1. Configure per-tunnel QoS NHRP policy on remote-site routers 2. Configure physical interface QoS policy on remote-site routers 3. Apply QoS policy to the physical interface on remote-site routers 4. Verify QoS policy on physical interfaces of remote site router 5. Verify DMVPN per-tunnel QoS from hub routers
P
RO
C
ES
S
This process completes the remote-site QoS configuration and applies to all DMVPN spoke routers.
Procedure 1 Configure per-tunnel QoS NHRP policy on remote-site routers
This procedure configures the remote-site router to reference the QoS policy configured on the hub site routers. Step 1: Apply the NHRP group policy to the DMVPN tunnel interface on the corresponding remote-site router. Use the NHRP group name as defined on the hub router in Procedure 2, “Configure per-tunnel QoS policies for DMVPN hub router,” above.
interface Tunnel[value]
ip nhrp group [NHRP GROUP Policy Name] Example: Remote-site router with dual-link
This example shows a remote-site using a 20 Mbps policy and a 10 Mbps policy.
interface Tunnel10
ip nhrp group RS-GROUP-20MBPS
interface Tunnel11
ip nhrp group RS-GROUP-10MBPS
Procedure 2 Configure physical interface QoS policy on remote-site routers
Repeat this procedure in order to support remote-site routers that have multiple WAN connections attached to different interfaces.
With WAN interfaces using Ethernet as an access technology, the demarcation point between the enterprise and service provider may no longer have a physical-interface bandwidth constraint. Instead, a specified amount of access bandwidth is contracted with the service provider. To ensure the offered load to the service provider does not exceed the contracted rate that results in the carrier discarding traffic, configure shaping on the physical interface. This shaping is accomplished with a QoS service policy. You configure a QoS service policy on the outside Ethernet interface, and this parent policy includes a shaper that then references a second or subordinate (child) policy that enables queuing within the shaped rate. This is called a hierarchical Class-Based Weighted Fair Queuing configuration. When you configure the shape average command, ensure that the value matches the contracted bandwidth rate from your service provider.
Step 1: Create the parent policy map.
As a best practice, embed the interface name within the name of the parent policy map.
policy-map [policy-map-name]
Step 2: Configure the shaper.
class [class-name]
shape [average | peak] [bandwidth (kbps)]
Step 3: Apply the child service policy as defined in Procedure 2, “Define policy map to use queuing policy,” above.
service-policy WAN
Example: Remote-site router with dual-link
This example shows a router with a 20-Mbps rate on interface GigabitEthernet0/0 and a 10-Mbps rate on interface GigabitEthernet0/1. policy-map WAN-INTERFACE-G0/0 class class-default shape average 20000000 service-policy WAN policy-map WAN-INTERFACE-G0/1 class class-default shape average 10000000 service-policy WAN
Procedure 3 Apply QoS policy to the physical interface on remote-site routers
Repeat this procedure in order to support remote-site routers that have multiple WAN connections attached to different interfaces.
To invoke shaping and queuing on a physical interface, you must apply the parent policy that you configured in the previous procedure.
Step 1: Select the WAN interface.
interface [interface type] [number]
Step 2: Apply the WAN QoS policy.
The service policy needs to be applied in the outbound direction.
service-policy output [policy-map-name] Example: Remote-site router with dual-link
interface GigabitEthernet0/0
service-policy output WAN-INTERFACE-G0/0
interface GigabitEthernet0/1
Procedure 4 Verify QoS policy on physical interfaces of remote site router
After all of the physical interfaces on a router are configured, you can verify each one before moving to the next remote site.
Step 1: Verify the QoS output policy on each interface is correct by using the show policy-map interface command.
This example is truncated due to the overall length.
