Cisco 2621XM Qos/Tos settings 1

[imagefree]

Hi,

I need some help. I am the lone IT guy at a small call centre and I am having call quality issues. My attempt to segregate traffic without VLANs has been adequate but not perfect.
I have a T1 and a 6meg ADSL at my disposal, I've been trying to route all web traffic through the ADSL using NAT policies and firewall restrictions.

My current set up is a Cisco 2600 -> Sonicwall 2400 -> linksys router

The sonicwall has two WAN ports one from the cisco and the other from the adsl. The sonicwall doesnt provide vlans so I've been using load balancing round robin, routing most http traffic through the ADSL.
This is not ideal and I suffer from poor quality even dropped calls.

Ive been told that "bandwidth reservation for voice and TOS priority would be ideal."

The question is. How do you configure a Cisco 2600 router to reserve bandwith for udp traffic up to 90% and 10 % for the tcp?

I would appreciate your help and time.

 

[Minue]

Hello
If you do have that stand-alone modem as I ask before,you could plug it's fastethernet interface into one of the 2621XM fastethernet interface.In this way you can avoid investing in a WIC-1ADSL.Please let me know how your ADSL line is setup.So that I can try to create a conf that can divide the voice traffic from the data.

Regards

 

[imagefree]

Yes we do have an ADSL modem. Its issued by the service provider. Its a Paradyne 6211 ADSL modem.

The ADSL line has one WAN IP, bridge connection type with a llc/snap bridging encapsulation. The modem was originally used to provide dhcp for a LAN, so its still set at dhcp and I have 4 PCs on that LAN. This is separate from the network that I'm trying to configure. If I get the network working as it should (divided) there will be no need for the separate ADSL LAN.

 

[Minue]

Hello
Call me Dumb!But I just don't get it.The second ADSL line you mention in the below design:

T1<->Cisco 2621xm <->
Sonicwall NSA 2400<->Linksys<->Other
ADSL <->
Where does it terminates,those the Sonicwall handles this connection directly from my knowledge the Sonic doesn't support ADSL connections.So please explain to me how is the ADSL line delivered.

Regards

 

[imagefree]

Here is another illustration.

Cisco 2621xm <-> X1 X0
Sonicwall NSA 2400<->Linksys srw2024
Paradyne 6211 ADSL modem<-> X3 X2

In this configuration the Sonicwall has two WAN ports, X1 and X3. X1 is connected to the Cisco router fa0/0 and X3 is connected to the ADSL modem. X1 is the default gateway, X3 the secondary hence the attempt to have non VoIP traffic fall over to X3. There are two LAN ports,one associated with each WAN port X0 and X2. The LAN being used is X2.

 

[Minue]

Hello
It's as I thought.Well my last email still applies.From the ADSL modem run the cable to the 2621XM instead of the Sonic.In this way the 2621XM will handle both WAN links.With a setup like this you will be able to divide the traffic.
Regards

 

[imagefree]

Ok, thanks again Minue for your assistance.

Just how do I divide the traffic? Can the service policy commands do the trick?

I understand that the policy can be used to control or police all RTP traffic through the Cisco upstream. How do I separate on the downstream? Is it possible to separate on the downstream or will the downstream voice/rtp automatically go through the Cisco based on the upstream?

What config will be necessary on the ADSL's fa?

 

[Minue]

Hello
To be honest with you,if you divide the VOIP traffic from the data (routing HTTP through the ADSL line and Voice via the T1).You will not need QOS.Quality of service is normally use on congested links,which isn't your problem.
In any case to get the 2621XM to handle to ADSL line you can bridge the modem if it support bridging or you will have to NAT on the 2621XM.I will post and example conf later so you can test it out.If you get it to port then we can divide the traffic with PBR policy-based routing.

Regards

 

[imagefree]

Ok I'm awaiting your post. The ADSL is already configured as bridge, I posted it earlier "bridge connection type with a llc/snap bridging encapsulation".

I'm eager to see how this can be implemented.

