Table Of Contents
Understanding the Data Network Tutorial
Understanding the Data Network Tutorial Example Network
Understanding the Data Network Tutorial Devices
Understanding the Data Network Tutorial Scenarios
Lesson 2-1: Creating the Campus Access Cat6000 Port Policy Group
Step 1: Defining the Campus Access Cat6000 Port Policy Group
Step 2: Defining the Campus Access Cat6000 Port Policy Group QoS Properties
Step 3: Assigning Elements to the Campus Access Cat6000 Port Policy Group
Step 4: Creating the ERP Traffic Coloring Policy
Lesson 2-2: Defining Policy Groups and Policies To Color Campus Web Traffic
Lesson 2-2-1: Defining the Campus Access VLAN Policy Group
Step 1: Defining the Campus Access VLAN Policy Group
Step 2: Assigning Elements to the Campus Access VLAN Policy Group
Step 3: Creating the Web Traffic Coloring Policy
Lesson 2-2-2: Defining the Campus Access VLAN Ports Policy Group
Step 1: Defining the Campus Access VLAN Ports Policy Group
Step 2: Defining the Campus Access VLAN Ports Policy Group QoS Properties
Step 3: Assigning Elements to the Campus Access VLAN Ports Policy Group
Lesson 2-3: Creating the Remote FastEthernet Policy Group
Step 1: Defining the Remote FastEthernet Policy Group
Step 2: Defining the Remote FastEthernet Policy Group QoS Properties
Step 3: Assigning Elements to the Remote FastEthernet Policy Group
Step 4: Creating the Web Traffic Coloring Policy
Step 5: Creating the ERP Traffic Coloring Policy
Lesson 2-4: Creating the WAN PPP Policy Group
Step 1: Defining the WAN PPP Policy Group
Step 2: Defining the WAN PPP Policy Group QoS Properties
Step 3: Assigning Elements to the WAN PPP Policy Group
Step 4: Creating the MQC CBWFQ Queuing Policies
Step 4a: Creating the ERP Traffic Queuing Policy
Step 4b: Creating the Web Traffic Queuing Policy
Step 4c: Creating the Class Default Policy
Lesson 2-5: Adding FTP Policing To the Campus Access VLAN Policy Group
Lesson 2-6: Deploying the Data Network Tutorial Policies
Lesson 2-7: Monitoring the Deployment Process
Data Network Tutorial
This chapter shows you how to configure QoS on a data network using the provided virtual devices. QPM includes a file of virtual devices that you can import into the inventory to create this example network. By working with virtual devices, you can practice using QPM without the risk of working on live devices on your network.
If you have not yet imported the tutorial virtual devices and created the tutorial deployment group, see Lesson 1-2: Importing the Tutorial Virtual Devices and Lesson 1-4: Creating the Tutorial Deployment Group.
In lessons 2-1 through 2-5, you use QPM techniques and principles to configure QoS on specific segments of this network. In each lesson, a diagram clearly illustrates the relevant network segments, the data path, and the QoS features or policies applied. Lessons 2-6 and 2-7 describe how to deploy the QoS configurations you created in the previous lessons.
This chapter includes the following sections:
•
Understanding the Data Network Tutorial
•
•
•
•
•
•
•
Understanding the Data Network Tutorial
The following topics describe the data network tutorial example network and the scenarios on which the data network tutorial is based:
•
•
•
Understanding the Data Network Tutorial Example Network
The data network tutorial is based on an example enterprise data network that consists of a campus site and two remote sites. Figure 2-1 shows the design of the example data network. Interfaces that do not have QoS applied to them in the tutorial are not labeled.
Figure 2-1 Sample Network Used in Data Network Tutorial
Campus Site
The campus site contains the following components:
•
•
•
Remote Site (Finance Users)
The Finance remote site contains the following components:
•
•
The Finance users primarily require data from the application server and the FTP and web servers on the campus site. The primary path of data from these servers is from router Core-7200-1 on the campus site to remote router Core-3600-1.
Remote Site (Sales Users)
The Sales remote site contains the following components:
•
•
The Sales users primarily communicate with the application and web servers on the campus site. The primary path of data from these servers to the Sales users is through router Core-7200-1 on the campus site to remote router Core-2600-1.
