force 802.1p on a VLAN 4069

[cmarmonier]

Hello,

My QoS config is

Code: Select all

! QOS:
policy condition C8021P_0 802.1p 0
policy condition C8021P_1 802.1p 1
policy condition C8021P_2 802.1p 2
policy condition C8021P_3 802.1p 3
policy condition C8021P_4 802.1p 4
policy condition C8021P_5 802.1p 5
policy condition C8021P_5_P23 source port 1/1/23 802.1p 5
policy condition C8021P_5_P25 source port 1/1/25 802.1p 5
policy condition C8021P_5_P26 source port 1/1/26 802.1p 5
policy condition C8021P_5_P27 source port 1/1/27 802.1p 5
policy condition C8021P_5_P29 source port 1/1/29 802.1p 5
policy condition C8021P_5_P30 source port 1/1/30 802.1p 5
policy condition C8021P_5_P31 source port 1/1/31 802.1p 5
policy condition C8021P_6 802.1p 6
policy condition C8021P_7 802.1p 7
policy condition C8021P_7_P23 source port 1/1/23 802.1p 7
policy condition C8021P_7_P25 source port 1/1/25 802.1p 7
policy condition C8021P_7_P26 source port 1/1/26 802.1p 7
policy condition C8021P_7_P27 source port 1/1/27 802.1p 7
policy condition C8021P_7_P29 source port 1/1/29 802.1p 7
policy condition C8021P_7_P30 source port 1/1/30 802.1p 7
policy condition C8021P_7_P31 source port 1/1/31 802.1p 7
policy condition IPSRC37.187.4.39_port29 source port 1/1/29 source vlan 4069 source ip 37.187.4.39 mask 255.0.0.0
policy condition P28 source port 1/1/28
policy condition P29 source port 1/1/29
policy condition VLAN4069 source vlan 4069
policy condition VLAN4069_port29 source port 1/1/29 source vlan 4069
policy action A8021P_0 802.1p 0
policy action A8021P_1 802.1p 1
policy action A8021P_2 802.1p 2
policy action A8021P_3 802.1p 3
policy action A8021P_4 802.1p 4
policy action A8021P_5 802.1p 5
policy action A8021P_6 802.1p 6
policy action A8021P_7 802.1p 7
policy rule VLAN4069_force802.1pTo3 precedence 65535 condition VLAN4069 action A8021P_3
policy rule P28_FORCE_8021P precedence 200 condition P28 action A8021P_7
policy rule P29_FORCE_8021P_5 precedence 200 condition C8021P_5_P29 action A8021P_0
policy rule P29_FORCE_8021P_7 precedence 200 condition C8021P_7_P29 action A8021P_0
policy rule P23_FORCE_8021P_5 precedence 200 condition C8021P_5_P23 action A8021P_0
policy rule P23_FORCE_8021P_7 precedence 200 condition C8021P_7_P23 action A8021P_0
policy rule P25_FORCE_8021P_5 precedence 200 condition C8021P_5_P25 action A8021P_0
policy rule P25_FORCE_8021P_7 precedence 200 condition C8021P_7_P25 action A8021P_0
policy rule P26_FORCE_8021P_5 precedence 200 condition C8021P_5_P26 action A8021P_0
policy rule P26_FORCE_8021P_7 precedence 200 condition C8021P_7_P26 action A8021P_0
policy rule P27_FORCE_8021P_5 precedence 200 condition C8021P_5_P27 action A8021P_0
policy rule P27_FORCE_8021P_7 precedence 200 condition C8021P_7_P27 action A8021P_0
policy rule P30_FORCE_8021P_5 precedence 200 condition C8021P_5_P30 action A8021P_0
policy rule P30_FORCE_8021P_7 precedence 200 condition C8021P_7_P30 action A8021P_0
policy rule P31_FORCE_8021P_5 precedence 200 condition C8021P_5_P31 action A8021P_0
policy rule P31_FORCE_8021P_7 precedence 200 condition C8021P_7_P31 action A8021P_0
policy rule R8021P_7 precedence 100 condition C8021P_7 action A8021P_7
policy rule R8021P_6 precedence 100 condition C8021P_6 action A8021P_6
policy rule R8021P_5 precedence 100 condition C8021P_5 action A8021P_5
policy rule R8021P_4 precedence 100 condition C8021P_4 action A8021P_4
policy rule R8021P_3 precedence 100 condition C8021P_3 action A8021P_3
policy rule R8021P_2 precedence 100 condition C8021P_2 action A8021P_2
policy rule R8021P_1 precedence 100 condition C8021P_1 action A8021P_1
policy rule R8021P_0 precedence 100 condition C8021P_0 action A8021P_0
qos apply

