION OF
THIS CONTENT OR COMMUNICATION BETWEEN CISCO AND YOU. CISCO SPECIFICALLY DISCLAIMS ALL IMPLIED
WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT AND FITNESS FOR A PARTICULAR
PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE. This learning product may contain early release
content, and while Cisco believes it to be accurate, it falls subject to the disclaimer above.
QOS
Lab Guide
Overview
This guide presents the instructions and other information concerning the activities for this
course. You can find the solutions in the lab activity Answer Key.
Outline
This guide includes these activities:
Case Study 2-1: QoS Mechanisms
Lab 2-1: QoS Lab Setup and Initialization
Lab 2-2: Baseline QoS Measurement
Lab 3-1: Configuring QoS with AutoQoS
Case Study 4-1: Classification and Marking
Lab 4-1: Classification and Marking Using MQC
Lab 4-2: Classification Using NBAR
Lab 4-3: Configuring QoS Preclassify
Lab 4-4: LAN-Based Packet Classification and Marking
Lab 5-1: Configuring Basic Queuing
Lab 5-2: Configuring LLQ
Lab 5-3: Configuring Queuing on a Catalyst Switch
Case Study 6-1: WRED Traffic Profiles
Lab 6-1: Configuring DSCP-Based WRED
Lab 7-1: Configuring Class-Based Policing
Lab 7-2: Configuring Class-Based Shaping
Lab 8-1: Configuring Class-Based Header Compression
Lab 8-2: Configuring LFI
Case Study 2-1: QoS Mechanisms

This case study enables you to practice the skills and knowledge learned in the modules
Introduction to QoS and The Building Blocks of QoS.
Activity Objective
In this activity, you will correctly identify which QoS mechanisms can be used, and where QoS
mechanisms should be applied to the network to implement an administrative QoS policy. After
completing this activity, you will be able to meet these objectives:
Review customer QoS requirements
Identify QoS service class requirements
Identify where QoS mechanisms should be applied to the network to meet customer
requirements
Present a solution to the case study
Visual Objective
The figure illustrates what you will accomplish in this activity.
Visual Objective for Case Study 2-1: QoS

Mechanisms
1. Review customer QoS requirements. Completely read the
customer requirements provided.
2. Identify QoS service class requirements. With the aid of your
partner, identify the service classes required to implement the
administrative QoS policy based on customer requirements.
3. Identify network locations where QoS classification and marking
should be applied. Identify locations in the network where the QoS
classification and marking mechanisms should be applied to
properly implement the administrative QoS policy.
4. Present your solution. After the instructor presents a solution to
the case study, present your solution to the class with your
partner.
2006 Cisco Systems, Inc. All rights reserved.
QoS v2.22
Required Resources
These are the resources and equipment required to complete this activity.
Case Study Activity: QoS Mechanisms
A workgroup consisting of two learners
Implementing Cisco Quality of Service (QOS) v2.2
2006 Cisco Systems, Inc.
Apply QoS Mechanisms

This case study activity provides information regarding the QoS administrative policy
requirements of a large, multisite network. Your task is to work with a partner to evaluate the
QoS requirements, and based on the requirements, identify where QoS mechanisms should be
applied. You will discuss your solution with the instructor and other classmates, and the
instructor will present a solution for the case study to the class.
Task 1: Apply QoS Mechanisms

Step 1
Review customer QoS requirements.
Company Background
Nuevo Health Care Systems (NHCS) provides health care information to health care
professionals in ten major regions of the country.
Customer Situation
The NHCS network currently has limited bandwidth capacity in its WAN links, and the
company does not envision being able to increase bandwidth in the near future. All ten remote
sites (two are pictured in the network illustration) connect to the central site through a service
provider through a Frame Relay, Layer 2, 768-kbps link service. The NHCS headquarters site
also connects to the service provider via a Frame Relay, Layer 2, and 768-kbps link. NHCS
LAN bandwidth is 10 Mbps. NHCS connects to the Internet through its headquarters site.
Since the installation of a new IP telephony system, NHCS has been encountering the following
increasingly serious problems with their network:
Users of the ERP applications have been complaining of unacceptable response times.
Their subsecond response time has now stretched to multiple seconds in many cases and up
to a minute in some cases.
Key patient information files that used to arrive almost instantly are now taking 10 to 15
minutes to be transferred from headquarters to users at the remote sites. (These are
moderate sized, mostly text files.)
Patient graphics files (x-rays, MRIs) that used to take 20 to 30 minutes to transfer between
the remote sites and headquarters now often have to be transferred overnight. (This is
acceptable because these files are usually not needed immediately and tend to be extremely
large graphics files.)
Users of the new IP telephony devices are the most upset. The quality of their calls is very
poor, and their calls often just drop.
Lab Guide
Nuevo Health Systems Applications
QoS v2.23
The key applications running on NHCS network are shown in the figure.
Nuevo Health Care Systems Network
n Device number on Problem Spreadsheet

QoS v2.24
Device Number
Device Type
IP Phone
LAN switch
Customer edge router
Service provider router
Step 2
Identify QoS service class requirements.
Given the NHCS network as described, how would you recommend classifying network
traffic?
Traffic Classification and Prioritization
Type of Traffic (Application)
Step 3
Traffic Priority
(Rank from 1 to 5)
Identify network locations where QoS mechanisms should be applied.
Given the NHCS network as described, how would you recommend deploying QoS
mechanisms? Check each box (X) where you believe that QoS mechanisms could be applied to
effectively resolve QoS problems at NHCS.
Lab Guide
Where to Apply QoS Mechanisms: Classification and Marking

Device
No.
Network Device Interface
IP PhoneInterface to
workstation
IP PhoneInterface to switch
SwitchInterface to IP
Phone
SwitchInterface to
customer edge router

Interface to switch

Interface to WAN (service
provider router)

Interface to customer edge
router
Classification
on Input
Classification
on Output
Marking
on Input
Marking
on
Output
Where to Apply QoS Mechanisms: Congestion Management and Avoidance

Device
No.
Network Device
Interface
SwitchInterface to IP
Phone
SwitchInterface to

Interface to switch

Interface to WAN
(service provider router)

Interface to customer
edge router
Congestion
Management
on Input
Congestion
Management
on Output
Congestion
Avoidance
on Input
Congestion
Avoidance
on Output
Where to Apply QoS Mechanisms: Traffic Policing and Traffic Shaping

Device
No.
2
SwitchInterface to IP Phone
SwitchInterface to customer edge

router
Customer edge routerInterface to

switch
Customer edge routerInterface to

WAN (service provider router)
Service provider routerInterface

to customer edge router
Traffic
Policing
on Input
Traffic
Policing
on Output
Traffic
Shaping
on Input
Traffic
Shaping
on Output
Where to Apply QoS Mechanisms: Link Efficiency

Device
No.
2
SwitchInterface to IP Phone
SwitchInterface to customer
edge router
Customer edge routerInterface

to switch
Customer edge routerInterface

to WAN (service provider router)

Interface to customer edge router
Step 4
Compression
on Input
Compression
on Output
LFI on
Input
LFI on
Output
Present your solution.
Together with your partner, present your solution to the class. Include the following
information:
Customer service class requirements
Network diagrams indicating where classification and marking should be applied
Justification for differences from the solution presented by the instructor
Activity Verification
You have completed this activity when the instructor has verified your case study solution and
you have justified any major deviations from the solution supplied by the instructor.
Lab Guide
Case Study 2-1 Answer Key: QoS Mechanisms

Your case study discussion and solution should include:
Traffic classification and prioritization
Location of QoS mechanisms for
Classification and marking
Congestion management and avoidance
Link efficiency
Traffic Classification and Prioritization

Type of Traffic (Application)
Traffic Priority
IP Telephony
Highest1
ERP
High2
Patient information files
Moderate3
Patient graphics files
Low4
Browser traffic
Low4
Where to Apply QoS Mechanisms: Classification and Marking

Device
Classification
on Input
IP PhoneLink to
workstation
IP PhoneLink to switch
SwitchLink to IP Phone
SwitchLink to customer
edge router
Customer edge routerLink

to switch
Customer edge routerLink

to WAN (service provider
router)
Service provider routerLink

to customer edge router
No.
Note
Classification
on Output
Marking
on Input
Marking
on
Output
X*
No,
trusted*
*The IP Phone will normally be set to re-mark any traffic coming from its downstream
workstation (the IP Phone connection to the workstation is untrusted). The switch will not
re-mark traffic coming from the IP Phone (traffic from the IP Phone is trusted). Further
explanation of trusted and untrusted interfaces is provided in the Classification and
Marking module of this course.
Where to Apply QoS Mechanisms: Congestion Management and Avoidance

Device
No.
Network Device
Interface
Congestion
Management
on Input
Congestion
Management
on Output
Congestion
Avoidance
on Input
Congestion
Avoidance
on Output
SwitchLink to IP
Phone
SwitchLink to

Link to switch

Link to WAN (service
provider router)
Possible
Service provider
routerLink to
Possible
Possible
Where to Apply QoS Mechanisms: Traffic Policing and Traffic Shaping

Device
Traffic
Policing
on Input
SwitchLink to customer edge

router
Customer edge routerLink to

switch

Service provider routerLink to

No.
Traffic
Policing
on Output
Traffic
Shaping
on Input
Traffic
Shaping
on Output
X
Possible
X
Possible
Lab Guide
Where to Apply QoS Mechanisms: Link Efficiency

Device
No.
Compression
on Output
SwitchLink to customer edge

router

switch

Service provider routerLink to

Note
10
Compression
on Input
LFI on
Input
LFI on
Output
X
X
Because this is a Frame Relay network, the service provider will pass frames through
transparently without compressing or fragmenting the frames.
Lab 2-1: QoS Lab Setup and Initialization

Complete this lab activity to practice what you learned in the modules Introduction to QoS
and The Building Blocks of QoS.
Activity Objective
In this activity, you will prepare your student workgroup for the lab practice exercises that
accompany the Implementing Cisco Quality of Service (QOS) v2.2 course. After completing
this activity, you will be able to meet these objectives:
Configure your workgroup routers for basic network connectivity
Configure your workgroup switch for basic network connectivity
Verify network connectivity using the Cisco IOS tools: ping and traceroute
Visual Objective
The figures illustrate what you will accomplish in this activity.
The lab topology for the course is split into a number of workgroups and three separate
backbones.
Each workgroup is designated to service two students and has been designed to interface with
two traffic generation backbones named Traffic Gen 1 and Traffic Gen 2 and a shared
provider backbone named Provider.
Visual Objective for Lab 2-1: QoS Lab Setup

and Initialization
QoS v2.25
The figure shows the physical topology of a single workgroup and its connectivity into the
three lab backbones. Each workgroup consists of two user-controlled Cisco 2610XM routers
Lab Guide
11
and one user-controlled Cisco 2950T-24 workgroup switch. Each student workgroup connects
to each backbone as shown in the figure.
Although depicted as two different workgroup switches in the Logical Lab Backbone figure,
each student workgroup consists of a single workgroup switch configured to support two
different virtual LANs. In this figure, the single workgroup switch has been depicted as two
different switches to simplify the diagram only. Notice that the same name has been used to
identify the Cisco 2950T, indicating that it is, in fact, the same device.
Traffic for each pod can bypass the high-speed service provider backbone (using the slow 384kbps link) or travel via the high-speed provider backbone itself (using the fast 768-kbps serial
link). Traffic flow through both the slow and fast serial links will be tested in the QoS labs.
In this figure, the logical topology configuration of each workgroup and the devices contained
within each of the three lab backbones is shown. In the Provider Backbone in the figure, each
of the backbone routers (SPNorth and SPSouth) contains a serial connection to each
workgroup.
The QoS lab uses the two routers called Pagent-1 and Pagent-2 to generate traffic from
different applications, including SQL, Napster, FTP, Citrix, HTTP, Microsoft Outlook, and
Kazaa. The two routers called Callgen-1 and Callgen-2 are used in the lab to generate (G.711)
VoIP traffic.
Note
12
The SPNorth router, the SPSouth router, the core switch, and the traffic generation routers
(Pagent-1, Pagent-2, Callgen-1, and Callgen-2) are preconfigured and managed by the
instructor.
Logical Lab Backbone Topology
QoS v2.26
Each Pagent and Callgen router is set up with connections to eight VLANs (one for each lab
workgroup) as follows:
Pagent-1 and Callgen-1 are configured with VLANs 11 to 18.
Pagent-2 and Callgen-2 are configured with VLANs 21 to 28.
Traffic flow to and from the Pagent and Callgen lab routers is designed to traverse the network
through each workgroup as follows:
Pagent-1 and Callgen-1 (VLAN 11) send traffic to Pagent-2 and Callgen-2 (VLAN 21) via
pod 1.
pod 2.
pod 3.
pod 4.
pod 5.
pod 6.
pod 7.
pod 8.
Lab Guide
13
The logical configuration of each of these VLANs is as follows:

Lab VLAN Logical Address Assignments
Workgroup Pod
VLANs
Assigned IP Subnets
11 and 21
10.1.1.0/24 (VLAN 11) and 10.3.1.0/24 (VLAN 21)
12 and 22
10.1.2.0/24 (VLAN 12) and 10.3.2.0/24 (VLAN 22)
13 and 23
10.1.3.0/24 (VLAN 13) and 10.3.3.0/24 (VLAN 23)
14 and 24
10.1.4.0/24 (VLAN 14) and 10.3.4.0/24 (VLAN 24)
15 and 25
10.1.5.0/24 (VLAN 15) and 10.3.5.0/24 (VLAN 25)
16 and 26
10.1.6.0/24 (VLAN 16) and 10.3.6.0/24 (VLAN 26)
17 and 27
10.1.7.0/24 (VLAN 17) and 10.3.7.0/24 (VLAN 27)
18 and 28
10.1.8.0/24 (VLAN 18) and 10.3.8.0/24 (VLAN 28)
Required Resources
These are the resources and equipment required to complete this activity:
Lab topology configured for the QoS course
Student workgroup consisting of two user-controlled Cisco 2610XM routers and one usercontrolled Cisco 2950T-24 workgroup switch
Classroom reference materials as follows:
14
QoS Student Guide
QoS Lab Guide
Student pod workstation with Telnet or console access to workstation pod devices
Command List
The table describes the commands used in this activity.
QoS Course Lab Setup and Initialization Lab Router Commands
Command
Description
hostname name
Specifies or modifies the host name
enable secret password
Configures the password for users to enter enable mode
interface interface-id
Enters interface configuration mode and the physical interface

identification
[no] ip address ip-address

mask
Sets a primary or secondary IP address for an interface
clock rate bps
Configures the clock rate for the hardware connections on serial

interfaces
bandwidth kbps
Sets and communicates to higher-level protocols the current

bandwidth value for an interface
encapsulation encapsulationtype
Sets the encapsulation method used by the interface
show ip interface [brief]

[type] [number]
Lists a summary of interface IP information and status
router ospf process-id
Configures an OSPF routing process
network ip-address wildcardmask area area-id
Defines the interfaces on which OSPF protocol runs and defines

the area ID for those interfaces
show ip ospf neighbor
Displays OSPF-neighbor information on a per-interface basis
shutdown
Disables an interface
copy running-config startupconfig
Saves your entries in the configuration file
QoS Course Lab Setup and Initialization Lab Switch Commands

Command
Description
hostname name
Specifies or modifies the host name
enable secret password
Configures password for users to enter enable mode

identification

[type] [number]
Lists a summary of interface IP information and status
show interfaces [interfaceid]
Displays the administrative and operational status of all interfaces

or a specified interface
Lab Guide
15
Job Aid
This job aid is available to help you complete the lab activity:
Your assigned workgroup pod number provided by the instructor
Task 1: Configure Routers and Switch and Verify Connectivity

You will configure your workgroup routers for basic network connectivity.
Activity Procedure
Complete these steps:
Step 1
Step 2
Step 3
Note
16
Configure the host name and passwords on both of the workgroup routers in your
assigned workgroup pod as shown in this table (where x is your assigned workgroup
pod number).
Host Name
Enable Secret Password
VTY Login Password
WGxR1
cisco
cisco
WGxR2
cisco
cisco
Configure the IP address on the S0/0, S0/1, and Fa0/0 interfaces of the workgroup
routers in your assigned workgroup pod as shown in this table.
Interface
WGxR1
WGxR2
Fa0/0
10.1.x.1/24
10.3.x.2/24
S0/0
10.2.x.1/24
10.2.x.2/24
S0/1
10.4.x.1/24
10.5.x.2/24
Configure the clock rate on the S0/0 serial interface of your WGxR1 router to 384
kbps.
Interface
WGxR1 S0/0 clock rate
S0/0
384000 bps
In the service provider backbone, each of the backbone routers (SPNorth, SPSouth)
contains a serial connection to each workgroup router. The Sy/x table lists the IP
addressing requirements of these connections. Both service provider routers are the data
DCE with the clock rate configured by the instructor as 768 kbps.
Sy/x
SPNorth IP Address
SPSouth IP Address
S0/0 to pod 1
10.4.1.100
10.5.1.100
S0/1 to pod 2
10.4.2.100
10.5.2.100
S0/2 to pod 3
10.4.3.100
10.5.3.100
S0/3 to pod 4
10.4.4.100
10.5.4.100
S1/0 to pod 5
10.4.5.100
10.5.5.100
S1/1 to pod 6
10.4.6.100
10.5.6.100
S1/2 to pod 7
10.4.7.100
10.5.7.100
S1/3 to pod 8
10.4.8.100
10.5.8.100
Step 4
Configure the S0/0 and S0/1 serial interfaces of your workgroup routers for PPP
encapsulation and set the bandwidth to match the clock rate configured in Step 3 of
this lab exercise.
Step 5
Administratively enable the S0/0, S0/1, and Fa0/0 interfaces on both of your
workgroup routers and verify that these interfaces are all in the up state
(administratively up, line protocol up).
If the Fa0/0 interface is down, log in to your workgroup switch to ensure that the
switch port is also administratively enabled.
WGxR1#show ip interface brief
Interface
FastEthernet0/0
Serial0/0
Serial0/1
Virtual-Access1
IP-Address
10.1.x.1
10.2.x.1
10.4.x.1
unassigned
OK?
YES
YES
YES
YES
Method
NVRAM
NVRAM
NVRAM
unset
Status
up
up
up
up
Protocol
up
up
up
up
Method
NVRAM
NVRAM
NVRAM
unset
Status
up
up
up
up
Protocol
up
up
up
up

Interface
FastEthernet0/0
Serial0/0
Serial0/1
Virtual-Access1
Step 6
IP-Address
10.3.x.2
10.2.x.2
10.5.x.2
unassigned
OK?
YES
YES
YES
YES
Configure an OSPF routing process on your workgroup routers and place the S0/0,
S0/1, and Fa0/0 interfaces into OSPF area 0.
router ospf 1
network 10.0.0.0 0.255.255.255 area 0
Step 7
Verify that both OSPF neighbors of your workgroup routers are in the FULL state.
Each of your workgroup routers should have a FULL neighbor relationship to the
service provider router and to the other workgroup router in your pod.
WGxR1#show ip ospf neighbor
Neighbor ID
10.10.10.100
10.5.x.2
Pri
0
0
State
FULL/FULL/-
Dead Time Address

00:00:37 10.4.x.100
00:00:36 10.2.x.2
Interface
Serialy/z
Serial0/0

Neighbor ID
Pri
State
Dead Time Address
Interface
Lab Guide
17
10.10.10.200
10.4.x.1
0
0
FULL/FULL/-
00:00:31
00:00:33
10.5.x.100
10.2.x.1
Serialy/z
Serial0/0
Step 8
Verify that the serial ports on both of your workgroup routers (WGxR1 and
WGxR2) have their queuing strategy set to WFQ.
Step 9
Configure the host name and password on the workgroup switch in your assigned
workgroup pod as shown in this table.
Host Name
Enable Secret Password
WGxS1
cisco
You have completed this task when you attain this result:
You have configured your workgroup routers for basic network connectivity.
Task 2: Configure Workgroup Switch for Connectivity

You will configure your workgroup switch for basic network connectivity.
Activity Procedure
Step 1
From the global configuration mode, configure the VTP domain name and mode,
and VLANs 1x and 2x on your workgroup switch.
vtp domain qos
vtp mode transparent
!
vlan 1x
name vlan1x
vlan 2x
name vlan2x
!
end
Step 2
Configure 802.1Q trunking and access ports on the workgroup switch by

configuring the Fa0/1, Fa0/2, and Fa0/3 interfaces of your workgroup switch as
follows:
Fa0/1 is an 802.1Q trunk connected to the core switch. Only VLANs 1x and 2x
should be allowed on the trunk.
Fa0/2 should be an access port in VLAN 1x connected to the WGxR1 router.
Fa0/3 should be an access port in VLAN 2x connected to the WGxR2 router.
interface FastEthernet0/1
description - to core sw
switchport trunk allowed vlan 1x,2x
switchport mode trunk
no ip address
!
description - to WGxR1
switchport access vlan 1x
switchport mode access
no ip address
!
18
description - to WGxR2
switchport access vlan 2x
no ip address
Step 3
Verify that the Fa0/1, Fa0/2, and Fa0/3 interfaces on the workgroup switch are all
up. Administratively enable any interfaces in the shutdown state.
WGxS1#sh ip int brief
Interface
Protocol
Vlan1
FastEthernet0/1
FastEthernet0/2
FastEthernet0/3
FastEthernet0/4
IP-Address
unassigned
unassigned
unassigned
unassigned
unassigned
OK?
YES
YES
YES
YES
YES
Method
manual
unset
unset
unset
unset
Status
administratively down down
up
up
up
up
up
up
down
down
[rest omitted]
Note
Step 4
In the lab, there is no requirement to ping to or from the workgroup switch. The workgroup
switch will not need an IP address configured on Interface VLAN 1 and will not need an IP
default gateway configuration.
From your WGxS1 switch, use the show interface fa0/x switchport command to
verify that the Fa0/1 interface 802.1Q trunking is on and only allow VLANs 1x and
2x on the trunk.
WGxS1#sh int fa 0/1 switchport
Name: Fa0/1
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Operational private-vlan: none
Trunking VLANs Enabled: 1x,2x
Pruning VLANs Enabled: 2-1001
Protected: false
Voice VLAN: none (Inactive)
Appliance trust: none
Step 5
Verify that the Fa0/2 interface is in VLAN 1x.

Name: Fa0/2
Switchport: Enabled
Administrative Mode: static access
Operational Mode: static access
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 1x (VLAN001x)
Trunking VLANs Enabled: ALL
Protected: false
Lab Guide
19

Step 6
Verify that the Fa0/3 interface is in VLAN2x.

Name: Fa0/3
Switchport: Enabled
Administrative Mode: static access
Operational Mode: static access
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 2x (VLAN002x)
Trunking VLANs Enabled: ALL
Protected: false
You have configured your workgroup switch for basic network connectivity.
Task 3: Verify Network Connectivity

You will verify network connectivity using the Cisco IOS tools: ping and traceroute.
Activity Procedure
Step 1
From the WGxR1 router, perform the following pings to confirm connectivity and
routing protocol operation:
Ping the SPNorth router (10.4.x.100).
WGxR1#ping 10.4.x.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.4.x.100, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
Ping the SPSouth router Internet connection (10.10.10.200).
WGxR1#ping 10.10.10.200
Sending 5, 100-byte ICMP Echos to 10.10.10.200, timeout is 2 seconds:
!!!!!
20
Ping the WGxR2 router (10.2.x.2).
WGxR1#ping 10.2.x.2
!!!!!
Ping the Pagent-1 (10.1.x.10) and Callgen-1 (10.1.x.11) routers.
!!!!!
!!!!!
Step 2
From the WGxR2 router, perform the following pings to confirm connectivity and
routing protocol operation:
Ping the SPSouth router (10.5.x.100).
!!!!!
Ping the SPNorth router Internet connection (10.10.10.100).
WGxR2#ping 10.10.10.100
!!!!!
!!!!!
!!!!!
Step 3
On the WGxR1 and WGxR2 routers, administratively disable the serial 0/0
interface.
Lab Guide
21
Step 4
From the WGxR1 router, use Telnet to connect to the Pagent-1 router (10.1.x.10)
and perform a traceroute to the Pagent-2 router (10.3.x.10) to confirm that the path
from Pagent-1 to Pagent-2 flows through your pod (via the SPNorth and SPSouth
routers). Use the diagram in Figure 3 to verify your traceroute.
WGxR1#telnet 10.1.x.10
Trying 10.1.x.10 ... Open
User Access Verification
Username: super
Password: bowl
pagent-1>traceroute 10.3.x.10
Tracing the route to 10.3.x.10
1
2
3
4
5
10.1.x.1 68 msec 64 msec 60 msec

10.4.x.100 44 msec 56 msec 56 msec
10.10.10.200 48 msec 52 msec 48 msec
10.3.x.10 32 msec * 44 msec
pagent-1>exit
[Connection to 10.1.1.10 closed by foreign host]
WGxR1#
Step 5
From the WGxR1 router, use Telnet to connect to the Callgen-1 (10.1.x.11) router
and perform a traceroute to the Callgen-2 router (10.3.x.11) to confirm that the path
from Callgen-1 to Callgen-2 flows through your pod (via the SPNorth and SPSouth
routers). Use the diagram in Figure 3 to verify your traceroute.
WGxR1>telnet 10.1.x.11
Username: super
Password: bowl
callgen-1>traceroute 10.3.x.11
1
2
3
4
5

10.4.x.100 44 msec 56 msec 56 msec
10.10.10.200 48 msec 52 msec 48 msec
10.3.x.11 32 msec * 44 msec
callgen-1>exit
[Connection to 10.1.x.10 closed by foreign host]
WGxR1#
Step 6
On the WGxR1 and WGxR2 routers, administratively enable the serial 0/0 interface.
Step 7
Use Telnet to connect to the Pagent-1 router (10.1.x.10) and perform a traceroute to
the Pagent-2 router (10.3.x.10) to confirm that the path from Pagent-1 to Pagent-2
now flows through your pod and via the slow 384-kbps serial connection between
your WGxR1 and WGxR2 routers. Use the diagram in Figure 3 to verify your
traceroute.
WGxR1#telnet 10.1.x.10
Username: super
22
Password: bowl
pagent-1>traceroute 10.3.x.10
1 10.1.x.1 56 msec 52 msec 60 msec
2 10.2.x.2 116 msec 252 msec 48 msec
3 10.3.x.10 128 msec * 104 msec
pagent-1>exit
[Connection to 10.1.x.10 closed by foreign host]
WGxR1#
Step 8
Save your running configurations of the workgroup routers and the workgroup
switch to the startup configuration in NVRAM.
Step 9
Notify your instructor when you have completed this initial setup lab.
You have completed this task when you attain these results:
Pings from the WGxR1 router to the SPNorth, WGxR2, Pagent-1, and Callgen-1 routers
are successful.
Pings from the WGxR2 router to the SPSouth, Pagent-2, and Callgen-2 routers are
successful.
A traceroute from the Pagent-1 router to the Pagent-2 router flows through your pod (via
the SPNorth and SPSouth routers) with the S0/0 interface in the shutdown state.
A traceroute from the Callgen-1 router to the Callgen-2 router flows through your pod (via
the SPNorth and SPSouth routers) with the S0/0 interface in the shutdown state.
A traceroute from the Pagent-1 router to the Pagent-2 router flows through your pod 384kbps serial link with all WGxR1 and WGxR2 serial interfaces administratively enabled.
Lab 2-1 Answer Key: QoS Lab Setup and Initialization

When you complete this activity, your router configuration will be similar to the following,
with differences that are specific to your device or workgroup.
WG1R1
hostname WG1R1
!
enable secret 5 $1$n4//$vbCjudYcBR3yNPJqI.1tT0
!
ip subnet-zero
!
ip address 10.1.1.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
bandwidth 384
ip address 10.2.1.1 255.255.255.0
encapsulation ppp
clockrate 384000
no fair-queue
!
interface Serial0/1
bandwidth 768
Lab Guide
23
ip address 10.4.1.1 255.255.255.0

encapsulation ppp
!
router ospf 1
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
ip http server
ip classless
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
WG1R2
hostname WG1R2
!
enable secret 5 $1$07qt$nKIz/sUIIRYMZ7urfJPtp1
!
ip subnet-zero
!
ip address 10.3.1.2 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
bandwidth 384
ip address 10.2.1.2 255.255.255.0
encapsulation ppp
no fair-queue
!
interface Serial0/1
bandwidth 768
ip address 10.5.1.2 255.255.255.0
encapsulation ppp
!
router ospf 1
network 10.0.0.0 0.255.255.255 area 0
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
WG1S1
hostname WG1S1
!
enable secret 5 $1$Yq48$E3tAlJjcYAP9qJpdmr0nu.
!
vlan 11
name vlan11
!
vlan 21
name vlan21
ip subnet-zero
vtp domain qos
!
switchport trunk allowed vlan 11,21
24

no ip address
!
switchport access vlan 11
no ip address
!
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
!
line con 0
line vty 5 15
!
end
Lab Guide
25
Lab 2-2: Baseline QoS Measurement

Complete this lab activity to practice what you learned in the modules Introduction to QoS
and The Building Blocks of QoS.
Activity Objective
In this activity, you will create a baseline measurement of network traffic for use in evaluating
the effectiveness of applied QoS mechanisms. After completing this activity, you will be able
to meet these objectives:
Clear interface counters on Cisco routers and switches
Identify interface statistics, which are meaningful in traffic baselines
Use Cisco IOS monitoring commands and network connectivity tools (ping command) to
gather network response time data
Visual Objective
In this lab, when the connectivity is properly established for your pod, you will record traffic
statistics without any QoS configuration on your workgroup routers or workgroup switch. This
record of the workgroup traffic statistics will form a rough baseline QoS measurement for your
pod.
For this lab, no special tools, such as QPM, will be used to monitor QoS statistics. Instead,
Cisco IOS show commands and extended pings are used to form a rough baseline
measurement.
26
Company Background
E-Commerce University is one of the most respected private universities in California based on
its progressive educational offerings, which include a Master of Science degree in ECommerce Administration and Implementations. E-Commerce University has a northern and
southern campus. The northern campus is located in Seattle, Washington, and the southern
campus is located in Santa Monica, California. Each of the campuses has a population of 500
students and a faculty staff of 50 professors and administrators.
Customer Situation
The E-Commerce University network currently has limited bandwidth capacity on its 384-kbps
leased line PPP WAN link that connects the northern and southern campuses, and the university
does not envision being able to increase bandwidth in the near future. Both campuses also have
a 768-kbps Internet connection. The preferred traffic path between the E-Commerce University
campuses is the 384-kbps link, because the 768-kbps link connects to the Internet and will have
a high path cost, even though it is a directly connected link with a higher bandwidth of 768
kbps.
The university has recently implemented these three new applications:
An IP telephony system between the northern and southern campus
An Oracle (SQL) student administration database system
Wireless Internet access for the students and faculties
Some of the other key applications currently running on the E-Commerce University network
that the university IT staff is aware of include the following:
Faculty remote access (Citrix)
MS Outlook e-mail (Microsoft Exchange)
Web server for accessing university information (HTTP)
Online courseware transfer between the northern and southern campuses (FTP)
Because of the deployment of these applications, the E-Commerce University has been
encountering these increasingly serious problems with their network:
Users of the Oracle (SQL) student administrations database system have been complaining
of unacceptable response times. Their subsecond response time has now stretched to
multiple seconds in many cases and up to a minute in some cases.
Users of the new IP telephony devices are the most upset. The quality of their calls is very
poor, and their calls often just drop.
Customer Requirements
At this point, E-Commerce University is most concerned about the low VoIP voice quality and
has called upon you (the new network engineer they hired in the last month) to perform a
baseline measurement of the VoIP traffic via the low-speed 384-kbps leased line connection
between the northern and southern campuses.
Lab Guide
27
Required Resources
Lab topology configured for QoS course
QoS Student Guide
QoS Lab Guide
Command List
Baseline QoS Measurement Lab Commands
Command
Description

[type] [number]
Lists a summary of an interface IP information and status
clear counters
Clears the interface counters
show interfaces [interfaceid]

shutdown
Job Aid
Task 1: Baseline Measurement of Network Traffic

You will clear interface counters on Cisco routers and switches.
Activity Procedure
28
Step 1
Verify that the S0/0 and S0/1 interfaces on both of your workgroup routers (WGxR1
and WGxR2) are administratively enabled.
Step 2
Clear the interface counters on both of your workgroup routers using the clear
counters command.
Note
At this time, your instructor has not yet started the Pagent and Callgen router traffic
generations.
You have cleared interface counters on Cisco routers and switches.
Task 2: Identify Interface Statistics

You will identify interface statistics.
Activity Procedure
Step 1
From the WGxR1 workgroup router, perform an extended ping to the WGxR2 router
serial 0/0 interface, then record the ping response time in the table at the end of the
lab. For the extended ping, use a repeat count of 100 and a datagram size of 160.
WGxR1#ping
Protocol [ip]:
Target IP address: 10.2.x.2
Repeat count [5]: 100
Datagram size [100]: 160
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!
Step 2
Repeat the extended ping two more times and record your results in the table at the
end of this lab.
Step 3
Repeat Step 1 and Step 2, but ping from the WGxR2 to WGxR1 serial 0/0 interface
and record the response time results in the table at the end of this lab.
Step 4
From both of your workgroup routers, issue the show interfaces serial 0/0
command and record the highlighted stats below in the table at the end of the lab.
WGxR1#show interfaces serial0/0
Serial0/0 is up, line protocol is up
Hardware is PowerQUICC Serial
Description: to WGxR2
Internet address is 10.2.3.1/24
MTU 1500 bytes, BW 384 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, LCP Open
Open: CDPCP, IPCP, loopback not set
Last input 00:00:03, output 00:00:01, output hang never
Last clearing of "show interface" counters 00:00:12
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queuing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/21/32 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 288 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
3 packets input, 429 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
Lab Guide
29
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

3 packets output, 184 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
Step 5
counters command.
Step 6
Notify your instructor when you are done with the prior steps. Your instructor will
start both Pagent and Callgen traffic generators. Your instructor will advise you
when all traffic streams are operational.
You have identified interface statistics.
Task 3: Use Commands and Tools to Gather Network Response

Time Data After Both Pagent and Callgen Traffic Generators
Are Sending Traffic
You will use Cisco IOS monitoring commands and network connectivity tools (ping) to gather
network response time data.
Activity Procedure
Step 1
Caution
Before initiating the extended ping command, wait for the Pagent and Callgen traffic to run
for at least one minute so that the traffic generation can stabilize.
WGxR1#ping
Protocol [ip]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!
Caution
30
After the Pagent traffic generation has been started, it is important that the Pagent routers
not be used for network measurements using ping and traceroute commands, because the
Pagent routers maintain a very high CPU load in generating the traffic demands for the QoS
course labs.
Step 2
Repeat the extended ping command two more times and record your results in the
table at the end of this lab.
Step 3
Repeat Step 1 and Step 2 but ping from the WGxR2 to WGxR1 serial 0/0 interface
and record the response time results in the table at the end of this lab.
Step 4
From both of your workgroup routers, issue the show interfaces serial 0/0
command and record the highlighted statistics below in the table at the end of the
lab.
WGxR1#show interfaces serial 0/0
Description: to wgxr1
Internet address is 10.2.x.1/24
Queueing strategy: weighted fair
Note
The traffic sent between Pagent-1 and Pagent-2 is set up so that the traffic rate varies
constantly and will be different between Pagent-1 and Pagent-2. When the traffic rate from
Pagent-1 to Pagent-2 is high and increasing, the traffic rate from Pagent-2 to Pagent-1 will
be low and decreasing, and vice versa. As a result, the drop rate on your workgroup router
serial 0/0 interface may be different between your workgroup R1 and R2 routers.
Note
For Callgen, both Callgen routers will generate VoIP calls at a constant rate.
Step 5
Compare the resulting statistics with and without the Pagent and Callgen traffic
generations enabled.
You should notice that many of the pings would have a longer response time in the
event of congestion on the low bandwidth 384-kbps PPP serial link.
Lab Guide
31
Baseline QoS Measurement Lab Results

These four tables are used to record the results of your lab testing in this exercise. Record your
extended ping results in these two tables:
WGxR1 to WGxR2 QoS Baseline Ping Results
Packet Size
160 bytes
Without Pagent and

Callgen
With Pagent and

Callgen
min/avg/max
min/avg/max
success rate %
success rate %
Extended ping 1
Extended ping 2
Extended ping 3
Extended ping 1
Extended ping 2
Extended ping 3
WGxR2 to WGxR1 QoS Baseline Ping Results

Packet Size
160 bytes
Without Pagent and

Callgen
With Pagent and

Callgen
min/avg/max
min/avg/max
success rate %
success rate %
Extended ping 1
Extended ping 2
Extended ping 3
Extended ping 1
Extended ping 2
Extended ping 3
32
Record your WGxR1 show interfaces serial 0/0 command results in this table.
WGxR1 QoS Baseline show interfaces Command Results
Without Pagent and
Callgen
With Pagent and Callgen
Queuing Strategy
Reliability, Txload, Rxload
Total Output Drops
Output Queue: size/max total
Output Queue: threshold/drops
Packets Output
Drop % (Calculated by you as:
Total Output Drop / Packets
Output)
Record your WGxR2 show interfaces serial 0/0 command results in this table.
WGxR2 QoS Baseline show interfaces Command Results
Without Pagent and
Callgen
Queuing Strategy
Total Output Drops
Packets Output
Output)
You have successfully completed the QoS baseline measurement by recording ping and
interface statistics both before and after network traffic generation.
Lab Guide
33
Lab 2-2 Answer Key: Baseline QoS Measurement

Sample WGxR1 to WGxR2 QoS Baseline ping Results
Packet Size
Without Pagent and

Callgen
With Pagent and

Callgen
160 bytes
min/avg/max
min/avg/max
Extended ping 1
8/8/12
8/43/120
Extended ping 2
8/8/12
16/42/116
Extended ping 3
8/9/16
12/43/112
success rate %
success rate %
Extended ping 1
100%
100%
Extended ping 2
100%
100%
Extended ping 3
100%
100%
Sample WGxR1 QoS Baseline show interfaces Results
34
Without Pagent and

Callgen
Queuing Strategy
WFQ (fair queue)
WFQ (fair queue)
255, 1, 1
255, 209, 39
Total Output Drops
1975
0/1000
61/1000
64/0
64/1975
Packets Output
3001
131760

Output)
0/3001 = 0
1975/131760 = 1.5%
Lab 3-1: Configuring QoS with AutoQoS

Complete this lab activity to practice what you learned in the module Introduction to Modular
QoS CLI and AutoQoS.
Activity Objective
In this activity, you will configure QoS for VoIP on Cisco IOS routers and Catalyst switches
using AutoQoS. After completing this activity, you will be able to meet these objectives:
Configure AutoQoS on Cisco IOS routers
Configure AutoQoS on the Catalyst 2950 workgroup switch
Use Cisco IOS monitoring commands and network connectivity tools (ping) to gather
network response time data
Visual Objective
From the baseline measurement results, the E-Commerce University IT staff has determined
that the drop rate and the latency of the VoIP traffic must be improved. At this point, the ECommerce University has called upon you (the new CCNA network engineer they hired last
month) to improve the voice quality as quickly as possible over the weekend.
By the way, the E-Commerce University network is built using Cisco Catalyst 2950 switches,
Cisco 2610XM routers, and Cisco Aironet Wireless Access Points.
Lab Guide
35
Through Cisco online e-learning, you discovered the new AutoQoS for VoIP feature that
allows automated configuration of quality of service (QoS) on the network and provides a
means for simplifying the implementation and provisioning of QoS for VoIP traffic.
Because you have only a limited amount of time to implement a solution, you have decided to
go ahead and use AutoQoS and then test and compare the VoIP QoS results to see if AutoQoS
can be used to solve the problem.
Required Resources
Lab topology configured for QoS
QoS Student Guide
QoS Lab Guide
Command List
Configuring QoS with AutoQoS Lab Router Commands
36
Command
Description
show running-config
Displays the contents of the currently running configuration file
ip cef
Enables CEF on the router

identification
auto qos voip
Configures the AutoQoS-VoIP feature on an interface
show auto qos [interface

[interface-type]]
Displays the configuration created by the AutoQoS-VoIP feature

on a specific interface or all interfaces

[type] [number]
show interfaces multilink

[interface-id]

clear counters
Configuring QoS with AutoQoS Lab Switch Commands

Command
Description

identification
auto qos voip
Configures AutoQoS for VoIP within a QoS domain
show auto qos [interface

[interface-id]]
Displays AutoQoS configuration that is applied
Job Aid
Task 1: Configuring AutoQoS on Cisco IOS Routers

