Campus QoS Design Simplified

(1)

(2)

Campus QoS Design—Simplified

BRKCRS-2501

Tim Szigeti, CCIE#9794

Senior Technical Leader

(3)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References

(4)

BRKCRS-2501 Cisco Public

Session Abstract



This session discusses strategic factors driving network QoS

designs, including: new applications and business requirements,

new industry guidance and best practices and new platforms and

technologies



Cisco QoS strategy for rich media networks will be presented and

campus-specific design considerations will be discussed.



Then platform-specific designs for classification, policing and ingress

& egress queuing policies will be detailed for the:

• Cisco Catalyst 2960/3560/3750 G/E/X series switches

• Cisco Catalyst 3850 series switches (wired-only)

• Cisco Catalyst 4500 (Supervisor 7-E) and 4500-X series switches

• Cisco Catalyst 6500 (Supervisor 2T) series switches

(5)

QoS Design Strategy Review

By 2016…



Global IP traffic will increase 3-fold

• Even after having increased 8-fold in the past 5 years



The number of IP devices will be more than triple the global population



Wireless traffic will exceed wired by 2014 and will be over 60% by 2016



Non-PC traffic (smartphones, tablets etc.) will account for 31% of all traffic



86% of consumer internet traffic will be video

Macro Trends in Internet Usage

(6)

QoS Design Strategy Review

Trends in Voice, Video and Data Media Applications

Data Connectivity Web Email Messaging Convergence Leveraging Investment Data Apps • App Sharing • Web/Internet • Messaging • Email Voice • IP Telephony Video • IP Video Conf Media Explosion Co-Existence Data Apps • App Sharing • Web/Internet • Messaging • Email Voice • IP Telephony • HD Audio • Softphone • Other VoIP Video • IP Video Conf • Surveillance • Video Telephony • HD Video Conf • VoD Streaming Unmanaged • Internet Streaming • Internet VoIP • YouTube • MySpace • Other Collaborative Media Experience Assurance Ad -H oc A pp T e le P re s e nce W e bE x 6

(7)

QoS Design Strategy Review

RFC 4594-Based Strategic QoS Recommendations

Application Class Per-Hop Behavior Admission Control Queuing & Dropping Application Examples

VoIP Telephony EF Required Priority Queue (PQ) Cisco IP Phones (G.711, G.729)

Broadcast Video CS5 Required (Optional) PQ Cisco IP Video Surveillance / Cisco Enterprise TV Realtime Interactive CS4 Required (Optional) PQ Cisco TelePresence

Multimedia Conferencing AF4 Required BW Queue + DSCP WRED Cisco Unified Personal Communicator, WebEx Multimedia Streaming AF3 Recommended BW Queue + DSCP WRED Cisco Digital Media System (VoDs)

Network Control CS6 BW Queue EIGRP, OSPF, BGP, HSRP, IKE

Signaling CS3 BW Queue SCCP, SIP, H.323

Ops / Admin / Mgmt (OAM) CS2 BW Queue SNMP, SSH, Syslog

Transactional Data AF2 BW Queue + DSCP WRED ERP Apps, CRM Apps, Database Apps

Bulk Data AF1 BW Queue + DSCP WRED E-mail, FTP, Backup Apps, Content Distribution

Best Effort DF Default Queue + RED Default Class

(8)

QoS Design Strategy Review

Business Requirements Will Continue to Evolve and Expand over Time

Time

Critical Data

Realtime

4-Class Model

Best Effort

Signaling / Control

Call Signaling

Critical Data

Interactive Video

Voice

8-Class Model

Scavenger

Best Effort

Streaming Video

Network Control

Network Management

Realtime Interactive

Transactional Data

Multimedia Conferencing

Voice

12-Class Model

Bulk Data

Scavenger

Best Effort

Multimedia Streaming

Network Control

Broadcast Video

Call Signaling

8

(9)

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qosmrn.pdf

QoS Design Strategy—At-A-Glance

(10)

Campus QoS Design:

(11)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References

(12)

Campus QoS Design Considerations



The primary role of QoS in medianet campus networks is not to control latency

or jitter (as it is in the WAN/VPN), but to manage packet loss.



In GE/10GE campus networks, it takes only a few milliseconds of congestion to

cause instantaneous buffer overruns resulting in packet drops.



Rich media applications—particularly HD video applications—are

extremely

sensitive to packet drops

, to the point where even 1 packet dropped in

10,000 is discernable by the end-user.

The Case for Campus QoS

(13)

1 0 8 0 li n e s o f Hori z o n ta l Reso lut ion

1920 lines of Vertical Resolution (Widescreen Aspect Ratio is 16:9) _{1080 x 1920 lines =}

2,073,600 pixels per frame x 3 colors per pixel x 1 Byte (8 bits) per color x 30 frames per second = 1,492,992,000 bps or 1.5 Gbps Uncompressed

Cisco H.264-based HD Codecs transmit 3-5 Mbps per 1080p image

which represents

over

99.67%

compression (300:1)

Therefore packet loss is proportionally magnified in overall video quality

Users can notice a single packet lost in 10,000—Making HD Video

One Hundred Times More Sensitive to Packet Loss than VoIP!

Campus QoS Design Considerations

(14)

BRKCRS-2501 20 msec Cisco Public

Voice Packets

Bytes

200 600 1000 Audio Samples 1400

Time

200 600 1000 1400 33 msec

Video Packets

Video Frame Video Frame Video Frame

Campus QoS Design Overview

VoIP vs. HD Video—At the Packet Level

(15)

0 20 40 60 80 100 120 140 10 50 90 13 0 17 0 21 0 25 0 29 0 3 3 0 37 0 41 0 45 0 49 0 53 0 57 0 61 0 6 5 0 69 0 73 0 77 0 81 0 85 0 89 0 93 0 9 7 0

KBy

tes

Pe

r

ms

Gbps Line Rate

Campus QoS Design Considerations

How Long Can Queue-Buffers Accommodate Line-Rate Bursts?

