- Enterasys Security Router User's Guide

QoS Policy Configuration Examples
XSR User’s Guide 12-25
XSR(config-pmap-c<class1>)#queue-limit 40
XSR(config-pmap-c<class1>)#exit
XSR(config-pmap<policy1>)#class class2
XSR(config-pmap-c<class2>)#bandwidth 300
XSR(config-pmap-c<class2>)#random-detect 34 56 3
XSR(config-pmap-c<class2>)#exit
XSR(config-pmap<policy1>)#class class-default
XSR(config-pmap-c<class-default>)#queue-limit 20
XSR(config-pmap-c<class-default>)#exit
XSR(config-pmap<policy1>)#exit
Apply the configuration to the interface:
XSR(config)#interface serial 1/1
XSR(config-if<S1/1>)#service-policy output policy1
QoS for Frame Relay Policy
The following example sets Serial interface 1/1 for Frame Relay with one DLCI (100) which will
support three types of traffic: voice that is assigned to a priority queue with a bandwidth of 20
kbps, FTP that is assigned to fair queue with 50 percent of the remaining bandwidth, and Class1
that is assigned to class-default (and gets the other 50 percent). DLCI 100 sets CIR at 64 kbps (the
sum of all PQs and classes should not exceed the CIR of the DLCI).
When the connection is congested, priority traffic will get its bandwidth share (smaller than the
DLCI CIR) while all other classes share the remaining bandwidth proportional to what was
requested. Voice is rate limited to 20 Kbps and the interval over which it is enforced is equivalent
to burst/bandwidth size (2500 bytes/20 Kbps).
If no burst size is set, default burst size is used. Packets exceeding 20 Kbps are dropped. Class1 and
FTP are served after voice gets its share, but split the remaining bandwidth equally.
When there is no congestion each traffic class can use as much bandwidth as is available, except
the voice which is priority class and is rate-limited to a maximum of 20 Kbps. BECN will
adoptively reduce the CIR of the DLCI but does not influence the parameters of the policy-map
frame1.
Begin by creating three ACLs to define traffic classes:
XSR(config)#access-list 101 permit udp 192.168.1.0 0.0.0.255 any eq 3000
XSR(config)#access-list 102 permit tcp 192.168.1.0 0.0.0.255 any eq 3000
XSR(config)#access-list 103 permit ip any any
Create classification maps using a combination of ACLs or IP DSCP or precedence bits to classify
packets:
XSR(config)#class-map voice
XSR(config-cmap<voice>)#match access-group 101
XSR(config-cmap<voice>)#exit
XSR(config)#class-map ftp
XSR(config-cmap<ftp>)#match access-group 102
XSR(config-cmap<ftp>)#match ip dscp 18
XSR(config-cmap<ftp>)#match ip dscp 20
XSR(config-cmap<ftp>)#exit
XSR(config)#class-map match-any class-1
XSR(config-cmap<class-1>)#match access-group 103