Sunteți pe pagina 1din 58

Cisco Catalyst 4500 Quality of Service

John Bartlomiejczyk jbartlom@cisco.com Gigabit Systems Business Unit

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Cisco Catalyst 4500 IOS Supervisor Options


Supervisor V
Optimized for Large Networks (Premium HW and SW Services) Support for Higher Port Densities (Catalyst 4510R) Advanced Layer 3 Switching/Routing (OSPF, EIGRP, IS:IS) Highly Scalable Layer 2/3/4 Services Supports Up to 10 Active Slots96Gbps + 72Mpps Redundancy Support in 4507R and 4510R Chassis Catalyst 4503, 4506, 4507R, 4510R, and 4006 Chassis Cisco IOS-Based Optimized for Medium Networks Advanced Layer 3 Switching/Routing (OSPF, EIGRP, IS:IS) Scalable Layer 2/3/4 Services Supports Up to 5 Active Slots64Gbps + 48Mpps Redundancy Support in 4507R Chassis Advanced Layer 3 Switching Catalyst 4503, 4506, 4507R and 4006 Chassis Cisco IOS-Based Optimized for Smaller Networks Basic Layer 3 Switching/Routing (RIP and Static) Layer 2/3/4 Intelligent Services Supports Up to 5 Active Slots64Gbps + 48Mpps Redundancy Support in 4507R Chassis Catalyst 4503, 4506, 4507R and 4006 Chassis Cisco IOS-Based
2002, Cisco Systems, Inc. All rights reserved

Catalyst 4500 Series Cisco IOS-Based Supervisors

Optional NetFlow Daughter Card

Supervisor IV

Optional NetFlow Daughter Card

Supervisor II-Plus

QoS Technical Update June 2004

Cisco Catalyst 4500 Series Chassis Specs

Catalyst 4503 Sup Redundancy Slots Ports (max) Dimensions (RUs) Chassis/19 rack Power Supplies Supervisors n/a 3 96+2 7 6 1+1 Sup II and higher

Catalyst 4506 n/a 6 240+2 10 4 1+1 Sup II and higher

Catalyst 4507R Catalyst 4510R Yes 7 240+4 (SupV) 11 4 1+1 Sup II+/IV/V Yes 10 336+6 (SupV) 14 3 1+1 Sup V
3

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Is QoS needed in the Campus ?

throw more bandwidth Just


at it. That will solve the problem!
Maybe, maybe not. Campus congestion is a buffer management issue.

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Anatomy of a Campus Design


TCP Traffic Burst + VoIP
Core
Si Si

Instantaneous Interface Congestion

Distribution

Si

Si

Access

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Result

Even though the average link utilization is below 100%, buffers may still fill up and packets dropped
QoS Technical Update June 2004

Packets that made it through. Rest are dropped Buffers


Link Utilization 60%

Example: 100 Mbps Link

Packets from different Applications

2002, Cisco Systems, Inc. All rights reserved

Conclusions

Buffers can congest in LANs QoS required when there is congestion


in buffers

Buffer Management can help reduce loss Buffering reduces loss but delay
sensitive application could be negatively impacted

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

QoS Terminology
QoS labels are used to prioritize traffic
COS, TOS, DSCP

Classification is selection of traffic based on labels, policy Marking is application of QoS labels to traffic Policing is process by which the switch limits the bandwidth consumed by a flow of traffic Queuing is placing of traffic in different transmit queues Scheduling is process of emptying the transmit queues
RST-3508 9805_05_2004_c1
2004 Cisco Systems, Inc. All rights reserved.

Layer 2 and 3 Traffic Classification


Layer 2 802.1Q/p
PREAM. SFD DA SA Typ e TAG 4 Bytes PT DATA FCS

Three Bits Used for CoS (802.1D User Priority) PRI CFI VLAN ID

Layer 3 IPV4
Version Length ToS 1 Byte 6 IP Precedence Len ID Offset TTL Proto FCS IP-SA IPIP-DA IPData

Unused Bits; Flow Control for DSCP DSCP Standard IPV4: Three MSB Called IP Precedence (DiffServ May Use Six D.S. Bits Plus Two for Flow Control)
2002, Cisco Systems, Inc. All rights reserved

QoS Technical Update June 2004

DiffServ Behaviors (RFCs: 2474, 2475, 2597 & 2598)