RS11-2921# show policy-map interface GigabitEthernet 0/0 GigabitEthernet0/0
Service-policy output: WAN-INTERFACE-G0/0 Class-map: class-default (match-any) 66941984 packets, 14951533762 bytes
5 minute offered rate 83000 bps, drop rate 0000 bps Match: any
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 66941987/15813338284 shape (average) cir 30000000, bc 120000, be 120000 target shape rate 30000000
Service-policy : WAN
queue stats for all priority classes: Queueing
priority level 1 queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 572961/124080310 Class-map: INTERACTIVE-VIDEO (match-any) 530608 packets, 205927572 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps Match: dscp cs4 (32) af41 (34) af42 (36)
530608 packets, 205927572 bytes 5 minute rate 0 bps
Queueing
queue limit 64 packets
(queue depth/total drops/no-buffer drops) 0/0/0 (pkts output/bytes output) 530608/209102464 bandwidth remaining 30%
Exp-weight-constant: 9 (1/512) Mean queue depth: 0 packets
dscp Transmitted Random drop Tail drop Minimum Maximum Mark
pkts/bytes pkts/bytes pkts/bytes thresh thresh prob
af41 530608/209102464 0/0 0/0 32 40 1/10
QoS Set dscp af41
Packets marked 530608
Step 2: Repeat the previous step for each interface configured with QoS.
Procedure 5 Verify DMVPN per-tunnel QoS from hub routers
Once the all of the DMVPN routers are configured for Per-Tunnel QoS, you can verify the configurations from the hub router.
Step 1: Verify the Per-Tunnel QoS output policy to each remote-site is correct by using the show dmvpn detail command.
This example is truncated due to the overall length.
VPN-MPLS-ASR1002X-1# show dmvpn detail
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete N - NATed, L - Local, X - No Socket
T1 - Route Installed, T2 - Nexthop-override C - CTS Capable
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting UpDn Time --> Up or Down Time for a Tunnel
========================================================================== Interface Tunnel10 is up/up, Addr. is 10.6.34.1, VRF ""
Tunnel Src./Dest. addr: 192.168.6.1/MGRE, Tunnel VRF "IWAN-TRANSPORT-1" Protocol/Transport: "multi-GRE/IP", Protect "DMVPN-PROFILE-TRANSPORT-1" Interface State Control: Disabled
nhrp event-publisher : Disabled Type:Hub, Total NBMA Peers (v4/v6): 9
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb Target Network --- --- --- --- --- --- --- 1 192.168.6.5 10.6.34.11 UP 1w0d D 10.6.34.11/32 NHRP group: RS-GROUP-30MBPS
Output QoS service-policy applied: RS-GROUP-30MBPS-POLICY
NHRP group: RS-GROUP-20MBPS
Output QoS service-policy applied: RS-GROUP-20MBPS-POLICY
1 192.168.6.13 10.6.34.21 UP 1w0d D 10.6.34.21/32 NHRP group: RS-GROUP-30MBPS
Output QoS service-policy applied: RS-GROUP-30MBPS-POLICY
1 192.168.6.17 10.6.34.22 UP 1w0d D 10.6.34.22/32 NHRP group: RS-GROUP-20MBPS
Output QoS service-policy applied: RS-GROUP-20MBPS-POLICY
1 192.168.6.21 10.6.34.31 UP 1w0d D 10.6.34.31/32 NHRP group: RS-GROUP-200MBPS
Output QoS service-policy applied: RS-GROUP-200MBPS-POLICY
1 192.168.6.25 10.6.34.32 UP 1w0d D 10.6.34.32/32 NHRP group: RS-GROUP-300MBPS
Output QoS service-policy applied: RS-GROUP-300MBPS-POLICY
1 192.168.6.29 10.6.34.41 UP 1w0d D 10.6.34.41/32 NHRP group: RS-GROUP-30MBPS
Output QoS service-policy applied: RS-GROUP-30MBPS-POLICY
1 192.168.6.33 10.6.34.42 UP 1w0d D 10.6.34.42/32 NHRP group: RS-GROUP-300MBPS
Output QoS service-policy applied: RS-GROUP-300MBPS-POLICY Step 2: Repeat the previous step for each DMVPN hub router.