[Config] QoS with CBWFQ to prioritize a website

Author	All Replies
movement3 join:2002-11-03 Houston, TX	[Config] QoS with CBWFQ to prioritize a website Hello, We have an important website that our company heavily uses. We have 2 T1s going out to the Internet, so at times the T1s are maxed out with traffic. During those peak times, I would like priority to be given to this sales portal website and all other traffic falls in the same bucket. This is my test config on a 871 hooked up to a regular aDSL line: class-map match-any test match protocol http host ".rapidshare.com" policy-map test-gold class test bandwidth percent 85 I also tried policy-map test-gold class test bandwidth 800 int fa4 bandwidth 1500 service-policy output test-gold First, I download a large file from another website, then start a download from .rapidshare.com, and lastly I fire up a bittorrent. After a couple of mins, the download from rapidshare does not consume the majority of traffic as I would expect. The traffic pattern stays the same as if there is not a policy map applied. Is something wrong with my config? Am I testing this scenario correctly? Thanks.
	to forum · permalink · · 2007-06-07 12:05:51 ·
mplex join:2004-04-15 Charleston, SC	Well that test should work correctly if the service policy is applied to the serial interfaces on your T1 router, but not on a DSL router. As far as your home router is concerned, Fa4 is a 100Mb interface, not a 6Mbps/384kbps etc link. I would try it at work, and then do a show policy-map int se0/1 on the interface and make sure it is matching correctly. If you want it to work at home, you have to nest your policies and shape all traffic to the speed of your connection. It's too much to write up here, but what you have should work on a serial interface.
	to forum · permalink · · 2007-06-07 17:57:17 ·
mikeeo Premium join:2000-03-12 Newark, DE 1 edit	reply to movement3 Try this class-map HTTP match protocl http url rapidshare.com/ policy-map CBWFQ class HTTP bandwidth whatever class class-default fair-queue int fast ethernet or serial service policy out CBWFQ that should do it. -Mike CCIE #17982
	to forum · permalink · · 2007-06-07 22:55:09 ·
Arbelac join:2004-05-14 Canada	reply to movement3 Try changing the bandwidth on the interface you are applying this to, to match your external bandwidth.
	to forum · permalink · · 2007-06-10 02:27:29 ·
mikeeo Premium join:2000-03-12 Newark, DE	He shouldn't have to change te bandwidth on the interface unless he is using bandwidth percent. I don't think he was matching packets in his class-map correctly.
	to forum · permalink · · 2007-06-10 17:34:57 ·
movement3 join:2002-11-03 Houston, TX 1 edit	Hello, Thanks for everyone's help. I was able to test the new config, but no luck. I think Mike is right, I not matching the regular expression correctly in the class-map part. To troubleshoot in steps, I'm just trying to match the packets up now, so for the policy part, I'm using a drop command. Here is the full config for the test lab, you can disregard the myFirewall and access 111, they are not applied to the int fa4. Is there specific debug command for class-maps? I just using debug ip packet detail right now. I'll keep on playing with this and post updates... bob#term len 0 bob#sh run Building configuration... Current configuration : 3704 bytes ! version 12.3 no service pad service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption ! hostname bob ! boot-start-marker boot-end-marker ! logging buffered 24000 debugging enable secret 5 removed ! no aaa new-model ! resource policy ! clock timezone CST -6 clock summer-time CDT recurring ip subnet-zero ip cef ! ! no ip dhcp use vrf connected ip dhcp excluded-address 10.10.1.1 ip dhcp excluded-address 10.10.1.2 ip dhcp excluded-address 10.10.1.3 ip dhcp excluded-address 10.10.1.6 ! ip dhcp pool CLIENTS import all network 10.10.1.0 255.255.255.240 default-router 10.10.1.1 lease 0 6 ! ! ip inspect max-incomplete low 175 ip inspect max-incomplete high 250 ip inspect name