Understanding the Data Network Tutorial Devices
The following table provides the technical details of the devices in the example network shown in the preceding figure. Interfaces that do not have QoS applied to them in the tutorial are not listed.
Understanding the Data Network Tutorial Scenarios
The goal of the data network tutorial is to guide you through the process of creating and deploying QoS policies to the sample network virtual devices. These policies are designed to achieve the goals of the following QoS scenarios.
Scenario 1—Coloring Campus ERP Traffic
The goal of scenario 1 is to color enterprise resource planning (ERP) traffic that originates from the Campus application servers so that the devices between these servers and the Sales and Finance users can provide good response time for these traffic types.
Implementing this scenario is described in the Lesson 2-1: Creating the Campus Access Cat6000 Port Policy Group.
Scenario 2—Coloring Campus Web Traffic
The goal of scenario 2 is to color web traffic that originates from the Campus web server so that the devices between it and the Sales and Finance users can provide good response time for this traffic type.
Implementing this scenario is described in the Lesson 2-2: Defining Policy Groups and Policies To Color Campus Web Traffic.
Scenario 3—Coloring Remote Web and ERP Traffic
The goal of scenario 3 is to color web and ERP traffic originating from the remote sites so that the devices between these sites and the Campus web and application servers can provide good response time for these traffic types.
Implementing this scenario is described in the Lesson 2-3: Creating the Remote FastEthernet Policy Group.
Scenario 4—Queuing Web and ERP Traffic at WAN Edge
The goal of scenario 4 is to queue web and ERP traffic as it leaves the LAN and enters the WAN. This queuing ensures that each traffic type gets the desired percentage of the available bandwidth.
Implementing this scenario is described in Lesson 2-4: Creating the WAN PPP Policy Group.
Scenario 5—Policing FTP Traffic
The goal of scenario 5 is to police FTP traffic that originates from the Campus FTP server to limit its usage of network bandwidth.
Implementing this scenario is described in Lesson 2-5: Adding FTP Policing To the Campus Access VLAN Policy Group.
Now that you understand the data network tutorial network and scenarios, you are ready to proceed with the tutorial.
Related Topics
•
Using the QPM Policy Wizards
The lessons in this chapter use several QPM policy wizards to create the necessary policy groups and policies.
The following are some tips about how these wizards work:
•
–
–
•
–
–
•
•
Lesson 2-1: Creating the Campus Access Cat6000 Port Policy Group
The Campus Access Cat6000 Port policy group colors ERP traffic that originates from the Campus application server so that the devices between these servers and the Sales and Finance users can provide good response time for these traffic types. It is applied to the ingress interfaces of switch Access-Cat6000-2.
The details of the Campus Access Cat6000 Port policy group are as follows.
•
–
–
•
•
•
Marking ERP traffic as DSCP 32 (which corresponds to IP precedence value 4), indicates that it is higher priority than web traffic, which will be marked as DSCP 16 (which corresponds to IP precedence value 2).
The following topics describe how to create the Campus Access VLAN policy group. Each step assumes that you have completed the previous step:
•
•
•
•
Step 1: Defining the Campus Access Cat6000 Port Policy Group
In this step you define the basic properties of the policy group, including:
•
•
•
–
–
Procedure
Step 1
Step 2
The page refreshes to display the policy groups in the Tutorial deployment group. If you have not added any policy groups to the deployment group, the list is empty.
Step 3
Step 4
a.
b.
c.
d.
Step 5
a.
b.
c.
d.
e.
f.
Figure 2-2 Lesson 2-1—Campus Access Cat6000 Port Policy Group Constraints Definition Page
Step 6
The Policy Group Definition Wizard - Capabilities Report page appears, where you can view a summary of the QoS features that can be configured for the policy group, according to the device constraints.
Step 7
You have completed creation of the Campus Access Cat6000 Port policy group. Now you define its QoS properties. Continue with Step 2: Defining the Campus Access Cat6000 Port Policy Group QoS Properties.
Related Topics
•
Step 2: Defining the Campus Access Cat6000 Port Policy Group QoS Properties
This step assumes that you have completed Step 1: Defining the Campus Access Cat6000 Port Policy Group.
In this step you assign the QoS Style=Port Based property to the policy group. The policies in this policy group are defined for individual switch ports and not for the VLAN, therefore the QoS style must be set to port-based.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
c.
d.
