[c-nsp] QoS problem with VoIP (kind of fun)

[Networkers]

OK I've been looking at this all day. I got it half working.

The Aastra IP phones (connected to FastEthernet0/1) have been programmed to
set DSCP cs6 and precedence 6 on outbound traffic:

# QoS Settings, Match packets with CS6(precedence 6) dscp (110000)
tos sip: 48
tos priority map: (48,6)
priority non-ip: 5

What happens is that even though I think I have this Cisco 2621 router with
dual WIC-ADSL's installed and configured properly, a show policy for the
CriticalTraffic VoIP policy shows an offered rate of 0 bps while a VoIP
phone call is in process outbound from this 2621.

However, if I look at the remote side (for traffic coming back my direction
from the PBX) the offered rate is 28000 bps during a VoIP call, or about
what you'd expect for a uLaw codec as far as the bit rate goes.  So from
this I think QoS works on the traffic from the remote side coming back, but
for some reason I am not able to get the 2621 to prioritize outbound traffic
over Multilink1 back toward the other side (the PBX is in the 192.168.0.0
subnet).

So, QoS works on the remote router going back toward me, but CBWFQ outbound
from this 2621 does not seem to work.  Any gurus have any hints for me?

Let me know if you have questions.  Here is the show policy and the relevant
part of the 2621's config.

Thanks,
Chris

#show policy int multi1
 Multilink1 

  Service-policy output: CriticalTraffic

    Class-map: CRITICAL (match-all)
      0 packets, 0 bytes
      30 second offered rate 0 bps, drop rate 0 bps
      Match: access-group 100
      Queueing
        Strict Priority
        Output Queue: Conversation 264
        Bandwidth 48 (kbps) Burst 1200 (Bytes)
        (pkts matched/bytes matched) 0/0
        (total drops/bytes drops) 0/0

    Class-map: VOIP (match-all)
      909 packets, 61464 bytes
      30 second offered rate 0 bps, drop rate 0 bps
      Match: ip dscp cs6 (48)
      Match:  precedence 6
      Queueing
        Output Queue: Conversation 265
        Bandwidth 240 (kbps) Max Threshold 64 (packets)
        (pkts matched/bytes matched) 887/58208
        (depth/total drops/no-buffer drops) 0/0/0

    Class-map: class-default (match-any)
      123593 packets, 10483778 bytes
      30 second offered rate 60000 bps, drop rate 0 bps
      Match: any 

!
ip subnet-zero
ip cef
!         
class-map match-all VOIP
  match ip dscp cs6
  match  precedence 6
class-map match-all CRITICAL
  match access-group 100
!
policy-map CriticalTraffic
  class CRITICAL
   priority 48
  class VOIP
   bandwidth 240
!
! < deleted various IPSec config things that aren't relevant >
!
interface Multilink1
 bandwidth 3072
 ip address Public.IP.Goes.Here 255.255.255.0
 ip nat outside
 load-interval 30
 keepalive 1
 ppp multilink
 ppp multilink fragment delay 4
 ppp multilink interleave
 ppp multilink group 1
 service-policy output CriticalTraffic
!
interface Tunnel0
 bandwidth 3072
 ip address Tunnel.IP.Goes.Here 255.255.255.0
 ip mtu 1400
! < some irrelevant IPSec stuff deleted >
 load-interval 30
 delay 1000
 qos pre-classify
 cdp enable
 tunnel source Multilink1
!
interface ATM0/0
 mtu 1500
 bandwidth 1536
 no ip address
 logging event subif-link-status
 load-interval 30
 no atm ilmi-keepalive
 dsl operating-mode auto
 dsl enable-training-log
!
interface ATM0/0.1 point-to-point
 bandwidth 1536
 ip address 172.16.16.38 255.255.255.252
 ip nat outside
 ip ospf transmit-delay 40
 pvc 0/32 
  protocol ppp Virtual-Template1
 !
!
interface FastEthernet0/0
 description Main Ethernet (Public)
 ip address Another.Public.IP.Addr 255.255.255.192
 load-interval 30
 speed 100
 full-duplex
 no cdp enable
 service-policy output CriticalTraffic
!
interface ATM0/1
 mtu 1500
 bandwidth 1536
 no ip address
 logging event subif-link-status
 load-interval 30
 no atm ilmi-keepalive
 dsl operating-mode auto
 dsl enable-training-log
!
interface ATM0/1.1 point-to-point
 bandwidth 1536
 ip address 172.16.16.34 255.255.255.252
 ip nat outside
 ip ospf transmit-delay 40
 pvc 0/32 
  protocol ppp Virtual-Template1
 !
!
interface FastEthernet0/1
 ip address 192.168.104.1 255.255.255.0
 ip nat inside
 load-interval 30
 duplex auto
 speed auto
 no cdp enable
 service-policy output CriticalTraffic
!
interface Virtual-Template1
 no ip address
 load-interval 30
 keepalive 1
 ppp multilink
 ppp multilink group 1
 ppp multilink multiclass
 service-policy output CriticalTraffic
!
ip nat inside source route-map nonat interface Multilink1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Multilink1
ip route 192.168.0.0 255.255.0.0 Tunnel0
!
ip access-list extended DontNATOurVPNTraffic
 deny   ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
 permit ip 192.168.104.0 0.0.0.255 any

access-list 100 permit udp any any precedence critical
!
route-map nonat permit 9
 match ip address DontNATOurVPNTraffic