Per-Hop Behaviours (PHB)
Expedited Forwarding Assured Forwarding
Class Selector (CS) 1 Class Selector (CS) 2 Class Selector (CS) 3

DiffServ Code Points (DSCP)


101110

EF

Low Drop Pref

Med Drop Pref

High Drop Pref

AF11 AF21 AF31 AF41

AF12 AF22 AF32 AF42

AF13 AF23 AF33 AF43

001010 001100 001110 010010 010100 010110 011010 011100 011110 100010 100100 100110 000000

Class Selector (CS) 4

Best Effort
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

10

S2

Catalyst 4500 QoS Capabilities


Supervisor II
Layer 2 only System-wide QoS Dual Tx Queues per Port
Queue 1

Cisco IOS-Based Supervisors IOSLayer 2, 3, or 4 QoS Per-port QoS Four Tx queues per port Strict priority queue Dynamic queue memory allocation Packet classification and marking Policing/bursting Shaping/sharing Queue 4
Queue 3

Queue 2

Queue 2 Queue 1
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

11

Predictable Performance
48 Mpps/64 Gbps L2/L3/L4 switching Wirespeed High Touch Services on every port with no performance hit: 32K QoS ACL entries* 32K Security ACL entries* 2,048 Policers * (16Kbps-1Gbps per port) 4 Queues per port 128K uni/multi-cast addresses* 4,096 802.1Q/ISL VLANs* * Lower on Supervisor II-Plus
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

12

Cisco IOS-Based Supervisor QoS Flow Summary


Classification based on: Default DSCP port setting Port Trusted COS or DSCP Layer 2/3/4 ACLs Policing via ACLs Police Action: Mark Drop Based: Byte rate Burst (Token Bucket)

Sharing and Shaping and Strict Priority Q3 to Schedule between Output queues

Queue 1

RX

Shared Memory

Classify

Police

DBL

Rewrite Info

Queue 2 Queue 3 Queue 4 Sched TX

In-coming Encapsulation Can be 802.1Q, 802.1p, ISL, or none

Dynamic Buffer Limiting (Supervisor II Plus Supervisor IV Supervisor V ) Congestion Avoidance

Rewrites TOS Field in IP Header and 802.1p/ISL CoS Field

Out-going Encapsulation Can be 802.1Q, 802.1p, ISL, or none

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

13

Example Queue Configuration


Queue 3 voice / router control
needs low latency

Queue 2 important TCP Queue 1 less important TCP Queue 4 video


guaranteed bandwidth

Multiple queues must share the link


QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

14

QoS Examples
Rewrite all packets from a specific host with high-priority DSCP Trust DSCP of VOIP packets and place in Strict Priority Tx Queue Police all multicast to 30 mbps Mark down vlan 7 traffic beyond 50mbps Put video in Tx queue 2 and shape to 20mbps
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

15

QoS Syntax : Modular QoS CLI


Various Criteria to match packets (ACL, IP Prec, IP-DSCP) If a packet matches criteria, it is a member of this class. Associates a Class with a particular function or policy For Catalyst 4500 IOS Supervisor, a policy is used to trust traffic, mark traffic, or police traffic Applies the service policy to a particular interface Effectively commits the policy to the hardware
16

Define Class

Create Policy

Assign Interface

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Modular QoS Configuration Example


Match all video on Gig2/1 Set its DSCP to 5 Police it to 100mbps and 120 kbps burst Markdown traffic exceeding policed rate
QoS Technical Update June 2004

access-list 101 udp permit any any range 19000 19010 class-map video match access-group 101 policy-map vid-server class video set ip precedence 5 police 100m 15K exceed-action policed-dscp-transmit interface Gig2/1 service-policy input vidserver
17

2002, Cisco Systems, Inc. All rights reserved

Cisco Catalyst 4500 Architecture


3-slot, 6-slot chassisone supervisor with two or five module slots 7-slot chassisone or two supervisors with five module slots 10-slot chassisone or two supervisors (Supervisor V only) with eight module slots Cisco IOS supervisors provide:
Central forwarding engine (Fast Forwarding Engine, FFE) Buffering and 64 Gbps fabric (Packet Processing Engine, PPE)96 Gbps fabric with Supervisor V and PPE2

Forwarding Engine (FFE) Shared Memory Fabric (PPE)


12 Gbps 12 Gbps 12 Gbps 12 Gbps 12 Gbps

Switching Module

Switching Module

Switching Module

12 Gbps bandwidth to each module Auto MDIX on 10/100/1000 Ports Modules are transparent:
Contain simple stub ASICs, PHYs No buffering or local switching
RST-3508 9805_05_2004_c1
2004 Cisco Systems, Inc. All rights reserved.