Figure 2-3 Lesson 2-1—Campus Access Cat6000 Port Policy Group QoS Properties Wizard - Summary Page
Step 4
You have completed defining QoS properties for the Campus Access Cat6000 Port policy group. Now you assign elements to it. Continue with Step 3: Assigning Elements to the Campus Access Cat6000 Port Policy Group.
Related Topics
•
Step 3: Assigning Elements to the Campus Access Cat6000 Port Policy Group
This step assumes that you have completed Step 2: Defining the Campus Access Cat6000 Port Policy Group QoS Properties.
In this step you assign the network element 3/1 on switch Access-Cat6000-2 to the policy group.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
The dialog box closes. The selected network element appears in the Assigned Network Elements page.
Figure 2-4 Lesson 2-1—Campus Access Cat6000 Port Policy Group Assigned Network Elements Page
You have completed assigning elements to the Campus Access Cat6000 Port policy group. Now you create the ERP Traffic Coloring policy. Continue with Step 4: Creating the ERP Traffic Coloring Policy.
Related Topics
•
Step 4: Creating the ERP Traffic Coloring Policy
This step assumes that you have completed Step 3: Assigning Elements to the Campus Access Cat6000 Port Policy Group.
In this step you create the ERP Traffic Coloring policy, which colors inbound ERP traffic to DSCP value 32.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
c.
d.
Step 4
a.
b.
c.
Step 5
Step 6
a.
b.
c.
Step 7
Step 8
a.
b.
Leave the Mask field empty. If you specify a mask, QPM interprets the IP address as a subnet, and the filter rule applies to all hosts on the specified subnet. If you only specify an IP address, only the host with that IP address matches the filter rule.
c.
d.
Step 9
Step 10
Step 11
a.
b.
The Enable Marking check box is automatically selected.
c.
Figure 2-5 Lesson 2-1—Color ERP Traffic Policy Summary Page
Step 12
Step 13
Now that you have completed creating the Campus Access Cat6000 Port policy group to color ERP traffic that originates from the Campus application server, you can proceed with the next lesson, Lesson 2-2: Defining Policy Groups and Policies To Color Campus Web Traffic.
Related Topics
•
Lesson 2-2: Defining Policy Groups and Policies To Color Campus Web Traffic
The goal of this lesson is to apply QoS that colors web traffic that originates from the Campus web server so that the devices between this server and the Sales and Finance users can provide good response time for web traffic.
You will apply this QoS to VLAN20 on switch Access-Cat6000-1. Coloring the traffic at this network location allows the switch to queue the traffic on the egress interfaces before sending the traffic to the WAN. Coloring at the switch is more desirable than coloring at the router between the switch and the WAN because the processing is distributed among more devices, conserving resources on the edge router.
To apply QoS to a VLAN in QPM, you must create two policy groups. The first policy group is assigned to the VLAN network element, and contains the QoS policies. The second policy group is assigned to the member interfaces of the VLAN, and defines the QoS style as VLAN-based.
Therefore, this lesson is divided into two lessons, one for each policy group:
•
•
Lesson 2-2-1: Defining the Campus Access VLAN Policy Group
The Campus Access VLAN policy group, in combination with the Campus Access VLAN Ports policy group, colors web traffic that originates from the Campus web server so that the devices between this server and the Sales and Finance users can provide good response time for web traffic. It is applied to the VLAN20 interface on switch Access-Cat6000-1.
The details of the Campus Access VLAN policy group are as follows:
•
–
–
•
•
Marking web traffic as DSCP 16 (which corresponds to IP precedence value 2), indicates that it is lower priority than ERP traffic, which will be marked as DSCP 32 (which corresponds to IP precedence value 4).
The following topics describe how to create the Campus Access VLAN policy group. Each step assumes that you have just completed the previous step:
•
•
•
Step 1: Defining the Campus Access VLAN Policy Group
In this step you define the basic properties of the policy group, including:
•
•
•
–
–
Procedure
Step 1
Step 2
Step 3
Step 4
a.
b.
Do not modify the other page fields.
c.
Step 5
a.
b.
c.
d.
e.