-> show policy condition

Code: Select all

Condition name                   : C8021P_0
  802.1p                         = 0

Condition name                   : C8021P_1
  802.1p                         = 1

Condition name                   : C8021P_2
  802.1p                         = 2

Condition name                   : C8021P_3
  802.1p                         = 3

Condition name                   : C8021P_4
  802.1p                         = 4

Condition name                   : C8021P_5
  802.1p                         = 5

Condition name                   : C8021P_5_P23
  Source chassis                 = 1/1/23,
  802.1p                         = 5

Condition name                   : C8021P_5_P25
  Source chassis                 = 1/1/25,
  802.1p                         = 5

Condition name                   : C8021P_5_P26
  Source chassis                 = 1/1/26,
  802.1p                         = 5

Condition name                   : C8021P_5_P27
  Source chassis                 = 1/1/27,
  802.1p                         = 5

Condition name                   : C8021P_5_P29
  Source chassis                 = 1/1/29,
  802.1p                         = 5

Condition name                   : C8021P_5_P30
  Source chassis                 = 1/1/30,
  802.1p                         = 5

Condition name                   : C8021P_5_P31
  Source chassis                 = 1/1/31,
  802.1p                         = 5

Condition name                   : C8021P_6
  802.1p                         = 6

Condition name                   : C8021P_7
  802.1p                         = 7

Condition name                   : C8021P_7_P23
  Source chassis                 = 1/1/23,
  802.1p                         = 7

Condition name                   : C8021P_7_P25
  Source chassis                 = 1/1/25,
  802.1p                         = 7

Condition name                   : C8021P_7_P26
  Source chassis                 = 1/1/26,
  802.1p                         = 7

Condition name                   : C8021P_7_P27
  Source chassis                 = 1/1/27,
  802.1p                         = 7

Condition name                   : C8021P_7_P29
  Source chassis                 = 1/1/29,
  802.1p                         = 7

Condition name                   : C8021P_7_P30
  Source chassis                 = 1/1/30,
  802.1p                         = 7

Condition name                   : C8021P_7_P31
  Source chassis                 = 1/1/31,
  802.1p                         = 7

Condition name                   : IPSRC37.187.4.39_port29
  Source chassis                 = 1/1/29,
  Source VLAN                    = 4069,
  Source IP                      = 37.187.4.39 mask 255.0.0.0

Condition name                   : P28
  Source chassis                 = 1/1/28

Condition name                   : P29
  Source chassis                 = 1/1/29

Condition name                   : VLAN4069
  Source VLAN                    = 4069

Condition name                   : VLAN4069_port29
  Source chassis                 = 1/1/29,
  Source VLAN                    = 4069

-> show policy action

Code: Select all

Action name                      : A8021P_0
  802.1p                         = 0

Action name                      : A8021P_1
  802.1p                         = 1

Action name                      : A8021P_2
  802.1p                         = 2

Action name                      : A8021P_3
  802.1p                         = 3

Action name                      : A8021P_4
  802.1p                         = 4

Action name                      : A8021P_5
  802.1p                         = 5

Action name                      : A8021P_6
  802.1p                         = 6

Action name                      : A8021P_7
  802.1p                         = 7

-> show policy rule

Code: Select all

Rule name                        : VLAN4069_force802.1pTo3
  Precedence                     = 65535,
  Condition name                 = VLAN4069,
  Action name                    = A8021P_3

Rule name                        : P28_FORCE_8021P
  Precedence                     = 200,
  Condition name                 = P28,
  Action name                    = A8021P_7

Rule name                        : P29_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P29,
  Action name                    = A8021P_0

Rule name                        : P29_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P29,
  Action name                    = A8021P_0

Rule name                        : P23_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P23,
  Action name                    = A8021P_0

Rule name                        : P23_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P23,
  Action name                    = A8021P_0

Rule name                        : P25_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P25,
  Action name                    = A8021P_0

Rule name                        : P25_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P25,
  Action name                    = A8021P_0

Rule name                        : P26_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P26,
  Action name                    = A8021P_0

Rule name                        : P26_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P26,
  Action name                    = A8021P_0