 

[Minue]

interface FastEthernet0/0
description outside WAN Internet
bandwidth 6000
ip address dhcp
ip nat outside

interface FastEthernet0/1
description LAN to SONICWALL
ip address 192.168.1.1 255.255.255.0(address to Sonic WAN)
ip nat inside

ip nat inside source list 1 interface FastEthernet0/0 overload
access-list 1 permit 192.168.1.0 0.0.0.255
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 (or ip address of the modem LAN)

Well if the modem is already bridging we could configure the 2621XM WAN interface to handle the ip address given by the ISP.But to save time it's best to test connection first.
Maybe we will have to play around with the Sonicwall.lets hope not.
To test the connection once you have switch the cable and apply the conf.Try to ping a public ip address (like 4.2.2.2) from the 2621XM.Please let me know how it goes.
Regards

 

[imagefree]

Minue,

I tried the configs you sent briefly. However I swapped fa0/0 with fa0/1. Since fa0/0 was already connected to the Sonicwall. When I did this I made sure to swap the fa0/0 with fa0/1 in the other applicable lines (ip nat inside source...).

First when I connected the ADSL line to the configured fa0/1 I could ping 100% no problem. However when I reconfigured fa0/0 the ping rate dropped to 60 and 40%.

I think there are some changes that need to be made on the Sonicwall. I will try again in the morning.

The Sonicwall is configured to look for the ADSL WAN port to provide dhcp to the network so I will have to swap that config to properly test it.

 

[Minue]

What do you mean by the below statement?Can you post a show run of the 2621XM
"However when I reconfigured fa0/0 the ping rate dropped to 60 and 40%."


The idea is this first verify that the router can get to outside world through the ADSL modem.So you should configure an interface that goes to the Modem as a WAN interface.When you do the testing make sure the traffic is passing through the T1 by putting it in shut.If this test work then plug the free fastethernet interface into the Sonicwall and then test to see if client can get to the Internet.

Regards

 

[imagefree]

Ok I will test that shortly.

What I meant by "However when I reconfigured fa0/0 the ping rate dropped to 60 and 40%," is that when I configured the ADSL fastethernet port fa0/1 I got a 100% ping success rate.
Then when I configured the other fa port fa0/0 which is connected to the Sonicwall I started getting a success rate of 40%.

I will test again, this time shutting down the t1 to see where the problem is.

 

[imagefree]

Ok, I set the configs.
Shutdown the serial interface for the T1 and I cant ping. The fa0/1 gets an ip address but thats it.
show interface output:

FastEthernet0/0 is up, line protocol is up
Hardware is AmdFE, address is 0012.7fdb.bea0 (bia 0012.7fdb.bea0)
Description: LAN to Sonicwall
Internet address is 192.168.1.1/24
MTU 1500 bytes, BW 1544 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:08, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/2/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1088 kilobits/sec
5 minute input rate 6000 bits/sec, 12 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
123944720 packets input, 153528078 bytes
Received 4889 broadcasts, 0 runts, 0 giants, 0 throttles
55 input errors, 0 CRC, 0 frame, 0 overrun, 55 ignored
0 watchdog
0 input packets with dribble condition detected
321786181 packets output, 3098585715 bytes, 0 underruns
0 output errors, 0 collisions, 16 interface resets
0 babbles, 0 late collision, 0 deferred
4 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Serial0/0 is administratively down, line protocol is down
Hardware is PQUICC with Fractional T1 CSU/DSU
Internet address is xxx.xxx.xx.xxx/30
MTU 1500 bytes, BW 1536 Kbit, DLY 20000 usec,
reliability 255/255, txload 3/255, rxload 3/255
Encapsulation PPP, LCP Closed, loopback not set
Keepalive set (10 sec)
Last input 00:11:13, output 00:11:13, output hang never
Last clearing of "show interface" counters 2w3d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7556
Queueing strategy: weighted fair
Output queue: 0/1000/64/7556 (size/max total/threshold/drops)
Conversations 0/30/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1152 kilobits/sec
5 minute input rate 21000 bits/sec, 30 packets/sec
5 minute output rate 19000 bits/sec, 28 packets/sec
323448873 packets input, 4286748028 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 2 giants, 0 throttles
14844 input errors, 2930 CRC, 11308 frame, 0 overrun, 0 ignored, 606 abort
125300496 packets output, 3280518459 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 output buffer failures, 0 output buffers swapped out
1 carrier transitions
DCD=down DSR=up DTR=down RTS=down CTS=down

FastEthernet0/1 is up, line protocol is up
Hardware is AmdFE, address is 0012.7fdb.bea1 (bia 0012.7fdb.bea1)
Description: outside WAN Internet
Internet address is 192.168.6.9/24
MTU 1500 bytes, BW 6000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:02:08, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 1000 bits/sec, 3 packets/sec
102 packets input, 8164 bytes
Received 88 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
2898 packets output, 191186 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
0 babbles, 0 late collision, 0 deferred
10 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

 

[Minue]

Hello
Can you please post a scrub conf,so I can help you troubleshoot the issue.
Also try the change the default route to the ADSL modem ip address instead of the the 2621XM FastEthernet0/1 interface.
ip route 0.0.0.0 0.0.0.0 192.168.6.XXX

Also try to ping the modem ip address and do a traceroute to 4.2.2.2 and let me know.