Gbps Linecard Example (WS-X6148A-GE-TX)

Gbps Line Rate: 1 Gbps = 125 MB/s

or 125 KB/ms

Total Per-Port Buffer: 5.4 MB

Total Per-Queue Buffer

*

: 1.35 MB

Total Per-Queue Buffering Capacity: 10.8 ms

*Assuming (4) equal-sized queues

ms

(16)

KBy

tes

Pe

r

ms

10 Gbps Line Rate

Campus QoS Design Considerations

How Long Can Queue-Buffers Accommodate Line-Rate Bursts?

Gbps Linecard Example (WS-X6148A-GE-TX)

Gbps Line Rate: 10 Gbps = 1.25 GB/s

or 1250 KB/ms

Total Per-Port Buffer: 90 MB

Total Per-Queue Buffer

*

: 11.25 MB

Total Per-Queue Buffering Capacity: 9.0 ms

*Assuming (8) equal-sized queues

ms

0 200 400 600 800 1000 1200 1400 10 50 90 1 3 0 17 0 21 0 25 0 29 0 33 0 3 7 0 41 0 45 0 49 0 53 0 57 0 6 1 0 65 0 69 0 73 0 77 0 81 0 85 0 89 0 93 0 97 0

10 GE Linecard Example (WS-X6904)

16

(17)

Campus QoS Design Considerations



Always perform QoS in hardware rather than software when a choice exists



Classify and mark applications as close to their sources as technically and

administratively feasible



Police unwanted traffic flows as close to their sources as possible



Enable queuing policies at every node where the potential for congestion exists

(18)

Campus QoS Design Considerations



MLS QoS vs. MQC QoS vs. C3PL QoS



Global Default QoS Setting



Trust States and Conditional Trust



Per-Port QoS, Per-VLAN QoS, Per-Port/Per-VLAN QoS



Ingress QoS Models



Egress QoS Models



EtherChannel QoS



QoS Roles in a Medianet Campus

Campus QoS Tools and Options

(19)

Campus QoS Design Considerations



Catalyst 2960 / 3650 / 3750 are the last platforms to use Multilayer Switch QoS

(MLS QoS) syntax

• QoS is disabled by default and must be globally enabled with mls qos command

• Once enabled, all ports are set to an untrusted port-state



Catalyst 3850 and 4500 are using IOS MQC QoS (like router platforms)

• QoS is enabled by default

• All ports trust at layer 2 and layer 3 by default



Catalyst 6500 is using Cisco Common Classification Policy Language (C3PL)

QoS

• QoS is enabled by default (Sup2T) – Disabled by default (Sup720)

• All ports trust at layer 2 and layer 3 by default

• C3PL presents queuing policies similar to MQC

MLS QoS vs. MQC QoS vs. C3PL QoS

(20)

Campus QoS Design Considerations

Trust States and Operations

CoS = 5 DSCP = 46 CoS = 5 DSCP = 46 Trust CoS [mls] qos trust cos CoS = 5 DSCP = 46 Trust DSCP [mls] qos trust dscp Untrusted no [mls] qos trust Internal DSCP = 0 CoS = 0 DSCP = 0 Internal DSCP = 40 CoS = 5 DSCP = 40 Internal DSCP = 46 CoS = 5 DSCP = 46

CoS-to-DSCP Mapping Table CoS 0  0 CoS 4  32 CoS 1  8 CoS 5  40

CoS 2  16 CoS 6  48 CoS 3  24 CoS 7  56

mls qos map cos-dscp 0 8 16 24 32 40 48 56

(21)

Campus QoS Design Considerations

Conditional Trust Operation

Cisco TelePresence System (CTS) Endpoint Example

3

CTS Primary Codec: Voice + Video  CoS 4 & DSCP CS4 Call-Signaling  CoS 3 & DSCP CS3

CoS-to-DSCP Map: CoS 5  DSCP EF (46) CoS 4  DSCP CS4 (32) CoS 3  DSCP CS3 (24)

4

Trust is Dynamically Extended to Cisco CTS Primary Codec

Successful “Condition” Met (i.e. CDP negotiation successful)

1

Cisco 7975G IP Phone: Voice  CoS 5 & DSCP EF

Signaling  CoS 3 & DSCP CS3

2

(22)

Campus QoS Design Considerations

Trust Boundaries

Access-Edge Switches

Conditionally Trusted Endpoints Example: IP Phone + PC

mls qos trust device cisco-phone

Secure Endpoint Example: Software-protected PC With centrally-administered QoS markings

mls qos trust dscp Unsecure Endpoint no mls qos trust Trus t Boun da ry Trust B ounda ry 22

(23)

Campus QoS Design Considerations

Per-Port QoS vs. Per-VLAN QoS

Policy map is applied to the

physical switch port

VLAN 10

VLAN 20

Physical Ports

VLAN Interfaces

Policy map is applied to the

logical VLAN interface

Per-Port QoS

Per-VLAN QoS

VLAN 10

VLAN 20

Physical Ports

(24)

DVLAN 10

DVLAN policy map is applied

to the Data VLAN (only)

on a given trunked switch port

VVLAN 110

Trunked Physical Ports

VLAN Interfaces

VVLAN policy map is applied

to the Voice VLAN (only)

on a given trunked switch port

Campus QoS Design Considerations

Per-Port/Per-VLAN QoS

(25)

Campus Ingress QoS Models

Trust CoS

Trust Device / Conditional Trust No Trust (Untrusted) Ingre s s Que uing P olic ie s (if re quire d a nd s uppo rted)

(Optional) Policing Policies VoIP Policer (<128 kbps)

Signaling Policer (<32 kbps)