Switching Module

Switching Module

Note: Supervisor Engine V Supports 3 Additional Line Card Slots


18

Catalyst 4000/4500 Linecards


6 full-duplex GbE connections to switch fabric Transparent
No local forwardingall packets go to supervisor

GbE connections from switch fabric straight to front-panel port or connect to stubs
6 Full-duplex Gbps Connections to Supervisor Switch Fabric

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

19

Stub ASIC Overview


Fans out GigE ports from switch fabric Up to 8 front-panel ports; 10/100, 1000-only, or 10/100/1000 Flow control on gigabit interfaces Ports can be used in an EtherChannel Not always oversubscribed e.g. 10/100
2004 Cisco Systems, Inc. All rights reserved.

GbE to/from Switch Fabric

Up to 8 Front-Panel Ports, 10/100/1000


20

RST-3508 9805_05_2004_c1

Blocking and Non-Blocking Ports


Non-Blocking Gigabit Line Cards Blocking Gigabit Line Card All Ports on the WSX4424-GB-RJ45 All Ports on the WSX4448-GB-RJ45 WS-X4548-GB-RJ45V All Ports on the WSX4448-GB-LX Last 16 Ports on the WS-X4418-GB 1000 BT Ports on the WS-X4412-2GB-TX All ports on the WSX4424-GB-RJ45 Oversubscripti on Ratio for Blocking Line Cards 4:1 8:1 8:1 8:1 4:1 4:1 4:1

Supervisor Uplink Ports WS-X4306-GBAll Ports Two 1000 Base-X Ports on the WS-X4232-GB-RJ First Two Ports on WS-X4418GB WS-X4302-GBBoth Ports
Oversubscribed GbE modules are ideal for deployments that are more bursty in nature such as Gigabit to the Desktop and Servers These interfaces are not recommended for uplinks or sustained connections
RST-3508 9805_05_2004_c1
2004 Cisco Systems, Inc. All rights reserved.

21

Transmit Queue Sizes, Buffers

packet buffers 240 / 1920 entries


For Supervisor Engines IV and II-Plus 240 packet queue depth per 10/100 or blocking Gigabit Port 1920 packet queue depth on non-blocking ports Input Queuing Not Needed

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

22

New w/ Sup5

PPE2 increases all transmit queue buffers


All system ports benefit ; DBL congestion avoidance works on these queues to isolate belligerent flows
Transmit queues increased to 1368 queues/system (336 * 4 + 6*4) Packets/queue independent of the incoming packet size
Supervisor Engine V
// Non blocking gigabit ports 2336 packets/queue or 9344 packets/port 22% increase

Supervisor Engine II-Plus, IV


// Non blocking gigabit ports 1920 packets/queue or 7680 packets/port // Sub ports 240 packets/queue or 960 packets/queue Command: show qos int <port>

// Sub ports 292 packets/queue or 1168 packets/port Command: show qos int <port>

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

23

QoS Scheduling on Cisco IOS-Based Supervisors


Traffic Sharing
Specifies the minimum bandwidth for a Queue Used to implement a prioritized scheduling mechanism Only available on non-blocking Gigabit ports( SupIV & II-+)
Available on all ports for Supervisor V

Traffic Shaping Configuring the maximum bandwidth for a Queue Available on every port and queue with an IOS Supervisor Policing vs. Shaping on the Catalyst 4500 IOS Supervisor PolicingTakes place at forwarding engine; if you exceed limit, then packets are dropped (or marked down) ShapingTakes place between queue and physical wire; if you exceed limit, then continue to buffer and try again later

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

24

QoS Policing vs. Shaping


Traffic Traffic Rate Traffic

Data Lost
Traffic Rate

Policing

Time Traffic Rate

Time

Traffic

Traffic

Data Preserved
Traffic Rate

Shaping

Time
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

Time
25

Scheduling: Shaping
Max rate (10K to 1 Gbps)
Shaped queue like a virtual wire Packets clock out exactly at shaped rate

Hold packets in queue when rate exceeded Example use:


Shape a bursty application to 1 Mbps to smooth it

Supported on all ports, typically used with strict priority queue


Shaper (Specifies Max BW) TX Port Q

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

26

Uses for Policing and Shaping

Regulate Traffic Flows Business Models (Policing or Shaping)


a pay-by-the-megabit model

Smoothing Traffic (Shaping)


can reduce buffers needed downstream

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

27

Scheduling: Sharing
Minimum rate (32 Kbps to 1 Gbps)
Rate is guaranteed minimum

Scheduling algorithm:
If below share rate, queue is high priority High priority queues serviced first

Sharing only on non-blocking gigabit ports in Supervisor IV and II-Plus Supported on ALL ports on Supervisor Engine V
Shaper (Specifies Max BW) Non-Blocking Port TX Port Q Sharer (Specifies Min Guaranteed BW)

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

28

Uses for Sharing

Want to guarantee bandwidth to an application Data/Voice/Video example:


On a 100 mbps ETTH link video guaranteed 80 mbps voice gets 10mbps high priority data guaranteed 20 mbps (but can use more if no video)

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

29

Scheduling: Strict Priority


Strict priority queue is always checked 1st
(subject to shaping) ensures low delay: intended for voice/control

Queue 3 on all ports (default voice queue) Caveat: On blocking ports..strict priority can prevent other queues from being serviced
Shape the strict queue to avoid this! Reserve it for voice and control
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

30

QoS Scheduling differences Supervisor IV versus Supervisor V

New w/ Sup5

Sharing is available on all the ports with Supervisor V Auto QoS macro automatically does sharing on subports
-- auto qos voip {cisco-phone| trust} Traffic Sharing Specifies the minimum bandwidth for a Queue ( similar to WRR) Used to implement a prioritized scheduling mechanism e.g. bandwidth over video servers Available on all physical ports Supervisor IV supported sharing only on non-blocking gigabit ports Traffic Shaping Configuring the maximum bandwidth for a Queue on a physical port Limited shaping is supported on Supervisor V
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

31

Sharing for Sub ports (GTTD)

New w/ Sup5

1 Gb/sec is mapped into 4 front panel GE ports on a WS-X4424

Per-Queue-Share = 1 Gbps / ( Num-Ports * Tx-Queues-Per-Port) For WS-X4424-RJ45 (24 port 10/100/1000), 1 Gbps / ( 4 Sub-ports * 4 tx-queueus-per-subport )
4510R#sh qos int Gi8/24 QoS is enabled globally Tx-Queue Bandwidth ShapeRate (bps) (bps) 1 62500000 disabled 2 62500000 disabled 3 62500000 disabled 4 62500000 disabled
QoS Technical Update June 2004

The bandwidth compares to the 4:1 mapping since 4 GTTD ports map to a 1GE port (STUB)
Priority N/A N/A high N/A QueueSize (packets) 292 292 292 292

62.5Mbps * 4 = 250 Mbps per 4424 port


32

2002, Cisco Systems, Inc. All rights reserved

Shaping and Sharing on Port Txqueues


cat4507R#show qos interface gig6/4 QoS is enabled globally Port QoS is enabled Port Trust State: 'dscp' Default DSCP: 0 Default CoS: 0 Appliance trust: none Tx-Queue Bandwidth (bps) 1 2 3 4 250000000 250000000 250000000 250000000 ShapeRate (bps) disabled disabled 50000000 disabled N/A N/A high N/A Priority QueueSize (packets) 2336 2336 2336 2336

Above output is from a Supervisor Engine V

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

33

Cisco IOS-Based Supervisor Traffic Shaping/Sharing example


Configure ACL, policy-map using IOS MQC, then apply to the interface qos interface GigabitEthernet1/1 no switchport ip address 11.0.11.1 255.255.255.0 ip pim sparse-dense-mode service-policy output video-servers tx-queue 2 bandwidth 200m tx-queue 3 priority high bandwidth 5m shape 20m // //
Give Voice guaranteed minimum share of 5 Mb Shape the strict priority queue to no more than 20 Mbps

//

Give Multicast share of 200m (min bandwidth guarantee)

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

34

Rewrite: DSCP and CoS Rewrite

DSCP, CoS (header) rewrite

Ethernet MAC

DSCP and CoS are rewritten on transmit Using the global tos-to-cos map DSCP value is the internal DSCP
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

35

DSCP to Queue Mapping


Check DSCP to TX Queue Mappings
cat4500(config)# qos map dscp 50 to tx-queue 2 cat4500# sh qos maps dscp tx-queue DSCP-TxQueue Mapping Table (dscp = d1d2) d1 : d2 0 1 2 3 4 5 6 7 8 9 For DSCP of 50 TX Queue Is 2

------------------------------------0 : 1 : 2 : 3 : 4 : 5 : 6 : 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 04 04 02 04 04 04 04 04 04 04 04 04 04 04 04 04

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

36

Tx Queue Scheduling
shaping
Q1 Q2 DSCP to queue map Q3 Q4 Queue selection based on internal DSCP
Default DSCP on Port Trust CoS/DSCP Via Service Policies

sharing, strict priority

Ethernet MAC

Switch-wide DSCP to Tx Queue map, not per-port! Shaping: max rate per queue Sharing: min rate per queue Strict priority on queue 3 All in hardware at wire rate
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

37

Classification/TOS Re-Write Summary

Determine the internal DSCP valuethis depends on the policymap and port trust configuration If a packet encounters both input and output classification policy:
Output policy has precedence If no output policy then input policy has precedence If no output/input policy then RX port trust is used
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

38

Whats in the Queues ?


r3_4507R_S4#sh int gig5/1 count detail(truncated) Port Gi5/1 Port Gi5/1 Port Gi5/1 Port Gi5/1 Port Gi5/1 Port Gi5/1 Port Gi5/1 Port Gi5/1 InBytes 3133178 OutBytes 1470897765 InPkts 64 16079 InPkts 128-255 0 InPkts 512-1023 0 InUcastPkts 0 OutUcastPkts 28 OutPkts 64 259966 OutPkts 128-255 0 OutPkts 512-1023 0 InMcastPkts 24110 OutMcastPkts 1291706 InPkts 65-127 0 InPkts 256-511 8031 InBcastPkts 0 OutBcastPkts 20170536 OutPkts 65-127 21189826 OutPkts 256-511 8153

InPkts 1024-1518 OutPkts 1024-1518 InPkts 1519-1548 OutPkts 1519-1548 0 4325 0 0 Tx-Bytes-Queue-1 1377824448 Tx-Drops-Queue-1 0 Tx-Bytes-Queue-2 Tx-Bytes-Queue-3 0 1904 Tx-Drops-Queue-2 Tx-Drops-Queue-3 0 0 Tx-Bytes-Queue-4 93071413 Tx-Drops-Queue-4 0

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

39

Extras: QoS on the CPU Port


0:ESMP Packets to the CPU 9-10: L3 Rx (telnet/SNMP) 15:MTU Fail/Invalid 1:Control 2: Host Learning 3-5: L3 Forwarding

CPU queues
Protects important traffic when CPU usage is high BPDUs/routing updates get priority Can still telnet or SNMP query when CPU is high
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

40

Policing on the Catalyst 4500 IOS Based Supervisors


Two Types of Policers
Individual: acts on each of the applied ports/VLAN Aggregate: acts on all of the applied ports/VLAN

Two policer parameters: rate and burst


rate from 32kbps to 32gbps, burst in bytes

Two actions
exceed-action: drop, transmit, markdown conform-action: drop, transmit

Input and output policing on every packet


1020 input, 1020 output policers, sharable

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

41

Policing Issues
Make Sure the Correct Type of Policer Is Used
Cat4500# show policy-map interface Gig1/1 GigabitEthernet1/1 service-policy input: p1 class-map: c1 (match-all) 3435 packets match: access-group 100 police: Per-interface <----- This is a individual policer. Conform: 45454 bytes Exceed: 56345 bytes

Cat4500# show policy-map interface Gig1/2 GigabitEthernet1/1 service-policy input: p1 class-map: c1 (match-all) 335 packets match: access-group 100 police: policer1 <----- This is an aggregate or named policer. Conform: 4554 bytes Exceed: 563 bytes

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

42

Policing Using QOS ACLs


ACLs applied to QoS class maps are referred to as QoS ACLs. One example below is to rate limit traffic from host 9.2.1.51 to 500kbps
! qos access-list 125 permit tcp host 9.2.1.51 ! class-map class-500k match access-group 125 policy-map police-500k class class-500k police 500k 13k conform-action transmit exceed-action drop ! interface Vlan100 ip address 9.2.1.1 255.255.255.0 service-policy input police-500k

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

43

Policing: How to Set the Burst Size?


Too small: And policer drops due to burstiness inherent in all networks Too large: And the entire transfer fits in the burst (especially for TCP) Small burst size [n*max pkt size] ok for video, voice Larger burst needed for TCP: 2 x [RTT * rate], good starting point Starting with IOS release 12.1.19EW1 will react to a packet drop Must evaluate how UDP trafficand higher, the policer calculations can include the 14 byte Ethernet header field and 4 byte FCS field when policing Right answer depends onusing network command: qos account the the global packets; this would be enabled
layer2 encapsulation length 18 Releases prior to this do not include these fields; the policing rate and burst parameters configured needed to deduct the layer 2 encapsulation length when determining the policing rate and burst, otherwise underpolicing would result, particularly for smaller packet sizes in the 64 byte to 256 byte range
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

44

Input/Output Policer Rules Summary


If a Packet Encounters Both Input and Output Policy:
Ingress Policy Egress Policy Transmit Drop Markdown Mark Transmit Transmit Drop Markdown Mark Drop Drop Drop Drop Drop Markdown Markdown Drop Mark Mark Drop

Markdown Markdown Mark Mark

The Most Severe Action Is Taken


QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

45

Use of QoS for Security :Scavenger Class QoS Scavenger throttled back
Classify Throttle
Si

Scavenger Traffic is assigned its own queue/threshold Scavenger Queue is shallow with a large burst to penalize sustained loads Multiple queues are the only way to guarantee voice quality, protect mission critical and throttle abnormal sources Cisco switches with multiple queues Catalyst 3500, 4500, 6500

Si

Gold
RX

Scavenger Queue Aggressive Drop

Data
RX

Scavenger
RX

TX

Voice
RX

Voice Put into Delay/Drop Sensitive Queue


46

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Congestion AvoidanceWRED
Drop Probability 1
Drop All AF13 Drop All AF12 Drop All AF11

0. 5 0
Begin Dropping AF13 Begin Dropping AF12 Begin Dropping AF11

Average Queue Size


Max Queue Length (Tail Drop)

AF = Assured Forwarding

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

47

Dynamic Buffer Limiting (DBL)


Intelligent congestion avoidance mechanism DBL is flow based, tracking the amount of buffer used for each flow in the switch (port) Implemented in Supervisor IV and II Plus by tracking credits and monitoring buffers
drop one packet BUFFERS DBL
Aggressive buffer limit 2 pkts FLOW Classified NAF

CREDITS
Max credits 15 (default) Aggressive credit limit 10 T0 T1 T2

Non Adaptive Flow

T3

T4

Time 48

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

Why Dynamic Buffer Limiting (DBL)?


When Congestion Occurs (Transmitting Queue is Full)

Typical Congestion Avoidance Technique : Dropping both AF and NAF Result : More re-transmission, less overall performance

DBL : DROPPING NAF ONLY Less re-transmission, higher overall performance


QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

49

DBL and WRED


Active Queue Management
Per flow congestion avoidance For flows that exceed the DBL limit, drop one packet Clamp down the Non Adaptive Flows individually All flows on transmit queue suffer if one NAF present Hardware Logic at every transmit queue Takes IP Precedence or DSCP into account If congestion occurs: a) Drop the packet b) Mark the Explicit Congestion ----Notification bit in IP header

DBL
Yes Yes Yes No Yes Yes Yes Yes

WRED
No Random No Yes Yes Yes Yes Yes (using IOS 12.2)

Can be Used Together


QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

50

Dynamic Buffer Limiting (DBL)


WITHOUT DBL and when confronted with congestion.. Tail dropping on Tx Q 1

C4506# show interface gi1/1 counters detail ( truncated) Port Gi1/1 Port Gi1/1 Port Gi1/1 Tx-Bytes-Queue-1 315142608 Tx-Bytes-Queue-2 28919476 Tx-Bytes-Queue-3 94 Tx-Drops-Queue-3 0 Tx-Bytes-Queue-4 430984 Tx-Drops-Queue-4 0

Tx-Drops-Queue-1 Tx-Drops-Queue-2 14489 0

Dbl-Drops-Queue-1 Dbl-Drops-Queue-2 0 0

Dbl-Drops-Queue-3 Dbl-Drops-Queue-4 0 0

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

51

Enabling QoS and DBL on Cisco IOS Supervisors


The Information Is Applied per Port per Queue
Cat4500(config)#qos Cat4500(config)#qos dbl Cat4500# show qos dbl DBL is enabled globally DBL flow includes vlan DBL flow includes layer4-ports DBL does not use ecn to indicate congestion DBL exceed-action probability: 15% DBL max credits: 15 DBL aggressive credit limit: 10 // NAF threshold DBL aggressive buffer limit: 2 packets // NAFs are limited
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

52

Dynamic Buffer Limiting Activated


C4506(config)# policy-map LAB-POLICY C4506(config-pmap)# class UDP C4506(config-pmap-c)# dbl C4506(config-pmap)# class FTP C4506(config-pmap-c)# dbl C4506# show policy Policy Map LAB-POLICY class FTP

set ip dscp 0 dbl class UDP

set ip dscp 0 dbl class WEB

set ip dscp 16 class TELNET

set ip dscp 48
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

53

Dynamic Buffer Limiting Results


WITH DBL .. we dont have the Tail dropping

C4506# show interface gi1/1 counters detail( truncated) Port Gi1/1 Port Gi1/1 Port Gi1/1 Tx-Bytes-Queue-1 10250756 Tx-Bytes-Queue-2 1656656 Tx-Bytes-Queue-3 0 Tx-Drops-Queue-3 0 Tx-Bytes-Queue-4 24204 Tx-Drops-Queue-4 0

Tx-Drops-Queue-1 Tx-Drops-Queue-2 0 0

Dbl-Drops-Queue-1 Dbl-Drops-Queue-2 8201 0

Dbl-Drops-Queue-3 Dbl-Drops-Queue-4 0 0

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

54

Auto QoS VoIP : IOS 12.1.19 EW and Later


4500#sh auto qos Initial configuration applied by AutoQoS: qos qos map cos 3 to dscp 26 qos map cos 5 to dscp 46 qos map dscp 16 to tx-queue 1 qos map dscp 32 to tx-queue 1 qos dbl

Enable Trust boundary (phone, access, uplink/downlink) Enable Priority Queuing where required Modify Queue Admission criteria where required Modify CoS to DSCP and IP Prec to DSCP maps where required Tune TX queue parameters where required
QoS Technical Update June 2004

policy-map autoqos-voip-policy class class-default Dbl ! interface GigabitEthernet3/1 qos trust device voip trust qos trust cos tx-queue 3 priority high shape percent 30 service-policy output autoqos-voip-policy

2002, Cisco Systems, Inc. All rights reserved

55

Catalyst 4500 QoS Summary


Port trust Port Value Service policy

Queue 1

RX

Shared Memory

Classify

Police

DBL

Rewrite info

Queue 2 Queue 3 Queue 4 Sched TX

POLICERS

Dynamic Buffer Limiting, Congestion Avoidance

SHAPING and SHARING Congestion Mgmt

Drop packets Exceed limit Drop packets BEFORE congestion, Before enqueuing the packet
QoS Technical Update June 2004 2002, Cisco Systems, Inc. All rights reserved

Between queue and physical wire

56

References

QoS on Catalyst 4500 IOS Based Supervisor Engines


http://www.cisco.com/en/US/partner/products/hw/switches/ps4324/product s_regional_sales_promotion09186a008019741c.html
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_2_20/index.ht m

Cisco Documentation:

TAC Documents: Policing and Marking with Catalyst IOS Supervisor Engines
http://www.cisco.com/warp/customer/473/134.html

Understanding Queuing and Scheduling on the Catalyst 4500 Supervisor Engines


http://www.cisco.com/warp/customer/473/137.html

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

57

QoS Technical Update June 2004

2002, Cisco Systems, Inc. All rights reserved

58

S-ar putea să vă placă și