Figure 2-6 Lesson 2-2-1—Campus Access VLAN Policy Group Constraints Definition Page
Step 6
The Policy Group Definition Wizard - Capabilities Report page appears, where you can view a summary of the QoS features that can be configured for the policy group, according to the device constraints.
Step 7
This policy group uses the default QoS properties, so there is no need to edit them.
You have completed creation of the Campus Access VLAN Policy Group. Now assign network elements to it. Continue with Step 2: Assigning Elements to the Campus Access VLAN Policy Group.
Related Topics
•
Step 2: Assigning Elements to the Campus Access VLAN Policy Group
This step assumes that you have completed Step 1: Defining the Campus Access VLAN Policy Group.
In this step you assign the network element VLAN20 on switch Access-Cat6000-1 to the policy group.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
The dialog box closes. The selected network element appears in the Assigned Network Elements page. Figure 2-7 shows the completed Assigned Network Elements page.
Figure 2-7 Lesson 2-2-1—Campus Access VLAN Policy Group Assigned Network Elements Page
You have completed assigning elements to the Campus Access VLAN Policy Group. Now you create the Web Traffic Coloring policy. Continue with Step 3: Creating the Web Traffic Coloring Policy.
Related Topics
•
Step 3: Creating the Web Traffic Coloring Policy
This step assumes that you have completed Step 2: Assigning Elements to the Campus Access VLAN Policy Group.
In this step you create the web traffic coloring policy, which colors inbound web traffic to DSCP value 16.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
c.
d.
Step 4
a.
b.
c.
Step 5
Step 6
a.
b.
c.
Step 7
Step 8
Step 9
a.
b.
The Enable Marking check box is automatically selected.
c.
d.
Figure 2-8 Lesson 2-2-1—Web Traffic Coloring Policy In Policy Wizard - Summary Page
Step 10
Now that you have completed creating the Campus Access VLAN policy group to color web traffic that originates from the Campus web server, you can proceed with the next lesson, Lesson 2-2-2: Defining the Campus Access VLAN Ports Policy Group.
Related Topics
•
Lesson 2-2-2: Defining the Campus Access VLAN Ports Policy Group
The Campus Access VLAN Ports policy group, in combination with the Campus Access VLAN policy group, colors web traffic that originates from the Campus web server so that the devices between this server and the Sales and Finance users can provide good response time for web traffic. It is applied to the interfaces that are members of VLAN20 on switch Access-Cat6000-1.
This policy group defines the QoS style for its assigned ports as VLAN-based. This means that the VLAN policies in the Campus Access VLAN policy group will be deployed to these ports. Therefore this policy group does not contain any policies.
The details of the Campus Access VLAN policy group are as follows.
•
–
–
•
•
The following topics describe how to create the Campus Access VLAN Ports policy group. Each step assumes that you have just completed the previous step:
•
•
•
Step 1: Defining the Campus Access VLAN Ports Policy Group
In this step you define the basic properties of the policy group, including:
•
•
•
–
–
Procedure
Step 1
Step 2
Step 3
Step 4
a.
b.
c.
d.
Step 5
a.
b.
c.
d.
e.
f.
Figure 2-9 Lesson 2-2-2—Campus Access VLAN Ports Policy Group Definition Wizard - Constraints Definition Page
Step 6
The Policy Group Definition Wizard - Capabilities Report page appears, where you can view a summary of the QoS features that can be configured for the policy group, according to the device constraints.
Step 7
You have completed creation of the Campus Access VLAN Ports policy group. Now you define its properties. Continue with Step 2: Defining the Campus Access VLAN Ports Policy Group QoS Properties.
Related Topics
•
Step 2: Defining the Campus Access VLAN Ports Policy Group QoS Properties
This step assumes that you have completed Step 1: Defining the Campus Access VLAN Ports Policy Group.
In this step you assign the QoS Style=VLAN Based QoS property to the policy group.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
c.
d.
Figure 2-10 Lesson 2-2-2—Campus Access VLAN Ports Policy Group QoS Properties Wizard - Summary Page
Step 4
You have completed defining the QoS properties of the Campus Access VLAN Ports policy group. Now you assign network elements to it. Continue with Step 3: Assigning Elements to the Campus Access VLAN Ports Policy Group.
Related Topics
•
Step 3: Assigning Elements to the Campus Access VLAN Ports Policy Group
This step assumes that you have completed Step 2: Defining the Campus Access VLAN Ports Policy Group QoS Properties.
