[cisco-bba] To Shape or Police DSL Subscribers ??

[Tony]

Hi Gerald,

--- On Thu, 17/2/11, Gerald Krause <gk at ax.tc> wrote:

> From: Gerald Krause <gk at ax.tc>
> Subject: Re: [cisco-bba] To Shape or Police DSL Subscribers ??
> To: cisco-bba at puck.nether.net
> Received: Thursday, 17 February, 2011, 5:49 AM
>
> Sorry for dig out this old thread but
> I'am in the process to test some
> QoS features on our LNS and stumbled upon this post :-).
> 
> My question - what IOS version support such QoS policies to
> be applied
> to individual users/sessions from RADIUS on a NPE-G2 LNS
> and what is the
> difference between this 2 features:
> 
>  1) "QoS: Per-Session Shaping and Queuing on LNS "
>      Cisco FN: supported in 12.2SB but
> not in 12.2SRE
> 
>  2) "Per-User QoS via AAA Policy Name"
>      Cisco FN: supported in 12.2SB and
> 12.2SRE
> 

I don't know about what features are supported in which IOS version and how exactly you should use them, but I can tell you what we are doing that works, which might help you. There are probably other ways to do the same thing, this is what works for us.

We are running 12.2(33)SRD1 on 7204's. I can't see why this won't also work on SRE.

On the box we have QoS policies configured like this one (this is for a link that is primarily used for VoIP, but also has some file replication that is limited fairly harshly to avoid it affecting the VoIP)

!
policy-map xyz-512k-voip-shaper-child
  class xyz-voip-traffic
    priority 400
  class class-xyz-replication
   police 64000 3000 conform-action transmit exceed-action drop
!
policy-map xyz-512k-voip-shaper-parent
  class class-default
    shape average 460000
   service-policy xyz-512k-voip-shaper-child
!

On the RADIUS we have this Cisco-AVPair being returned:

Cisco-AVPair = "ip:sub-qos-policy-out=xyz-512k-voip-shaper-parent"

On the LNS it looks like this:

#show run int virtual-access 1592
!
interface Virtual-Access1592
 bandwidth 155520
 no ip address
 ip load-sharing per-packet
 ip ospf mtu-ignore
 load-interval 30
 no clns route-cache
end


#show policy-map int virtual-access 1592
 Virtual-Access1592
 SSS session identifier 476 -

  Service-policy output: xyz-512k-voip-shaper-parent

    Class-map: class-default (match-any)
      13107796 packets, 1644703212 bytes
      30 second offered rate 1000 bps, drop rate 0000 bps
      Match: any
        13107797 packets, 1644703280 bytes
        30 second rate 1000 bps
      Queueing
      queue limit 115 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 13103036/1706908189
      shape (average) cir 460000, bc 1840, be 1840
      target shape rate 460000

      Service-policy : xyz-512k-voip-shaper-child

        queue stats for all priority classes:
          Queueing
          queue limit 100 packets
          (queue depth/total drops/no-buffer drops) 0/0/0
          (pkts output/bytes output) 2304070/314898450

        Class-map: xyz-voip-traffic (match-all)
          2304068 packets, 246793802 bytes
          30 second offered rate 0000 bps, drop rate 0000 bps
          Match: access-group name xyz-voip-acl
          Priority: 400 kbps, burst bytes 10000, b/w exceed drops: 0


        Class-map: class-xyz-replication (match-all)
          3974924 packets, 513208591 bytes
          30 second offered rate 0000 bps, drop rate 0000 bps
          Match: access-group name xyz-replication
          police:
              cir 64000 bps, bc 3000 bytes
            conformed 3970110 packets, 510621222 bytes; actions:
              transmit
            exceeded 4815 packets, 2587369 bytes; actions:
              drop
            conformed 0000 bps, exceed 0000 bps

        Class-map: class-default (match-any)
          6828803 packets, 884700887 bytes
          30 second offered rate 1000 bps, drop rate 0000 bps
          Match: any
            6828804 packets, 884700887 bytes
            30 second rate 1000 bps

          queue limit 15 packets
          (queue depth/total drops/no-buffer drops) 0/0/0
          (pkts output/bytes output) 10798966/1706908189


You will notice that you can't see the QoS settings that have been applied using a "show run int" command, but you can see with "show policy-map".

Hope this helps.


regards,
Tony Miles.