Rule name                        : P27_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P27,
  Action name                    = A8021P_0

Rule name                        : P27_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P27,
  Action name                    = A8021P_0

Rule name                        : P30_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P30,
  Action name                    = A8021P_0

Rule name                        : P30_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P30,
  Action name                    = A8021P_0

Rule name                        : P31_FORCE_8021P_5
  Precedence                     = 200,
  Condition name                 = C8021P_5_P31,
  Action name                    = A8021P_0

Rule name                        : P31_FORCE_8021P_7
  Precedence                     = 200,
  Condition name                 = C8021P_7_P31,
  Action name                    = A8021P_0

Rule name                        : R8021P_7
  Precedence                     = 100,
  Condition name                 = C8021P_7,
  Action name                    = A8021P_7

Rule name                        : R8021P_6
  Precedence                     = 100,
  Condition name                 = C8021P_6,
  Action name                    = A8021P_6

Rule name                        : R8021P_5
  Precedence                     = 100,
  Condition name                 = C8021P_5,
  Action name                    = A8021P_5

Rule name                        : R8021P_4
  Precedence                     = 100,
  Condition name                 = C8021P_4,
  Action name                    = A8021P_4

Rule name                        : R8021P_3
  Precedence                     = 100,
  Condition name                 = C8021P_3,
  Action name                    = A8021P_3

Rule name                        : R8021P_2
  Precedence                     = 100,
  Condition name                 = C8021P_2,
  Action name                    = A8021P_2

Rule name                        : R8021P_1
  Precedence                     = 100,
  Condition name                 = C8021P_1,
  Action name                    = A8021P_1

Rule name                        : R8021P_0
  Precedence                     = 100,
  Condition name                 = C8021P_0,
  Action name                    = A8021P_0

I do a port monitoring on port 1/1/1 (egress) :

Code: Select all

port-monitoring 1 source 1/1/1 file /flash/pmonitor.enc size 10 overwrite on outport timeout 30 enable capture-type brief

When I read the capture, I find 4069 VLAN tagged packets with 802.1p=0 (packets come from port 1/1/29 and they are tagged VLAN 4069) => How is it possible (I forced 802.1p to 3 with the rule "VLAN4069_force802.1pTo3") ?
=> precedence value (65535) of "VLAN4069_force802.1pTo3" rule disable all others rules for the VLAN 4069, isn't it ?

[silvio]

you can check which packet are matching your rules:
policy rule xxx log
...
show qos log

Are the incomming packets in vlan 4096 are from ALE phones? Than you have to deactivate the qos phone automatic....
qos no phone

regards
Silvio

[cmarmonier]

Hello,

I do :

Code: Select all

qos no phone

But 802.1p value for egress packets of port 1/1/1 with "ip_src==37.187.4.39" is 0 (but for anothers ip_src values, 802.1p=3) when I read egress port-monitoring capture on port 1/1/1.



show qos log :

Code: Select all

...
10/15/14  1:49:28  svlan 4069 port 1/1/29
10/15/14  1:49:28  TOS 0x30 (TCP) 37.187.4.39:35099 -> 185.153.245.10:50403
10/15/14  1:49:28 [@01:49:27] rule 'VLAN4069_force802.1pTo3' matched:accept
10/15/14  1:49:28  Tagged.     802.1p 3
...

[silvio]

all seems to be correct - your config is ok and QoS-log shows the correct output. And you didn't use alcatel phones.
Only the output of the port monitoring trace ...
Did I understand correctly that other devices within vlan 4069 didn't show this behavior and they where tagged with 802.1p=3?
Than you can check if the issue is based on this specific source ip or the specific device (use other ip at this device and this ip at other device).
Also you can try to limit your policies - f.e. you can disable all other policies (especialy with p=0).
f.e. policy rule P29_FORCE_8021P_5 disable

Sometimes it helps to find the reason.
regards
Silvio

[cmarmonier]

Did I understand correctly that other devices within vlan 4069 didn't show this behavior and they where tagged with 802.1p=3?

Yes

Than you can check if the issue is based on this specific source ip or the specific device (use other ip at this device and this ip at other device).
Also you can try to limit your policies - f.e. you can disable all other policies (especialy with p=0).
f.e. policy rule P29_FORCE_8021P_5 disable
Sometimes it helps to find the reason.

Problem is during my test, I must not change configuration ot the others VLAN because services ot the others VLAN operate.