In this task, you will enable the AutoQoS for VoIP feature on your workgroup router low
bandwidth PPP serial interface.
Activity Procedure
Step 1
Display and examine the running configuration of your WGxR1 router.
Step 2
Enable CEF on your WGxR1 router.
Step 3
Enable the AutoQoS for VoIP feature for traffic on the S0/0 interface of WGxR1
only. Do not configure AutoQoS to trust DSCP markings.
Step 4
Display and examine the resulting AutoQoS configuration after enabling AutoQoS.
The following example outputs are from WG1.
ip access-list extended AutoQoS-VoIP-RTCP
permit udp any any range 16384 32767
!
ip access-list extended AutoQoS-VoIP-Control
permit tcp any any eq 1720 (3 matches)
permit tcp any any range 11000 11999
permit udp any any eq 2427
permit tcp any any eq 2428
!
class-map match-any AutoQoS-VoIP-RTP-UnTrust
match protocol rtp audio
match access-group name AutoQoS-VoIP-RTCP
!
class-map match-any AutoQoS-VoIP-Control-UnTrust
match access-group name AutoQoS-VoIP-Control
!
class-map
match ip
match ip
match ip
match-any AutoQoS-VoIP-Re-mark
dscp ef
dscp cs3
dscp af31
!
Lab Guide
37
policy-map AutoQoS-Policy-UnTrust
class AutoQoS-VoIP-RTP-UnTrust
priority percent 70
set dscp ef
class AutoQoS-VoIP-Control-UnTrust
bandwidth percent 5
set dscp af31
class AutoQoS-VoIP-Re-mark
set dscp default
class class-default
fair-queue
Serial0/0 !
interface Serial0/0
no ip address
encapsulation ppp
no fair-queue
ppp multilink
multilink-group 2001100114
!
interface Multilink2001100114
bandwidth 384
ip address 10.2.1.1 255.255.255.0
service-policy output AutoQoS-Policy-UnTrust
ppp multilink
ppp multilink fragment-delay 10
ppp multilink interleave
ip rtp header-compression iphc-format
!
rmon event 33333 log trap AutoQoS description "AutoQoS SNMP traps for Voice
Drops" owner AutoQoS
rmon alarm 33334 cbQosCMDropBitRate.1145.1147 30 absolute rising-threshold
1 33333 falling-threshold 0 owner AutoQoS
Step 5
Repeat Steps 1 through 4 for WGxR2.
Step 6
Issue the show ip interface brief command on WGxR1 and ensure that the Multilink
interface is up. The Multilink interface is required for PPP multilink and interleaving
operation. Notice that the S0/0 IP address assignment is automatically moved to the
Multilink interface.
Note
Step 7
Interface
IP-Address
OK? Method Status
Protocol
FastEthernet0/0
10.1.1.1
YES NVRAM
up
up
Serial0/0
unassigned
YES unset
up
up
Serial0/1
10.4.1.1
YES NVRAM
administratively down down
Virtual-Access1
unassigned
YES unset
up
up
Multilink2001100114
10.2.1.1
YES unset
up
up
Because Callgen is used to generate the VoIP traffic, the voice quality of the VoIP phone
calls cannot be tested directly. Therefore, after AutoQoS has been enabled, you will modify
the resulting QoS configurations to make the ping traffic (icmp echo and reply) to have the
same EF PHB as the VoIP traffic. In this way, you can compare the extended ping
responses with AutoQoS enabled to the responses before AutoQoS was enabled.
On the WGxR1 router, modify the ip access-list extended AutoQoS-VoIP-RTCP to

include the ping traffic (icmp echo and echo reply).
permit icmp any any echo
38
permit icmp any any echo-reply
Step 8
Repeat Step 7 for the WGxR2 router.
You have successfully enabled the AutoQoS for VoIP feature on both WGxR1 and
WGxR2.
You have configured ping (ICMP echo and reply) to belong to the same traffic class as
VoIP traffic.
Task 2: Configuring AutoQoS on the Catalyst 2950 Switch

In this task, you will enable the AutoQoS for VoIP feature on your workgroup Catalyst 2950
switch.
Activity Procedure
Step 1
Display and examine the running configuration of your WGxS1 switch.
Step 2
Enable the AutoQoS for VoIP feature for traffic on the Fa0/1 interface of WGxS1 and
trust the CoS markings from the core switch.
Step 3
Display and examine the resulting AutoQoS configuration after enabling AutoQoS.
Notice that the 2950 is now configured for WRR queuing with queue 4 setup as the
expedite queue (weight = 0). WRR queuing will be covered in the module
Congestion Management.
Initial configuration applied by AutoQoS:
wrr-queue bandwidth 20 1 80 0
no wrr-queue cos-map
wrr-queue cos-map 1 0 1 2 4
wrr-queue cos-map 3 3 6 7
wrr-queue cos-map 4 5
mls qos map cos-dscp 0 8 16 26 32 46 48 56
!
mls qos trust cos
auto qos voip trust
You have successfully enabled the AutoQoS for VoIP feature on WGxS1.
Lab Guide
39
Task 3: QoS Baseline with AutoQoS

In this task, you will use Cisco IOS monitoring commands and network connectivity tools
(ping) to gather network response time data. You will compare the results of the traffic
statistics of the network baseline statistics captured in Lab Exercise 2-2 and the network
statistics after the application of AutoQoS.
Activity Procedure
Step 1
Refer to Lab 2-2 and copy the baseline traffic information with the Pagent and
Callgen traffic generation running into the tables at the end of this lab.
Step 2
WGxR1#ping
Protocol [ip]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!
Step 3
end of this lab.
Step 4
Repeat Steps 2 and 3, but ping from the WGxR2 to WGxR1 serial 0/0 interface and
record the response time results in the table at the end of this lab.
Step 5
counters command.
Step 6
Wait for the interface counters to accumulate traffic statistics for at least one minute.
Step 7
From both of your workgroup routers, issue the show interfaces multilink command
and record the highlighted statistics below in the table at the end of the lab.
WGxR1#show interfaces Multilink2001100114
MMultilink2001100114 is up, line protocol is up
Hardware is multilink group interface
Encapsulation PPP, LCP Open, multilink Open
Open: IPCP, loopback not set
DTR is pulsed for 2 seconds on reset
40
Last input 00:00:09, output never, output hang never

Output queue: 151/1000/64/1415/3541 (size/max
total/threshold/drops/interleaves)
Step 8
Compare the results of the traffic statistics from Lab 2-2 QoS Baseline Measurement
to the results from this lab.
Is the ping maximum response time shorter than before AutoQoS was enabled?
Explain. ___________________________________________________________
Is the drop rate higher, lower, or about the same as before AutoQoS was enabled?
Explain. ____________________________________________________
Step 9
Remove the AutoQoS configuration on your workgroup switch and workgroup

routers.
WGxS1(config)#int fa0/1
WGxS1(config-if)#no auto qos voip
WGxS1(config-if)#end
WGxS1#show auto qos

AutoQoS is disabled
Note
If a newer IOS version on the Catalyst 2950 is used, the no auto qos voip command will
not remove the global QoS configurations that were enabled by AutoQoS. You need to
remove them manually. (Refer to Task 2, Step 3 for the global QoS configurations.)
WGxR1(config)#int s0/0
WGxR1(config-if)#no auto qos voip
WGxR2(config)#int s0/0
WGxR2(config-if)#no auto qos voip
Note
When removing AutoQoS from WGxR1 and WGxR2, the encapsulation on your serial
interfaces may be returned to HDLC, the Cisco default serial interface encapsulation. Be
sure to reconfigure your serial interfaces for PPP encapsulation on both WGxR1 and
WGxR2.
Lab Guide
41
Step 10
On both of your workgroup routers, issue the show ip interface brief command and
ensure that the serial 0/0 interface is up. The Multilink interface should be removed
when AutoQoS has been disabled.
WGxR1#sh ip int brief
Interface
IP-Address OK? Method
Protocol
YES NVRAM up
Serial0/0
10.2.x.1
YES unset
Serial0/1
10.4.1.1
YES NVRAM administratively down down
Virtual-Access1 unassigned YES unset
Step 11
Status
FastEthernet0/0 10.1.1.1
up
up
up
up
up
Save your running configurations of the workgroup routers and the workgroup switch
to the startup-config in NVRAM.
Configuring QoS with AutoQoS Lab Results

Record your extended ping results in the two tables below:
WGxR1 to WGxR2 AutoQoS ping Results
Packet Size
160 bytes
Without AutoQoS
(From Lab 2-2)
With AutoQoS
(This Lab)
min/avg/max
min/avg/max
success rate %
success rate %
Extended ping 1
Extended ping 2
Extended ping 3
Extended ping 1
Extended ping 2
Extended ping 3
42
WGxR2 to WGxR1 AutoQoS ping Results

Packet Size
160 bytes
Without AutoQoS
(From Lab 2-2)
With AutoQoS
(This Lab)
min/avg/max
min/avg/max
success rate %
success rate %
Extended ping 1
Extended ping 2
Extended ping 3
Extended ping 1
Extended ping 2
Extended ping 3
Record your WGxR1 show interfaces multilink results in this table:

WGxR1 AutoQoS show interfaces Results
Without AutoQoS
(From Lab 2-2)
show interface s0/0
With AutoQoS
(This Lab)
show interface multilink
Queuing Strategy
Total Output Drops
Output Queue:
threshold/drop/interleaves
Packets Output
Output)
Lab Guide
43
Record your WGxR2 show interfaces serial 0/0 results in this table:
WGxR2 AutoQoS show interfaces Results
Without AutoQoS
(From Lab 2-2)
show interface s0/0
With AutoQoS
(This Lab)
Queuing Strategy
Total Output Drops
Output Queue:
Packets Output
Output)
You have successfully completed the QoS baseline measurement after enabling AutoQoS
by recording ping and interface statistics.
You have compared the results of the traffic measurement to those from the QoS Baseline
Lab and correctly answered the questions contained within the lab.
You have successfully removed AutoQoS configuration from your workgroup routers and
switch.
Lab 3-1 Answer Key: Configuring QoS with AutoQoS

Step 1
The following configuration is entered to enable AutoQoS on the WGxR1 and

WGxR2 routers:
interface serial 0/0
auto qos voip
permit icmp any any echo
permit icmp any any echo-reply
Step 2
The following configuration is entered to enable AutoQoS on the WGxS1 switch:

interface fastethernet 0/1
auto qos voip trust
Step 3
44
The following are the answers to the questions in this lab exercise:
Is the ping maximum response time shorter than before AutoQoS was enabled? Explain.
Yes, because ping was moved into the expedited forwarding class with VoIP traffic. The
minimum time may be higher because the traffic generation tools are generating traffic at
different data rates.
Is the drop rate higher, lower, or about the same as before AutoQoS was enabled? Explain.
The drop rate is about the same because AutoQoS only affects the voice over IP traffic
and not the data traffic. The VoIP traffic load in the lab is minimal compared to the data.
The following are sample QoS Lab results:
Sample WGxR1 to WGxR2 AutoQoS ping Results
Packet Size
Without AutoQoS
(From Lab 2-2)
With AutoQoS
(This Lab)
160 bytes
min/avg/max
min/avg/max
Extended ping 1
8/43/120
32/54/88
Extended ping 2
16/42/116
32/53/88
Extended ping 3
12/43/112
32/54/88
success rate %
success rate %
Extended ping 1
100%
100%
Extended ping 2
100%
100%
Extended ping 3
100%
100%
Sample WGxR1 AutoQoS show interfaces Results

Without AutoQoS
(From Lab 2-2)
show interface s0/0
With AutoQoS
(This Lab)
Queuing Strategy
WFQ (fair queue)
WFQ (fair queue)
255, 209, 39
255, 245, 41
Total Output Drops
1975
216
61/1000
161/1000
Output Queue:
64/1975
64/216/8534
Packets Output
131760
20530

Output)
1975/131760 = 1.5%
216/20530=1.1%
Lab Guide
45
Case Study 4-1: Classification and Marking

This case study enables you to practice the skills and knowledge learned in the module
Classification and Marking.
Activity Objectives
In this activity, you will define a QoS policy that assigns network traffic to service classes and
identify where classification and marking should be applied to the network. Upon completing
Identify QoS service class requirements
Identify network locations where classification and marking should be applied
Visual Objective
Visual Objective for Case Study 6-1:

WRED Traffic Profiles
3. Create WRED traffic profiles. Create the WRED traffic profiles
required to properly implement the administrative QoS policy.
4. Present Your Solution. After the instructor presents a solution to
partner.
QoS v2.229
Required Resources
46
Case Study Activity: Classification and Marking with QoS Service Classes
Case Study Classification and Marking

This case study provides information regarding the QoS administrative policy requirements of a
large, multisite network. Your task is to work with a partner to evaluate the QoS requirements,
and based on these requirements, identify where QoS classification and marking mechanisms
should be applied. You will discuss your solution with the instructor and other classmates, and
the instructor will present a solution for the case study to the class.
Task 1: Classification and Marking

The activity includes these tasks:
Step 1
Review customer QoS requirements: Completely read the customer requirements

provided.
This case study involves analyzing an administrative QoS policy of the JC Whitney
Corporation, a fictitious manufacturer of medical equipment. The company has
provided you with a brief description of their requirements. It is your task to provide
the network engineers from JC Whitney with a QoS solution to meet their
requirements.
Read the customer requirements and discuss them with your partner. Identify the
different types of traffic in use in the JC Whitney network and the different service
classes required to implement their administrative QoS policy.
Company Background
JC Whitney Corporation is a leading manufacturer of medical equipment used in outpatient
surgical centers throughout the United States. The company headquarters are located in
Eugene, Oregon.
In addition to the headquarters facility, JC Whitney consists of five manufacturing facilities and
120 regional sales and distribution centers. The network at each of the manufacturing facilities
is similar to the JC Whitney corporate network. The regional sales and distribution centers are
very low-cost, low-overhead sites.
Lab Guide
47
JC Whitney Regional Sales Office Network
QoS v2.217
The regional sales and distribution center networks are shown in the figure.
The manufacturing strategy of JC Whitney is to leverage the expertise of contract
manufacturers through its extensive extranet of partners. Currently, the JC Whitney extranet
consists of nine contract manufacturers and suppliers that are all connected using a national
service provider backbone.
48
JC Whitney Extranet Network
QoS v2.214
The service provider currently uses MPLS on its backbone as shown in the figure.
Customer Situation
JC Whitney has recently opened up Internet access to its regional manufacturing facilities and
to its regional sales and distribution centers. As a result, access times to many of the company
mission-critical applications such as sales and manufacturing databases have increased
dramatically. In addition, response time between the corporate headquarters and JC Whitney
extranet partners has increased, causing database queries to time out in some instances. No new
applications have been added to the network other than enabling corporate-wide Internet
access.
The JC Whitney network engineering staff explains their network applications in this manner:
JC Whitney has standardized on OSPF as its routing protocol and therefore uses it on all
routers company-wide.
The corporate headquarters and the five manufacturing facilities use VoIP for all intrasite
and intersite communications.
The entire ERP database for the company is located at the corporate site. All sites
(manufacturing, regional sales and distribution centers, and extranet partners), use this
centralized database for inventory control, sales data, invoicing, and so on. Without
complete access and reachability to the ERP database and its applications, JC Whitney
could not manufacture product, ship inventory, or bill for its services.
E-mail is another application that is used heavily at JC Whitney. The exchange servers and
mail gateways are all located in the server farm at the corporate headquarters location.
Lab Guide
49
Internet services have recently been introduced company-wide. One of its largest uses has
been messaging between regional sales and distribution centers and between corporate staff
and manufacturing. No internal messaging service currently exists at JC Whitney. As a
result, the productivity gains realized by this Internet service have become somewhat
important to the company. No other business applications currently exist on the Internet.
Although the JC Whitney manufacturing facilities operate 24 hours per day, seven days per
week, the evening shifts have a reduced staff and line output. As a result, database
synchronization and server backups are performed during the evening hours. A TCP-based
backup application manages file transfers between manufacturing sites and the corporate
headquarters using an automated version of FTP. Database synchronization is also TCPbased and has no critical bandwidth or latency requirements.
Working with the network engineering staff at JC Whitney and the service provider, you have
been enlisted to assist JC Whitney by defining QoS requirements for their network. Their first
priority is to determine what service classes to use and to identify where QoS classification and
marking mechanisms should be configured in the network to enable the JC Whitney
administrative QoS policy, resolving the response time issues that they are experiencing.
Step 2
Identify QoS service class requirements: With the aid of your partner, identify the
service classes required to implement the administrative QoS policy based on
customer requirements.
Identify the different service classes required to implement the JC Whitney
administrative QoS policy. Use the QoS Service Classes table to help you with your
answer choices. Write your answers in the table below.
JC Whitney Service Classes

Customer Traffic
50
Service Class
QoS Service Classes

PHB
DSCP
DSCP
Value
Intended
Protocols and
Applications
Service
Class
EF
EF
101110
Interactive voice
Voice Bearer
AF1
AF11
AF12
AF13
001010
001100
001110
Intranet, general data

service
Bulk Data
AF2
AF21
AF22
AF23
010010
010100
010110
Database access,
transaction services,
interactive traffic,
preferred data service
Transactional
AF3
AF31
AF32
AF33
011010
011100
011110
Locally defined
mission-critical
applications
MissionCritical
AF4
AF41
AF42
AF43
100010
100100
100110
Interactive video and

associated voice
Interactive
Video
CS6
Class 6
110000
Border Gateway
Protocol (BGP),
OSPF, etc.
Routing
(Reserved)
CS4
Class 4
100000
Often proprietary
Streaming
Video
CS3
Class 3
011000
Session initiation
protocol (SIP), H.323,
etc.
Voice
Signaling
CS1
Class 1
001000
User-selected service,
point-to-point
applications
Default
Default
(BestEffort)
Class 0
000000
Unspecified traffic, email
Less-thanBest Effort
Data
(Scavenger)
Best-Effort
Service Class and

Configuration
Admission Control = RSVP
Queuing = Priority
Queuing = Rate Based
Active Queue Mgt = WRED
minth AF13 < maxth AF13 <=
minth AF11 < maxth AF11
Small guaranteed minimum rate
Active Queue Mgt = RED
minth < maxth, but minth is
deep to minimize loss
minth < maxth
No bandwidth guarantee
minth < maxth
Minimal bandwidth guarantee
Active Queue Mgt or Per-flow
fair queuing
minth < maxth
In order to provide end-to-end QoS, multiple markers may be required. For each service class
required for the JC Whitney network, complete the table below with the appropriate value of
each specified marker.
Lab Guide
51
JC Whitney QoS Service Class Requirements

L 3 Classification
Service Class
Step 3
DSCP PHB
DSCP
IP Precedence
L 2 Classification
CoS
MPLS EXP
Identify network locations where classification and marking should be applied:

Identify locations in the network where the QoS classification and marking
mechanisms should be applied to properly implement the administrative QoS policy.
Using the information provided in the review of customer QoS requirements for this
case study; use the diagrams of the JC Whitney network below to indicate trust
boundaries, where classification and marking should be applied, markers in use, and
locations where QoS markers change to ensure end-to-end QoS. Use the example
shown to assist you in completing this activity. Indicate the following on the
network diagram provided:
52
Trust boundaries
QoS markers in use
Network locations where classification and marking should be used
Locations where QoS markers change
Example Network
QoS v2.215
The figure illustrates a sample network showing trust boundaries, where classification and
marking should be applied, and markers in use.
Lab Guide
53
JC Whitney Corporate Headquarters Network

The JC Whitney network consists of a converged voice and data network. Because voice is a
business-critical application, all voice traffic should be treated appropriately. The user
community at JC Whitney ranges from novice data-entry clerks to advanced systems
programmers. As a result, security measures require that user workstations should not be
allowed to set packet priorities.
JC Whitney Corporate Network
QoS v2.216
Use the network diagram of the JC Whitney corporate network to indicate the following:
54
Trust boundaries
QoS markers in use
JC Whitney Regional Sales and Distribution Center Networks

The JC Whitney regional sales and distribution center networks are very low-overhead
operations. Each sales office is staffed with three to nine employees. Distribution centers are
similar to sales offices, but can be supported by up to 20 employees. The network at each center
consists of a basic 10/100 Mbps desktop switch that is used to connect the office workstations
to the corporate headquarters or a regional manufacturing facility via a Frame Relay-connected
low-end router.
QoS v2.217
Use the network diagram of the JC Whitney corporate network to indicate the following:
Trust boundaries
QoS markers in use
Step 4
Present your solution: Together with your partner, present your solution to the
class. Include this information:
Network diagrams indicating where classification and marking should be applied
You have completed this activity when the instructor has verified your case study solution and
you have justified major deviations from the solution supplied by the instructor.
Lab Guide
55
Case Study 4-1 Answer Key: Classification and Marking

Identify QoS Service Class Requirements
Customer Traffic
Service Class
OSPF Routing Protocol
Reserved
Voice over IP
Voice Bearer
Voice Signaling (Skinny, SIP, etc.)
Voice Signaling
ERP (Transactional Database)
Transactional Data
E-mail
Best-Effort Data
Internet (Browsing, Messaging)
Bulk Data
Backup, Synch (FTP Bulk transfer)
Bulk Data
JC Whitney QoS Service Class Requirements

L 3 Classification
Service Class
DSCP PHB
DSCP
IP Precedence
CoS
MPLS EXP
CS 6
48 (110 000)
EF
46 (101 110)
Voice Signaling
CS3
24 (011 000)
Transactional Data
AF21
18 (010 010)
Bulk Data
AF11
10 (001 010)
Default
0 (000 000)
Reserved
Voice Bearer
Best-Effort Data
56
L 2 Classification
Identify Network Locations Where Classification and Marking Should be Applied
Case Study Results:

QoS v2.218
Case Study Results:

QoS Service Class Requirements
QoS v2.219
Lab Guide
57
Case Study Results:

JC Whitney Corporate Network
QoS v2.220
Case Study Results:

58
QoS v2.221
Lab 4-1: Classification and Marking Using MQC

Complete this lab activity to practice what you learned in the lesson Using MQC for ClassBased Marking in the module Classification and Marking.
Activity Objective
In this activity, you will configure classification using MQC and marking using class-based
marking. After completing this activity, you will be able to meet these objectives:
Configure an IP extended access list matching specific traffic for use in MQC classification
Configure MQC classification
Configure class-based marking
Visual Objective
From the AutoQoS results, the E-Commerce University IT staff has determined that the VoIP
voice quality is now satisfactory. Because you did such a great job so far, the E-Commerce
University is now calling upon you to also improve the response time of the Oracle (SQL)
student administration database application over their spring break. Because AutoQoS only
works for voice traffic currently, you decide to remove the AutoQoS configurations and to
manually implement the proper QoS mechanisms using MQC.
As you have learned in the Cisco QoS course, one of the first steps to implement QoS is to
properly classify and mark the traffic. Therefore, you decide the first step now for you is to
implement the proper classification and marking.
Lab Guide
59
To ease into the QoS implementation, you decide to first approach the classification and
marking of the applications you feel are the bulk of the university traffic (FTP and HTTP).
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Classification and Marking Using MQC Lab Commands
60
Command
Description
access-list access-listnumber {deny | permit} tcp

src src-wildcard [operator
[port]] dest dest-wildcard
[operator [port]]
Defines an extended IP access list for TCP-based traffic
class-map class-map-name
Creates a class map to be used for matching packets to a

specified class
match access-group {accessgroup | name access-groupname}
Configures the match criteria for a class map on the basis of the
specified ACL
policy-map policy-map-name
Creates or modifies a policy map that can be attached to one or

more interfaces
class {class-name | classdefault}
Specifies the name of the class whose policy you want to create
or change or specifies the default class
set dscp dscp-value
Marks a packet by setting the DSCP
service-policy {input |
output} policy-map-name
Attaches a policy map to an input interface or VC, or an output

interface or VC
show access-lists [accesslist-number | access-listname]
Displays the contents of current access lists
show class-map [class-mapname]
Displays all class maps and their matching criteria
show policy-map [policy-map]
Displays the configuration of all classes for a specified service

policy map or all classes for all existing policy maps
Command
Description
show policy-map interface

interface-name [input |
output] [class class-mapname]
Displays the packet statistics of all classes that are configured for
all service policies on the specified interface or subinterface
Job Aid
This job aid is available to help you complete the lab activity.
Your assigned workgroup pod number provided by the instructor.
Task 1: IP Extended Access List

You will configure an IP extended access list matching specific traffic for use in MQC
classification.
Activity Procedure
Step 1
Connect to the WGxR1 router. Configure an IP extended access list to match all FTP
traffic.
Step 2
On the WGxR1 router, configure a second IP extended access list to match all HTTP
(WWW) traffic.
Step 3
Display and verify your IP extended access list configuration.