MM-Conf Policer (<5 Mbps)

Trans-Data Policer (<10 Mbps)

Bulk Data Policer (<10 Mbps)

Best Effort Policer (<10 Mbps) Scavenger Policer (<10 Mbps) Drop Drop Remark to CS1 Remark to CS1 Remark to CS1 Drop Drop Drop Yes No Yes No Yes No Yes No Yes No Yes No Yes No Yes No Marking Policies VoIP Classifier Signaling Classifier

Multimedia Conferencing Classifier

Signaling Classifier

Transactional Data Classifier

Bulk Data Classifier

Scavenger Classifier

Best Effort (Class-Default)

Mark EF Mark CS3 Mark AF41 Mark CS3 Mark AF21 Mark AF11 Mark CS1 Mark DF DVLAN VVLAN Trust DSCP

(26)

Campus QoS Design Recommendations



Catalyst Queuing is done in hardware and varies by platform/linecard and can be expressed as:

x

P

y

Q

z

T

For Example: 1P3Q8T means:

1 PQ

3 non-priority queues, each with 8 drop-thresholds per queue



Minimum queuing capabilities for medianet is 1P3QyT



Realtime (PQ) should be no more than 33% of link



Best-Effort Queue should be guaranteed at 25% of link



Scavenger/Bulk queue should be minimally provisioned



Enable congestion-avoidance on non-priority queues (WRED, WTD, DBL)

Queuing and Dropping Recommendations

Realtime ≤ 33% Guaranteed BW Scavenger/Bulk ≤ 5% Best Effort ≥ 25% 26

(27)

Campus QoS Design Recommendations



EtherChannels are comprised of logical (Port-Channel) interfaces and physical

(port-member) interfaces



Ingress QoS policies are

sometimes

applied to the logical interfaces

–

but not always



Egress QoS policies (such as queuing) are

always

applied to the physical

port-member interfaces

EtherChannel QoS

Platform QoS Policies Applied to the

(Logical) Port-Channel Interface

QoS Policies Applied to the (Physical) Port-Member

Interfaces

Catalyst 2960/3560/3750  Ingress & Egress

Catalyst 3850  Ingress  Egress

(28)

© 2013 Cisco and/or its affiliates. All rights reserved. BRKCRS-2501 Cisco Public Core Distribution Access Untrusted Endpoints Trusted Endpoints Conditionally- Trusted Endpoints

Switch-to-Switch/Router Port QoS

• Trust DSCP

• 1P3QyT or 1P7QyT Queuing

WAN/VPN Block Untrusted Endpoint Port QoS:

• No Trust

• [Optional Ingress Marking and/or Policing]

• 1P3QyT Queuing Trusted Endpoint Port QoS: • Trust-DSCP • [Optional Ingress Marking and/or Policing] • 1P3QyT Queuing

Conditionally-Trusted Endpoint Port QoS

• Conditional-Trust with Trust-CoS

• [Optional Ingress Marking and/or Policing]

• 1P3QyT Queuing

Campus QoS Design – Port QoS Roles

(29)

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampusaag.pdf

(30)

Cisco Catalyst 2960/3560/3750

QoS Design

(31)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References

(32)

Catalyst 2960/3560/3750 Campus QoS Design

Catalyst 2960/3650/3750 QoS Roles in Campus Networks

No Trust + Ingress Queuing + Egress Queuing Trust DSCP + Ingress Queuing + Egress Queuing Conditional Trust + Ingress Queuing + Egress Queuing Classification/Marking + [Optional Policing] + Ingress Queuing + Egress Queuing Distribution Switches C2960/ C3560/ C3750 Access Switch 32

(33)

Catalyst 2960/3560/3750 Campus QoS Design

1. Enable QoS

2. Configure Ingress QoS Model(s):



Trust Models



Conditional Trust Model



Service Policy Models

3. Configure Ingress Queuing

4. Configure Egress Queuing

(34)

mls qos trust device cisco-phone [or]

mls qos trust device cts [or]

mls qos trust device ip-camera [or]

mls qos trust device media-player

Catalyst 2960/3560/3750 Campus QoS Design

Enabling QoS and Trust Model Examples

mls qos

Enabling QoS:

mls qos trust dscp

Trust-DSCP Model Example:

Conditional-Trust Model Example:

Shaded commands are global

Highlighted commands are interface specific mls qos trust cos

Trust-CoS Model Example:

mls qos map cos-dscp 0 8 16 24 32 46 48 56

(35)

mls qos trust device cisco-phone mls qos trust cos

Catalyst 2960/3560/3750 Campus QoS Design

Conditional Trust to a Cisco IP Phone Example

Conditional Trust Policy to a Cisco IP Phone:

(36)

[class-maps omitted for brevity] policy-map MARKING-POLICY class VOIP set dscp ef class MULTIMEDIA-CONFERENCING set dscp af41 class SIGNALING set dscp cs3 class TRANSACTIONAL-DATA set dscp af21 class BULK-DATA set dscp af11 class SCAVENGER set dscp cs1 class DEFAULT set dscp default

Catalyst 2960/3560/3750 Campus QoS Design

Service Policy Model Example—Marking Policy

service-policy input MARKING-POLICY

Note: While the Catalyst 3750-E MQC syntax includes an implicit class-default, any policy actions assigned to this class are not enforced. Therefore, an explicit class DEFAULT is configured in to enforce a marking policy to DSCP 0 for all other IP traffic.