myFirewall cuseeme timeout 3600 ip inspect name myFirewall ftp timeout 3600 ip inspect name myFirewall http java-list 51 timeout 3600 ip inspect name myFirewall h323 timeout 30 ip inspect name myFirewall realaudio timeout 30 ip inspect name myFirewall tftp timeout 30 ip inspect name myFirewall rcmd timeout 3600 ip inspect name myFirewall smtp timeout 3600 ip inspect name myFirewall vdolive timeout 30 ip inspect name myFirewall streamworks timeout 30 ip inspect name myFirewall rpc program-number 100000 ip inspect name myFirewall udp timeout 15 ip inspect name myFirewall tcp timeout 3600 no ip ips deny-action ips-interface ! ! ! ! ! class-map match-all HTTP match protocol http url "rapidshare.com/" ! ! policy-map CBWFQ class HTTP drop class class-default fair-queue ! ! ! ! ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface FastEthernet4 description SBC Yahoo! DSL 1-877-SBC-DSL5 bandwidth 1500 ip address dhcp client-id FastEthernet4 ip nat outside ip virtual-reassembly duplex auto speed auto no cdp enable service-policy output CBWFQ ! interface Vlan1 description LAN port ip address 10.10.1.1 255.255.255.240 ip nat inside ip virtual-reassembly ! ip classless ! ! no ip http server no ip http secure-server ip nat inside source list 102 interface FastEthernet4 overload ip nat inside source static tcp 10.10.1.2 80 interface FastEthernet4 80 ip nat inside source static tcp 10.10.1.2 22 interface FastEthernet4 22 ! access-list 23 permit 10.10.1.0 0.0.0.15 access-list 102 permit ip 10.10.1.0 0.0.0.15 any access-list 111 permit tcp any any eq 22 access-list 111 permit tcp any any eq www access-list 111 permit tcp any any eq ftp access-list 111 permit tcp any any eq pop3 access-list 111 permit tcp any any eq smtp access-list 111 permit icmp any any administratively-prohibited access-list 111 permit icmp any any echo access-list 111 permit icmp any any echo-reply access-list 111 permit icmp any any packet-too-big access-list 111 permit icmp any any time-exceeded access-list 111 permit icmp any any traceroute access-list 111 permit icmp any any unreachable access-list 111 permit udp any eq bootps any eq bootpc access-list 111 permit udp any eq bootps any eq bootps access-list 111 permit udp any eq domain any access-list 111 permit esp any any access-list 111 permit udp any any eq isakmp access-list 111 permit udp any any eq 10000 access-list 111 permit tcp any any eq 1723 access-list 111 permit tcp any any eq 139 access-list 111 permit udp any any eq netbios-ns access-list 111 permit udp any any eq netbios-dgm access-list 111 permit gre any any access-list 111 deny ip any any ! ! control-plane ! ! line con 0 no modem enable stopbits 1 line aux 0 stopbits 1 line vty 0 4 access-class 23 in exec-timeout 30 0 password 7 remove login ! scheduler max-task-time 5000 end
	to forum · permalink · · 2007-06-11 12:33:59 ·
aryoba Premium,MVM join:2002-08-22	How about something like this? class-map match-any HTTP match protocol http host ".rapidshare.com" ! policy-map CBWFQ class HTTP bandwidth percent 50 class class-default bandwidth percent 20 fair-queue ! interface FastEthernet4 service-policy output CBWFQ !
	to forum · permalink · · 2007-06-11 13:28:42 ·
mikeeo Premium join:2000-03-12 Newark, DE	you are gonna wanna stay away from using bandwidth percent. Its not Cisco recommended. -Mike CCIE #17982
	to forum · permalink · · 2007-06-11 19:23:12 ·
movement3 join:2002-11-03 Houston, TX	Ok, I think I found a working config. I first tested with a drop command in the policy-map and could not reach the webpage. Then I added bandwidth 900 and fired up a lot of downloads from various sites. The speed to my desire site stayed around 100KB and 105KB. Thanks again for you help. class-map match-any HTTP match protocol http host ".domain.com" ! ! policy-map CBWFQ class HTTP bandwidth 900 class class-default fair-queue ! interface FastEthernet4 service-policy output CBWFQ
	to forum · permalink · · 2007-06-12 12:30:57 ·


Wednesday, 25-Nov 02:23:18	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF