Table of Contents

Using Policy Manager

Starting Policy Manager and Logging Into QPM
Understanding the Main Policy Manager Window

Tree View
List View
Properties Preview

Cutting, Copying, and Pasting Policies
Changing the Policy Manager Display
Saving Your Work
Exiting Policy Manager

Using Distribution Manager

Starting Distribution Manager
Understanding the Main Distribution Manager Window

All Jobs Tree View
List View
Log

Changing the Distribution Manager Display
Starting Policy Manager from Distribution Manager
Exiting Distribution Manager

Understanding the Tutorial Example Network
Lesson 1—Creating a QoS Database

Sample Network Device Information
Adding a Device to the QoS Database
Adding a Device's Interfaces

Adding the Interfaces if the Device Is Online
Adding the Interfaces if the Device Is Offline

Importing Multiple Devices into the QoS Database
Uploading Existing Device Configurations

Lesson 2—Creating and Distributing a Simple Policy for Managing Web Traffic on One Router

Configuring the QoS Property
Creating a New Policy to Color Inbound Traffic
Distributing Policies to the Network

Lesson 3—Coloring Enterprise Resource Planning (ERP) Traffic on a Group of Devices

Creating Device Groups
Creating a Policy on a Device Group

Lesson 4—Limiting the Bandwidth Available to FTP Traffic on a Switch

Defining the QoS Style for a Switch's Ports
Creating an Application Service Alias
Creating a Limiting Policy on the Switch
Verifying Device Configuration and Distributing to the Network

Lesson 5—Updating the Database After Software Upgrades

Updating the QoS Database with New Software Version Information
Recreating Device Groups for the New Software Version

Lesson 6—Using NBAR and Creating Multiple Action Policies

Changing the QoS Property on an Interface
Creating a Multiple-Action Policy with NBAR Filtering

Lesson 7—Configuring Frame Relay Traffic Shaping

Enabling FRTS on an Interface
Configuring FRTS on a Subinterface or DLCI

Lesson 8—Providing End-to-End QoS for VoIP over the Enterprise WAN

Network Example for Configuring QoS for VoIP

Configuring QoS for the Campus Site
Configuring QoS for the WAN
Configuring QoS for the Remote Branch

Adding Devices to the IP Telephony Database
Assigning Interfaces to the Device Groups

Assigning the IP Phone Interfaces
Assigning the CallManager Interfaces
Assigning the Uplink Interfaces to the Distribution Switch
Assigning the Downlink Interfaces to the Access Switch
Assigning the LAN Interface to the WAN Router
Assigning the WAN Interfaces
Assigning the Remote Branch Interfaces

Deploying the IP Telephony Database

Getting Started with QPM

This tutorial helps you learn how to use QoS Policy Manager (QPM) to create and distribute QoS policies and configurations. It comprises a series of lessons that step you through procedures for creating different types of policies and deploying them to the network.

The tutorial contains the following topics and lessons:

• Using Policy Manager
  
  
• Using Distribution Manager
  
  
• Understanding the Tutorial Example Network
  
  
• Lesson 1Creating a QoS Database
  
  
• Lesson 2Creating and Distributing a Simple Policy for Managing Web Traffic on One Router
  
  
• Lesson 3Coloring Enterprise Resource Planning (ERP) Traffic on a Group of Devices
  
  
• Lesson 4Limiting the Bandwidth Available to FTP Traffic on a Switch
  
  
• Lesson 5Updating the Database After Software Upgrades
  
  
• Lesson 6Using NBAR and Creating Multiple Action Policies
  
  
• Lesson 7Configuring Frame Relay Traffic Shaping
  
  
• Lesson 8Providing End-to-End QoS for VoIP over the Enterprise WAN
  
  

Using Policy Manager

Policy Manager enables you to create and edit QoS policies and configurations. The following topics provide you with the basics for using Policy Manager:

• Starting Policy Manager and Logging Into QPM
  
  
• Understanding the Main Policy Manager Window
  
  
• Cutting, Copying, and Pasting Policies
  
  
• Changing the Policy Manager Display
  
  
• Saving Your Work
  
  
• Exiting Policy Manager
  
  

---

Note   When working with QPM Policy Manager, you can click the Help button in any of the dialog boxes to access context-sensitive online help.

---

Starting Policy Manager and Logging Into QPM

Start Policy Manager to create, change, delete, and view your QoS configuration and policies.

Procedure

Step 1   Select Start>Programs>QoS Policy Manager>Policy Manager.

If you are not already logged in, QPM opens the Logon Information dialog box.

Step 2   Log into QPM. You must enter a QPM user name and password according to these requirements:

• Read-write access—If you want to be able to save your changes to the QoS database, you must use a user account defined in the QPM user group. Unless you changed the group during installation, the group is QPM_Users and is defined on the machine running the QoS Manager service. QPM creates a default user in this group: QPM_User with no password.
• Read-only access—If you only want to view the QoS database, you can use a user account defined in the QPM guest group. Unless you changed the group during installation, the group is QPM_Guests and is defined on the machine running the QoS Manager service.

If you enter a correct name and password, Policy Manager starts and automatically opens the last QoS database that was open.

Tips

• The domain for the QPM_User account is the name of the machine running the QoS Manager service.
  
  
• You cannot log into QPM unless you select a domain name. If the domain list is empty, you must first log into the Windows NT network before starting QPM.
  
  
• You can also start Policy Manager from Distribution Manager by selecting Tools>Policy Manager.
  
  

Understanding the Main Policy Manager Window

The main Policy Manager window (Figure 3-1) is divided into three panes.

• Tree View—The left pane. This pane displays a hierarchical view of the devices and device groups being managed, and their associated interfaces.
  
  
• List View—The upper right pane. This pane displays the policies defined for the interface, device, or device group selected in the tree view pane, if any.
  
  
• Properties Preview—The lower right pane. This pane displays the properties of a device, interface, or policy selected in the tree or list view panes. You can choose not to display this pane by selecting View>Properties Preview.
  
  

Tree View

The tree view pane (Figure 3-2) shows the devices and device groups being managed in QPM. The Devices directory contains a separate folder for each device. Most device folders contain a list of interfaces on which you define QoS policies. For some devices, you define policies directly on the device folder.

The Device Groups directory contains the device groups you have defined. Device groups are groups of interfaces that you intend to manage using identical policies. You must treat all interfaces in a device group identically.

List View

The list view pane (Figure 3-3) shows the policies that are defined on the interface, device, or device group selected in the tree view.

If you select an interface that belongs to a device group, the list of policies includes those defined on the device group, as well as those defined directly on the interface. You cannot edit or change the order of group policies when viewing them from a member interface. Group policies are always given lower priority than individual interface policies.

Each policy in the list is preceded by an icon that indicates the direction of the policy (inbound or outbound) and its status (enabled or disabled). Table 3-2 describes these icons.

Properties Preview

The properties preview pane displays the properties of the device, device group, interface, or policy selected in the tree or list view panes. This can help you determine if you have defined the properties and filter conditions correctly. You can choose not to display the properties preview pane by selecting View>Properties Preview. Repeat this action to redisplay the pane.

Cutting, Copying, and Pasting Policies

You can use the standard Windows cut, copy, and paste functions to manipulate policies in the QPM list view pane.

Procedure

Step 1   Select the policy you want to cut or copy, or the folder in the tree view in which you want to paste the policy.

Step 2   Use these commands from the Edit menu or from the right mouse button popup menu to cut, copy, or paste.

• Cut—Copies the selected policy to the Windows clipboard and removes it from the current folder.
• Copy—Copies the selected policy to the Windows clipboard without removing it from the current folder.
• Paste—Pastes the policy to the selected interface, device, or device group folder. If the selected folder does not support the policy, you will not be able to paste it.

Changing the Policy Manager Display

You can change the main Policy Manager window to display information according to your preferences. Table 3-3 lists the available commands for changing the main Policy Manager window.

Saving Your Work

You must periodically save your changes to the QoS database. However, saving your changes to the database does not apply those changes to the network devices. You must use Distribution Manager to deploy your new or changed policies to the devices.

Procedure

Step 1  
Click the Save button, or select File>Save.

• If the database already has a name, the database is saved.
• If the database does not have a name, QPM opens the Save Database dialog box. Enter a relevant name and description for the database and click OK.

If the QoS Manager service is not available when you try to save the database, the database is saved to your local disk. Check the machine that is running QoS Manager to ensure it is running properly and try saving the database again.

Tips

• You can change the name of the database by selecting File>Save As.
  
  

Exiting Policy Manager

From the Policy Manager interface, you can close Policy Manager only, or close both Policy Manager and Distribution Manager.

Procedure

Step 1   To close Policy Manager without closing Distribution Manager, select File>Close.

To close both Policy Manager and Distribution Manager, select File>Exit.

Using Distribution Manager

Distribution Manager enables you to deploy policies to network devices. The following topics provide you with the basics for using Distribution Manager:

• Starting Distribution Manager
  
  
• Understanding the Main Distribution Manager Window
  
  
• Changing the Distribution Manager Display
  
  
• Starting Policy Manager from Distribution Manager
  
  
• Exiting Distribution Manager
  
  

---

Note   When working with QPM Distribution Manager, you can click the Help button in any of the dialog boxes to access context-sensitive online help.

---

Starting Distribution Manager

Start Distribution Manager to distribute policies and QoS settings to network devices.

Procedure

Step 1  
Click the Distribution Manager button on the Policy Manager tool bar or select Tools>Distribution Manager in Policy Manager.

Distribution Manager starts.

Tips

• You can also start Distribution Manager by selecting Start>Programs>QoS Policy Manager>Distribution Manager. If you have not already logged into Policy Manager, you must log into Distribution Manager using a name defined in the Windows NT QPM user group (for viewing and deployment of jobs) or guest group (for viewing only).
  
  

Understanding the Main Distribution Manager Window

The main Distribution Manager window (Figure 3-4) is divided into three panes.

• All Jobs Tree View—The upper left pane displays all jobs that you have created from QoS databases.
  
  
• List View—The upper right pane shows the contents of the job selected in the tree view. If no job is selected, it shows the details of the jobs listed in the tree.
  
  
• Log—The lower pane shows logs for system, job, and device status.
  
  

All Jobs Tree View

The All Jobs Tree View pane (Figure 3-5) shows all the jobs that you have created from QoS databases. Each job is assigned a number, which is the name of the job.

• Changing the Distribution Manager Display
  
  
• Options Dialog Box
  
  

List View

The list view pane shows the contents of the job selected in the All Jobs Tree View (Figure 3-6). If no job is selected in the tree, the list shows the details for all jobs listed in the tree (Figure 3-7).

• Job Name—The name of the job, which is a serial number created by the system.
  
  
• Database Name—The name of the database from which this job was created.
  
  
• Database Creator—The user that last saved the current database.
  
  
• Job Handler—The user that last deployed the job.
  
  
• Total Devices—The number of devices contained in the job.
  
  
• Written Devices—The number of devices whose configurations were changed when the job was applied to the network.
  
  
• Date/Time—The date and time the job was created.
  
  
• Status—The status of the job. Possible job statuses are described in Table 8-1.
  
  

• Device—The IP address of a device defined in the job.
  
  
• Date/Time—The date and time the job was created.
  
  
• Status—The status of the device (see Table 8-1).
  
  

Log

The log pane (Figure 3-8) displays logs of event messages.

Changing the Distribution Manager Display

You can change the main Distribution Manager window to display information according to your preferences. Table 3-5 lists the available commands for changing the main Distribution Manager window.

Starting Policy Manager from Distribution Manager

If Policy Manager is not running, you can start it from Distribution Manager.

Procedure

Step 1  
Click the Policy Manager button, or select Tools>Policy Manager.

The Policy Manager application starts.

Exiting Distribution Manager

From the Distribution Manager interface, you can close Distribution Manager only, or close both Distribution Manager and Policy Manager.

Before You Begin

Check the Status column to make sure that all distribution activities are complete or have been stopped.

Procedure

Step 1   To close Distribution Manager without closing Policy Manager, select File>Close.

To close both Distribution Manager and Policy Manager, select File>Exit.

Understanding the Tutorial Example Network

This tutorial is based on an example enterprise network that consists of a campus site and several remote sites. Each tutorial lesson applies QPM techniques and principles to specific segments of this network. In each lesson, a diagram clearly illustrates the relevant network segments, the data path, and the QoS features or policies applied.

Note   This example enterprise network does not include the segments that are relevant for configuring QoS for Voice over IP (VoIP). A separate QoS database is provided for configuring QoS for VoIP. A full description of this type of configuration is provided in Lesson 8Providing End-to-End QoS for VoIP over the Enterprise WAN.

Lesson 1—Creating a QoS Database

In this lesson you will learn how to create a QoS database comprising the devices and their interfaces that will be used in Lessons 2-6 of this Tutorial. The devices you will use to create the database are based on the example enterprise network illustrated in Figure 3-9.

When creating a QoS database, you can:

• Add individual devices (routers and switches) and their interfaces to the QoS database. You must add a device to the database before you can configure the QoS settings for the device or its interfaces. When you add devices on your network, you can automatically detect the interfaces and view their properties. You can also manually add interfaces.
  
  
• Add a group of devices at one time to the QoS database by importing them from a device inventory created using CiscoWorks2000 Resource Manager Essentials. This speeds up the process of creating a new database, especially for networks with many devices.
  
  
• Upload existing device configurations. If you have previously defined QoS configurations on your devices, using the CLI, you can upload these configurations into the QoS database, when you add the devices to the database, and generate reports for them.
  
  

Before You Begin

If you want to create policies and deploy them using actual devices that exist in your network, you need to obtain the IP addresses of the appropriate devices. Otherwise, you can use the example IP addresses in this tutorial so that you can follow the lessons without affecting your network. See Sample Network Device Information.

In this lesson you will learn the following:

• Adding a Device to the QoS Database
  
  
• Adding a Device's Interfaces
  
  
• Importing Multiple Devices into the QoS Database
  
  
• Uploading Existing Device Configurations
  
  

Sample Network Device Information

Table 3-6 lists the technical details of the devices in the Tutorial example network that you need to know in order to create a QoS database and to follow lessons 2-6. Not all interfaces on the devices are listed.

Adding a Device to the QoS Database

This topic describes how to add a device (router or switch) to the database. The procedure in this example describes how to add router R4 from the network configuration example. The procedure is identical for adding any other router or switch, except for the device details. Refer to Table 3-6 for the technical details of all the devices in the network configuration example. It is recommended that you perform the following procedure for all the devices in this network configuration example.

Before You Begin

The topic assumes that you are starting with an empty database.

Procedure

Step 1   Open the New Device dialog box by selecting Devices>Device>New in the Policy Manager.

Step 2   Enter device information in the New Device dialog box.

   a. At minimum, you must supply the following information:

• IP Address—The host name or IP address for the device.
  
  
• Community—The SNMP read community string for the device.
  
  
• Password—The password required for Telnet access to the device.
  
  
• Enable Password—The password required to enter enable mode on the device.
  
  

In this example, router R4 is 10.4.4.4, the community string is public, and both passwords are test (Figure 3-10).

   b. If your device is offline (for example, if you are using the IP addresses used in this lesson instead of addresses for devices on your network), you must select the device model and the software version in the relevant fields. In this example, router R4 is a Cisco 7200 running IOS software version 12.0.

   a. If the device is online and you want to add its interfaces automatically:

• Ensure that the Verify Device Information and Detect Interfaces check boxes are selected. You can also upload the device configuration at this stage by checking the Upload Device Configuration check box. See Uploading Existing Device Configurations, for more information.
  
  

   b. If you want to add the interfaces manually to an offline or online device:

• Ensure that the Verify Device Information, Detect Interfaces and Upload Device Configuration check boxes are unchecked.
  
  

Step 4   Click OK.

QPM creates a folder for the device (in this example, router R4) in the tree view using the IP address of the device.

Adding a Device's Interfaces

This topic describes how to add router interfaces and switch ports and VLANs to the database. Router R4 is used as an example. The procedure differs depending on whether or not the device is online.

Note   If you are using devices that exist online in your network, you can automatically detect their interfaces. In this tutorial, the devices and their interfaces listed in Table 3-6 3-21 are offline, enabling you to manually add them to the database without affecting your network.

When you add a switch's ports to the database, the available interfaces will include the ports and any VLANs that are configured on the switch. A VLAN includes several of the switch's ports. In order to deploy a policy defined on a VLAN to all its associated ports, you must add each port to the database and define the QoS style as VLAN-based (as opposed to port-based). See Defining the QoS Style for a Switch's Ports, for further information.

Before You Begin

This topic assumes that you have added the device (online or offline) to the database. If you are working online, continue with Adding the Interfaces if the Device Is Online. If you are working offline, continue with Adding the Interfaces if the Device Is Offline.

Adding the Interfaces if the Device Is Online

This section describes how you can automatically detect the interfaces for a device that is online in your network, once the device has been added to the database.

Procedure

Step 1   Detect the available interfaces:

   a. Ensure that the Verify Device Information and Detect Interfaces check boxes are selected (by right-clicking the device in the tree view and selecting Device Properties).

QPM queries the device, fills in the Device Model and Software Version fields, and obtains a list of the device's interfaces.

---

Note   If the software version running on the device is not supported, QPM maps to the most similar supported version. This feature is described in Lesson 5Updating the Database After Software Upgrades.

---

QPM opens the Detect Interfaces dialog box when it has a complete list of interfaces.

Step 2   Select the interfaces you want to manage:

   a. In the Detect Interfaces dialog box, ensure that the interfaces you want to manage are in the selected interfaces list, and move any you do not want to manage to the available interfaces list.

   b. Click OK when finished.

The device's interfaces are included as members of the device folder in the tree view (see Figure 3-12).

---

Note   If you want to apply QoS on a switch's VLAN (as is the case for switch S1), make sure that the VLAN and all of its ports are in the selected interfaces list.

---

Adding the Interfaces if the Device Is Offline

If the device is offline, you need to add the interfaces manually. This section describes how to manually add the interfaces for router R4, once it has been added to the database. The procedure for adding the interfaces for any other device is similar, except for the device details. Refer to Table 3-6 for the interface details of all the devices in the network configuration example. It is recommended that you perform the following procedure for all the devices in the network configuration example.

Procedure

Step 1   Add a new interface:

   a. Ensure that the Verify Device Information and Detect Interfaces check boxes are deselected (by right-clicking the device in the tree view and selecting Device Properties), so that QPM does not try to query the device.

   b. Right-click the device in the tree view and select New Interface.

QPM opens the New Interface dialog box.

   c. Enter the details for the Ethernet2/0 interface in the appropriate fields. You can obtain all of the relevant information for this dialog box from Table 3-6. You do not need to select the QoS Property value at this stage—this will be defined specifically for the device in a later lesson (see Configuring the QoS Property and Defining the QoS Style for a Switch's Ports).

Figure 3-11 shows the completed New Interface dialog box.

   d. Click OK in the New Interface dialog box.

   e. Repeat this procedure for the Serial3/0 interface (see Table 3-6 for the interface's details).

   f. Click OK in the New Device dialog box to return to the tree view.

Figure 3-12 shows the tree view that now includes router R4 with its interfaces.

Importing Multiple Devices into the QoS Database

This topic explains how you can add multiple devices at one time to the QoS database. Instead of adding each device individually, you can import a list of devices from a device inventory that was created using CiscoWorks2000 Resource Manager Essentials. If you have many devices to import, consider creating separate databases, each containing a different set of devices.

Before You Begin

It is assumed that you have previously exported a device inventory using CiscoWorks2000 Resource Manager Essentials.

Procedure

Step 1   From the Policy Manager, select Devices >Import.

QPM opens the Select RME File dialog box.

Uploading Existing Device Configurations

QPM enables you to upload existing QoS configurations on devices. This feature is useful if you have already configured QoS properties and policies on devices, using the CLI. Instead of redefining the QoS characteristics, you can use the upload feature to automatically update the QPM database with the QoS information when you add the device.

You can only upload a QoS configuration for a device that is online. For this lesson, use any online device in your network that has a QoS configuration (but hasn't yet been imported) and add it to the database. See Adding a Device to the QoS Database.

You can upload existing device configurations:

• In the New Device dialog box, when you add a new device to the network (see Adding a Device to the QoS Database).
  
  
• In the Device Properties dialog box, before you make a QoS configuration change (see Adding a Device's Interfaces).
  
  

---

Note   You can upload a device configuration one time only. The Upload Device Configuration check box is disabled after you make QoS configuration changes to the device.

---

• In the Detect Interfaces dialog box, if you are importing devices from an inventory file (see Importing Multiple Devices into the QoS Database).
  
  

Before You Begin

This topic assumes that you have added the device and detected its interfaces, but have not yet configured its QoS properties.

Procedure

Step 1   Right-click your online device in the tree view pane and select Device Properties.

QPM opens the Device Properties dialog box.

Step 2   Select the Upload Device Configuration check box and click OK.

The QoS configuration that is running on the device is translated to QoS properties and policies and is added to the policy database.

Step 3   After the upload is completed, you will be prompted to view an HTML report generated by QPM in your system browser. Click Yes if you want to view the upload report.

This report logs all the QoS configurations that were not successfully uploaded to the database. Upload failure may be caused by incomplete configurations that exist on the router, or unsupported options.

The report displays the following information for the device:

• The interface on the device.
  
  
• The QoS action that was applied.
  
  
• The error type - Unsupported or Incomplete.
  
  
• The upload error message.
  
  

See Device Upload Error Messages, for a complete list of error messages that you may see in an Upload Device Configuration Report.

Lesson 2—Creating and Distributing a Simple Policy for Managing Web Traffic on One Router

In this lesson, you will learn how to create and deploy a simple policy on a router. As an example, this lesson uses router R4, that you added to the QoS database in the previous lesson (Adding a Device to the QoS Database). The policy in this example sets the IP precedence for web traffic that goes through router R4. See Understanding the Tutorial Example Network, for a description of the example network used in this tutorial. The purpose of this policy is to color the web traffic for the Sales group, because the web server behind R4 hosts a significant application used by Sales, and Sales requires good response from this server.

In order to make a meaningful policy, you must not only color the traffic on the inbound interface to the router (interface Ethernet2/0, which connects the web server to R4), but you must choose a QoS property for the outbound interface Serial3/0 (Figure 3-17). You will implement weighted fair queuing (WFQ). This ensures that the colored traffic receives the appropriate percentage of overall bandwidth.

• Configuring the QoS Property
  
  
• Creating a New Policy to Color Inbound Traffic
  
  
• Distributing Policies to the Network
  
  

Before You Begin

This lesson assumes you have already added router R4 to the QoS database.

Configuring the QoS Property

This topic describes how to configure the QoS property on the interfaces to determine which queueing method will be used. You will configure the QoS property on the Serial3/0 interface so that it uses weighted fair queuing (WFQ). You do not need to change the QoS property of the Ethernet2/0 interface because you are only creating a policy for inbound traffic on Ethernet2/0.

Procedure

Step 1   Right-click Router R4's Serial3/0 interface in the tree view (Figure 3-12) and select Interface Properties.

QPM opens the Properties of Interface dialog box.

Step 2   Select WFQ in the QoS Property field (Figure 3-18).

Step 3   Click OK.

Creating a New Policy to Color Inbound Traffic

This topic describes how to create a policy to color traffic on an inbound interface. The purpose of this policy is to give high priority to web traffic passing through router R4's Ethernet2/0 inbound interface.

Procedure

Step 1   Create the policy.

   a. Select Router R4's Ethernet2/0 interface in the tree view.

   b.
Click the New QoS Policy button, or select File>New>Policy.

QPM opens the Properties of Policy dialog box, in which you will create the policy.

   c. In the General Properties page, change the name of the policy and add a meaningful comment. For this policy, use "WebTraffic" and "Color web traffic." Figure 3-19 shows the completed general properties page.

These are the only conditions required to identify web traffic. Figure 3-20 shows the completed Filter Properties dialog box.

   a. Click Next to open the Coloring page.

   b. Select the Coloring Properties check box. The fields for the coloring properties become active.

   c. Select flash-override (4) in the Precedence field to give a higher priority to the traffic that satisfies the policy's filter. Figure 3-21 shows the completed Coloring Properties dialog box.

Distributing Policies to the Network

After you have saved your policies in the QoS database, they must be deployed to the devices in the network where they will be implemented.

Note   If you are working with the examples provided in the tutorial and the device is not in your network, you will not be able to deploy your policies.

Procedure

Step 1  
In the Policy Manager, click the Distribution Manager button, or select Tools>Distribution Manager, to start Distribution Manager.

Step 2   In Distribution Manager, select Devices>Create Job to create a distribution job from the Tutorial database.

QPM opens the Create Job dialog box.

Step 3   Select the Tutorial database and click OK.

QPM creates a distribution job based on the policy definitions in the selected database. The job consists of the commands required to reconfigure the devices to implement your policies. Only the changes made since you last distributed the database are included in the job.