Extended IP access list 101
10 permit tcp any any eq ftp
20 permit tcp any any eq ftp-data
10 permit tcp any any eq www
You have configured an IP extended access list matching specific traffic for use in MQC
classification.
Task 2: Configure MQC Classification

You will configure MQC classification.
Activity Procedure
Step 1
Create two new class maps called match-ftp and match-www to match the FTP and
WWW traffic, respectively.
Step 2
Display and verify your class-map configuration.

Class Map match-any class-default (id 0)
Lab Guide
61
Match any
Class Map match-all match-ftp (id 1)
Match access-group 101
Class Map match-all match-www (id 2)
62
You have configured MQC classification.
Task 3: Configure Class-Based Marking

You will configure class-based marking.
Activity Procedure
Step 1
Create a policy map on your workgroup WGxR1 router, named mark-apps, that
includes the two newly configured traffic classes (match-ftp and match-www). Use
class-based marking to mark the FTP traffic to AF 11 and the WWW traffic to DSCP 0.
Step 2
Display and verify your policy-map configuration.

Policy Map mark-apps
Class match-ftp
set dscp af11
Class match-www
set dscp default
Step 3
Apply the policy map to the FastEthernet 0/0 interface of your WGxR1 router in the
inbound direction.
Step 4
Display and verify your service policy.

FastEthernet0/0
Service-policy input: mark-apps
Class-map: match-ftp (match-all)
320 packets, 19200 bytes
5 minute offered rate 1000 bps, drop rate 0 bps
Match: access-group 101
QoS Set
dscp af11
Packets marked 320
Class-map: match-www (match-all)
QoS Set
dscp default
Packets marked 172
Class-map: class-default (match-any)
Match: any
Step 5
Step 6
How many packets have been matched and marked on WGxR1 for each traffic class?
Class ftp
__________________
Class www
__________________
Class class-default
__________________
Repeat Steps 1 through 9 for workgroup router WGxR2.
Lab Guide
63
Step 7
Step 8
How many packets have been matched and marked on WGxR2 for each traffic class?
Class ftp
__________________
Class www
__________________
Class class-default
__________________
You have correctly created MQC classification for FTP and HTTP traffic.
You have correctly configured MQC marking to mark FTP traffic as AF11 and HTTP
traffic as DSCP 0.
You have correctly enabled MQC classification and marking by applying the service policy
to both workgroup routers.
Lab 4-1 Answer Key: Classification and Marking Using MQC

access-list 101 permit tcp any any eq ftp
access-list 101 permit tcp any any eq ftp-data
access-list 102 permit tcp any any eq www
class-map match-all
match access-group
class-map match-all
match access-group
match-www
102
match-ftp
101
policy-map mark-apps
class match-ftp
set dscp af11
class match-www
set dscp default
service-policy input mark-apps
64
Lab 4-2: Classification Using NBAR

Complete this lab activity to practice what you learned in the lesson Using NBAR for
Classification in the module Classification and Marking.
Activity Objective
In this activity, you will configure classification using NBAR. After completing this activity,
you will be able to meet these objectives:
Discover network applications and traffic using NBAR protocol discovery
Configure class-based marking using NBAR classification
Visual Objective
After studying your current classification and marking strategy, you realize that using extended
IP access lists cannot properly classify all the traffic now running on the network. One issue is
that there are too many applications being classified into the class-default. Therefore, you
decide to configure NBAR for your classification requirements. Before you configure protocol
matching with NBAR, you decide first to analyze the network using NBAR protocol discovery
to validate your assumptions about the traffic currently traversing the network. After all traffic
has been properly identified, you plan to configure a new class-based marking policy to classify
and mark the applications running on the network.
Lab Guide
65
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Classification and Marking Using NBAR Lab Commands
66
Command
Description
no service-policy {input |
Removes a service policy from an input or output interface
[no] ip nbar protocoldiscovery
Configures NBAR to discover traffic for all protocols known to

NBAR on a particular interface
show ip nbar protocoldiscovery [interface

interface-spec]
Displays the statistics gathered by the NBAR protocol discovery

feature
clear ip nbar protocoldiscovery
Clears NBAR protocol discovery statistics
ip access-list {standard |
extended} access-list-name
Defines an IP access list by name
permit tcp source sourcewildcard destination

destination-wildcard
[operator [port]]
Sets conditions to allow a packet to pass a named IP access list
permit udp source sourcewildcard destination

destination-wildcard
[operator [port]]
Sets conditions to allow a packet to pass a named IP access list
Creates a class map to be used for matching packets to a

specified class
match protocol protocol-name
specified protocol
match access-group {accessgroup | name access-groupname}
specified ACL

more interfaces
Command
Description
set dscp dscp-value
Marks a packet by setting the DSCP
service-policy {input |

interface or VC


Job Aid
Task 1: Discover Applications and Traffic Using NBAR

You will discover network applications and traffic using NBAR protocol discovery.
Activity Procedure
Step 1
Disable the existing inbound service policy on the FastEthernet 0/0 interface of your
WGxR1 router.
Step 2
Verify that Cisco Express Forwarding is enabled on your WGxR1 router.
Step 3
Enable NBAR protocol discovery on the FastEthernet 0/0 interface of your WGxR1
router.
Step 4
Clear the NBAR protocol discovery counters on WGxR1.
Step 5
Lab Guide
67
Step 6
Display the NBAR protocol discovery traffic statistics of all NBAR discovered
protocols.
FastEthernet0/0
Input
Packet Count
Byte Count
5 minute bit rate (bps)
--------------- -----------------------sqlnet
157
9420
1000
citrix
201
13642
1000
http
86
13353
0
napster
98
5880
0
Protocol
Output
Packet Count
Byte Count
5 minute bit rate (bps)
-----------------------404
60678
3000
547
51549
3000
255
59838
3000
272
54727
3000
[rest omitted]
Step 7
In the space provided below, list the protocols discovered by NBAR protocol
discovery:
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
Step 8
Disable NBAR protocol discovery from the FastEthernet 0/0 interface on WGxR1.
Step 9
68
You have properly configured NBAR protocol discovery to identify network applications.
Task 2: Configure Classification Using NBAR

You will configure classification of discovered applications using NBAR classification.
Activity Procedure
Step 1
Note
On the WGxR1 router, configure NBAR classification and MQC marking to classify
inbound traffic on the FastEthernet 0/0 interface and mark it as outlined in the table
below. Completion of this lab step will require the configuration of five new class
maps (one for each service class) and the configuration of a policy map (called marknbar) that marks traffic in each class appropriately.
Remember that by default a class map is set to match all. If you are matching multiple
protocols in the same class, remember to use match-any instead of match-all.
Class Name
(class-map name)
Protocol
PHB
real-time
rtp/rtcp
EF
real-time
icmp
EF
mission-critical
sqlnet
AF 31
voice-control (port specific

tcp and udp)
interactive
citrix
AF 21
bulk
ftp
AF 11
scavenger
kazaa2
CS 1
scavenger
napster
CS 1
class-default
all others
BE
When using NBAR to match RTP packets, one limitation is that protocol matching
for RTP does not match control packets. This is somewhat of an advantage in that it is
preferred that voice bearer traffic be separated from voice control traffic because each
traffic type receives different QoS treatment (EF for voice bearer and AF31 for voice
control).
Create the following named access list for matching RTCP traffic:
ip access-list extended VoIP-RTCP
Match the named access list, VoIP-RTCP, into the real-time traffic class along with
the RTP and ICMP traffic.
Lab Guide
69
The mission-critical class should be configured to contain both the sqlnet traffic and
voice-control traffic. Use this ACL to match voice control traffic when creating the
mission-critical class on your router:
ip access-list extended Voice-Control
Note
Step 2
Recall that ICMP traffic has been placed in the real-time class as a means of measuring
QoS performance.
Display and verify your class map configuration.

Class Map match-all bulk (id 8)
Match protocol ftp
Class Map match-any real-time (id 5)
Match protocol rtp
Match protocol icmp
Match access-group name VoIP-RTCP
Class Map match-any mission-critical (id 6)
Match protocol sqlnet
Match access-group name Voice-Control
Class Map match-all interactive (id 7)
Match protocol citrix
Class Map match-any scavenger (id 9)
Match protocol kazaa2
Match protocol napster
[rest omitted]
Step 3
Display and verify your policy map configuration.

Policy Map mark-nbar
Class real-time
set dscp ef
Class mission-critical
set dscp af31
Class interactive
set dscp af21
Class bulk
set dscp af11
Class scavenger
set dscp cs1
Class class-default
set dscp default
70
Step 4
Apply the policy map to the FastEthernet 0/0 interface of your WGxR1 router in the
inbound direction.
Step 5
Step 6
Display and verify your service policy on interface FastEthernet 0/0.

FastEthernet0/0
Service-policy input: mark-nbar
Class-map: real-time (match-any)
Match: protocol rtp
5 minute rate 0 bps
Match: protocol icmp
1 packets, 70 bytes
5 minute rate 0 bps
Match: access-group name AutoQoS-VoIP-RTCP
5 minute rate 4000 bps
QoS Set
dscp ef
Packets marked 542
Class-map: mission-critical (match-any)

Match: protocol sqlnet
Match: access-group name Voice-Control
QoS Set
dscp af31
Packets marked 366
Class-map: interactive (match-all)
Match: protocol citrix
QoS Set
dscp af21
Packets marked 295
[rest omitted]
Step 7
Note
Step 8
How many packets have been matched and marked for each of the traffic classes?
Class real-time
_______________________________
_______________________________
Class interactive
_______________________________
Class bulk
_______________________________
Class scavenger
_______________________________
Class class-default
_______________________________
If the real-time, mission-critical, and scavenger classes have no matches, verify your classmap configuration to ensure they are set to match-any and not match-all.
Lab Guide
71
Step 9
How many packets have been matched and marked for each of the traffic classes?
Class real-time
_______________________________
Class interactive
_______________________________
_______________________________
Class bulk
_______________________________
Class scavenger
_______________________________
Class class-default
Step 10
_______________________________
You have correctly configured NBAR classification.
You have correctly configured class-based marking of NBAR classified traffic.
Lab 4-2 Answer Key: Classification Using NBAR

WG1R1(config)#int fa 0/0
WG1R1(config-if)#no service-policy input mark-apps
WG1R1(config-if)#ip nbar protocol-discovery
NBAR should have discovered the following protocols:

HTTP
citrix
sqlnet
napster
netbios
FTP
exchange
kazaa2
LDAP
RTP
Unknown

!
!
class-map match-all bulk
match protocol ftp
class-map match-any real-time
72
match protocol rtp

match protocol icmp
match access-group name VoIP-RTCP
class-map match-any mission-critical
match protocol sqlnet
match access-group name Voice-Control
class-map match-all interactive
match protocol citrix
class-map match-all default
match any
class-map match-any scavenger
match protocol kazaa2
match protocol napster
!
policy-map mark-nbar
class real-time
set dscp ef
class mission-critical
set dscp af31
class interactive
set dscp af21
class bulk
set dscp af11
class scavenger
set dscp cs1
class class-default
set dscp default
!
service-policy input mark-nbar
Lab Guide
73
Lab 4-3: Configuring QoS Preclassify

Complete this lab activity to practice what you learned in the lesson Configuring QoS
Preclassify in the module Classification and Marking.
Activity Objective
In this activity, you will configure and examine QoS preclassify. After completing this activity,
you will be able to meet these objectives:
Configure a GRE tunnel
Configure QoS preclassify on a Cisco IOS router using a GRE tunnel
Monitor QoS preclassify configurations
Visual Objective
The E-Commerce University IT staff has decided to implement a GRE tunnel between the
north and south campus via the existing 768-kbps Internet connection. After the GRE tunnel is
set up and working properly, IPSec will also be enabled over the GRE tunnel. At this point, the
E-Commerce University IT staff needs you to first configure and test the GRE tunnel (without
IPSec). The university plans to send different types of traffic over the tunnel and would like to
be able to differentiate between different traffic flows so that QoS can be applied. In this lab,
you will configure and verify the QoS preclassify feature for traffic classification over a GRE
tunnel.
74
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Configuring VPN QoS Lab Commands
Command
Description

identification
qos pre-classify
Enables QoS preclassification
ip cef
Enables CEF on the router
[no] shutdown

[type] [number]
Job Aid
Lab Guide
75
Task 1: Configure GRE Tunnel

You will configure a GRE tunnel.
Activity Procedure
Step 1
Verify that the S0/0 and S0/1 interfaces of your workgroup WGxR1 and WGxR2
routers are UP.
Interface
IP-Address
OK? Method Status
Protocol
FastEthernet0/0
10.3.x.2
YES NVRAM
up
up
Serial0/0
10.2.x.2
YES unset
up
Serial0/1
10.5.x.2
YES NVRAM
up
up
up
Step 2
Verify that CEF switching is still enabled on both workgroup routers in your pod.
Step 3
Configure a GRE tunnel between your WGxR1 and WGxR2 routers via the service
provider core as follows:
! WGxR1
!
interface Tunnel0
ip unnumbered fastethernet0/0
tunnel source Serial0/1
tunnel destination 10.5.x.2
! WGxR2
!
interface Tunnel0
ip unnumbered fastethernet0/0
Step 4
Configure a static route via the tunnel 0 interface to the 10.1.x.0 or 10.3.x.0 subnet
on the respective WGxR router as follows:
! WGxR1
!
ip route 10.3.x.0 255.255.255.0 Tunnel0
! WGxR2
!
ip route 10.1.x.0 255.255.255.0 Tunnel0
76
Step 5
Display the tunnel interface and verify that it is UP and operational.

WGxR2#show interface tunnel 0
Tunnel0 is up, line protocol is up
Hardware is Tunnel
Interface is unnumbered. Using address of FastEthernet0/0 (10.3.x.2)
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source 10.5.x.2 (Serial0/1), destination 10.4.x.1
Tunnel protocol/transport GRE/IP, key disabled, sequencing disabled
Tunnel TTL 255
Checksumming of packets disabled, fast tunneling enabled
Last clearing of "show interface" counters never
Queueing strategy: fifo
Output queue: 0/0 (size/max)
Step 6
Use Telnet to connect to the Callgen-1 (10.1.x.11) router and perform a traceroute to
the Callgen-2 (10.3.x.11) router. Verify that the path goes thru your GRE tunnel.
Callgen-1>traceroute 10.3.x.11
1 10.1.x.1 4 msec 0 msec 0 msec
2 10.3.x.11 140 msec * 8 msec
Step 7
Use Telnet to connect to the Callgen-2 router and perform a traceroute to the
Callgen-1 router. Verify that the path goes through your GRE tunnel.
Callgen-2>traceroute 10.1.x.11
1 10.3.x.2 60 msec 56 msec 64 msec
2 10.1.x.11 60 msec * 56 msec
Step 8
Issue the show queue serial0/1 command to display the WFQ information for the
serial 0/1 interface.
WGxR1#show queue serial0/1

Conversations
1/31/256 (active/max active/max total)

(depth/weight/total drops/no-buffer drops/interleaves) 41/32384/9269/0/0

Conversation 95, linktype: ip, length: 206
source: 10.5.8.2, destination: 10.4.8.1, id: 0xC2FA, ttl: 255, prot: 47
Lab Guide
77
You may have to run the show queue interface command a few times until you catch an
active flow. If you are not able to see packets in the queue after several attempts, log onto
your other workgroup router and repeat Step 8.
Note
How many active flows does the router see? ____________________________

Notice that when QoS preclassify is not configured, the output interface sees only one flow,
which is Protocol 47 (GRE).
You have successfully configured a tunnel interface between WGxR1 and WGxR2 through
the service provider backbone.
Task 2: Configure QoS Preclassify

You will configure QoS preclassify on a Cisco IOS router.
Activity Procedure
Complete this step:
Step 1
Configure the QoS preclassify feature on the tunnel interface.
78
You have successfully enabled the QoS preclassify feature on the tunnel interface.
Task 3: Monitor QoS Preclassify

You will monitor QoS preclassify operations.
Activity Procedure
Step 1
Issue the show queue serial0/1 command again to display the WFQ information for
the serial 0/1 interface.
WGxR1#show queue serial0/1

Conversations
21/31/256 (active/max active/max total)


source: 10.1.1.10, destination: 10.3.1.10, id: 0xFF4C, ttl: 254,
TOS: 104 prot: 6, source port 1063, destination port 1521

source: 10.1.1.10, destination: 10.3.1.10, id: 0xE642, ttl: 127,

source: 10.1.1.10, destination: 10.3.1.10, id: 0x908A, ttl: 126,
<output omitted>
Note
You may have to run the show queue interface command a few times until you catch some
active flows.
What happens when QoS preclassify is configured on the tunnel interface?