(37)

mls qos map policed-dscp 0 10 18 to 8 [class-maps omitted for brevity]

policy-map MARKING&POLICING class VVLAN-VOIP

set dscp ef

police 128k 8000 exceed-action drop class VVLAN-SIGNALING

set dscp cs3

police 32k 8000 exceed-action drop class MULTIMEDIA-CONFERENCING

set dscp af41

police 5m 8000 exceed-action drop class SIGNALING

set dscp cs3

police 32k 8000 exceed-action drop class TRANSACTIONAL-DATA

set dscp af21

police 10m 8000 exceed-action policed-dscp-transmit

…

Catalyst 2960/3560/3750 Campus QoS Design

Service Policy Model Example—Marking & Policing Policy

service-policy input MARKING&POLICING

… (continued)

class BULK-DATA set dscp af11

police 10m 8000 exceed-action policed-dscp-transmit

class SCAVENGER set dscp cs1

police 10m 8000 exceed-action drop class DEFAULT

set dscp default

police 10m 8000 exceed-action policed-dscp-transmit Note: Remarking is performed by configuring a policed-DSCP map with the global configuration command mls qos map policed-dscp, which specifies which DSCP values are subject to remarking if out-of-profile and what value these should be remarked as.

In this example exceeding data classes are remarked to Scavenger (CS1/DSCP 8).

(38)

mls qos vlan-based

Catalyst 2960/3560/3750 Campus QoS Design

Per-VLAN QoS Design

Interface [

range

] GigabitEthernet:

service-policy input MARKING

Interface VLAN:

(39)

Catalyst 2960/3560/3750 Campus QoS Design

Ingress Queuing Model (1P1Q3T)

1P1Q3T Q2 Priority Queue CS6 CS7 EF CS4 Queue 1 Non-Priority Default Queue Network Management Signaling Realtime Interactive Transactional Data Multimedia Conferencing Bulk Data AF2 CS3 CS4 AF4 CS2 AF1 Scavenger CS1 Multimedia Streaming AF3

Broadcast Video VoIP Application CS5 EF Internetwork Control CS6 DSCP Network Control (CS7) CS5 Q1T3 Q1T2 Q1T1 CS3 CS2 CS6 CS7 AF1 CS1 AF4 AF3 AF2

(40)

! This section configures the ingress queues and thresholds

mls qos srr-queue input priority-queue 2 bandwidth 30 mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input buffers 90 10

mls qos srr-queue input threshold 1 80 90

! This section configures the ingress CoS-to-Queue mappings

mls qos srr-queue input cos-map queue 1 threshold 1 0 1 2 mls qos srr-queue input cos-map queue 1 threshold 2 3 mls qos srr-queue input cos-map queue 1 threshold 3 6 7 mls qos srr-queue input cos-map queue 2 threshold 1 4 5

! This section configures ingress DSCP-to-Queue Mappings

mls qos srr-queue input dscp-map queue 1 threshold 1 0 8 10 12 14 mls qos srr-queue input dscp-map queue 1 threshold 1 16 18 20 22

mls qos srr-queue input dscp-map queue 1 threshold 1 26 28 30 34 36 38 mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56 mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

Catalyst 2960/3560/3750 Campus QoS Design

Ingress Queuing Model (1P1Q3T) Example

(41)

Catalyst 2960/3560/3750 Campus QoS Design

Egress Queuing Model (1P3Q3T)

Network Management Signaling Realtime Interactive Transactional Data Multimedia Conferencing Bulk Data AF2 CS3 CS4 AF4 CS2 AF1 Scavenger CS1 Multimedia Streaming AF3

Broadcast Video VoIP Application CS5 EF Internetwork Control CS6 DSCP Network Control (CS7) Q1 Queue 4 (5%) Queue 2 (30%) Default Queue Queue 3 (35%) Q2T3 Q2T2 Q4T2 Q4T1 Q2T1 CS6 CS7 EF CS3 CS2 DF CS1 AF1 AF4 AF3 AF2 1P3Q3T CS5

(42)

! This section configures egress buffers and thresholds

mls qos queue-set output 1 buffers 15 30 35 20

mls qos queue-set output 1 threshold 1 100 100 100 100 mls qos queue-set output 1 threshold 2 80 90 100 400 mls qos queue-set output 1 threshold 3 100 100 100 400 mls qos queue-set output 1 threshold 4 60 100 100 400

! This section configures egress CoS-to-Queue mappings

mls qos srr-queue output cos-map queue 1 threshold 3 4 5 mls qos srr-queue output cos-map queue 2 threshold 1 2 mls qos srr-queue output cos-map queue 2 threshold 2 3 mls qos srr-queue output cos-map queue 2 threshold 3 6 7 mls qos srr-queue output cos-map queue 3 threshold 3 0 mls qos srr-queue output cos-map queue 4 threshold 3 1

Catalyst 2960/3560/3750 Campus QoS Design

Egress Queuing Model (1P3Q3T) Example–Part 1 of 2

(43)

Catalyst 2960/3560/3750 Campus QoS Design

Egress Queuing Model (1P3Q3T) Example–Part 2 of 2

! This section configures egress DSCP-to-Queue mappings

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46 mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22

mls qos srr-queue output dscp-map queue 2 threshold 1 26 28 30 34 36 38 mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56 mls qos srr-queue output dscp-map queue 3 threshold 3 0 mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

! This section configures interface egress queuing parameters

queue-set 1

srr-queue bandwidth share 1 30 35 5 priority-queue out

(44)

Interfaces

Catalyst 2960/3560/3750  Ingress & Egress

All QoS policies are configured on the

physical port-member interfaces only

Catalyst 2960/3560/3750 Campus QoS Design

EtherChannel QoS Design

(45)

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat3xxxaag.pdf

(46)

Cisco Catalyst 3850 (Wired)

QoS Design

(47)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References

(48)

Catalyst 3850 Campus QoS Design

Catalyst 3850 QoS Roles in Campus Networks

No Trust + Ingress Queuing + Egress Queuing Trust DSCP + Ingress Queuing + Egress Queuing Conditional Trust + Ingress Queuing + Egress Queuing Classification/Marking + [Optional Policing] + Ingress Queuing + Egress Queuing Distribution Switches C3850 Access Switch 48