Step 4   Select the job you just created in the tree view.

When you select the job, QPM displays the contents of the job in the list view. The list view shows the devices whose configurations will be changed by the job. If you double-click the device name in the list view, QPM displays the commands that will be sent to the device when you apply the job (the device must be available on the network).

Figure 3-22 shows the job selected in the Distribution Manager window.

• Working with Devices
  
  
• Understanding Policies
  
  
• Understanding Policy Distribution
  
  

Lesson 3—Coloring Enterprise Resource Planning (ERP) Traffic on a Group of Devices

In this lesson, you will learn how to treat a set of device interfaces as a group, and create and deploy a simple coloring policy across the members of that group. The policy in this example will set the IP precedence for Enterprise Resource Planning (ERP) traffic that goes through routers R1 and R4 (see Figure 3-9 for the overall network diagram).

In this lesson you will learn the following:

• Creating Device Groups
  
  
• Creating a Policy on a Device Group
  
  

Before You Begin

If you want to create a policy and deploy it on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you can use the IP addresses in this lesson so that you can follow these steps without affecting your network.

This lesson assumes that you have added routers R1 and R4 to the QoS database, as described in Lesson 1—Adding a Device to the QoS Database.

Creating Device Groups

Device groups allow you to treat selected interfaces or subinterfaces as a single unit, so that you can easily apply common policies or QoS settings to the group.

This topic describes how to create two device groups, one combining the inbound interfaces of routers R1 and R4, and the other combining the outbound interfaces of the routers.

Procedure

Step 1   Create a device group for the Serial3/0 interfaces on routers R1 and R4, and set the QoS property for the device group to WFQ.

   a. In the Policy Manager, select Devices>Device Group>New, or select the DeviceGroups folder in the tree view, right-click, and select New Device Group.

QPM opens the Device Group dialog box.

   b. In the Device Group dialog box, enter the following information:

• Name—A meaningful name. In this example, use EdgeGroupOutbound.
  
  
• Device Model—IOS Family. This indicates that the group can contain any device running IOS software.
  
  
• Software Version—12.0. You can only group interfaces that use the same version (or a compatible one) of IOS software, because different versions support different QoS capabilities.
  
  
• Interface Type—Any.
  
  
• Card Type—Non-VIP.
  
  
• Group Contains—Interfaces.
  
  
• QoS Property—WFQ.
  
  

   c. Click Add/Remove in the Group Members area.

QPM opens the Add/Remove Group Members dialog box.

   d. In the Add/Remove Group Members dialog box, open the trees for routers R1 (10.2.2.2) and R4 (10.4.4.4), select the Serial3/0 interfaces for each device in turn and click >> to add each interface to the group (Figure 3-23).

Figure 3-24 shows the Device Group dialog box after you have added the Serial3/0 interfaces as group members.

QPM asks you to confirm that you want the group properties to override the properties already defined on R4's Serial3/0 interface (properties created in Lesson 1—Adding a Device to the QoS Database). Click Yes.

QPM creates the group and adds it to the DeviceGroups folder in the tree view.

Step 2   Create a device group for the Ethernet2/0 interfaces on routers R1 and R4.

   a. In the Policy Manager, select Devices>Device Group>New, or select the DeviceGroups folder in the tree view, right-click, and select New Device Group.

QPM opens the Device Group dialog box.

   b. In the Device Group dialog box, enter the following information:

• Name—A meaningful name. In this example, use EdgeGroupInbound.
  
  
• Device Model—IOS Family.
  
  
• Software Version—12.0.
  
  
• Interfaces—Any.
  
  
• Card Type—Non-VIP.
  
  
• Group Contains—Interfaces.
  
  
• QoS Property—Defined by Interface.
  
  

   c. Click Add/Remove in the Group Members group.

QPM opens the Add/Remove Group Members dialog box.

   d. In the Add/Remove Group Members dialog box, open the trees for routers R1 (10.2.2.2) and R4 (10.4.4.4), select the Ethernet2/0 interfaces for each device in turn and click >> to add each interface to the group.

   e. Click OK when finished.

QPM adds the interfaces to the Group Members list in the Device Group dialog box.

   f. Click OK in the Device Group dialog box.

Figure 3-25 shows the tree view with the completed device group entries.

Creating a Policy on a Device Group

A policy that is created on a device group is applied to all the interfaces belonging to the group. This avoids the need to create individual policies for each interface.

In this lesson, you will create a policy on the EdgeGroupInbound group to color ERP traffic.

Step 1   Create the policy.

   a. Select the EdgeGroupInbound group in the tree pane.

   b.
Click the New QoS Policy button, or select File>New>Policy.

QPM opens the Properties of Policy dialog box.

   c. In the General Properties page, change the name of the policy and add a meaningful comment. For this policy, use "ERPTraffic" and "Color ERP traffic for the HR, Finance, and Sales organizations."

   d. Click Next to open the Direction Properties page.

Select the In direction to indicate that the policy is for inbound traffic.

Step 2   Define the policy's filter.

   a. Click Next to open the Filter Properties page.

Because the ERP server in this example is dedicated to the ERP applications, as is typically the case, you color all traffic from the server. If other applications were on the same server as the ERP application, you would also use a port filter.

   b. Select the following values in the same row:

• Make sure that the check box in the Deny field is blank.
  
  
• Protocol—TCP.
  
  
• Sender (Host Name)—ERPServer.
  
  

Step 3   Define the policy's coloring action.

   a. Click Next to open the Coloring page.

   b. Select the Coloring Properties check box. The fields for the coloring properties become active.

   c. Select flash-override (4) in the Precedence field to give a higher priority to the traffic that satisfies the policy's filter.

   d. Click Finish to save the policy.

QPM adds the policy to the EdgeGroupInbound folder.

Step 4  
Click the Save button, or select File>Save, to save the policy in the database. Because you used a host name for the ERP server, QPM asks if you would like the host name resolved to its IP address. Policies can be distributed to the device only if the host names are converted to IP addresses. Click Yes to have QPM resolve the host name. (Click No if you are following along in this lesson without using actual host names that exist in your network.)

Step 5   Distribute the policy to the network, following the procedure described in Distributing Policies to the Network.

Related Topics

• Working with Device Groups
  
  

Lesson 4—Limiting the Bandwidth Available to FTP Traffic on a Switch

In this lesson, you will learn how to limit the bandwidth that is available to a specific application. The policy in this example will limit FTP traffic passing through switch S1 to a specified bandwidth (see Figure 3-9 for the overall network diagram). FTP traffic that exceeds this bandwidth will be discarded. The purpose of this policy is to prevent FTP traffic from flooding the network and thus reducing the performance of the more important applications on the network.

You will define an application service alias for FTP traffic from the central site, and use the alias to set the limit for FTP traffic to 1024 Kbps (Figure 3-26).

Since you will be defining a limiting policy on the S1 switch, you first need to add the switch and its interfaces to the database. This lesson assumes that you have already added Switch S1 and its interfaces to the QoS database (see Lesson 1—Adding a Device to the QoS Database), but that you still need to define the QoS style for the switch's ports. This lesson also assumes that you have completed all the steps in the previous lessons.

In this lesson you will learn the following:

• Defining the QoS Style for a Switch's Ports
  
  
• Creating an Application Service Alias
  
  
• Creating a Limiting Policy on the Switch
  
  
• Verifying Device Configuration and Distributing to the Network
  
  

Defining the QoS Style for a Switch's Ports

Switch S1 is a Catalyst 6000 switch running CatOS version 5.5. In this example, a VLAN has been configured on switch S1. The VLAN includes several of the switch's ports. The limiting policy will be defined on this VLAN, therefore, you do not have to define the policy on each port individually. However, in order to ensure that the policy is applied to all the ports that belong to the VLAN, you must add each port to the database and define the QoS style as VLAN-based (as opposed to port-based).

It is recommended that you create a device group of the switch's ports that are included in the VLAN and define the QoS style on the device group itself. This saves you having to define the QoS style on each port separately.

The following procedure describes how to create a device group for the VLAN's ports and define their QoS style as VLAN-based.

Before You Begin

This topic assumes that each of the switch's ports have been added to the database (see Adding a Device's Interfaces).

Procedure

Step 1   Create a device group for the three ports (Ethernet2/0, Ethernet2/1 and Ethernet2/2) in VLAN20 on switch S1.

   a. In the Policy Manager, select Devices>Device Group>New, or select the DeviceGroups folder in the tree view, right-click, and select New Device Group.

QPM opens the Device Group dialog box.

   b. In the Device Group dialog box, enter the following information:

• Name—A meaningful name. In this example, use VLANDeviceGrp.
  
  
• Device Model—Cat6000. This indicates that the group can contain only the interfaces for a Catalyst 6000 switch.
  
  
• Software Version—5.5. You can only group interfaces that use the same version (or a compatible one) of CatOS software, because different versions support different QoS capabilities. In this example, the Catalyst 6000 switch is running CatOS version 5.5.
  
  

   c. In the Group Members area, select Ports from the drop-down list, so that only ports (not VLANs) are displayed in the list of available group members.

   d. Click Add/Remove in the Group Members area.

QPM opens the Add/Remove Group Members dialog box.

   e. In the Add/Remove Group Members dialog box, open the tree for the device, select the Ethernet ports for the device in turn and click >> to add each port to the group (Figure 3-27).

Figure 3-28 shows the Device Group dialog box after you have added the Ethernet ports as group members.

Step 2   Select VLAN Based in the QoS Style field (Figure 3-28) to determine that QoS configurations will apply to the VLAN and not to the individual ports.

Step 3   Click OK in the Device Group dialog box.

QPM creates the device group with a VLAN-based QoS style and adds it to the DeviceGroups folder in the tree view.

Creating an Application Service Alias

An application service alias can be defined when you want to identify a particular type of network traffic source from a host or subnet. You can use application service aliases to simplify the writing of your policies, because you can write a policy for the application service instead of one for each host.

In this example, you will create an application service alias for FTP traffic. The filter in your limiting policy will be based on this application alias.

Procedure

Step 1   Create an application service alias for FTP traffic.

   a.
In the Policy Manager, click the Application Services button, or select Tools>Application Services.

QPM opens the Application Services dialog box.

   b. Click Add to open the Application Service dialog box.

   c. In the Application Service dialog box, fill in the required information to identify the source of the FTP traffic, and to give the application service alias a name.

In this example, you will identify the FTP traffic by using the following attributes (Figure 3-29):

• Name—Central Services FTP Server
  
  
• Protocol—TCP
  
  
• Host—10.1.214.113
  
  
• Port—20-21 (the ftp-data and ftp ports)
  
  

Click OK when finished to return to the Application Services dialog box.

Creating a Limiting Policy on the Switch

This topic shows how to create a policy on VLAN20 on switch S1 to limit the bandwidth available to FTP traffic.

Procedure

Step 1   Create the policy.

   a. Select VLAN20 in the tree view.

   b.
Click the New QoS Policy button, or select File>New>Policy, or right-click in the policy list view and select New QoS Policy.

QPM opens the Properties of Policy dialog box.

   c. In the General Properties page, change the name of the policy and add a meaningful comment. For this policy, use "FTP Traffic" and "Limit bandwidth for FTP traffic".

   d. Click Next to open the Direction Properties page.

   e. Select the In direction to indicate that the policy is for inbound traffic.

Step 2   Define the policy's filter. The aim is to identify all FTP traffic coming from the Central Services FTP Server.

   a. Click Next to open the Filter Properties page.

   b. In the filters list, click in the Sender field and select the type of sender, as follows:

• Type—Is App. Service.
  
  
• App. Service—Central Services FTP Server.
  
  

   c. Click OK.

Step 3   Define the policy's limiting action, which limits the bandwidth available to the specified application.

   a. Click on Limiting on the left side of the Properties of Policy dialog box to open the Limiting Properties page, or click Next until you reach this page.

   b. Select the Limiting Properties check box.

The limiting properties fields are enabled.

   c. Define the following limiting properties to specify a maximum rate for the traffic and to remove IP precedence from traffic that exceeds this rate:

• Limiting Type—Aggregate.
  
  
• Rate—The target average rate for the specified traffic, in kilobits per second. For this example, enter 1024.
  
  
• Burst Size—The maximum size (in kilobytes) that a burst can be before some traffic is marked as exceeding the rate limit. For this example, enter 960.
  
  
• Limiting Mechanism—Select Precedence.
  
  
• Precedence—Select None.
  
  

Figure 3-30 shows the Limiting Properties page after you have defined all the properties.

   d. Click Finish to save the policy.

Verifying Device Configuration and Distributing to the Network

QPM enables you to verify whether the configuration of the devices in your network is different to what was defined for the devices in your QPM database. You can use this feature to check if any changes have been made to any of your network devices.

After this validation process, you can distribute policies to the network as usual.

Procedure

Step 1   Create a job in Distribution Manager.

   a.
Click the Distribution Manager button, or select Tools>Distribution Manager, to start Distribution Manager.

   b. In Distribution Manager, select Devices>Create Job to create a distribution job from the Tutorial database. QPM opens the Create Job dialog box.

   c. Select the Tutorial database and click OK. QPM creates a distribution job based on the policy definitions in the selected database. The job consists of the commands required to reconfigure the devices to implement your policies. Only the changes made since you last distributed the database are included in the job.

Step 2   Check the device configuration.

   a. Select the job you just created in the tree view.

When you select the job, QPM displays the contents of the job in the list view, which shows the devices whose configurations will be changed by the job. If you double-click the device name in the list view, QPM displays the commands that will be sent to the device when you apply the job (the device must be available on the network).

   b.
Click the Verify Device Configuration button, or select Devices>Verify Device Configuration.

QPM starts checking the configuration of the devices in the job. The result of this validation process appears in the Status column and can be either Matched or Mismatched. Details can be viewed in the log in the lower section of the Distribution Manager window.

Step 3   Apply the job.

   a.
Click the Apply button, or select Devices>Apply. QPM starts applying the changes defined in the job to the network devices. You can view the results of the jobs in the logs displayed in the bottom pane of Distribution Manager.

Related Topics

• Adding a Device to the QoS Database
  
  
• Adding a Device's Interfaces
  
  
• Working with Device Interfaces and VLANS
  
  
• Uploading Device QoS Configurations
  
  
• Working with Application Services Aliases
  
  
• Understanding Policies
  
  

Lesson 5—Updating the Database After Software Upgrades

In this lesson, you will learn how to update the QoS database to recognize that you have upgraded the software on a device.

QPM uses the device IOS version number to load device capabilities to the database. All sub-versions of a certain version are mapped to the major version, unless QPM explicitly supports the minor version. New minor versions are mapped to the last supported minor version. For example, version 12.2(1)T would be mapped to version 12.2, and version 12.2(4)T would be mapped to version 12.2(2)T. QPM provides you with the option of manually changing the mapped version number if you require the QoS features of a different version.

In most cases, your QoS configuration and policies remain unchanged after a software upgrade. However, in certain cases, QPM changes the implementation of policies to take advantage of the features of a new software release (without changing the meaning of your policies). Table 3-7 explains the changes that are made for some software upgrades.

• Updating the QoS Database with New Software Version Information.
  
  
• Recreating Device Groups for the New Software Version.
  
  

Before You Begin

This lesson assumes that you have completed the steps in the previous lessons.

Updating the QoS Database with New Software Version Information

For the purpose of this lesson, assume that you have upgraded the IOS software version on routers R1 and R4 from version 12.0 to version 12.1(6)E.

Procedure

Step 1   Start QPM and open the Tutorial database.

Step 2   Change the device properties for router R1:

   a. Select router R1 (10.2.2.2) and select Devices>Device>Properties.

QPM opens the Device Properties dialog box.

   b. Click the Verify Device Info button.

QPM queries the router and updates the software version number and device model, and makes policy conversions if required.

(If you are not using a real device, instead of clicking Verify Device Info, select 12.1(6)E in the Mapped Software Version field.)

---

Note   The detected software version is displayed in the Software Version field. If this version is not supported, QPM maps to the most recent, most similar supported version, which is displayed in the Mapped Software Version field. You can manually select a different software version in this field if you require its specific capabilities.

---

   c. Click OK to save the changes to the device configuration. QPM informs you if there are any conflicts between the QoS configuration and policies defined on the device's interfaces and the new software version. You must resolve the conflicts before you can complete the changes to the device properties.

Step 3   Use the same procedure to change the software version for router R4 (10.4.4.4) to 12.1(6)E.

Recreating Device Groups for the New Software Version

At this point, you have updated the software versions on the devices. However, this change has not affected the definitions of the EdgeGroupInbound and EdgeGroupOutbound device groups, even though these device groups contain only members from the R1 and R4 routers. To take advantage of IOS software version 12.1(6)E QoS features, you must recreate these device groups as IOS software version 12.1(6)E device groups.

To avoid having to recreate the existing policies in the device groups, you can copy them over to a new device group, then delete the old device group, and then rename the new device group.

Procedure

Step 1   Create a new device group with software version 12.1(6)E:

   a. Select Devices>Device Group>New to create a new device group.

QPM opens the Device Group dialog box.

   b. Enter a temporary name for the device group (egi) in the Name field, and select 12.1(6)E in the Software Version field (Figure 3-31).

   c. Click OK when finished.

QPM creates the egi device group.

Step 7   Distribute your policy to the network, following the procedure described in Distributing Policies to the Network.

Related Topics

• Working with Device Groups
  
  
• How Device Software Upgrades Affect Device Groups
  
  

Lesson 6—Using NBAR and Creating Multiple Action Policies

In this lesson you will learn how to create a multiple-action policy to police and color specific traffic generated from a network-based application, using Network Based Application Recognition (NBAR) to identify the application. Refer to Using Network Based Application Recognition (NBAR) with CBWFQ.

Note   IP CEF must be enabled on the device in order to use NBAR. At deployment, QPM checks if CEF is configured on the router for the relevant features. If not configured, QPM will issue a warning. See QoS Features That Require IP CEF or dCEF for more information.

The policy in this lesson will apply the following actions to MIME type web traffic, specifically JPEG files, passing from a specific host through router R4 and out to the WAN (see Figure 3-9 for the overall network diagram):

• Queuing—Ensures that the specified traffic receives a minimum percentage of the total bandwidth during times of congestion.
  
  
• Limiting—Discards traffic that exceeds a specific rate, ensuring that the traffic does not use more than its defined minimum bandwidth.
  
  
• Coloring—Gives high IP precedence to the specified web traffic.
  
  

QPM uses modular CLI to implement this policy. Modular CLI separates traffic into classes and defines properties for each class.

Note   The policy in this lesson can be created only if your IOS software version supports modular CLI and NBAR.

In order to enable the options that will allow you to define the example policy, you will choose Class Based QoS in the QoS Property field for the outbound (Serial3/0) interface on router R4.

In this lesson you will learn the following:

• Changing the QoS Property on an Interface
  
  
• Creating a Multiple-Action Policy with NBAR Filtering
  
  

Before You Begin

This lesson assumes that you have completed the steps in the previous lessons.

If you are using actual devices in your network, make sure that the IOS version is 12.1(6)E or above.

If you want to create a policy and deploy it on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you can use the IP addresses in this lesson so that you can follow these steps without affecting your network.

Changing the QoS Property on an Interface

The first step in this lesson is to define the QoS property on Serial3/0 on router R4 as Class Based QoS. This will enable you to use NBAR properties as a filter during policy definition.

Before you can do this, you need to remove the outbound interface (Serial3/0 on router R4 from the device group to which it belongs (EdgeGroupOutbound), so that you can change its QoS property.

Procedure

   c. In the Add/Remove Members dialog box, in the Group Members list, select router R4 (10.4.4.4) and click << to remove the device from the group (Figure 3-33). Click OK when finished.

Creating a Multiple-Action Policy with NBAR Filtering

QPM provides the capability to create multiple-action policies, if the IOS software version running on your device supports modular CLI. For this example, you will create a policy on the outbound interface (Serial3/0 on router R4) that performs three actions on the traffic that matches the filter (web traffic of MIME type from www.cisco.com):

• Queuing—creates a queue for the specified class of traffic, which is ensured a minimum percentage of the total bandwidth.
  
  
• Limiting—defines an upper limit for the bandwidth allocated to the traffic and lowers the precedence of traffic that exceeds this limit.
  
  
• Coloring—assigns high IP precedence to the specified traffic.
  
  

Procedure

Step 1   Create the policy.

   a. Select router R4's Serial3/0 interface in the tree view.

   b.
Click the New QoS Policy button, or select File>New>Policy or right-click in the policy list view and select New QoS Policy.

QPM opens the Properties of Policy dialog box, in which you will create the policy.

   c. In the General Properties page, change the name of the policy and add a meaningful comment. For this policy, use "Multiple Action" and "Manage critical web traffic."

   d. Click Next to open the Direction Properties page.

Select the Out direction to indicate that the policy is for outbound traffic.

Step 2   Define the policy's filter.

   a. Click Next to open the Filter Properties page.

   b. Click the NBAR Properties tab, since the traffic identification for this policy is via NBAR (Figure 3-34).

   d. Supply the following information in the NBAR Properties dialog box to identify web traffic originating from the Cisco Systems host (Figure 3-35):

• Protocol—Http
  
  
• Parameter—Host
  
  
• Value—www.cisco.com
  
  

Click OK.

Click OK.

The NBAR Properties tab now shows the two filters you defined (Figure 3-36). By default, the Match ANY filter row AND ALL other conditions radio button is selected, therefore, packets must match both filters in order for the defined action to be carried out.

   c. Type 20 in the Bandwidth field to ensure that the specified traffic receives a minimum of 20% of the total bandwidth when the line is congested (Figure 3-37).

Figure 3-38 shows the Limiting Properties page after you have defined all the properties.

   d. Click Finish to save the policy.

Step 7   Distribute your policy to the network, as described in Distributing Policies to the Network.

Lesson 7—Configuring Frame Relay Traffic Shaping

In this lesson, you will learn how to configure Frame Relay traffic shaping (FRTS) on Cisco routers. FRTS is frequently used to throttle traffic to the rate agreed upon with your WAN service provider, particularly if the destination link is running at a lower bandwidth than the source link.

For example, you might have a T1 line running at 1544 Kbps, but your service provider is committing to provide only 512 Kbps, and the destination of your traffic is a link running lower bandwidth than 1544 Kbps. By throttling the traffic rate at the source, you ensure that the traffic does not overwhelm the WAN link, resulting in dropped packets and increased delay. With FRTS, you can control the rate and smooth the traffic flow.

This example uses a different network setup than used in previous lessons. Figure 3-39 shows three routers connected over a Frame Relay cloud. All links are T1 Frame Relay lines. The Main router uses subinterfaces to enable routing between the two remote offices, Remote1 and Remote2. Most WAN traffic originates from the main office, so you will implement FRTS on the subinterfaces on the Main router. The service provider has committed to 512 Kbps for the Main-Remote1 link, and 256 Kbps for the Main-Remote2 link. There is no rate commitment for the interfaces on the remote links.

• Enabling FRTS on an Interface
  
  
• Configuring FRTS on a Subinterface or DLCI
  
  

Before You Begin

If you want to create a policy and deploy it on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you can use the IP addresses in this lesson so that you can follow these steps without affecting your network.

This lesson assumes that you have completed the steps in previous lessons. Although you will not use the same network setup, you should already be familiar with adding devices and interfaces to the QoS database.

Table 3-8 lists the device details for this example. Because Remote1 and Remote2 links do not have a committed information rate, you are not enabling FRTS or other QoS capabilities on these routers in this example. Therefore, you only need to add Main, its Serial3/0 interface, and its subinterfaces to the database.

Enabling FRTS on an Interface

You must first enable FRTS on an interface in order to configure FRTS on the interface's subinterfaces or DLCIs.

Procedure

Step 1   Add the Main router to the database, using 10.10.10.11 for the device name. See Lesson 1—Adding a Device to the QoS Database, for the steps for adding devices to the databases, if you are not familiar with the procedure.

Step 2   Enable FRTS on the Main router's Serial3/0 interface.

   a. Right-click Serial3/0 in the 10.10.10.11 folder and select Interface Properties.

QPM opens the Properties of Interface dialog box.

   b. Select FIFO as the QoS Property. You must select a QoS Property other than "Do Not Change" if you want to configure interface QoS capabilities such as FRTS.

   c. Select Enable Frame Relay Traffic Shaping.

   d. Enter 512 in the Rate field.

   e. Select Adaptive Shaping. This allows the interface to respond to notifications of congestion from the Remote1 and Remote2 routers, and throttle traffic accordingly.

Figure 3-40 shows the completed interface properties.

   f. Click OK when finished.

Configuring FRTS on a Subinterface or DLCI

You can choose to deploy FRTS on a subinterface or on a DLCI. This topic describes how to enable FRTS on the Main router's subinterfaces or DLCIs.

Procedure

Step 1   Right-click Serial3/0.1 in the 10.10.10.11 folder and select Interface Properties.

Step 2   Make the following selections:

• FIFO for QoS Property
• 512 for Rate
• Adaptive Shaping

---

Note   If you want to configure FRTS on the DLCI, check the Configure on DLCI check box—otherwise FRTS will be configured on the subinterface.

---

Figure 3-41 shows the completed interface properties. Click OK when finished.

Step 5   Distribute your settings to the network, as described in Distributing Policies to the Network.

Related Topics

• Frame Relay Traffic Shaping (FRTS)Controlling Traffic on Frame Relay Interfaces and Subinterfaces
  
  

Lesson 8—Providing End-to-End QoS for VoIP over the Enterprise WAN

Real-time Voice over IP (VoIP) traffic in a network is directly affected by packet loss, packet delay and delay variation. In an enterprise environment, network congestion can occur at any time in any portion of the network campus, branch office, or WAN. For successful deployment of IP telephony, you must ensure end-to-end network quality for voice traffic.

QPM provides templates for configuring QoS for IP telephony in a separate database (IP_TELEPHONY_TEMPLATE). These templates are predefined device groups that contain the QoS configurations and policies required at each relevant point in the network. To use the IP telephony templates, all you need to do is add your devices to the database, then add the device interfaces to the relevant device groups and deploy the database. For detailed information about QPM IP telephony templates, refer to "Configuring QoS for IP Telephony."

Related Topics

• Management of Voice and Other Real-Time Traffic
  
  
• Working with the QPM IP Telephony Templates
  
  

---

Note   This lesson uses a different network configuration example than in previous lessons, and a separate QoS database. The lesson describes the whole process of configuring QoS for VoIP traffic, from adding the devices to the IP Telephony QoS database through deployment to the network.

---

In this lesson, you will learn how to use IP Telephony templates to deploy QoS for VoIP over the Campus, WAN and Branch Office segments of a network, using the example network scenario illustrated in Figure 3-42.

This lesson includes the following topics:

• Network Example for Configuring QoS for VoIP
  
  
• Adding Devices to the IP Telephony Database
  
  
• Assigning Interfaces to the Device Groups
  
  
• Deploying the IP Telephony Database
  
  

Network Example for Configuring QoS for VoIP

Figure 3-42: Lesson 8—Configuring QoS for VoIP Traffic

• Configuring QoS for the Campus Site
  
  
• Configuring QoS for the WAN
  
  
• Configuring QoS for the Remote Branch
  
  

Configuring QoS for the Campus Site

The campus site includes a Cisco CallManager and IP Phone that are connected to a QoS-aware Catalyst 6000 access switch (S2). The IP Phone ports are configured to use an auxiliary voice VLAN (VLAN20) on S2. The Catalyst 6000 access switch is connected to a Catalyst 6000 distribution layer switch (S3). Voice data from the campus site enters the WAN from a Cisco 3600 router running IOS version 12.2.

In the campus site, you need to configure QoS at the following network points:

• The IP Phone connection to the access switch port (network point 1 in Figure 3-42).
  
  
• The CallManager connection to the access switch port (network point 2 in Figure 3-42).
  
  
• The uplink ports on the Catalyst 6000 access switch connection to the Catalyst 6000 distribution switch port (network point 3 in Figure 3-42).
  
  
• The downlink ports on the Catalyst 6000 distribution switch connection to the Catalyst 6000 access switch port (network point 4 in Figure 3-42
  
  
• The LAN connection from the Catalyst 6000 distribution switch (S3) to the WAN router (network point 5 in Figure 3-42).
  
  

Configuring QoS for the WAN

The following QoS features must be configured on the device interfaces in the WAN segment of the network (network points 6 in Figure 3-42):

• Frame Relay Traffic Shaping (FRTS)—Minimizes packet loss by throttling back packets as they are forwarded into the Frame Relay cloud, based on congestion indicators.
  
  
• Frame Relay Fragmentation (FRF.12)—Ensures that voice packets are not blocked behind large data packets (such as file transfers) by fragmenting these large packets and interleaving voice packets between the fragments.
  
  
• Low Latency Queuing (LLQ)—Allows delay-sensitive data such as voice to be de-queued and sent first (before packets in other queues are de-queued), giving delay-sensitive data preferential treatment over other traffic. The relatively small size of voice packets makes it possible to use a strict priority queue for voice without degrading network quality for the remaining traffic. It also uses CBWFQ to ensure bandwidth for VoIP control traffic. The traffic classification is set according to the DSCP value.
  
  
• Compressed RTP (cRTP)—Reduces unnecessary bandwidth consumption by compressing header size from 40 bytes to 5 bytes. The benefits of using cRTP for voice are apparent when considering that the payload for a VoIP packet is only 20 bytes.
  
  

Configuring QoS for the Remote Branch

The remote site includes several IP Phones on a LAN, connected via a Catalyst 3500 switch (S4) to a Cisco 3600 router (R6) in the WAN. QoS features must be configured on the IP Phones ports (network point 1) and on the branch office router interface to switch S4 (network point 7 in Figure 3-42).

Adding Devices to the IP Telephony Database

This topic describes how to add the devices in the example network (see Figure 3-42) to the IP telephony database. The procedure in this example describes how to add router R5 from the network example. The procedure is identical for adding any network device. Refer to Table 3-9 for the technical details of the devices in the network example. You should perform this procedure also for router R6 and switches S2, S3 and S4.

Note   You can also add multiple devices at one time to the IP telephony database. Instead of adding each device individually, you can import a list of devices from a device inventory that was created using CiscoWorks2000 Resource Manager Essentials. See Importing Multiple Devices into the QoS Database, for details.

Table 3-9 lists the technical details of the devices in the example network (see Figure 3-42) that you need to add to the IP Telephony database in order to follow this lesson.

At minimum, you must supply the following information:

• IP Address—The host name or IP address for the device.
  
  
• Community—The SNMP read community string for the device.
  
  
• Password—The password required for Telnet access to the device.
  
  
• Enable Password—The password required to enter enable mode on the device.
  
  

In this example, router R5 is 10.1.1.1, the community string is public, and both passwords are test (Figure 3-44).

   c. If your device is offline (for example, if you are using the IP addresses used in this lesson instead of addresses for devices on your network), you must select the device model and the mapped software version in the relevant fields. In this example, router R5 is a Cisco 3600 running IOS software version 12.2.

   a. If the device is online, QPM queries the device, fills in the Device Model and Software Version fields, and obtains a list of the device's interfaces.

---

Note   If the software version running on the device is not supported, QPM maps to the most similar supported version. This feature is described in Lesson 5Updating the Database After Software Upgrades.

---

QPM opens the Detect Interfaces dialog box when it has a complete list of interfaces.

• In the Detect Interfaces dialog box, ensure that the interfaces you want to manage are in the selected interfaces list, and move any you do not want to manage to the Available Interfaces list.
  
  

---

Note   If you want to apply QoS on switch S2's VLAN, make sure that the VLAN and all of its ports are in the selected interfaces list.

---

• Click OK when finished.
  
  

QPM adds the device's interfaces as members of the device folder in the tree view.

   b. If the device is offline:

• Right-click the device in the tree view and select New Interface.
  
  

QPM opens the New Interface dialog box.

• Enter the details for the Serial1/0 interface in the appropriate fields.
  
  

At minimum, you must enter the interface Name and Type. You can obtain the relevant information for this dialog box from Table 3-9. You do not need to select the QoS Property value.

---

Note   If you are entering details for a DLCI interface, a DLCI field becomes available once you enter the DLCI name. You should enter the appropriate DLCI number in this field (see Table 3-9).

---

Figure 3-45 shows the completed New Interface dialog box.

• Click OK in the New Interface dialog box.
  
  
• Repeat this procedure for each of the device's interfaces. (For router R5, you also need to add the DLCI and Ethernet interfaces.)
  
  
• Click OK in the New Device dialog box to return to the tree view.
  
  

Figure 3-46 shows the tree view that now includes router R5 with its interfaces.

Assigning Interfaces to the Device Groups

This topic describes how to assign the interfaces that need QoS configuration for voice, to the appropriate device groups in the IP Telephony database.

Note   Non QoS commands that are not supported by QPM, such as power settings on ports and VLAN configuration, are beyond the scope of this Tutorial lesson.