________________________________________________________________
Can WFQ now distinguish between different application flows? Or does WFQ still only see
one flow, protocol 47 (GRE)?
___________________________________________________________________
Lab Guide
79
Step 2
On the WGxR1 and WGxR2 routers, remove the static route via the tunnel interface.
Step 3
switch to the startup-config in NVRAM.
You have successfully examined the difference in traffic flows with and without the QoS
preclassify feature enabled.
Lab 4-3 Answer Key: Configuring QoS Preclassify

WGxR1:
interface Tunnel0
ip unnumbered FastEthernet0/0
qos pre-classify
!
ip route 10.3.x.0 255.255.255.0 Tunnel0
WGxR2:
interface Tunnel0
qos pre-classify
!
ip route 10.1.x.0 255.255.255.0 Tunnel0
What happens when QoS preclassify is configured on the tunnel interface?
The original packet headers are visible to the tunnel 0 interface and therefore useable for
QoS manipulation.
Can WFQ now distinguish between different application flows? Or does WFQ still only see
one flow, protocol 47 (GRE)?
Multiple flows are now visible.
80
Lab 4-4: LAN-Based Packet Classification and

Marking
Complete this lab activity to practice what you learned in the lesson Configuring LAN
Classification and Marking in the module Classification and Marking.
Activity Objective
In this activity, you will configure LAN-based classification and marking. After completing
Configure a trust boundary on a Catalyst 2950 switch to only trust Cisco IP Phones
Configure CoS-to-DSCP mapping on a Catalyst 2950 switch
Configure IP access lists and class-based marking on a Catalyst 2950 switch to mark traffic
Verify the QoS markings from the workgroup switch using the workgroup routers
Visual Objective
Your research into classification and marking policy has you concerned that students might
inject their traffic into the network with CoS and DSCP markings that are not in accordance
with the new QoS policy. Not forgetting the QoS requirements of the Cisco IP Phones
connected in the wiring closet, you decide to establish a trust boundary that extends to these IP
phones.
Lab Guide
81
In addition, you also wish to classify and mark traffic as close to the source as possible.
Studying the default CoS-to-DSCP marking maps on your Catalyst 2950 switches, you discover
that CoS 5 (which is set in your IP Phone endpoints automatically) is currently mapped to
DSCP 40. You would like this to map to EF (DSCP 46) and decide to change the default CoSto-DSCP mapping in your Catalyst 2950 switches.
Another issue is that the network also contains IP voice gateway devices that generate G.711
voice traffic, but cannot mark CoS or DSCP. You will have to implement classification and
marking at your trust boundary using access lists to accommodate these voice gateways.
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
LAN Based Packet Classification and Marking Lab Commands
82
Command
Description
mls qos trust [cos | device

cisco-phone | dscp]
Configures the port trust state
switchport priority extend

{cos value | trust}
Sets a port priority for the incoming untagged frames or the

priority of frames received by the IP Phone connected to the
specified port
mls qos map {cos-dscp

dscp1...dscp8 | dscp-cos
dscp-list to cos}
Defines the CoS-to-DSCP map or DSCP-to-CoS map
access-list access-listnumber {deny | permit | remark} {source sourcewildcard | host source |

any}
Configures a standard IP ACL
Creates a class map to be used for matching packets to the

class whose name you specify
match {access-group aclindex | access-group name

acl-name | ip dscp dscplist}
Defines the match criteria to classify traffic
Creates or modifies a policy map that can be attached to

multiple interfaces
Command
Description
set ip dscp new-dscp
Classifies IP traffic by setting a DSCP value
service-policy input policymap-name
Applies a policy map defined by the policy-map command to

the input of a particular interface
show access-lists [name |

number]
Displays ACLs configured on the switch
Displays QoS class maps
show policy-map [policy-mapname]
Displays QoS policy maps
show mls qos maps [cos-dscp

| dscp-cos]
Displays QoS mapping information
show mls qos interface

[interface-id]
Displays QoS information at the interface level
Job Aid
Task 1: Configure Trust Boundary

You will configure a trust boundary on a Catalyst 2950 switch to only trust Cisco IP Phones.
Activity Procedure
Complete this step:
Step 1
Assuming there is a Cisco IP Phone connected to your workgroup WGxS1 switch

FastEthernet 0/1 port, establish a trust boundary on your workgroup WGxS1 switch
FastEthernet 0/1 interface by setting your workgroup WGxS1 switch FastEthernet
0/1 interface to only trust CoS from the Cisco IP Phone.
Note
Because there is not a Cisco IP Phone connected to your workgroup switch in the lab, all the
incoming frames will have the CoS value set to the default port CoS of 0 by your workgroup
switch.
You have properly configured a trust boundary on the WGxS1 switch to only trust Cisco IP
Phones.
Lab Guide
83
Task 2: Configure CoS-to-DSCP Mapping

You will configure CoS-to-DSCP mapping on a Catalyst 2950 switch.
Activity Procedure
Step 1
Display the default CoS-to-DSCP mapping on your workgroup WGxS1 switch.

Dscp-cos map:
dscp:
0 8 10 16 18 24 26 32 34 40 46 48 56
--------------------------------------cos:
0 1 1 2 2 3 3 4 4 5 5 6 7
Cos-dscp map:
cos:
0 1
2
3
4 5
6
7
-----------------------------dscp:
0 8 16 24 32 40 48 56
What is the default mapping of CoS 5?

CoS 5 = DSCP _____
What is the DSCP PHB represented by the default mapping of CoS 5 on the Catalyst 2950?
___________________________________________
Step 2
Notice from Step 2 that the Catalyst 2950 default CoS-to-DSCP mapping does not
map CoS 5 to DSCP 46.
On your WGxS1 switch, change the default CoS-to-DSCP mapping to map CoS 5 to DSCP 46,
because the downstream devices are expecting voice (CoS 5) traffic to be marked with DSCP
46 (EF). All other CoS-to-DSCP mappings can remain at their default values.
Step 3
Display and verify the new CoS-to-DSCP mapping on your workgroup WGxS1
switch. Verify that CoS 5 is now being mapped to DSCP 46.
Dscp-cos map:
dscp:
0 8 10 16 18 24 26 32 34 40 46 48 56
--------------------------------------cos:
0 1 1 2 2 3 3 4 4 5 5 6 7
Cos-dscp map:
cos:
0 1
2
3
4 5
6
7
-----------------------------dscp:
0 8 16 24 32 46 48 56
84
You have properly configured the CoS-to-DSCP mapping on WGxS1 to map CoS 5 to
DSCP 46.
Task 3: Configure IP Access Lists and Class-Based Marking

You will configure IP access lists and class-based marking on a Catalyst 2950 switch to mark
traffic.
Activity Procedure
Step 1
Assume that the Callgen routers (10.1.x.11 and 10.3.x.11) are the voice gateways
described earlier and the Callgen routers are not marking voice traffic with DSCP 46
(EF).
On your WGxS1 switch, create a policy map called mark-callgen, which uses two
access lists and class-based marking to mark all the traffic from the Callgen routers
(10.1.x.11 and 10.3.x.11) to DSCP 46 (EF). Name the two new service classes
callgen1 and callgen2.
Apply your class-based marking policy to the FastEtherent 0/1 interface on your
WGxS1 switch in the inbound direction.
Step 2
Display and verify your IP access-list configuration.

Standard IP access list 1
permit 10.1.x.11
Standard IP access list 2
permit 10.3.x.11
Step 3
Display and verify your class-map configuration.

Match any
Class Map match-all callgen1 (id 2)
Class Map match-all callgen2 (id 3)
Step 4
Display and verify the configuration of your class-based marking policy.

Policy Map mark-callgen
class callgen1
set ip dscp 46
class callgen2
set ip dscp 46
Step 5
Display and verify that your service policy is properly applied to the Fa0/1 interface
in the inbound direction, and also verify the trust setting and the default CoS value.
FastEthernet0/1
Attached policy-map for Ingress: mark-callgen
trust state: not trusted
trust mode: trust cos
COS override: dis
default COS: 0
pass-through: none
trust device: cisco-phone
Lab Guide
85
You have correctly configured IP access lists and class-based marking on WGxS1 to mark
traffic from the Callgen routers DSCP 46.
Task 4: Verify QoS Markings

You will verify the QoS markings from the workgroup switch using the workgroup routers.
Activity Procedure
Step 1
To verify that the Catalyst 2950 classification and marking configuration is working
correctly, you will configure a class map on your workgroup router to count marked
packets. These verification steps should be performed on both workgroup routers
WGxR1 and WGxR2.
Step 2
On WGxR1, configure a new class map called match-sw-ef to match DSCP 46

traffic from the WGxS1 switch.
Step 3
On WGxR1, configure a second new class map called match-sw-be to match DSCP
0 traffic from the WGxS1 switch.
Step 4
Display and verify the two new class maps configured on WGxR1.
Class Map match-all match-sw-ef (id 4)
Match ip dscp ef
Class Map match-all match-sw-be (id 5)
Match ip dscp default
Match any
Step 5
Configure a new policy map called verify-mark on WGxR1, which contains the two
new traffic classes, match-sw-ef and match-sw-be.
Step 6
Display and verify the policy-map configuration on WGxR1.

Policy Map verify-mark
Class match-sw-ef
Class match-sw-be
Step 7
Caution
Step 8
86
Disable the existing inbound service policy on the FastEthernet 0/0 interface of
WGxR1.
Do not remove the actual policy map, which contains the real-time, mission-critical,
interactive, bulk, and scavenger traffic classes, as you will use this policy map in later labs.
Apply the new verify-mark policy to the FastEthernet 0/0 interface of WGxR1 in
the inbound direction.
Step 9
Display and verify that the policy map is being applied correctly on the FastEthernet
0/0 interface.
FastEthernet0/0
Service-policy input: verify-mark
Class-map: match-sw-ef (match-all)
5 minute offered rate 0 bps
Match: ip dscp ef
Class-map: match-sw-be (match-all)
5 minute offered rate 26000 bps
Match: ip dscp default
0 packets, 0 bytes
Match: any
How many packets have been matched for each of the traffic classes?
Traffic Class
WGxR1
WGxR2
match-sw-ef
match-sw-be
default
Step 10
Repeat Steps 1 through 9 for router WGxR2.
Step 11
Remove the inbound service policy from the FastEthernet 0/0 interface on both the
WGxR1 and WGxR2 routers.
Step 12
You have correctly verified the QoS markings from WGxS1 by configuring a QoS policy
on WGxR1 and WGxR2 to count marked packets.
Lab Guide
87
Lab 4-4 Answer Key: LAN-Based Packet Classification and

Marking
class-map match-all callgen2
match access-group 2
!
!
policy-map mark-callgen
class callgen1
set ip dscp 46
class callgen2
set ip dscp 46
!
!
service-policy input mark-callgen
mls qos trust device cisco-phone
mls qos trust cos
!
access-list 1 permit 10.1.1.11
88
Lab 5-1: Configuring Basic Queuing

Complete this lab activity to practice what you learned in the lesson Configuring FIFO and
WFQ of the module Congestion Management.
Activity Objective
In this activity, you will configure WFQ on a router to improve QoS. After completing this
activity, you will be able to meet these objectives:
Configure FIFO queuing on Cisco routers
Configure WFQ on Cisco routers
Use the proper show commands to monitor and verify the WFQ operation
Visual Objective
Once the proper classification and marking are implemented, the next step in completing the ECommerce University QoS policy is to implement queuing mechanisms. Being an adventurous
network engineer, and to gain a better understanding of the various queuing mechanisms, you
decide to first explore two of the more basic queuing methods: FIFO and WFQ.
Lab Guide
89
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Configuring Basic Queuing Lab Commands
Command
Description
shutdown
show interfaces [type

number]
Displays statistics for all interfaces configured on the router or

access server

identification
[no]fair-queue [congestivediscard-threshold [dynamicqueues [reservable-queues]]]
Enables WFQ for an interface
clear counters
show queue interface-name

interface-number
Displays the contents of packets inside a queue for a particular

interface
Job Aid
90
Task 1: Configure FIFO Queuing

You will configure FIFO queuing on Cisco routers.
Activity Procedure
Step 1
Knowing that the S0/0 interface on WGxR1 is 384 kbps, what will be the default
queuing mechanism? _____________________________________________
Step 2
Verify your answer by displaying the current queuing mechanism on the S0/0
interface of WGxR1.
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
Step 3
Disable WFQ on the serial 0/0 interface of the WGxR1 and WGxR2 routers.
Which queuing method is S0/0 using now after WFQ was disabled?
_________________________________________________
Step 4
Display the current queuing mechanism on the workgroup WGxR1 router S0/0
interface to verify your answer.
Queueing strategy: fifo
Output queue: 18/40 (size/max)
Lab Guide
91

Step 5
Perform an extended ping from WGxR1 to WGxR2 using a repeat count of 100 and
a size of 160 bytes and record the results in the table at the end of this lab.
WGxR1#ping
Protocol [ip]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!
Step 6
end of this lab.
Step 7
Repeat Steps 5 and 6, but ping from WGxR2 to WGxR1 serial 0/0 interface and
Step 8
What are some disadvantages of using FIFO queuing for the voice and missioncritical traffic? ___________________________________________________
You have successfully configured FIFO queuing on WGxR1 and WGxR2.
Task 2: Configure WFQ

You will configure WFQ on Cisco routers.
Activity Procedure
Complete this step:
Step 1
Reenable WFQ on the serial 0/0 interface of both WGxR1 and WGxR2. Use the
default congestion discard threshold and the default maximum conversations.
92
You have successfully configured WFQ on WGxR1 and WGxR2.
Task 3: Monitor and Verify WFQ

You will use the proper show commands to monitor and verify the WFQ operation.
Activity Procedure
Step 1
Display the interface statistics of the serial 0/0 interface.

Received 0 broadcasts, 0 runts, 0 giants, 0 throttl
22:46:55: %SYS-5-CONFIG_I: Configured from console by consolees
Step 2
What is the default CDT?

___________________________________________________________
Step 3
What is the default number of maximum conversations on the S0/0 interface?

___________________________________________________________
Step 4
Change the maximum number of conversations on the S0/0 interface of WGxR1 and
WGxR2 to 1024.
Step 5
Display the interface statistics of the serial 0/0 interface and verify that the
maximum conversations have been correctly changed.
Lab Guide
93

Received 0 broadcasts, 0 runts, 0 giants, 0 thrott
22:50:00: %SYS-5-CONFIG_I: Configured from console by consoleles
Step 6
What is a benefit of increasing the maximum conversations?

________________________________________________________
Step 7
Clear the interface counters on your WGxR1 and WGxR2 routers.
Step 8
Examine the active dynamic queues set up by WFQ. You may only see flows on one
of your workgroup routers because of the traffic flow patterns between the Pagent-1
and Pagent-2 routers.
source: 10.1.1.10, destination: 10.3.1.10, id: 0xFF4C, ttl: 254,
source: 10.1.1.10, destination: 10.3.1.10, id: 0xE642, ttl: 127,
source: 10.1.1.10, destination: 10.3.1.10, id: 0x908A, ttl: 126,
How many packets have been dropped? _________________________

What is the number of active conversations? _____________________
What is the number of maximum active conversations? _____________
What is the maximum number of total conversations? ______________
What is the available bandwidth and how is it calculated?
_____________________________________________________________
What is the significance of the weight in these conversations?
_____________________________________________________________
What factor or factors can influence the weight? ____________________________
94
You have examined WFQ router parameters and monitored command output and
successfully answered the questions contained in this lab exercise.
Task 4: Gather Network Response Time Data

Activity Procedure
Step 1
WGxR1#ping
Protocol [ip]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!
Step 2
end of this lab.
Step 3
Did the ping response time improve compared to when FIFO was the queuing
method? _________________________________________________________
Step 4
WGxR1 RTT Measurement Worksheet

Network Situation
Ping 1 RTT
(min/ave/max)
Ping 2 RTT
(min/ave/max)
Ping 3 RTT
(min/ave/max)
Before Pagnet / Callgen traffic

(from 2-2: Baseline QoS
Measurement)
After Pagnet and Callgen traffic
Measurement)
After enabling Auto-QoS (from 3-1:
Configuring QoS with AutoQoS)
FIFO (from 5-1: Configuring Basic
Queuing)
WFQ (from 5-1: Configuring Basic
Queuing)
Lab Guide
95

Network Situation
Ping 1 RTT
(min/ave/max)
Ping 2 RTT
(min/ave/max)
Ping 3 RTT
(min/ave/max)

Measurement)
Measurement)
Queuing)
Queuing)
You have compared the round-trip response times for packets traversing a serial interface
using FIFO queuing to an interface using WFQ.
Lab 5-1 Answer Key: Configuring Basic Queuing

Sample WGxR1 RTT Measurement Worksheet
Network Situation
96
Ping 1 RTT
(min/ave/max)
Ping 2 RTT
(min/ave/max)
Ping 3 RTT
(min/ave/max)

Measurement)
8/8/12
8/8/12
8/9/16

Measurement)
8/43/120
16/42/116
12/43/112

32/54/88
32/53/88
32/54/88

Queuing)
28/122/265
44/129/228
28/131/249

Queuing)
12/46/128
16/48/188
12/43/121
Knowing that the S0/0 interface on WGxR1 is 384 kbps, what will be the default queuing
mechanism?
Weighted fair queuing
Which queuing method is S0/0 using now after WFQ was disabled?
First-in, first-out (FIFO)
What are some disadvantages of using FIFO queuing for voice and mission-critical traffic?
Smaller packets can suffer excessive delay and variable delay waiting in a FIFO queue
behind larger data packets. Aggressive flows can also starve fragile flow types like voice
and interactive traffic.
What is the default CDT?
64
What is the default number of maximum conversations on the S0/0 interface?
128
What is a benefit of increasing the maximum conversations?
The probability that two distinct flows will be classified into the same dynamic queue is
reduced.
What is the available bandwidth and how is it calculated?
Available bandwidth in this case is 288 kbps. Available bandwidth is calculated as 75
percent of the configured interface bandwidth.
What is the significance of the weight in these conversations?
Weight is used by WFQ to reduce the finish time of queued packets, making them appear
smaller than they are to WFQ. This results in faster dispatching of lower weighted
packets.
What factor(s) can influence the weight?
IP precedence or DSCP class selector markings can influence WFQ weight.
Lab Guide
97
Lab 5-2: Configuring LLQ

Complete this lab activity to practice what you learned in the lesson Configuring CBWFQ and
LLQ in the module Congestion Management.
Activity Objective
In this activity, you will configure LLQ on a router to improve QoS. After completing this
Configure LLQ on a Cisco router to provide bandwidth guarantees
Use the proper show commands to monitor and verify the LLQ operation
Visual Objective
In Lab Exercise 5-1, you examined both FIFO queuing and WFQ.
FIFO is a first-come, first-serve queuing strategy. As such, FIFO does not classify traffic into
different flows, or provide differentiated treatment to packets. FIFO does not fairly allocate
bandwidth among multiple flows. Some flows may receive more bandwidth because they
contain larger packets, or because they send more packets (aggressive flows). FIFO does not
give priority to voice traffic or mission-critical traffic, because it cannot differentiate between
packets from different flows. Therefore, if FIFO is implemented on the serial WAN links, the
configuration will not meet the E-Commerce University requirements for the voice and Oracle
(SQL) traffic.
98
After FIFO queuing, WFQ was enabled on the workgroup routers. With WFQ, packets are
automatically classified into a particular dynamic queue based on information contained within
the protocol headers. WFQ automatically assigns a weight to the packets. The weight is based
on the IP precedence value and the size of the packets. Higher IP precedence and smaller-sized
packets will receive better service than lower IP precedence and larger-sized packets. However,
WFQ does not provide any hard bandwidth guarantees to voice traffic or to mission-critical
traffic. From the traffic measurement results (RTT observations), it was determined that WFQ
provided too much latency for EF traffic types. Therefore, in order to improve voice quality and
the response time of mission-critical traffic, LLQ must be implemented on the workgroup
routers.
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Configuring Queuing Hybrids Lab Commands
Command
Description
Creates a class map to be used for matching packets to the class

whose name you specify
match {access-group aclindex | access-group name

acl-name | ip dscp dscplist}
Defines the match criteria to classify traffic
match [ip] dscp dscp-value
Identifies a specific IP DSCP value as a match criterion
specified protocol
Creates or modifies a policy map that can be attached to multiple

interfaces
set ip dscp new-dscp
Classifies IP traffic by setting a DSCP value
priority{bandwidth-kbps |
percent percentage} [burst]
Gives priority to a class of traffic belonging to a policy map
Lab Guide
99
Command
Description
bandwidth {bandwidth-kbps |
remaining percent percentage
| percent percentage}
Specifies or modifies the bandwidth allocated for a class

belonging to a policy map
service-policy input policymap-name
Applies a policy map defined by the policy-map command to the

input of a particular interface
access-list access-listnumber {deny | permit} tcp

src src-wildcard [operator
[port]] dest dest-wildcard
[operator [port]]
Defines an extended IP access list for TCP-based traffic
show access-lists [accesslist-number | access-listname]
Displays the contents of current access lists


Job Aid
100
Task 1: Configure LLQ

You will configure LLQ on a Cisco router to provide bandwidth guarantees.
Activity Procedure
Step 1
Connect to your WGxR1 router and verify that the QoS policy map named marknbar is still configured. Apply the existing mark-nbar policy map to the FastEthernet
0/0 interface in the inbound direction. If you do not have the mark-nbar policy, it is
shown below:
match protocol rtp
match protocol icmp
class-map interactive
class-map bulk
match protocol ftp
!
class real-time
set ip dscp ef
set ip dscp af31
class interactive
set ip dscp af21
class bulk
set ip dscp af11
class scavenger
set ip dscp cs1
Step 2
At this point, what is the expected effect on traffic flow out of the low-speed 384kbps serial link (S0/0) when the mark-nbar service policy is applied on the
FastEthernet 0/0 interface of WGxR1 router? Explain.
____________________________________________________________________
Lab Guide
101
Step 3
Step 4
Configure five new class maps on your workgroup WGxR1 router as described in
this table. When matching ICMP traffic, use an extended ACL instead of NBAR,
because NBAR only matches transit traffic.
Class Name (class
map name)
Match Criteria
ef-traffic
EF, ICMP echo and reply
af31-traffic
AF 31
af21-traffic
AF 21
af11-traffic
AF 11
cs1-traffic
CS 1
Display and verify your extended IP access list for matching the ping traffic.
10 permit icmp any any echo-reply (100 matches)
20 permit icmp any any echo
Step 5
Display and verify the five new class maps configured on your workgroup WGxR1
router.
Class Map match-any ef-traffic (id 10)
Match
dscp ef
Class Map match-all af21-traffic (id 12)

Match
dscp af21

Match
dscp af31

Match
dscp af11
Class Map match-all cs1-traffic (id 14)

Match
102
dscp cs1
Step 6
Configure a new policy map called llq-policy on your workgroup WGxR1 router, in
which each traffic class gets the following bandwidth guarantee:
Traffic Class
Bandwidth Guarantee
ef-traffic
168 kbps maximum
af31-traffic
40% of remaining bandwidth minimum
af21-traffic
af11-traffic
cs1-traffic
class-default
You have configured LLQ on a Cisco router to provide bandwidth guarantees.
Task 2: Monitor and Verify LLQ Operation

You will use the proper show commands to monitor and verify the LLQ.
Activity Procedure
Step 1
Display and verify the llq-policy policy map on your workgroup WGxR1 router.
Policy Map llq-policy
Class ef-traffic
Strict Priority
Bandwidth 168 (kbps) Burst 4200 (Bytes)
Class af31-traffic
Bandwidth remaining 40 (%) Max Threshold 64 (packets)
Class af21-traffic
Class af11-traffic
Class cs1-traffic
Class class-default
Step 2
Apply the new llq-policy policy map on your workgroup WGxR1 router S0/0
interface in the outbound direction.
Why must the policy be applied in the outbound direction and not the inbound
direction? Explain. _______________________________________________
Step 3
Repeat the above LLQ configuration, Task 1 Steps 1 through 6 and Task 2 Steps 1
and 2, for the WGxR2 router.
Step 4
Lab Guide
103
Step 5
Display and verify the outbound service policy on your workgroup WGxR1 router
S0/0 interface.
Serial0/0
Service-policy output: llq-policy
Class-map: ef-traffic (match-any)
Match: dscp ef
0 packets, 0 bytes
5 minute rate 0 bps
Queueing
Strict Priority
Output Queue: Conversation 136
(pkts matched/bytes matched) 332/66452
(total drops/bytes drops) 0/0
Class-map: af31-traffic (match-all)
Match: dscp af31
Queueing
(depth/total drops/no-buffer drops) 19/0/0
Match: dscp af21
Queueing
Match: dscp af11
Queueing
Class-map: cs1-traffic (match-all)
Match: dscp cs1
Queueing
Match: any
Queueing
Which traffic class or classes, if any, still have drops? _____________

104
Step 6
Display and verify the outbound service policy on your workgroup WGxR2 router
S0/0 interface.
Which traffic class or classes, if any, still have drops? _____________
You have used the proper show commands to monitor and verify LLQ operation.
Task 3: Gather Network Response Time Data

Activity Procedure
Step 1
WGxR1#ping
Protocol [ip]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!
Step 2
end of this lab.
Step 3
Step 4
Compare the ping results to the results from the previous lab exercises (2-2: Baseline
QoS Measurement; 3-1: Configuring QoS with AutoQoS).
Comparing all the results, which QoS mechanism provides the best response time
for VoIP packets? __________________________________________
Step 5
Lab Guide
105

Network Situation
Ping 1 RTT
(min/ave/max)
Ping 2 RTT
(min/ave/max)
Ping 3 RTT
(min/ave/max)
Ping 2 RTT
(min/ave/max)
Ping 3 RTT
(min/ave/max)
Before Pagnet / Callgen traffic (from

2-2: Baseline QoS Measurement)
Measurement)
Queuing)
Queuing)
LLQ results from this lab

Network Situation
Ping 1 RTT
(min/ave/max)

Measurement)
Queuing)
Queuing)
You have used Cisco IOS monitoring commands and network connectivity tools (ping) to
gather network response time data.
106
Lab 5-2 Answer Key: Configuring LLQ

access-list 100 permit icmp any any echo
access-list 100 permit icmp any any echo-reply
class-map match-any
match dscp ef
match access-group
class-map match-all
match dscp af21
class-map match-all
match dscp af31
class-map match-all
match dscp af11
class-map match-all
match dscp cs1
class-map match-all
match any
ef-traffic
100
af21-traffic
af31-traffic
af11-traffic
cs1-traffic
class-default
!
policy-map llq-policy
class ef-traffic
priority 168
class af31-traffic
bandwidth remaining
class af21-traffic
bandwidth remaining
class af11-traffic
bandwidth remaining
class cs1-traffic
bandwidth remaining
class class-default
bandwidth remaining
percent 40
percent 20
percent 13
percent 2
percent 25
!
interface Serial0/0
service-policy output llq-policy
Sample WGxR1 RTT Measurement Worksheet

Network Situation
Ping 1 RTT
(min/ave/max)
Ping 2 RTT
(min/ave/max)
Ping 3 RTT
(min/ave/max)

8/8/12
8/8/12
8/9/16

Measurement)
8/43/120
16/42/116
12/43/112

32/54/88
32/53/88
32/54/88

Queuing)
28/122/265
44/129/228
28/131/249

Queuing)
12/46/128
16/48/188
12/43/121
8/17/72
8/17/56
8/19/77
Lab Guide
107
The following is the answer to the question in this lab exercise:

Comparing all the results, which QoS mechanism provided the best response time for VoIP
packets?
LLQ
108
Lab 5-3: Configuring Queuing on a Catalyst

Switch
Complete this lab activity to practice what you learned in the lesson Configuring LAN
Congestion Management in the module Congestion Management.
Activity Objective
In this activity, you will configure the two queuing methods available on the Catalyst 2950
switch. After completing this activity, you will be able to meet these objectives:
Examine queuing configurations resulting from the application of AutoQoS on the Catalyst
2950 switch
Configure and monitor CoS-to-queue mapping on the Catalyst 2950 switch
Configure and monitor WRR queuing on the Catalyst 2950 switch
Visual Objective
After reviewing the AutoQoS output on the Catalyst 2950 switch, the E-Commerce University
IT staff has a few questions about the AutoQoS-generated configurations. After meeting with
the IT staff and hopefully answering all questions, the IT staff has decided to change the default
Catalyst 2950 queuing from PQ to WRR with an expedite queue so that only voice (CoS 5)
frames will receive strict priority, while giving frames with CoS 0 to 4 a lower weight than
frames with CoS 6 to 7.
Lab Guide
109
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Queuing on Catalyst Switches Lab Commands
Command
Description
show wrr-queue cos-map
Displays the mapping of the CoS PQs
wrr-queue bandwidth
weight1...weight4
Assigns WRR weights to the four CoS priority queues
Sets the CoS map to default setting
wrr-queue cos-map quid

cos1...cosn
Assigns CoS values to the CoS priority queues.

quid: The queue ID of the CoS priority queue
cos1...cosn: The CoS values that are mapped to the queue ID
mls qos map cos-dscp

dscp1...dscp8
Defines the CoS-to-DSCP map
mls qos trust [cos | device

cisco-phone | dscp]
Configures the port trust state
show wrr-queue bandwidth
Displays the WRR bandwidth allocation for the four CoS priority
queues
Job Aid
110
Task 1: Queuing Configurations on the Catalyst 2950 Switch

You will examine queuing configurations resulting from the application of AutoQoS on the
Catalyst 2950 switch.
Activity Procedure
Step 1
In this lab, you will first examine the default PQ on the Catalyst 2950 workgroup
switch. Then you will configure and examine WRR on the Catalyst 2950 workgroup
switch.
What is the default queuing mechanism on the Catalyst 2950 switch?
_______________________________________________________
Step 2
Connect to your WGxS1 switch and display the CoS-to-queue mapping. Your output
should look similar to the following:
CoS Value
:
Priority Queue:
0
1
1
1
2
2
3
2
4
3
5
3
6
4
7
4
How many output queues per interface are available for the Catalyst 2950? _______
Which queue has the highest priority? __________________
Step 3
In Lab Exercise 3-1, Configuring QoS with AutoQoS, the AutoQoS for VoIP feature
was enabled on the Catalyst 2950 switch in your workgroup. By default, AutoQoS
enables queuing as shown in the following configuration:
WGxS1#show auto qos
!
mls qos trust cos
Step 4
What type of queuing is enabled using the above configuration? _____________
Step 5
From the wrr-queue bandwidth 20 1 80 0 command, why is the weight for queue
#4 equal to 0? __________________________________________________
Step 6
What do the following commands accomplish?

________________________________________________________________
Lab Guide
111
112
You have examined queuing configurations resulting from the application of AutoQoS on
the Catalyst 2950 switch.
Task 2: Configure and Monitor CoS-to-Queue Mapping

You will configure and monitor CoS-to-queue mapping on the Catalyst 2950 switch.
Activity Procedure
Complete this step:
Step 1
On the WGxS1 switch, implement WRR queuing as follows:

Configure a PQ that services all frames marked CoS 5.
Configure WRR queue 3 to service all frames marked CoS 6 and CoS 7 and
guarantee a bandwidth of 70.
Configure WRR queue 1 to service all frames marked CoS 0 to CoS 4 and guarantee
a bandwidth of 30.
WRR queue 2 is unused and should be configured as such.
You have configured and monitored CoS-to-queue mapping on the Catalyst 2950 switch.
Task 3: Configure and Monitor WRR Queuing

You will monitor WRR queuing on the Catalyst 2950 switch.
Activity Procedure
Step 1
Display and verify that CoS-to-queue mapping has been correctly configured and the
frames marked CoS 5 are serviced by the PQ.
CoS Value
Step 2
Priority Queue:
Display and verify the weight setting for each queue.

WRR Queue:
bandwidth:
30
70
Step 3
Configure the FastEthernet 0/1 interface on WGxS1 to trust the CoS marking.
Step 4
Ensure that DSCP EF is marked 46 for incoming frames marked CoS 5.
Step 5
You have monitored WRR queuing on the Catalyst 2950 switch.
Lab Guide
113
Lab 5-3 Answer Key: Queuing on Catalyst Switches

wrr-queue
wrr-queue
wrr-queue
wrr-queue
bandwidth
cos-map 1
cos-map 3
cos-map 4
30 1 70 0
0 1 2 3 4
6 7
5
What is the default queuing mechanism on the Catalyst 2950 switch?
Priority queuing
How many output queues per interface are available for the Catalyst 2950?
Four
Which queue has the highest priority?
Queue 4
What type of queuing is enabled using the following configuration?
WGxS1#show auto qos
!
mls qos trust cos
WRR with an expedite queue

From the wrr-queue bandwidth 20 1 80 0 command, why is the weight for queue 4 equal to
0?
Setting the weight of queue 4 to 0 configures queue 4 as a strict priority queue, also
known as an expedite queue.
What do the following commands accomplish?
These commands map frames with CoS values to specific output queues.
114
Case Study 6-1: WRED Traffic Profiles

This case study enables you to practice the skills and knowledge learned in the module:
Congestion Avoidance.
Activity Objective
In this activity, you will create the appropriate WRED traffic profile to properly implement a
customer QoS administrative policy. After completing this activity, you will be able to meet
these objectives:
Identify the service classes required to implement the policy
Create WRED traffic profiles that can be used to implement the policy
Visual Objective
Visual Objective for Case Study 6-1:

WRED Traffic Profiles
3. Create WRED traffic profiles. Create the WRED traffic profiles
required to properly implement the administrative QoS policy.
4. Present Your Solution. After the instructor presents a solution to
partner.
QoS v2.229
Required Resources
These are the resources required to complete this activity:
Case Study Activity: WRED Traffic Profiles
Lab Guide
115
QoS Administrative Policy Requirements

This case study activity provides information regarding the QoS administrative policy
requirements of a small- to mid-sized network. Your task is to work with a partner to evaluate
the QoS requirements, and, based on these requirements, create WRED traffic profiles that you
can use to implement the required QoS administrative policy. You will discuss your traffic
profile with the instructor and other classmates, and the instructor will present a solution for the
case study to the class.
Task 1: Creating WRED Traffic Profiles

Complete this step:
Step 1
Review customer QoS requirements. Completely read the customer requirements

provided.
Review Customer QoS Requirements

This case study involves analyzing an administrative QoS policy of LCR Incorporated, a
fictitious manufacturer of recumbent bicycles. The company has provided you with a short
description of their requirements. It is your task to provide the network engineers from LCR
with a QoS solution to meet their requirements.
Read the customer requirements and discuss them with your partner. Identify the different
classes of service required and hence the number of WRED traffic profiles required to solve
this customer problem.
Company Background
LCR Incorporated began making recumbent bicycles in the garage of its owner, Patrick
Cagney, in 1984. Since that time, the company has grown to be a global provider of recumbent
bicycles. Headquartered in St. Petersburg, Florida, LCR has two manufacturing facilities and
five sales offices in the United States.
Each site uses dedicated 100-Mb switching to the desktop and contains a distributed server
farm. Each site connects over a private WAN connection to the corporate headquarters using an
IP-enabled Frame Relay service from a global service provider. WAN link speeds are all T1
(1.544 Mbps).
Customer Situation
LCR Incorporated is currently experiencing application performance problems and has an
urgent need to resolve them. Internet usage at LCR is extremely high because most of the sales
and customer contacts of the company use the Internet. The company currently has redundant,
3-Mbps Internet connections at its headquarters. Much of the use of the Internet, however, is
for non-business-critical applications. Therefore, Internet browsing and non-critical
applications should be treated as the lowest priority.
116
Many of the applications at LCR, such as Oracle and Citrix, are distributed between sites
because they require collaboration between members of the LCR staff. Manufacturing and
Finance use Oracle databases to manage inventory, shipping, order entry, and customer billing.
These systems are integrated across the company and reside in the main data center at the
headquarters location. Citrix is heavily used for quality assurance monitoring of manufacturing
and its automated systems. LCR has indicated that the Oracle and Citrix transactions are critical
to the company. Internet traffic should not be allowed to interfere with Oracle or Citrix
transactions.
Working with the network engineering staff at LCR and the service provider, you have been
enlisted to assist LCR by defining QoS requirements for their network. Their first priority is to
deploy active congestion management mechanisms across the provider backbone to ease the
congestion issues they are experiencing.
Step 2
Identify QoS service class requirements. With the aid of your partner, identify the
service classes required to implement the administrative QoS policy based on
customer requirements.
Identify QoS Service Class Requirements

Identify the different traffic classes required to implement the customer administrative QoS
policy. Use the table below to help you with your answer choices. Write your answers on the
lines below:
Customer Traffic: _______________________ PHB: ____________ DSCP: ____________
Lab Guide
117
QoS Service Classes

PHB
DSCP
Value
Intended
Protocols and
Applications
Service
Class
EF
EF
101110
Interactive voice
Voice Bearer
AF1
AF11
AF12
AF13
001010
001100
001110
General data service,

FTP, backups
Bulk Data
AF2
AF21
AF22
AF23
010010
010100
010110
Database access,
transaction services,
interactive traffic,
preferred data service
Transactional
AF3
AF31
AF32
AF33
011010
011100
011110
Locally defined
mission-critical
applications
Missioncritical
AF4
AF41
AF42
AF43
100010
100100
100110
Interactive video and

associated voice
Interactive
video
CS6
Class 6
110000
BGP, OSPF, etc.
Routing
(reserved)
CS4
Class 4
100000
Often proprietary
Streaming
video
CS3
Class 3
011000
(SIP, H.323, etc.
Call signaling
CS1
Class 1
001000
User-selected service,
PPP Applications
Default
Default
(Best
Effort)
Class 0
000000
Unspecified traffic, email, Internet
Less-thanbest-effort
data
(Scavenger)
Best-effort
Step 3
118
DSCP
Service Class and

Configuration
Queuing = Priority
minth < maxth
No bandwidth guarantee
minth < maxth
Minimal bandwidth guarantee
Active Queue Mgt or Per-flow
fair queuing
minth < maxth
Create WRED traffic profiles. Create the WRED traffic profiles required to
properly implement the administrative QoS policy.
Create WRED Traffic Profiles

Create a WRED traffic profile for each of the service classes identified in the previous section.
Use the table to assist you in creating your profile. When completing each profile, be sure to
draw the traffic profile and include all information on the blank profile graphic provided.
Cisco IOS Default WRED Profile Values
PHB
Minimum
Threshold
Maximum
Threshold
Mark Probability
af11
32
40
1/10
af12
28
40
1/10
af13
24
40
1/10
af21
32
40
1/10
af22
28
40
1/10
af23
24
40
1/10
af31
32
40
1/10
af32
28
40
1/10
af33
24
40
1/10
af41
32
40
1/10
af42
28
40
1/10
af43
24
40
1/10
cs1
22
40
1/10
cs2
24
40
1/10
cs3
26
40
1/10
cs4
28
40
1/10
cs5
30
40
1/10
cs6
32
40
1/10
cs7
34
40
1/10
EF
36
40
1/10
RSVP
36
40
1/10
Default (BE)
20
40
1/10
Lab Guide
119
Traffic Profile 1:
Traffic Class: ____________________________ PHB: __________________
WRED Traffic Profile Parameters:
Minimum Threshold: _____________ Maximum Threshold: _____________
Mark Probability Denominator: __________
Traffic Profile 2:
Drop
Probability
100%
Average
Queue
Size
120
Traffic Profile 3:
Drop
Probability
100%
Average
Queue
Size
Step 4
Present your solution. After the instructor presents a solution to the case study,
present your solution to the class with your partner.
Present Your Solution

Together with your partner, present your solution to the class. Include the following
information:
WRED traffic profiles
You have completed this activity when your case study solution has been presented to the class
and you have justified any major deviations from the case study solution supplied by the
instructor.
Lab Guide
121
Case Study 6-1 Answer Key: WRED Traffic Profiles

Your case study discussion and solution should include:
Identify Customer QoS Requirements

Customer Traffic: Oracle
PHB: AF2
DSCP: AF21
Customer Traffic: Citrix
PHB: AF2
DSCP: AF22
Customer Traffic: Internet
PHB: Default (BE)
DSCP: 0
Create WRED Traffic Profiles

Traffic Profile 1:
Traffic Class: Transactional
PHB: AF21
Minimum Threshold: 32
Maximum Threshold: 40
Mark Probability Denominator: 10
Traffic Profile 2:
Traffic Class: Transactional
PHB: AF22
Traffic Profile 3:
Drop
Probability
No Drop
Random Drop
Tail Drop
100%
28 32
AF22
AF21
Traffic Class: Default
PHB: 0
Drop
Probability
No drop
Average
Queue
Size
Random drop
Full drop
100%
10%
20
122
40
Average
Queue
Size
Lab 6-1: Configuring DSCP-Based WRED

Complete this lab activity to practice what you learned in the lesson Configuring Explicit
Congestion Notification in the module Congestion Avoidance.
Activity Objective
In this activity, you will build a WRED traffic profile, given a set of parameters, and configure
DSCP-based WRED with ECN support to match that traffic profile. After completing this
Configure DSCP-based CB-WRED
Monitor DSCP-based CB-WRED
Configure DSCP-based CB-WRED with ECN
Monitor DSCP-based CB-WRED with ECN
Visual Objective
After LLQ was successfully implemented, the voice quality definitely improved. But after
monitoring the link utilization on the low-speed 384-kbps link for a week, it has been
determined that the average link utilization is low and must be improved.
Lab Guide
123
You recall from the Cisco IOS documentation that global synchronization occurs as waves of
congestion crest only to be followed by troughs, during which the transmission link is not fully
utilized. Global synchronization of TCP hosts can occur because packets are dropped all at
once. Global synchronization happens when multiple TCP hosts reduce their transmission rates
in response to packet dropping, and once congestion is reduced, the TCP hosts again increase
their transmission rates. The most important point is that the waves of transmission, known as
global synchronization, result in significant link under-utilization.
In order to reduce TCP global synchronization to improve link utilization, CB-WRED is
required to randomly drop packets before the software queue is full. In addition, DSCP-based
CB-WRED allows different WRED (drop) profiles for different DSCP values.
Required Resources
124
QoS Student Guide
QoS Lab Guide
Command List
DSCP-Based WRED with ECN Lab Commands
Command
Description

more interfaces
Specifies the name of the class whose policy you want to create or
change or specifies the default class
random-detect dscp dscpvalue

min-threshold max-threshold
[mark-probabilitydenominator]
Changes the minimum and maximum packet thresholds for the

DSCP value
random-detect [dscp-based |
prec-based]
Enables WRED or DWRED
random-detect ecn
Enables ECN


Displays QoS class maps
Job Aid
Lab Guide
125
Task 1: Configure DSCP-Based WRED

You will build a WRED traffic profile given a set of parameters and configure DSCP-based
WRED.
Activity Procedure
Complete this step:
Step 1
Modify the existing llq-policy policy map on the workgroup WGxR1 router and
enable DSCP-based WRED for the af11-traffic, af21-traffic, af31-traffic, cs1-traffic,
and the class-default traffic classes, with the following drop thresholds and drop
probabilities:
PHB
Minimum
Threshold
Maximum
Threshold
Mark Probability
af11
26
40
1/10
af21
30
40
1/10
af31
34
40
1/10
cs1
22
40
1/10
Default (BE)
20
40
1/10
Complete the graph of the traffic profile below for all five WRED classes. Be sure to indicate
each class and the mark probability denominator.
Drop
Probability
100%
20 22
126
26
30
34
40
Average
Queue
Size
Based on the previous WRED profiles, which traffic class will start dropping packets first?
________________________________________________________________________
What does a mark probability of 1/10 mean?
________________________________________________________________________
Why would you not implement WRED for the ef-traffic class?
________________________________________________________________________
Lab Guide
127
You have built a WRED traffic profile, given a set of parameters, and configured DSCPbased WRED.
Task 2: Monitor DSCP-Based WRED

You will display the policy map to monitor DSCP-based WRED.
Activity Procedure
Step 1
Display the llq-policy policy map to verify the WRED configurations.
Policy Map llq-policy

Class ef-traffic
Strict Priority
Class af31-traffic
Bandwidth remaining 40 (%)
exponential weight 9
dscp
min-threshold
max-threshold
mark-probability
---------------------------------------------------------af11
1/10
af12
1/10
af13
1/10
af21
1/10
af22
1/10
af23
af31
af32
34
-
40
-
1/10
1/10
1/10
[output omitted]
Class af21-traffic
dscp
min-threshold
max-threshold
mark-probability
---------------------------------------------------------af11
1/10
af12
1/10
af13
1/10
af21
30
40
1/10
af22
1/10
af23
1/10
[output omitted]
Class af11-traffic
dscp
min-threshold
max-threshold
mark-probability
---------------------------------------------------------af11
26
40
1/10
af12
1/10
af13
1/10
[output omitted]
Class cs1-traffic
dscp
min-threshold
max-threshold
128
mark-probability
---------------------------------------------------------af11
1/10
af12
1/10
af13
1/10
af21
1/10
af22
1/10
af23
1/10
af31
1/10
af32
1/10
af33
1/10
af41
1/10
af42
af43
cs1
cs2
22
-
40
-
1/10
1/10
1/10
1/10
output omitted]
Class class-default
dscp
min-threshold
max-threshold
mark-probability
--------------------------------------------------------[output omitted]
ef
rsvp
default
Step 2
What is the default exponential weight constant? ____________________
20
40
1/10
1/10
1/10
Are all the drop thresholds and drop probability set correctly? __________
Step 3
Clear the counters on all interfaces on the WGxR1 router.
Step 4
Step 5
Display the output service policy on the S0/0 interface.
Serial0/0
Match: dscp ef
0 packets, 0 bytes
5 minute rate 0 bps
Queueing
Strict Priority
Match: dscp af31
Queueing
exponential weight: 9
mean queue depth: 0
dscp
Transmitted
Random drop
Tail drop
pkts/bytes
pkts/bytes
pkts/bytes
thresh
af11
0/0
0/0
0/0
Minimum Maximum
thresh prob
32
40
Mark
1/10
Lab Guide
129
af12
af13
af21
af22
af23
af31
0/0
0/0
0/0
0/0
0/0
24817/1101254
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
28
24
32
28
24
32
40
40
40
40
40
40
1/10
1/10
1/10
1/10
1/10
1/10
[output omitted]
Match: dscp af21
Queueing
mean queue depth: 0
dscp
Transmitted
Random drop
Tail drop
pkts/bytes
pkts/bytes
pkts/bytes
af11
0/0
0/0
0/0
af12
0/0
0/0
0/0
af13
0/0
0/0
0/0
af21
27821/1229416
0/0
0/0
af22
0/0
0/0
0/0
Minimum Maximum
thresh thresh
32
40
28
40
24
40
32
40
28
40
Mak
prob
1/10
1/10
1/10
1/10
1/10
[output omitted]
Match: dscp af11
Queueing
mean queue depth: 0
dscp
Transmitted
Random drop
Tail drop
pkts/bytes
pkts/bytes
pkts/bytes
af11
12464/549337
0/0
0/0
af12
0/0
0/0
0/0
af13
0/0
0/0
0/0
af21
0/0
0/0
0/0
Minimum Maximum
thresh thresh
32
40
28
40
24
40
32
40
Mark
prob
1/10
1/10
1/10
1/10
Minimum Maximum
thresh thresh
32
40
28
40
24
40
32
40
28
40
24
40
32
40
28
40
24
40
32
40
28
40
24
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
[output omitted]
Class-map: cs1-traffic (match-all)
Match: dscp cs1
Queueing
mean queue depth: 0
dscp
Transmitted
Random drop
Tail drop
pkts/bytes
pkts/bytes
pkts/bytes
af11
0/0
0/0
0/0
af12
0/0
0/0
0/0
af13
0/0
0/0
0/0
af21
0/0
0/0
0/0
af22
0/0
0/0
0/0
af23
0/0
0/0
0/0
af31
0/0
0/0
0/0
af32
0/0
0/0
0/0
af33
0/0
0/0
0/0
af41
0/0
0/0
0/0
af42
0/0
0/0
0/0
af43
0/0
0/0
0/0
130
cs1
5822/277060
0/0
0/0
22
40
1/10
[output omitted]
Match: any
Queueing
mean queue depth: 43
dscp
Transmitted
Random drop
Tail drop
Minimum Maximum Mark
pkts/bytes
pkts/bytes
pkts/bytes
thresh thresh prob
[output omitted]
cs5
cs6
cs7
ef
rsvp
default
0/0
6/504
0/0
0/0
0/0
4872/1481315
0/0
0/0
0/0
0/0
0/0
254/75741
0/0
0/0
0/0
0/0
0/0
10434/1136558
30
32
34
36
36
20
40
40
40
40
40
40
1/10
1/10
1/10
1/10
1/10
1/10
Do you see any drops from any of the traffic classes? ________________
If so, which one or ones?
___________________________________________________
Note
You may see drops on only one of the workgroup routers due to the varying traffic rate from
the Pagent routers.
How many af31 packets have been transmitted within the af31 traffic class?
_____________________________________________________________
_____________________________________________________________
_____________________________________________________________
How many cs1 packets have been transmitted within the cs1 traffic class?
_____________________________________________________________
The class-default traffic class has transmitted packets marked with which DSCP
setting? _____________________________________________________________
What types of packets are marked with CS 6 by the Cisco IOS software?
_____________________________________________________________
Lab Guide
131
Step 6
Repeat Task 1 Step 1 and Task 2 Steps 1 through 5 for the WGxR2 router.
The default class has many dropped packets in it. Although WRED congestion
avoidance has been applied and is randomly dropping packets in this class, it may be
dropping packets unnecessarily. Ideally, the router should mark the traffic using the
ECN bits, then send traffic without dropping as the average queue size increases.
The ECN bits will notify the end station of congestion. The end station can signal
the sender using TCP congestion mechanics to slow down the senders traffic rate.
You have displayed the policy map to monitor DSCP-based WRED.
Task 3: Configure DSCP-Based CB-WRED with ECN

You will configure DSCP-based CB-WRED with ECN.
Activity Procedure
Complete this step:
Step 1
Enable WRED ECN for the class-default traffic class on the WGxR1 and WGxR2
routers.
You have configured DSCP-based CB-WRED with ECN.
Task 4: Monitor DSCP-Based WRED with ECN

You will display the policy map to monitor DSCP-based WRED with ECN.
Activity Procedure
Step 1
On WGxR1 and WGxR2, display the llq-policy policy map and verify the ECN
settings for the class-default traffic class.
<output omitted>
Class class-default
explicit congestion notification
dscp
min-threshold
max-threshold
mark-probability
---------------------------------------------------------af11
1/10
af12
1/10
af13
1/10
af21
1/10
af22
1/10
af23
1/10
af31
1/10
af32
1/10
132
af33
af41
af42
af43
cs1
cs2
cs3
40
1/10
1/10
1/10
1/10
1/10
1/10
1/10
cs4
cs5
cs6
cs7
ef
rsvp
default
20
1/10
1/10
1/10
1/10
1/10
1/10
1/10
Step 2
counters command.
Step 3
Step 4
Display the output service policy on the serial 0/0 interface on both WGxR1 and
WGxR2.
Serial0/0
<output omitted>
Match: any
Queueing
mean queue depth: 0
dscp
af11
af12
af13
af21
af22
af23
af31
af32
af33
af41
af42
af43
cs1
cs2
cs3
cs4
cs5
cs6
cs7
ef
rsvp
default
Transmitted
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
7/588
0/0
0/0
0/0
5417/1627803
dscp
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
343/110564
Tail drop
Minimum Maximum
pkts/bytes
thresh thresh
0/0
32
40
0/0
28
40
0/0
24
40
0/0
32
40
0/0
28
40
0/0
24
40
0/0
32
40
0/0
28
40
0/0
24
40
0/0
32
40
0/0
28
40
0/0
24
40
0/0
22
40
0/0
24
40
0/0
26
40
0/0
28
40
0/0
30
40
0/0
32
40
0/0
34
40
0/0
36
40
0/0
36
40
11462/1242888
20
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
ECN Mark
pkts/bytes
Lab Guide
133
af11
af12
af13
af21
af22
af23
af31
af32
af33
af41
af42
af43
cs1
cs2
cs3
cs4
cs5
cs6
cs7
ef
rsvp
default
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
Is ECN enabled for the class-default traffic class? ______________________

What is the mean queue depth for the class-default traffic class? ______________
How many ECN-marked packets are there for the class-default traffic class, if any?
___________________________________
No packets are marked ECN, yet there are many random WRED drops in the default
class. Explain. ____________________________________________________
Step 5
On WGxR1, display the class map for the ef-traffic service class.

Match dscp ef
Step 6
On WGxR1, remove ICMP packets from the EF service class by removing the
match access-group 100 from the ef-traffic class map.
Step 7
On WGxR1, display the class map for the ef-traffic service class and verify that
ICMP (access-group 100) has been removed.

Match
dscp ef
134
Step 8
Which traffic class will the ICMP traffic belong to now that it has been removed
from the EF service class? _____________________________________________
Step 9
Repeat Steps 5 through 8 for WGxR2.
Step 10
counters command.
Step 11
serial 0/0 interface, then record the ping response time below. For the extended ping,
use a repeat count of 50, a datagram size of 1500, and use extended commands to set
the ToS to 0x02.
WGxR1#ping
Protocol [ip]:
Target IP address:10.2.x.2
Extended commands [n]: y
Source address or interface:
Type of service [0]: 0x02
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
.!.!..!!.!.!!.!!.!..!..!!.!!.!.!..!!!.!!...!!..!.!
Ping Response Time ____/____/____

What does setting the ToS byte to 0x02 achieve? ___________________________
Step 12
Display the output service policy on the serial 0/0 interface for the class-default
service class only.
Serial0/0
Match: any
Queueing
mean queue depth: 10
dscp
af11
af12
af13
af21
af22
af23
af31
af32
af33
af41
af42
af43
cs1
cs2
cs3
cs4
cs5
cs6
cs7
ef
rsvp
default
Transmitted
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
9/756
0/0
0/0
0/0
13741/2556848
Random drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
308/50344
Tail drop
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
175/27697
Minimum Maximum
thresh thresh
32
40
28
40
24
40
32
40
28
40
24
40
32
40
28
40
24
40
32
40
28
40
24
40
22
40
24
40
26
40
28
40
30
40
32
40
34
40
36
40
36
40
20
40
Mark
prob
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
1/10
Lab Guide
135
dscp
af11
af12
af13
af21
af22
af23
af31
af32
af33
af41
af42
af43
cs1
cs2
cs3
cs4
cs5
cs6
cs7
ef
rsvp
default
ECN Mark
pkts/bytes
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
0/0
6/9024
Do you see any ECN-marked packets for the class-default now?

__________________
Note
You may only see ECN-marked packets on one of the two workgroup routers.
Step 13
Return ICMP traffic (match access-group 100) to the EF service class.
Step 14
Display the class map for the ef-traffic service class and verify that ICMP traffic is
now a member of the EF service class.
Match dscp ef
Step 15
Step 16
Return ICMP traffic (match access-group 100) to the EF service class.
Step 17
Display the class map for the ef-traffic service class and verify that ICMP traffic is
now a member of the EF service class.
Match dscp ef
Step 18
136
You have displayed the policy map to monitor DSCP-based WRED with ECN.
Lab 6-1 Answer Key: Configuring DSCP-Based WRED

Configuration through Step 7:
class ef-traffic
priority 168
class af31-traffic
bandwidth remaining percent 40
random-detect dscp-based
random-detect dscp af31
34
40
10
class af21-traffic
30
40
10
class af11-traffic
26
40
10
class cs1-traffic
random-detect dscp cs1
22
40
10
class class-default
random-detect dscp 0
20
40
10
Based on the previous WRED profiles, which traffic class will start dropping packets first?
Drop
Probability
Minimum
Threshold
Maximum
Threshold
100%
Mark
Probability
10%
20 22
26
30
34
40
Average
Queue
Size
Default (Best Effort) class

What does a mark probability of 1/10 mean?
When the average queue size is at the maximum threshold, the router will be dropping
one out of every ten packets.
Why would you not implement WRED for the ef-traffic class?
Lab Guide
137
It is preferred that no packet dropping occurs in the EF traffic class.

What is the default exponential weight constant?
9
What types of packets are marked with CS 6 by the Cisco IOS software?
Router control and routing protocol traffic
Configuration for remainder of the lab:
class class-default
random-detect ecn
20
40
10
No packets are marked ECN, yet there are many random WRED drops in the default class.
Explain.
The router will only set ECN if the transiting packets are marked so that the endpoints
are ECN-capable.
Which traffic class will the ICMP traffic belong to now that it has been removed from the EF
service class?
Default (Best Effort) service class
What does setting the ToS byte to 0x02 achieve?
It enables ECN in the packet by indicating that the endpoint is ECN-capable.
138
Lab 7-1: Configuring Class-Based Policing

Complete this lab activity to practice what you learned in the lesson Configuring Class-Based
Policing in the module Traffic Policing and Shaping.
Activity Objective
In this activity, you will configure class-based policing to rate-limit incoming packets on an
interface. After completing this activity, you will be able to meet these objectives:
Configure single-token bucket class-based policing
Monitor the operation of single-token bucket class-based policing
Configure dual-token bucket class-based policing
Monitor the operation of dual-token bucket class-based policing
Visual Objective
Because wireless Internet access for students and faculty has been implemented, the peer-topeer file sharing traffic (particularly, Napster and Kazaa) is constantly increasing. Therefore, it
is now required to police the Napster and Kazaa traffic using class-based policing inbound to
the Fa0/0 interface on the workgroup router.
For the Internet connection, most of the traffic from the E-Commerce University is HTTP
(web) traffic out to the Internet. The service provider is providing sub-rate access and is
implementing an input service policy to police E-Commerce University inbound traffic.
Lab Guide
139
Policing of the HTTP traffic using class-based policing outbound to the S0/1 interface on
workgroup routers will be implemented to conserve bandwidth on the E-Commerce University
Internet connection.
This HTTP policing policy is not placed inbound to the Fa0/0 interface on the workgroup router
because intranet HTTP traffic will still be required to flow between the two E-Commerce
University campuses across their 384-kbps leased-line connection (S0/0).
Required Resources
140
QoS Student Guide
QoS Lab Guide
Command List
Configuring Class-Based Policing Lab Commands
Command
Description

more interfaces
police bps [burst-normal]

[burst-max] conform-action
action exceed-action action
[violate-action action]
Configures traffic policing
clear counters
shutdown
Creates a class map to be used for matching packets to a specified

class
specified protocol
police cir percent percent

[bc conform-burst-in-msec]
[pir percent percent][be
peak-burst-in-msec]
Configures traffic policing on the basis of a percentage of

bandwidth available on an interface


show policy-map policy-map

class class-name
Displays the configuration for the specified class of the specified

policy map
Job Aid
Lab Guide
141
Task 1: Configure Single-Token Bucket Class-Based Policing

You will configure single-token bucket class-based policing.
Activity Procedure
Complete this step:
Step 1
Modify the existing input service policy mark-nbar on the FastEthernet 0/0 interface
of the WGxR1 and WGxR2 routers to police the scavenger traffic class to a
maximum rate limit of 8 kbps. All conforming traffic should be sent (transmitted),
and all exceeding traffic should be dropped.
In this case, do you need to implement a single or dual token bucket?
________________________________________________________
Will this be a single- or dual-rate policing implementation?
________________________________________________________
You have configured single-token bucket class-based policing.
Task 2: Monitor Single-Token Bucket Class-Based Policing

You will monitor the operation of single-token bucket class-based policing.
Activity Procedure
Step 1
Display the mark-nbar policy map and verify the correct policing configuration.
Policy Map mark-nbar
Class real-time
set dscp ef
set dscp af31
Class interactive
set dscp af21
Class bulk
set dscp af11
Class scavenger
set dscp cs1
police cir 8000 bc 1500
conform-action transmit
exceed-action drop
What is the default value of Bc in bytes and in bits? _________________________

How is the default value of Bc calculated by the Cisco IOS software?
_____________________
Based on the default value of Bc, what is the value of the Tc?
____________________
142
Step 2
counters command.
Step 3
Step 4
Display the input service policy on the FastEthernet 0/0 interface of your workgroup
routers for the scavenger class only.
FastEthernet0/0
Service-policy input: mark-nbar
Class-map: scavenger (match-any)
Match: protocol kazaa2
Match: protocol napster
QoS Set
dscp cs1
Packets marked 4719
police:
cir 8000 bps, bc 1500 bytes
conformed 1350 packets, 83499 bytes; actions:
transmit
exceeded 3369 packets, 1179763 bytes; actions:
drop
conformed 8000 bps, exceed 36000 bps
Match: any
How many packets have been dropped in the scavenger traffic class?
_________________________________________________________________
What is the conformed bit rate for the scavenger traffic?
_________________________________________________________________
What is the exceed bit rate for the scavenger traffic?
_________________________________________________________________
You have monitored the operation of single-token bucket class-based policing.
Lab Guide
143
Task 3: Configure Dual-Token Bucket Class-Based Policing

You will configure dual-token bucket class-based policing.
Activity Procedure
Step 1
On the WGxR1 and WGxR2 routers, configure a new class map called weboutbound and use NBAR to classify all HTTP traffic into that traffic class.
Step 2
Display the newly configured class map and verify its configuration.
Class Map match-all web-outbound (id 1)
Match protocol http
Step 3
On the WGxR1 and WGxR2 routers, configure a new policy map called http-police
to police the web (HTTP) traffic to a CIR of 50 percent of the link bandwidth (use
the Cisco IOS software default for Bc and Be). All conforming traffic should be
transmitted (sent), and all exceeding traffic should be re-marked to CS1, then
transmitted (sent). All violating traffic should be dropped.
_______________________________________________________
You have configured dual-token bucket class-based policing.
Task 4: Monitor Dual-Token Bucket Class-Based Policing

You will monitor the operation of dual-token bucket class-based policing.
Activity Procedure
Step 1
Display the newly configured policy map and verify its configuration.
Policy Map http-police
Class web-outbound
police cir percent 50 be 0
exceed-action set-dscp-transmit cs1
violate-action drop
144
Step 2
Apply the http-police policy map to the S0/1 interface of the WGxR1 and WGxR2
routers in the outbound direction. The http-police policy map is applied to the S0/1
interface and not the tunnel interface (from the QoS Preclassify lab) because the
tunnel interface is only used as a backup for the leased line connection between the
two E-Commerce University campuses.
Step 3
To test this lab, it will be necessary to administratively disable (shut down) the S0/0
interface on the WGxR1 and WGxR2 routers, to force the Pagent HTTP traffic to
flow via the S0/1 link. Administratively disable the serial 0/0 interface and clear the
interface counters on both the WGxR1 and WGxR2 routers.
Step 4
Step 5
Display the outbound service policy on the Serial 0/1 interface.

Class-map: web-outbound (match-all)
Match: protocol http
police:
cir 50 %
cir 384000 bps, bc 12000 bytes, be 1500 bytes
conformed 664 packets, 332894 bytes; actions:
transmit
exceeded 40 packets, 1792 bytes; actions:
set-dscp-transmit cs1
violated 50 packets, 75200 bytes; actions:
drop
conformed 14000 bps, exceed 0 bps, violate 4000 bps
Match: any
Are there any violating HTTP packets being dropped?

_________________________________________________________
Are there any exceeding HTTP packets being re-marked to CS1, then sent?
_________________________________________________________
Are there any conforming HTTP packets being sent?
_________________________________________________________
Based on a CIR of 50 percent, what is the CIR (in bps), Bc, and Be (in bytes)
computed by the Cisco IOS software?
____________________________________________________
Step 6
Reenable the serial 0/0 interface on both the WGxR1 and WGxR2 routers.
Step 7
You have monitored the operation of dual-token bucket class-based policing.
Lab Guide
145
Lab 7-1 Answer Key: Configuring Class-Based Policing

Configuration in Step 2:
class real-time
set dscp ef
set dscp af31
class interactive
set dscp af21
class bulk
set dscp af11
class scavenger
set dscp cs1
police cir 8000
exceed-action drop
Configuration for the remainder of the lab:

class-map match-all web-outbound
match protocol http
policy-map http-police
class web-outbound
police cir percent 50
violate-action drop
Single token bucket
Will this be a single or dual-rate policing implementation?
Single rate policing
What is the default value of Bc in bytes and in bits?
1500 bytes or 12,000 bits
How is the default value of Bc calculated by the Cisco IOS software?
Cir / 32 or 1500 bytes, whichever is larger
Based on the default value of Bc, what is the value of Tc?
Tc = Bc / CIR = 12000 / 8000 = 1. 5
Dual token bucket
Based on a CIR of 50 percent, what is the CIR (in bps), Bc, and Be (in bytes), calculated by the
Cisco IOS software?
CIR = 384,000 bps, Bc = 12,000 bytes, Be = 1500 bytes
146
Lab 7-2: Configuring Class-Based Shaping

Shaping on Frame Relay Interfaces in the module Traffic Policing and Shaping.
Activity Objective
In this activity, you will configure class-based shaping to rate-limit outgoing packets on an
interface. After completing this activity, you will be able to meet these objectives:
Configure class-based shaping
Monitor the operation of class-based shaping
Visual Objective
After successfully policing the Napster and Kazaa traffic, it was decided by the E-Commerce
University IT staff to also shape the FTP traffic across the 384-kbps leased line, because the
FTP traffic is also consuming a lot of bandwidth at times. Class-based shaping will be used to
apply an upper bandwidth limit to the FTP traffic class.
Lab Guide
147
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Configuring Class-Based Shaping Lab Commands
Command
Description
show policy-map policy-map

class class-name
Displays the configuration for the specified class of the specified

policy map

more interfaces
shape {average | peak} cir

[bc][be]
Specifies average or peak rate traffic shaping


Job Aid
148
Task 1: Configure Class-Based Shaping

You will configure class-based shaping.
Activity Procedure
Step 1
Verify the existing policy map named llq-policy on the WGxR1 and WGxR2
routers, by displaying only the AF11 traffic class. Recall from the Classification and
Marking lab exercise that all FTP traffic is marked with AF11.
dscp
Class af11-traffic
min-threshold
max-threshold
mark-probability
---------------------------------------------------------af11
26
40
1/10
af12
1/10
af13
1/10
af21
1/10
af22
1/10
af23
1/10
af31
1/10
af32
1/10
af33
1/10
af41
1/10
af42
1/10
af43
1/10
cs1
1/10
cs2
1/10
cs3
1/10
cs4
cs5
cs6
cs7
ef
rsvp
default
Step 2
1/10
1/10
1/10
1/10
1/10
1/10
1/10
On WGxR1 and WGxR2, modify the existing llq-policy policy map to shape the
AF11 traffic class to an average rate of 8 kbps. Allow the Cisco IOS software to
automatically calculate the Bc and Be value.
Successfully configured average-rate shaping on the serial 0/0 interface of WGxR1 and
WGxR2 for the AF11 traffic class.
Lab Guide
149
Task 2: Monitor Class-Based Shaping

You will monitor the operation of class-based shaping.
Activity Procedure
Verify the existing llq-policy policy map and the shaping configuration on your
workgroup WGxR1 and WGxR2 routers by displaying only the AF11 traffic class.
Step 1
Class af11-traffic
dscp
min-threshold
max-threshold
mark-probability
---------------------------------------------------------af11
26
40
1/10
af12
1/10
af13
1/10
[output omitted]
ef
rsvp
default
1/10
1/10
1/10
Traffic Shaping
Average Rate Traffic Shaping
CIR 8000 (bps) Max. Buffers Limit 1000 (Packets)
Verify the shaping configuration on the existing output service policy map on the
Serial 0/0 interface of the WGxR1 and WGxR2 routers, by displaying only the AF11
traffic class.
Step 2
dscp
af11
af12
Serial0/0
Match: dscp af11
Queueing
mean queue depth: 0
Transmitted
Random drop
Tail drop
Minimum Maximum Mark
pkts/bytes
pkts/bytes
pkts/bytes
thresh thresh prob
222923/10047151
0/0
0/0
26
40 1/10
0/0
0/0
0/0
28
40 1/10
[output omitted]
default
0/0
0/0
0/0
20
40
1/10
[output omitted]
Traffic Shaping
Target/Average
Rate
8000/8000
Adapt Queue
Active Depth
0
150
Byte
Limit
2000
Sustain
bits/int
8000
Excess
bits/int
8000
Interval
(ms)
1000
Increment
(bytes)
1000
Packets
Bytes
2682
118008
Packets
Delayed
0
Bytes
Delayed
0
Shaping
Active
no
What is the Bc and Be value that is automatically determined by the Cisco IOS
software?
____________________________________________________________
What is the Tc (time interval)? ___________________________________
Step 3
Verified the successful operation of your class-based shaping configuration
Lab 7-2 Answer Key: Configuring Class-Based Shaping

class ef-traffic
priority 168
class af31-traffic
bandwidth remaining percent
34
class af21-traffic
30
class af11-traffic
26
shape average 8000
class cs1-traffic
22
class class-default
random-detect ecn
20
40
40
10
40
10
40
10
40
10
20
13
25
40
10
What is the Bc and Be value that is automatically determined by the Cisco IOS software?
Bc = 8000 bps, Be = 8000 bps
What is the Tc (time interval)?
1 second
Lab Guide
151
Lab 8-1: Configuring Class-Based Header

Compression
Header Compression in the module Link Efficiency Mechanisms.
Activity Objective
In this activity, you will configure and monitor class-based RTP header compression on a PPP
Frame Relay link. After completing this activity, you will be able to meet these objectives:
Configure class-based RTP header compression
Monitor the operation of class-based RTP header compression
Visual Objective
One of the E-Commerce University IT staff members was reading a VoIP Cisco Press book and
realized that the IP, UDP, and RTP header overhead for voice packets is very high. Therefore,
the IT staff decided to implement class-based RTP header compression to reduce the size of the
packet headers and the associated overhead on the EF traffic class.
152
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Configuring Class-Based Header Compression Lab Commands
Command
Description

more interfaces
compression header ip [rtp |

tcp]
Configures RTP or TCP IP header compression for a specific class


clear counters
Job Aid
Lab Guide
153
Task 1: Configure Class-Based Header Compression

You will configure class-based RTP header compression.
Activity Procedure
Complete this step:
Step 1
Modify the existing llq-policy policy map on the WGxR1 and WGxR2 routers to
enable class-based RTP header compression on the EF traffic class.
You have successfully configured class-based RTP header compression on the serial 0/0
interface of WGxR1 and WGxR2 for the EF traffic service class.
Task 2: Monitor Class-Based Header Compression

You will monitor the operation of class-based RTP header compression.
Activity Procedure
Step 1
Display the llq-policy policy map (just display the ef-traffic class) to verify the
class-based RTP header compression configuration on the ef-traffic class.
Class ef-traffic
Strict Priority
compress:
header ip rtp
Step 2
counters command.
Step 3
Step 4
Display the output service policy on the workgroup routers S0/0 interface (only
show the ef-traffic class).
Serial0/0
Match: dscp ef
0 packets, 0 bytes
5 minute rate 0 bps
Queueing
Strict Priority
compress:
154
header ip rtp
UDP/RTP compression:
Sent: 324 total, 321 compressed,
12135 bytes saved, 52441 bytes sent
1.23 efficiency improvement factor
99% hit ratio, five minute miss rate 0 misses/sec, 0 max
rate 2000 bps
How many RTP packets were sent? _______________

How many RTP packets were compressed? _________
How many bytes were saved because of RTP header compression? __________
Step 5
You have successfully verified the operation of the class-based RTP header compression
operation.
Lab 8-1 Answer Key: Configuring Class-Based Header

Compression
class ef-traffic
priority 168
compress header ip rtp
class af31-traffic
34
class af21-traffic
30
class af11-traffic
26
shape average 8000
class cs1-traffic
22
class class-default
random-detect ecn
20
40
40
10
40
10
40
10
40
10
20
13
25
40
10
Lab Guide
155
Lab 8-2: Configuring LFI

Complete this lab activity to practice what you learned in the lesson Configuring Link
Fragmentation and Interleaving in the module Link Efficiency Mechanisms.
Activity Objective
In this activity, you will configure and monitor MLP with interleaving on a PPP link. After
completing this activity, you will be able to meet these objectives:
Configure link fragmentation and interleaving on PPP WAN links
Monitor the operation of link fragmentation and interleaving
Visual Objective
After measuring voice packet delay and jitter over their slow WAN link, the E-Commerce IT
staff is concerned that the jitter is still too high. The IT staff asks you why there is too much
jitter and how it can be reduced. Being well educated by Cisco about CLPs in QoS, you answer,
The LLQ mechanism prioritized voice traffic in the software queue, but the hardware queue
(Tx ring) always uses a FIFO scheduling mechanism. Therefore, after packets of different
applications leave the software queue, they will mix with other packets in the hardware transmit
queue (TxQ), even if their software queue processing was expedited. Thus, a voice packet may
be immediately sent to the hardware tx-queue, where two large FTP packets may still be
waiting for transmission. The voice packet must wait until the FTP packets are transmitted, thus
producing an unacceptable delay in the voice path. Because links are variably used, this delay
varies with time and may produce unacceptable jitter in jitter-sensitive applications such as
voice.
156
Knowing that there will be no budget to upgrade the slow WAN link speed any time soon, you
offer to improve voice delay and jitter by implementing MLP with interleaving on the slow
WAN link.
Required Resources
QoS Student Guide
QoS Lab Guide
Command List
Configuring LFI Lab Commands
Command
Description

identification
[no] ip address ip-address

mask
Sets a primary or secondary IP address for an interface
bandwidth kbps
Sets and communicates to higher-level protocols the current

bandwidth value for an interface
interface multilink
multilink-bundle-number
Creates a multilink bundle and enters multilink interface

configuration mode
ppp multilink
Enables MLP on an interface
Enables real-time packet interleaving
ppp multilink fragment-delay
(Optional) Configures a maximum fragment delay. If, for example,

you want a voice stream to have a maximum bound on delay of 20
ms and you specify 20 ms using this command, MLP will choose a
fragment size based on the configured value.
ppp multilink group groupnumber
Restricts a physical link to joining only a designated multilink-group

interface
[no] service-policy {input |


interface or VC
Lab Guide
157
Job Aid
Task 1: Configure LFI

You will configure link fragmentation and interleaving on PPP WAN links.
Activity Procedure
Caution
The following steps must be performed in the order shown.
Step 1
Remove the IP address from the serial 0/0 interface of the WGxR1 router.
Step 2
Create a multilink virtual interface (multilink 1) on the workgroup WGxR1 router.
Step 3
Set the bandwidth and IP address on the workgroup WGxR1 router multilink 1
interface as follows:
Parameter
Value
IP Address
10.2.x.1
Subnet Mask
255.255.255.0
bandwidth
384kbps
Step 4
Place the workgroup WGxR1 router S0/0 interface into multilink-group 1.
Step 5
Repeat steps 1 through 4 for the workgroup WGxR2 router, using this table for Step 3:
Step 6
Parameter
Value
IP Address
10.2.x.2
Subnet Mask
255.255.255.0
bandwidth
384kbps
Display the running-config of the S0/0 and the multilink 1 interface to verify the
MLP configuration.
Current configuration : 166 bytes
!
interface Serial0/0
description to wgxr1
bandwidth 384
no ip address
encapsulation ppp
ppp multilink
multilink-group 1
end
Current configuration : 112 bytes
!
158
bandwidth 384
ip address 10.2.x.1 255.255.255.0
ppp multilink
multilink-group 1
end
MLP is enabled now but is interleaving also enabled based on the above
configuration? _______________
Step 7
Shut down Serial 0/1, then use the show ip interface brief command to verify that
the multilink-group 1 interface is UP, has the proper IP address, and that the S0/0
interface is UP.
Interface
FastEthernet0/0
Serial0/0
Serial0/1
Multilink1
Virtual-Access1
Step 8
IP-Address
10.1.1.1
unassigned
10.4.1.1
10.2.1.1
unassigned
OK?
YES
YES
YES
YES
YES
Method
NVRAM
manual
NVRAM
manual
unset
Status
up
up
administratively
up
up
Protocol
up
up
down
up
up
Ping the multilink 1 interface of WGxR2 from WGxR1.

WGxR1>ping 10.2.x.2
!!!!!
Step 9
Ping the multilink 1 interface of WGxR1 from WGxR2.

WGxR2>ping 10.2.x.1
!!!!!
Step 10
Enter the show ip ospf neighbor command to verify that the OSPF neighbor
relationship is now formed over the multilink interface.
Neighbor ID
10.2.1.1
Step 11
Pri
0
State
Dead Time
FULL/ - 00:00:30
Address
10.2.1.1
Interface
Multilink1
Enable PPP multilink interleaving on the multilink 1 interface on both WGxR1 and
WGxR2. Use a fragment-delay of 10.
What is the unit of the fragment delay? ________________________
Step 12
Disable the output service policy on the S0/0 interface of the WGxR1 and WGxR2
routers.
Step 13
Enable the llq-policy on the multilink 1 interface in the outbound direction on

WGxR1 and WGxR2.
Note
Ensure that the OSPF neighbor state is established. You can use the show ip ospf
neighbor command to verify this.
Lab Guide
159
You have configured link fragmentation and interleaving on PPP WAN Links.
Task 2: Monitor LFI

You will monitor the operation of link fragmentation and interleaving.
Activity Procedure
Step 1
counters command.
Step 2
Step 3
What type of queuing is the S0/0 interface using now? ____________.

WGxR1#show interface serial0/0
Description: to wg1r2
Encapsulation PPP, LCP Open, multilink Open, loopback not set
Queueing strategy: weighted fair [suspended, using FIFO]
FIFO output queue 0/40, 0 drops
Step 4
Display the multilink interface and examine how many packets have been
interleaved.
Multilink1 is up, line protocol is up
Hardware is multilink group interface
Encapsulation PPP, LCP Open, multilink Open
Open: IPCP, loopback not set
DTR is pulsed for 2 seconds on reset
Last input 00:00:07, output never, output hang never
Output queue:
91/1000/64/2927/3030(size/maxtotal/threshold/drops/interleaves)
160

Step 5
Use the show ppp multilink command to examine the fragment size in bytes
(calculated by the Cisco IOS software based on the fragment delay of 10 ms).
WGxR1#show ppp multilink
Multilink1, bundle name is wg1r2
Bundle up for 16:55:24, 183/255 load
Receive buffer limit 12192 bytes, frag timeout 1000 ms
0/0 fragments/bytes in reassembly list
0 lost fragments, 0 reordered
0/0 discarded fragments/bytes, 0 lost received
0x47C9F received sequence, 0x73936 sent sequence
Member links: 1 active, 0 inactive (max not set, min not set)
Se0/0, since 03:54:35, 480 weight, 472 frag size
Step 6
You have monitored the operation of link fragmentation and interleaving.
Lab 8-2 Answer Key: Configuring LFI

WGxR1:
bandwidth 384
ip address 10.2.x.1 255.255.255.0
ppp multilink
multilink-group 1
!
interface Serial0/0
bandwidth 384
no ip address
encapsulation ppp
clockrate 384000
ppp multilink
multilink-group 1
WGxR2:
bandwidth 384
ip address 10.2.x.2 255.255.255.0
ppp multilink
multilink-group 1
!
interface Serial0/0
bandwidth 384
no ip address
encapsulation ppp
ppp multilink
multilink-group 1
Lab Guide
161
What is the unit of the fragment delay?
milliseconds (ms)
What type of queuing is the S0/0 interface using now?
first-in, first-out (FIFO)
Final Workgroup Device Configurations

When you complete all activities in this course, your workgroup devices will have the
following configurations, with differences that are specific to your device or workgroup.
WG1R1:
hostname WG1R1
!
enable secret 5 $1$n4//$vbCjudYcBR3yNPJqI.1tT0
!
ip subnet-zero
ip cef
!
match protocol ftp
match protocol rtp
match protocol icmp
class-map match-all match-www
class-map match-all match-ftp
match protocol http
class-map match-any ef-traffic
match dscp ef
class-map match-all af21-traffic
match dscp af21
match dscp af31
match dscp af11
class-map match-all cs1-traffic
match dscp cs1
match any
class-map match-all match-sw-be
match dscp default
class-map match-all match-sw-ef
match dscp ef
!
class real-time
set dscp ef
set dscp af31
class interactive
162
set dscp af21

class bulk
set dscp af11
class scavenger
set dscp cs1
police cir 8000
exceed-action drop
class class-default
set dscp default
class web-outbound
violate-action drop
class match-ftp
set dscp af11
class match-www
set dscp default
policy-map verify-mark
class match-sw-ef
class match-sw-be
class ef-traffic
priority 168
class af31-traffic
34
40
10
class af21-traffic
30
40
10
class af11-traffic
26
40
10
shape average 8000
class cs1-traffic
22
40
10
class class-default
random-detect ecn
20
40
10
!
bandwidth 384
ip address 10.2.1.1 255.255.255.0
ppp multilink
multilink-group 1
!
interface Tunnel0
qos pre-classify
tunnel destination 10.5.1.2
!
ip address 10.1.1.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
bandwidth 384
no ip address
Lab Guide
163
encapsulation ppp
clockrate 384000
ppp multilink
multilink-group 1
!
interface Serial0/1
bandwidth 768
ip address 10.4.1.1 255.255.255.0
service-policy output http-police
encapsulation ppp
!
router ospf 1
network 10.0.0.0 0.255.255.255 area 0
!
ip http server
ip classless
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
WG1R2:
hostname WG1R2
!
enable secret 5 $1$07qt$nKIz/sUIIRYMZ7urfJPtp1
!
ip subnet-zero
ip cef
!
match protocol ftp
match protocol rtp
match protocol icmp
class-map match-all match-www
class-map match-all match-ftp
match protocol http
class-map match-any ef-traffic
match dscp ef
match dscp af21
match dscp af31
164
match dscp af11

class-map match-all cs1-traffic
match dscp cs1
match any
class-map match-all match-sw-be
match dscp default
class-map match-all match-sw-ef
match dscp ef
!
class real-time
set dscp ef
set dscp af31
class interactive
set dscp af21
class bulk
set dscp af11
class scavenger
set dscp cs1
police cir 8000
exceed-action drop
class class-default
set dscp default
class web-outbound
violate-action drop
class match-ftp
set dscp af11
class match-www
set dscp default
policy-map verify-mark
class match-sw-ef
class match-sw-be
class ef-traffic
priority 168
class af31-traffic
34
40
10
class af21-traffic
30
40
10
class af11-traffic
26
40
10
shape average 8000
class cs1-traffic
22
40
10
class class-default
random-detect ecn
20
40
10
!
Lab Guide
165
bandwidth 384
ip address 10.2.1.2 255.255.255.0
ppp multilink
multilink-group 1
!
interface Tunnel0
qos pre-classify
tunnel destination 10.4.1.1
!
ip address 10.3.1.2 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0
bandwidth 384
no ip address
encapsulation ppp
ppp multilink
multilink-group 1
!
interface Serial0/1
bandwidth 768
ip address 10.5.1.2 255.255.255.0
service-policy output http-police
encapsulation ppp
!
router ospf 1
network 10.0.0.0 0.255.255.255 area 0
!
ip http server
ip classless
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
166
WG1S1:
hostname WG1S1
!
enable secret 5 $1$Yq48$E3tAlJjcYAP9qJpdmr0nu.
!
vlan 11
name vlan11
!
vlan 21
name vlan21
wrr-queue cos-map 1 0 1 2 3 4
wrr-queue cos-map 3 6 7
!
!
policy-map mark-callgen
class callgen1
set ip dscp 46
class callgen2
set ip dscp 46
!
ip subnet-zero
vtp domain qos
!
switchport trunk allowed vlan 11,21
no ip address
service-policy input mark-callgen
mls qos trust device cisco-phone
mls qos trust cos
!
no ip address
!
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
!
line con 0
line vty 5 15
!
end
Lab Guide
167
168

QOS Lab Guide

Uploaded by

Copyright:

Available Formats

QOS Lab Guide

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

QOS Lab Guide

Uploaded by

Copyright:

Available Formats

QOS

Asia Pacific Headquarters

Case Study 2-1: QoS Mechanisms

Lab 2-1: QoS Lab Setup and Initialization

Lab 2-2: Baseline QoS Measurement

Lab 3-1: Configuring QoS with AutoQoS

Case Study 4-1: Classification and Marking

Lab 4-1: Classification and Marking Using MQC

Lab 4-2: Classification Using NBAR

Lab 4-3: Configuring QoS Preclassify

Lab 4-4: LAN-Based Packet Classification and Marking

Lab 5-1: Configuring Basic Queuing

Lab 5-2: Configuring LLQ

Lab 5-3: Configuring Queuing on a Catalyst Switch

Case Study 6-1: WRED Traffic Profiles

Lab 6-1: Configuring DSCP-Based WRED

Lab 7-1: Configuring Class-Based Policing

Lab 7-2: Configuring Class-Based Shaping

Lab 8-1: Configuring Class-Based Header Compression

Lab 8-2: Configuring LFI

Case Study 2-1: QoS Mechanisms

Review customer QoS requirements

Identify QoS service class requirements

Present a solution to the case study

Visual Objective for Case Study 2-1: QoS

2006 Cisco Systems, Inc. All rights reserved.

Case Study Activity: QoS Mechanisms

A workgroup consisting of two learners

Implementing Cisco Quality of Service (QOS) v2.2

2006 Cisco Systems, Inc.

Apply QoS Mechanisms

Task 1: Apply QoS Mechanisms

Review customer QoS requirements.

2006 Cisco Systems, Inc.

Nuevo Health Systems Applications

2006 Cisco Systems, Inc. All rights reserved.

Nuevo Health Care Systems Network

n Device number on Problem Spreadsheet

Implementing Cisco Quality of Service (QOS) v2.2

2006 Cisco Systems, Inc.

Customer edge router

Service provider router

Identify QoS service class requirements.

Identify network locations where QoS mechanisms should be applied.

2006 Cisco Systems, Inc.

Where to Apply QoS Mechanisms: Classification and Marking

Network Device Interface

Customer edge router

Customer edge router

Service provider router

Where to Apply QoS Mechanisms: Congestion Management and Avoidance

Customer edge router

Customer edge router

Service provider router

Implementing Cisco Quality of Service (QOS) v2.2

2006 Cisco Systems, Inc.

Where to Apply QoS Mechanisms: Traffic Policing and Traffic Shaping

Network Device Interface

SwitchInterface to customer edge

Customer edge routerInterface to