In this step you assign the interfaces that are assigned to VLAN20 on switch Access-Cat6000-1 to the policy group.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
The dialog box closes. The selected network element appears in the Assigned Network Elements page. Figure 2-11 shows the completed Assigned Network Elements page.
Figure 2-11 Lesson 2-2-2—Campus Access VLAN Ports Policy Group Assigned Network Elements Page
Now that you have completed defining policy groups and policies to color campus web traffic, you can proceed with the next lesson, Lesson 2-3: Creating the Remote FastEthernet Policy Group.
Related Topics
•
Lesson 2-3: Creating the Remote FastEthernet Policy Group
The Remote FastEthernet policy group colors web and ERP traffic originating from the remote sites so that the devices between these sites and the Campus web and application servers can provide good response time for these traffic types. It is applied to the ingress FastEthernet interfaces of routers Core-3600-1 and Core-2600-1.
Coloring this traffic at these interfaces allows the routers to queue these traffic types on the egress interfaces (based on color) before sending the traffic to the WAN. This policy group is necessary because the switches at the remote sites cannot color traffic, so the coloring must be done at the routers.
The details of the Remote FastEthernet policy group are as follows.
•
–
–
•
–
–
•
•
–
–
Marking web traffic as DSCP 16 (which corresponds to IP precedence value 2), indicates that it is lower priority than ERP traffic, which is marked as DSCP 32 (which corresponds to IP precedence value 4).
The following topics describe how to create the Remote FastEthernet policy group. Each step assumes that have just completed the previous step:
•
•
•
•
•
Step 1: Defining the Remote FastEthernet Policy Group
In this step you define the basic properties of the policy group, including:
•
•
•
–
–
Procedure
Step 1
Step 2
Step 3
Step 4
a.
b.
c.
d.
Step 5
a.
b.
c.
d.
e.
f.
Step 6
a.
b.
c.
d.
e.
f.
Figure 2-12 Lesson 2-3—Remote FastEthernet Policy Group Definition Wizard - Constraints Definition Page
Step 7
The Policy Group Definition Wizard - Capabilities Report page appears, where you can view a summary of the QoS features that can be configured for the policy group, according to the device constraints.
Step 8
You have completed creation of the Remote FastEthernet policy group. Now you define its QoS properties. Continue with Step 2: Defining the Remote FastEthernet Policy Group QoS Properties.
Related Topics
•
Step 2: Defining the Remote FastEthernet Policy Group QoS Properties
This step assumes that you have completed Step 1: Defining the Remote FastEthernet Policy Group.
In this step you define the Class-based QoS property to the policy group.
Procedure
Step 1
Note
Step 2
a.
b.
Figure 2-13 Lesson 2-3—Remote FastEthernet Policy Group QoS Properties Wizard - Summary Page
Step 3
You have defined the QoS properties of the Remote FastEthernet policy group. Now you assign network elements to it. Continue with Step 3: Assigning Elements to the Campus Access Cat6000 Port Policy Group.
Related Topics
•
Step 3: Assigning Elements to the Remote FastEthernet Policy Group
This step assumes that you have completed Step 2: Defining the Remote FastEthernet Policy Group QoS Properties.
In this step you assign these network elements to the policy group:
•
•
Procedure
Step 1
Note
Step 2
Step 3
a.
•
•
b.
The dialog box closes. The selected network element appears in the Assigned Network Elements page. Figure 2-14 shows the completed Assigned Network Elements page.
Figure 2-14 Lesson 2-3—Remote FastEthernet Policy Group Assigned Network Elements Page
You have completed assigning network elements to the Remote FastEthernet policy group. Now you create the Web Traffic Coloring policy. Continue with Step 4: Creating the Web Traffic Coloring Policy.
Related Topics
•
Step 4: Creating the Web Traffic Coloring Policy
This step assumes that you have completed Step 3: Assigning Elements to the Remote FastEthernet Policy Group.
In this step you create the Web Traffic Coloring policy, which colors web traffic coming from the remote sites to DSCP 16.
Procedure
Step 1
Note
Step 2
Step 3
a.
b.
c.
d.
Step 4
a.
b.
c.
Step 5
Step 6
a.