Based on the network example in Figure 3-42, assigning the interfaces to the Device Groups requires:

• Assigning the IP Phone Interfaces
  
  
• Assigning the CallManager Interfaces
  
  
• Assigning the Uplink Interfaces to the Distribution Switch
  
  
• Assigning the Downlink Interfaces to the Access Switch
  
  
• Assigning the LAN Interface to the WAN Router
  
  
• Assigning the WAN Interfaces
  
  
• Assigning the Remote Branch Interfaces
  
  

Before You Begin

It is assumed that you have added routers R5 and R6, and switches S2, S3 and S4 and their respective interfaces to the Tutorial_IP_TELEPHONY_TEMPLATE database (see Figure 3-42). See Adding Devices to the IP Telephony Database.

Assigning the IP Phone Interfaces

To configure QoS for the IP Phone connection to the Catalyst 6000 access switch, you need to configure QoS for the ports and also the VLAN. Two device groups are available in the Policy Manager for this—Acc6000=>IP-Phones and AccDist6K=>VoiceVLAN. The Acc6000=>IP-Phones device group configures the trust state of the IP Phone and switch interface. The AccDist6K=>VoiceVLAN device group configures an ACL to trust all CoS classification on Ethernet ports in the VLAN.

Configuring QoS Using the Acc6000=>IP-Phones Device Group

The Acc6000=>IP-Phones device group configures the following features on the IP telephone port for the Catalyst 6000 access switch (S2):

• Trust-ext untrusted—Extend the trust boundary of the switch to the IP Phone and set it to "untrusted", so that the PC connected to the access port of the IP Phone is not also classifying traffic. This requires re-classifying all traffic coming from the PC with CoS=0.
  
  
• Trust-cos—Trust layer 2 CoS bits from the IP Phone. This should be the default if trust-ext is used.
  
  
• VLAN-based QoS style—Use the coloring policies from the VLAN.
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc6000=>IP-Phones Device Group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the available interfaces for IP Phone QoS configuration.

Step 2   Select the Ethernet2/1 port interface you added for switch S2 and click >> to add it to the Group Members area. Click OK.

QPM displays the following message, warning you that you will override the member interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the Device Group.

The selected interface is added to the Acc6000=>IP-Phones device group.

Configuring QoS Using the AccDist6K=>VoiceVLAN Device Group

The AccDist6K=>VoiceVLAN device group configures the policies that should be applied to IP Phone interfaces that are configured to use VLAN-based QoS. This enables only the VLAN-based policies (not the individual port's policies) to be deployed to the ports on the VLAN.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the AccDist6K=>VoiceVLAN device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the VLAN interface you added for switch S2.

Step 2   Select the VLAN20 interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the VLAN interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The VLAN20 interface is added to the AccDist6K=>VoiceVLAN device group.

Assigning the CallManager Interfaces

The IP Phone communicates with the CallManager using the Skinny Station Protocol. For example, when an IP Phone goes "off hook", it consults the CallManager, which then instructs the phone to play the dial-tone. In order to mark the importance of this control and management traffic between the CallManager and the IP Phone, ACLs are used to classify traffic streams on the Catalyst 6000 access switch.

The Acc6000=>VoIPControl device group in the Policy Manager enables you to configure QoS for the CallManager connection to the Catalyst 6000 access switch port, as follows:

• Color all the control traffic port ranges
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc6000=>VoIPControl device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying one of the Ethernet port interfaces you added for switch S2. (The other Ethernet2/1 interface is already assigned to the IP Phone connection.)

Step 2   Select the Ethernet2/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet2/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The Ethernet2/0 interface is added to the Acc6000=>VoIPControl device group.

Assigning the Uplink Interfaces to the Distribution Switch

Once you have configured QoS on the IP Phone and CallManager interfaces, you must also configure the uplink interfaces to the Catalyst 6000 distribution switch (S3).

The Acc6000_GE=>Dist template enables you to configure the uplink ports on the Catalyst 6000 access switch to the distribution switch, as follows:

• Trust CoS from the distribution layer
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc6000_GE=>Dist device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the gigabitEthernet interface you added for switch S3.

Step 2   Select the Ethernet1/1 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet1/1 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The gigabitEthernet type interface, Ethernet1/1, is added to the Acc6000_GE=>Dist device group.

Assigning the Downlink Interfaces to the Access Switch

You must also configure the downlink interfaces from the Catalyst 6000 distribution switch (S3) to the Catalyst 6000 access switch (S2).

The Dist=>Acc6K-PFC template enables you to configure the downlink ports on the Catalyst 6000 distribution switch to the access switch, as follows:

• Trust CoS
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Dist=>Acc6K-PFC device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the gigabitEthernet interface you added for switch S2.

Step 2   Select the Ethernet1/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet1/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The gigabitEthernet type interface, Ethernet1/0, is added to the Dist=>Acc6K-PFC device group.

Assigning the LAN Interface to the WAN Router

The Dist=>RouterWAN device group in the Policy Manager enables you to configure QoS on the Catalyst 6000 distribution switch port to the WAN router (router R5 in the network example), as follows:

• Trust DSCP
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Dist=>RouterWAN device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Ethernet port interface you added for switch S3.

Step 2   Select the Ethernet2/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet2/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The Ethernet2/0 interface is added to the Dist=>RouterWAN device group.

Assigning the WAN Interfaces

In the Policy Manager, several device groups are available for configuring QoS on the Frame Relay WAN interfaces due to the different FRTS speeds.

For this example, you need to first configure the main Frame Relay interface using the WAN-FR-Interface device group and then configure the DLCI subinterface using the WAN-FR-512K-DLCI device group.

Configuring FRTS Using the WAN-FR-Interface Device Group

The WAN-FR-Interface device group enables you to configure FRTS on the main Frame Relay interfaces. This is a prerequisite for enabling FRTS on the DLCI subinterfaces.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the WAN-FR-Interface device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Serial interfaces you added for routers R5 and R6.

Step 2   Select each of the serial interfaces and click >> in turn to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the selected interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interfaces to the device group.

The 10.2.1.1\Serial3/0 and 10.1.1.1\Serial1/0 interfaces are added to the WAN-FR-Interface device group.

Configuring QoS Using the WAN-FR-512K-DLCI Device Group

The WAN-FR-512K-DLCI device group enables you to configure the QoS property, Class Based QoS, on the routers' DLCI subinterfaces. This QoS property includes CBWFQ and enables the configuration of the other QoS features for voice (see Configuring QoS for the WAN).

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the WAN-FR-512K-DLCI device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the DLCI subinterfaces you added for routers R5 and R6.

Step 2   Select each of the DLCIs and click >> in turn to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the selected interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the DLCI interfaces to the device group.

The 10.2.1.1\Serial3/0.1 and 10.1.1.1\Serial1/0.1 interfaces are added to the WAN-FR-512K-DLCI device group.

Assigning the Remote Branch Interfaces

In the remote branch of the network, you need to configure QoS on the IP Phones ports and the branch office router R6 interface to access switch S4. For this example, you should use the Acc3500=>IP-Phone device group to configure the IP Phones ports, and then the RouterWAN=>Non6KPFC device group to configure the branch office router interface to switch S4.

Configuring QoS on the IP Phone Ports to Switch S4

The Acc3500=>IP-Phones device group configures the trust state as Trust-ext Untrusted on the IP phone ports and Catalyst 3500 access switch (S4) interfaces.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc3500=>IP-Phones device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Ethernet interfaces you added for switch S4.

Step 2   Select each interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message for each interface, warning you that you will override the interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interfaces to the device group.

The Ethernet interfaces are added to the Acc3500=>IP-Phones device group.

Configuring QoS on the Branch Office Router Interface to Switch S4

The RouterWAN=>Non6KPFC device group in the Policy Manager enables you to configure QoS on the interfaces of the branch office router R6 interface to access switch S4.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the RouterWAN=>Non6KPFC device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Ethernet port interface you added for router R6.

Step 2   Select the Ethernet2/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet2/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The Ethernet2/0 interface is added to the RouterWAN=>Non6KPFC device group.

Deploying the IP Telephony Database

In order to distribute the QoS policies you have configured in the network example to your network devices, you must deploy the IP Telephony database to the network. The Distribution Manager enables you to do this. Refer to Starting Distribution Manager, for a full description of how to deploy a database with configuration policies to network devices.

Note   You can preview the device (CLI) commands that the Distribution Manager will use to configure the devices, using the Devices>View Commands option in the Distribution Manager. See Viewing the Configuration Commands for a Device, for details.

Posted: Tue Nov 12 12:41:28 PST 2002
All contents are Copyright © 1992--2002 Cisco Systems, Inc. All rights reserved.
Important Notices and Privacy Statement.