Regards

 

[imagefree]

By scrub config I guess you mean running/start config.
Here is the start-config

Using 1070 out of 29688 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router1
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxx
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
!
ip cef
ip ips po max-events 100
no ftp-server write-enable
!
class-map match-any RTP
match protocol rtp audio
!
policy-map VOICE
class RTP
priority 70
!
interface FastEthernet0/0
bandwidth 1544
ip address xxx.xxx.xxx.xxx 255.255.255.248
service-policy output VOICE
speed auto
full-duplex
!
interface Serial0/0
ip address xxx.xxx.xxx.xxx 255.255.255.252
encapsulation ppp
service-module t1 timeslots 1-24
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx
!
ip http server
no ip http secure-server
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
!
end

 

[Minue]

Hello
Yes! I meant the start-config,but you need to post the test conf with the 2621XM using the ADSL modem.Did you try to troubleshoot with the steps I posted in my last post?If so what was the results.
Regards

 

[imagefree]

Ok Minue I got the config working.

With the other interfaces down I can ping through the ADSL fa interface.

Here is the running config (with the s0/0 and f0/0 down)

Current configuration : 1495 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router1
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxx
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
no ip routing
!
no ip cef
ip ips po max-events 100
no ftp-server write-enable
!
class-map match-any RTP
match protocol rtp audio
policy-map VOICE
class RTP
priority 70
!
interface FastEthernet0/0
description LAN to Sonicwall
bandwidth 1544
ip address xxx.xxx.xx.xx 255.255.255.248
ip nat inside
ip virtual-reassembly
service-policy output VOICE
no ip route-cache
shutdown
speed auto
full-duplex
!
interface Serial0/0
ip address xxx.xxx.xx.xxx 255.255.255.252
encapsulation ppp
no ip route-cache
shutdown
service-module t1 timeslots 1-24
!
interface FastEthernet0/1
description outside WAN
bandwidth 6000
ip address dhcp (192.168.6.9/24)
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
pppoe enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.6.0
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
end

 

[Minue]

Hello
That's real COOL!!!!!You now need to get the workstations to ping to the Internet through the 2621XM.If that's successful we can move on to testing the T1 as a backup link for the "Data traffic" if the ADSL goes down.Then lastly the PBR and the QOS.
Regards

 

[imagefree]

Hey Minue,

I ran into a routing issue. With the config I posted previously the T1 s0/0 could not ping 4.2.2.2, hence I could not route any voice traffic through it.

I had to turn on ip routing ping through the T1. When ip routing is on I cant ping through the ADSL f0/1.

I had to change some settings to get the traffic flowing through the T1 again.

Here is the current running config
Current configuration : 1322 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname gateway.gss
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$TKbU$DbvbBGZb4cvjle5S1vYZ4/
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
!
ip cef
ip ips po max-events 100
no ftp-server write-enable
!
!
class-map match-any RTP
match protocol rtp audio
!
policy-map VOICE
class RTP
priority 70
!
interface FastEthernet0/0
description LAN to Sonicwall
bandwidth 1544
ip address 208.163.49.57 255.255.255.248
ip nat inside
ip virtual-reassembly
service-policy output VOICE
speed auto
full-duplex
!
interface Serial0/0
ip address 208.138.32.174 255.255.255.252
encapsulation ppp
service-module t1 timeslots 1-24
!
interface FastEthernet0/1
description outside WAN
bandwidth 6000
no ip address
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
pppoe enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 208.138.32.173
ip route 0.0.0.0 0.0.0.0 192.168.6.0
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login
!
!
end

I removed some settings before realizing that the ip routing was the problem.

 

[Minue]

Hello
So with the changes can you ping through both interfaces?Also from the workstation can you get to the Internet through the 2621XM via the Modem?