(49)

Catalyst 3850 Campus QoS Design

1. Configure Ingress QoS Model(s):



DSCP-Trust Model*



Conditional Trust Models



Service Policy Models

2. Configure Egress Queuing

QoS Design Steps

*Catalyst 3850 IOS MQC will trust DSCP by default

(therefore no explicit policy is required for DSCP trust)

(50)

! This section applies conditional trust ! and the policy-map to the interface(s)

trust device cisco-phone

service-policy input CISCO-IPPHONE

Catalyst 3850 Campus QoS Design

Conditional Trust Models

! This section defines the class-maps ! to match Voice and Signaling

class-map match-all VOICE match cos 5

class-map match-all SIGNALING match cos 3

! This section defines the CoS-to-DSCP ! remarking policy-map policy-map CISCO-IPPHONE class VOICE set dscp ef class SIGNALING set dscp cs3 class class-default set dscp default trust device cisco-phone [or]

trust device cts [or]

trust device ip-camera [or]

trust device media-player

Conditional-Trust Models:

Cisco IP Phone Conditional Trust Example

(51)

Catalyst 3850 Campus QoS Design

Service Policy Model Example – Marking Policy

(52)

© 2013 Cisco and/or its affiliates. All rights reserved. BRKCRS-2501 Cisco Public policy-map MARKING&POLICING class VVLAN-VOIP set dscp ef police 128k burst ? conform-action transmit exceed-action drop class VVLAN-SIGNALING set dscp cs3 police 32k conform-action transmit exceed-action drop class MULTIMEDIA-CONFERENCING set dscp af41 police 5m conform-action transmit exceed-action drop class SIGNALING set dscp cs3 police 32k conform-action transmit exceed-action drop [continued]

Catalyst 3850 Campus QoS Design

Service Policy Model Example – Marking & Policing Policy

…[continued] class TRANSACTIONAL-DATA set dscp af21 police 10m conform-action transmit exceed-action TABLE-MAP class BULK-DATA set dscp af11 police 10m conform-action transmit exceed-action TABLE-MAP class SCAVENGER set dscp cs1 police 10m conform-action transmit exceed-action drop class class-default set dscp default police 10m conform-action transmit exceed-action TABLE-MAP

service-policy input MARKING&POLICING

http://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/qos/configuration_guide/b_mqc_qos_32se_3850_chapter_010.html#reference_BC97692D1F1 E4F8A8A335878B5F612D0

Reference table-map

construct from IOS

(53)

service-policy input VLAN-POLICERS

Catalyst 3850 Campus QoS Design

Service Policy Model Example – Per-Port/Per-VLAN QoS (IP Phone Example)

Interface [range] GigabitEthernet

(in this example VLAN 10 is the Data VLAN

and VLAN 110 is the VVLAN)

class-map VVLAN match vlan 110 class-map DVLAN match vlan 10 policy-map VLAN-POLICERS class VVLAN police 192k burst ? conform-action transmit exceed-action drop class DVLAN police 50m conform-action transmit exceed-action drop

(54)

Catalyst 3850 Campus QoS Design

Egress Queuing (1P7Q3T with WTD) Model

Network Management Signaling Realtime Interactive Transactional Data Multimedia Conferencing Bulk Data AF2 CS3 CS4 AF4 CS2 AF1 Scavenger CS1 Best Effort DF

Multimedia Streaming AF3 Broadcast Video VoIP Application CS5 EF Internetwork Control CS6 DSCP Network Control (CS7) 1P7Q3T PQ EF CS5 CS4 Q7 (BW 10%) CS7 & CS6 CS3 & CS2 Q6 (BW 10% + WTD) Q5 (BW 10% + DSCP-Based WTD) Q4 (BW 10% + DSCP-Based WTD) Q3 (BW 4% + DSCP-Based WTD) Q2 (BWR 1%) Q1 (25%) DF AF1 CS1 AF2 AF3 AF4 WTD = Weighted Tail Drop 54

(55)

! This section configures the class-maps

class-map match-any PRIORITY-QUEUE match dscp cs4 cs5 ef

class-map match-any CONTROL-MGMT-QUEUE match dscp cs7 cs6 cs3 cs2

class-map match-all MULTIMEDIA-CONFERENCING-QUEUE match dscp af41 af42 af43

class-map match-all MULTIMEDIA-STREAMING-QUEUE match dscp af31 af32 af33

class-map match-all TRANSACTIONAL-DATA-QUEUE match dscp af21 af22 af23

class-map match-all BULK-DATA-QUEUE match dscp af11 af12 af13

class-map match-all SCAVENGER-QUEUE match dscp cs1

Catalyst 3850 Campus QoS Design

(56)

! This section configures policy-map

policy-map 1P7Q3T class PRIORITY-QUEUE priority level 1 (video = priority l2) class CONTROL-MGMT-QUEUE bandwidth percent 10 class MULTIMEDIA-CONFERENCING-QUEUE bandwidth percent 10

queue-limit dscp af43 percent 80 queue-limit dscp af42 percent 90 queue-limit dscp af41 percent 100 class MULTIMEDIA-STREAMING-QUEUE bandwidth percent 10

queue-limit dscp af33 percent 80 queue-limit dscp af32 percent 90 queue-limit dscp af31 percent 100

…

Catalyst 3850 Campus QoS Design

Egress Queuing (1P7Q3T) Example – Part 2 (Policy-Map)

! This section attaches the policy to the int(s)

service-policy output 1P7Q3T

[continued]

class TRANSACTIONAL-DATA-QUEUE bandwidth percent 10

queue-limit dscp af23 percent 80 queue-limit dscp af22 percent 90 queue-limit dscp af21 percent 100 class BULK-DATA-QUEUE

bandwidth percent 4

queue-limit dscp af13 percent 80 queue-limit dscp af12 percent 90 queue-limit dscp af11 percent 100 class SCAVENGER-QUEUE

bandwidth percent 1 class class-default

bandwidth remaining percent 25

(57)

! This section configures Shaping policy-map

policy-map 50MBPS-SHAPER class class-default shape average 50000000 service-policy 2P6Q3T

! Nested service-policy statement invokes queuing policy within the shaped rate

Catalyst 3850 Campus QoS Design

Hierarchical Policies: Queuing within Shaped Rate Example

! This section attaches the H-QoS policy to the int(s)

(58)

Catalyst 3850 Campus QoS Design

EtherChannel QoS Design

Interfaces

• Ingress

QoS policies are configured on the

logical Port-Channel interface

Typically these are simply to enable DSCP trust

(which requires no explicit configuration)

• Egress

QoS policies are configured on the

physical port-member interfaces

(59)

Cisco Catalyst 4500 (Supervisor 7-E) and 4500-X

QoS Design

(60)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References



Appendix: AutoQoS for Medianet

(61)

Catalyst 4500 Campus QoS Design

Catalyst 4500 QoS Role in Campus Networks

Trust DSCP + Egress Queuing Core Switches Access Switches Catalyst 4500 Distribution Switches

(62)

Catalyst 4500 Campus QoS Design

1. Configure Ingress QoS Model(s):



DSCP-Trust Model*



Conditional Trust Model



Service Policy Models

2. Configure Egress Queuing

QoS Design Steps

*Catalyst 4500 IOS MQC will trust DSCP by default

(therefore no explicit policy is required for DSCP trust)

(63)

! This section applies conditional trust and the policy-map to the interface(s)

qos trust device cisco-phone

service-policy input CISCO-IPPHONE

Catalyst 4500 Campus QoS Design

Conditional Trust Model – Cisco IP Phone Example

! This section defines the class-maps to match Voice and Signaling

class-map match-all VOICE match cos 5

class-map match-all SIGNALING match cos 3

! This section defines the CoS-to-DSCP remarking policy-map

policy-map CISCO-IPPHONE class VOICE set dscp ef class SIGNALING set dscp cs3 class class-default set dscp default

(64)

Catalyst 4500 Campus QoS Design

Service Policy Model Example – Marking Policy

service-policy input MARKING-POLICY

(65)

policy-map MARKING&POLICING class VVLAN-VOIP set dscp ef police 128k bc 8000 conform-action transmit exceed-action drop class VVLAN-SIGNALING set dscp cs3 police 32k bc 8000 conform-action transmit exceed-action drop class MULTIMEDIA-CONFERENCING set dscp af41 police 5m bc 8000 conform-action transmit exceed-action drop class SIGNALING set dscp cs3 police 32k bc 8000 conform-action transmit exceed-action drop [continued]

Catalyst 4500 Campus QoS Design

Service Policy Model Example – Marking & Policing Policy

…[continued]

class TRANSACTIONAL-DATA set dscp af21

police 10m bc 8000

conform-action transmit

exceed-action set-dscp-transmit af22 class BULK-DATA

set dscp af11

police 10m bc 8000

conform-action transmit

exceed-action set-dscp-transmit af12 class SCAVENGER set dscp cs1 police 10m bc 8000 conform-action transmit exceed-action drop class class-default set dscp default police 10m bc 8000 conform-action transmit exceed-action set-dscp-transmit cs1

(66)

metadata flow

class-map match-any REALTIME match application cisco-phone match application rtp

class-map match-all REALTIME-INTERACTIVE match application telepresence-media

class-map match-any MULTIMEDIA-CONFERENCING match application webex-video

match application webex-voice match application jabber

class-map match-any SIGNALING match application h323

match application sip

match application telepresence-control match application rtsp

class-map match-any TRANSACTIONAL-DATA match application telepresence-data match application webex-meeting match application citrix

match application vmware-view

match application wyze-zero-client

match application xmpp-client

Catalyst 4500 Campus QoS Design

Service Policy Model Example – Medianet Metadata (NBAR2) Classification

(67)

qos trust device cisco-phone vlan 10

service-policy input DVLAN-POLICERS vlan 110

service-policy input VVLAN-POLICERS

Catalyst 4500 Campus QoS Design

Service Policy Model Example – Per-Port/Per-VLAN QoS (IP Phone Example)

Interface [range] GigabitEthernet

(68)

Catalyst 4500 Campus QoS Design

Egress Queuing (1P7Q1T+DBL) Model

Network Management Signaling Realtime Interactive Transactional Data Multimedia Conferencing Bulk Data AF2 CS3 CS4 AF4 CS2 AF1 Scavenger CS1 Best Effort DF

Multimedia Streaming AF3 Broadcast Video VoIP Application CS5 EF Internetwork Control CS6 DSCP Network Control (CS7) 1P7Q1T (+DBL) PQ EF CS5 CS4 Q7 (BWR 10%) CS7 & CS6 CS3 & CS2 Q6 (BWR 10%) Q5 (BWR 10%) Q4 (BWR 10%) Q3 (BWR 4%) Q2 (BWR 1%) Q1 (25%) DF AF1 CS1 AF2 AF3 AF4 BWR = Bandwidth Remaining 68

(69)

! This section configures policy-map

policy-map 1P7Q1T class PRIORITY-QUEUE priority

class CONTROL-MGMT-QUEUE

bandwidth remaining percent 10 class MULTIMEDIA-CONFERENCING-QUEUE bandwidth remaining percent 10 class MULTIMEDIA-STREAMING-QUEUE bandwidth remaining percent 10 class TRANSACTIONAL-DATA-QUEUE bandwidth remaining percent 10 dbl

class BULK-DATA-QUEUE

bandwidth remaining percent 4 dbl

class SCAVENGER-QUEUE

bandwidth remaining percent 1 class class-default

bandwidth remaining percent 25

! This section configures the class-maps

class-map match-all PRIORITY-QUEUE match dscp cs4 cs5 ef

class-map match-all CONTROL-MGMT-QUEUE match dscp cs7 cs6 cs3 cs2

class-map match-all MULTIMEDIA-CONFERENCING-QUEUE match dscp af41 af42 af43

class-map match-all MULTIMEDIA-STREAMING-QUEUE match dscp af31 af32 af33

class-map match-all TRANSACTIONAL-DATA-QUEUE match dscp af21 af22 af23

class-map match-all BULK-DATA-QUEUE match dscp af11 af12 af13

class-map match-all SCAVENGER-QUEUE match dscp cs1

Catalyst 4500 Campus QoS Design

Egress Queuing (1P7Q1T+DBL) Example

! This section attaches the policy to the int(s)

(70)

Catalyst 4500 Campus QoS Design

EtherChannel QoS Design

Interfaces

• Ingress

QoS policies are configured on the

logical Port-Channel interface

Typically these are simply to enable DSCP trust

(which requires no explicit configuration)

• Egress

QoS policies are configured on the

physical port-member interfaces

(71)

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat4500aag.html

(72)

Cisco Catalyst 6500 (Supervisor-2T)

QoS Design

(73)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References

(74)

Cisco Catalyst 6500 Campus QoS Design

Catalyst 6500 Role in Campus Networks

Trust DSCP

+ Ingress Queuing

+ Egress Queuing

Catalyst 6500 Core/Distribution Switches 74

(75)

Cisco Catalyst 6500 Campus QoS Design

1. Configure Ingress Queuing

2. Configure Egress Queuing

QoS Design Steps—Cisco Catalyst 6500 Supervisor 2T

Catalyst 6500 IOS C3PL will trust DSCP by default

(therefore no explicit policy is required for DSCP trust)

(76)

© 2013 Cisco and/or its affiliates. All rights reserved. BRKCRS-2501 Cisco Public BWR = Bandwidth Remaining Network Management Signaling Realtime Interactive Transactional Data Multimedia Conferencing Bulk Data AF2 CS3 CS4 AF4 CS2 AF1 Scavenger CS1 Best Effort DF

Multimedia Streaming AF3 Broadcast Video VoIP Application-Class CS5 EF Internetwork Control CS6 DSCP Network Control (CS7) 8Q4T/1P7Q4T Realtime-Queue (10% BW/Priority) EF CS5 CS4 Control Queue (10% BW/BWR) CS7 & CS6 CS3 & CS2 Multimedia-Conferencing Queue (10% BW/BWR + DSCP-WRED) Multimedia-Streaming Queue (10% BW/BWR + DSCP-based WRED) Transactional Data (10% BW/BWR + DSCP-based WRED) Bulk Data (4% BW/BWR +DSCP-based WRED) Scavenger (1% BW/BWR) Default Queue (25% BW/BWR + WRED) DF AF1 CS1 AF2 AF3 AF4

Cisco Catalyst 6500 Campus QoS Design

8Q4T (Ingress) & 1P7Q4T (Egress) Queuing Model Examples

(77)

class-map type lan-queuing REALTIME-QUEUE match dscp cs4 cs5 ef

class-map type lan-queuing CONTROL-QUEUE match dscp cs2 cs3 cs6 cs7

class-map type lan-queuing MULTIMEDIA-CONFERENCING-QUEUE

match dscp af41 af42 af43

class-map type lan-queuing MULTIMEDIA-STREAMING-QUEUE match dscp af31 af32 af33

class-map type lan-queuing TRANSACTIONAL-DATA-QUEUE

match dscp af21 af22 af23

class-map type lan-queuing BULK-DATA-QUEUE match dscp af11 af12 af13

class-map type lan-queuing SCAVENGER-QUEUE match dscp cs1

Cisco Catalyst 6500 Campus QoS Design

(78)

Cisco Catalyst 6500 Campus QoS Design

Queuing Policies: Part 2 of 3 (8Q4T Ingress Queuing Policy-Map)

policy-map type lan-queuing INGRESS-8Q4T

class REALTIME-QUEUE bandwidth percent 10 class CONTROL-QUEUE bandwidth percent 10 class MULTIMEDIA-CONFERENCING-QUEUE bandwidth percent 10 random-detect dscp-based

random-detect dscp af41 percent 80 100 random-detect dscp af42 percent 70 100 random-detect dscp af43 percent 60 100 class MULTIMEDIA-STREAMING-QUEUE

bandwidth percent 10 random-detect dscp-based

random-detect dscp af31 percent 80 100 random-detect dscp af32 percent 70 100 random-detect dscp af33 percent 60 100

[continued]

class TRANSACTIONAL-DATA-QUEUE bandwidth percent 10

random-detect dscp-based

random-detect dscp af21 percent 80 100 random-detect dscp af22 percent 70 100 random-detect dscp af23 percent 60 100 class BULK-DATA-QUEUE

bandwidth percent 4

random-detect dscp af11 percent 80 100 random-detect dscp af12 percent 70 100 random-detect dscp af13 percent 60 100 class SCAVENGER-QUEUE

bandwidth percent 1 class class-default

random-detect dscp default percent 80 100 service-policy type lan-queuing input INGRESS-8Q4T

(79)

Cisco Catalyst 6500 Campus QoS Design

Queuing Policies: Part 3 of 3 (1P7Q4T Egress Queuing Policy-Map)

policy-map type lan-queuing EGRESS-1P7Q4T

class REALTIME-QUEUE priority

class CONTROL-QUEUE

bandwidth remaining percent 10 class MULTIMEDIA-CONFERENCING-QUEUE bandwidth remaining percent 10 random-detect dscp-based

random-detect dscp af41 percent 80 100 random-detect dscp af42 percent 70 100 random-detect dscp af43 percent 60 100 class MULTIMEDIA-STREAMING-QUEUE

bandwidth remaining percent 10 random-detect dscp-based

random-detect dscp af31 percent 80 100 random-detect dscp af32 percent 70 100 random-detect dscp af33 percent 60 100

[continued]

class TRANSACTIONAL-DATA-QUEUE bandwidth remaining percent 10 random-detect dscp-based

random-detect dscp af21 percent 80 100 random-detect dscp af22 percent 70 100 random-detect dscp af23 percent 60 100 class BULK-DATA-QUEUE

bandwidth remaining percent 4 random-detect dscp-based

random-detect dscp af11 percent 80 100 random-detect dscp af12 percent 70 100 random-detect dscp af13 percent 60 100 class SCAVENGER-QUEUE

bandwidth remaining percent 1 class class-default

random-detect dscp default percent 80 100 service-policy type lan-queuing output EGRESS-1P7Q4T

(80)

Cisco Catalyst 6500 Campus QoS Design



Ingress

QoS policies are configured on the

logical Port-Channel interface

–

No ingress policies typically needed for C6500-Sup2T EtherChannels

(as all ports trust DSCP & CoS by default)



Egress

QoS policies are configured on the

physical port-member interfaces

EtherChannel QoS Design

Interfaces

(81)

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat6500sup2taag.html

(82)

(83)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References

(84)

Summary



The explosion of rich media applications requires network architects to

reevaluate current QoS designs



RFC 4594 provides an industry best-practice QoS strategy



Campus QoS is needed primarily to control packet drops

–

Some rich media applications require fewer than 1 drop per 10,000 packets

–

QoS architects need to know how trust-states, Port-based QoS, VLAN-based QoS and

EtherChannel QoS can impact designs

–

Hardware queuing (both ingress and egress) vary by platform & linecard



Cisco provides many At-A-Glance guides to get up and running quickly

–

As well as comprehensive in-depth design chapters for additional design reference



AutoQoS for Medianet Feature is available on Catalyst 2960/3560/3750 and

Catalyst 3850 and 4500

Key Takeaways

(85)

Campus QoS Design 4.0—At-A-Glance



QoS Design Strategy At-A-Glance

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qosmrn.pdf



Campus QoS Design At-A-Glance

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampusaag.html



Cisco Catalyst 3560/3750 QoS Design At-A-Glance

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat3xxxaag.html



Cisco Catalyst 4500 QoS Design At-A-Glance

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat4500aag.html



Cisco Catalyst 6500 QoS Design At-A-Glance

http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat6500sup2taag.html

(86)

Campus QoS Design 4.0—In-Depth



Enterprise Quality of Service Design 4.0

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND_40/

QoSIntro_40.html



Campus QoS Design 4.0

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND_40/

QoSCampus_40.html

Comprehensive Design Chapters

(87)

Additional Sessions



BRKCRS-2890 - Converged Access Quality of Service



BRKRST-2513 - QoS Design For IPSec VPNs



BRKRST-2509 - Mastering Data Center QoS



BRKDCT-3346 - QoS Implementation and Operation in a Nexus 7000

environment



BRKRST-2511 - Implementing in QoS for Enablement of Cloud Services using

AVC



BRKRST-2512 - Validating QoS using Medianet Media Awareness

(88)



Expected Release Date:

Nov 2013



Comprehensive QoS design

guidance for PINs and platforms:

• Campus

Catalyst 3750/4500/6500

• WLAN

WLC 5508 / Catalyst 3850 NGWC

• Data Center

Nexus 1000V/2000/5500/7000

• WAN & Branch

Cisco ASR 1000 / ISR G2

• MPLS VPN

Cisco ASR 9000 / CRS-3

• IPSec VPNs

Cisco ISR G2

• ISBN:

1-58714-369-0

88

Ken Briley

(89)

Maximize your Cisco Live experience with your

free Cisco Live 365 account. Download session

PDFs, view sessions on-demand and participate in

live activities throughout the year. Click the Enter

Cisco Live 365 button in your Cisco Live portal to

log in.

Complete Your Online Session Evaluation



Give us your feedback and

you could win fabulous prizes.

Winners announced daily.



Receive 20 Cisco Daily Challenge

points for each session evaluation

you complete.



Complete your session evaluation

app or internet kiosk stations.

(90)

Agenda



QoS Design Strategy Review



Campus QoS Design Considerations & Recommendations



Cisco Catalyst 2960/3560/3750 QoS Design



Cisco Catalyst 3850 QoS Design



Cisco Catalyst 4500 QoS Design



Cisco Catalyst 6500 QoS Design



Summary and References



Appendix: AutoQoS for Medianet

(91)

(92)

(93)

auto qos video [ cts | ip-camera ] 1 P 3 Q3 T E gre s s Que uing P olic ie s

auto qos classify { police } MM-Conf Policer (<5 Mbps)

Trans-Data Policer (<10 Mbps)

Bulk Data Policer (<10 Mbps)

Best Effort Policer (<10 Mbps) Scavenger Policer (<10 Mbps) Remark to CS1 Remark to CS1 Remark to CS1 Drop Drop Drop Yes No Yes No Yes No Yes No Yes No Yes No 1P 1 Q3 T Ingre s s Que uing P olic ie s

auto qos voip [ cisco-phone | cisco-softphone | trust ] auto qos trust { cos | dscp }

auto qos classify Multimedia Conferencing

Classifier Signaling Classifier

Transactional Data Classifier

Bulk Data Classifier

Scavenger Classifier

Best Effort (Class-Default)

Mark AF41 Mark CS3 Mark AF21 Mark AF11 Mark CS1 Mark DF