4400, 4500, 5500 Voice QoS

[bytesleuth]

Hello all,

today i have a big issue to solve. My Boss asks me to implement QoS for our IP Phones on the Switches.

We have 5500 Series Switches, 4500 and 4400 Switches.

I have a lot of Questions how to implement this and i hope to get answers here.

Lets got to the config of my 5500 Switch:

i have a part here, which looks like this:

acl number 3997


 rule 0 permit ip dscp ef


 rule 1 permit tcp destination-port eq www


 rule 2 permit udp destination-port eq snmp


 rule 3 permit udp destination-port eq snmptrap


 rule 4 permit ip dscp cs6


 rule 5 permit ip dscp cs7

my question: rule 0 permit ip dscp ef seems to be right for voice. am i right?


 

acl number 4999


 rule 0 permit type 8868 ffff


 rule 1 permit source 00e0-bb00-0000 ffff-ff00-0000


 rule 2 permit source 0003-6b00-0000 ffff-ff00-0000


 rule 3 permit source 00e0-7500-0000 ffff-ff00-0000


 rule 4 permit source 00d0-1e00-0000 ffff-ff00-0000


 rule 5 permit source 0001-e300-0000 ffff-ff00-0000


 rule 6 permit source 000f-e200-0000 ffff-ff00-0000


 rule 7 permit source 0060-b900-0000 ffff-ff00-0000


 rule 8 deny dest 0000-0000-0000 ffff-ffff-ffff

now, what means rule 0 permit type 8868 ffff? and all the others from rule 1 to 7?

i found a rule deny dest 0000-0000-0000 ffff-ffff-ffff, can someone explain me what this rule is for?

next part:

qos-profile default


 packet-filter inbound link-group 4999 rule 8


 traffic-priority inbound ip-group 3997 rule 0 cos voice


 traffic-priority inbound ip-group 3997 rule 4 cos network-management


 traffic-priority inbound ip-group 3997 rule 5 cos network-management


 traffic-priority inbound link-group 4999 rule 0 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 1 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 2 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 3 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 4 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 5 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 6 dscp ef cos voice


 traffic-priority inbound link-group 4999 rule 7 dscp ef cos voice

what means packet filter inbound link-group 4999 rule 8? i have no idea to that line.

the next 3 rules seems clear for me. but

traffic-priority inbound link-group 4999 rule 0 dscp ef cos voice to  traffic-priority inbound link-group 4999 rule 7 dscp ef cos voice not, because when i take a look to acl 4999 i dont need them, because i have not devices with this mac.

i could not delete them because all interfaces using qos-profile default. Can i simply remove this default qos profile using undo at the interfaces? my problem,  i have about 200 interfaces, is there a way to turn this of from 3/0/1 to 8/0/24 at once?

another question, when i do this, is there an interception at this port? when i change this, is there an interruption? i want to be sure that no user feels our changes.

Last Part, to ensure the phones are automatically inserted into voice-vlan, we set

 voice vlan mac-address 0030-4200-0000 mask ffff-ff00-0000 description DeTeWe


 undo voice vlan security enable

now, my big question: how can i implement QoS for Voice? from scratch? My idea for testing was: take a 4500 Switch, configure 4 ports with 10M full duplex, using 4 probes to test, 2 for data, 2 for voicesimulation (with dscp 46)

my phones are using dscp 46 automatically.

i've checked an 4400 also, but all the commands from 4500 or 5500 are not working there, is there a way to implement this there?

regards

bytes

[Fred_Mancen_1]

my question: rule 0 permit ip dscp ef seems to be right for voice. am i right?


Yes, you are right. DSCP means Differentiated Service Code Point; and EF means Expedited Forward. This means that the voice services identified as the DSCP standards will be preferred in the forwarding traffic.





now, what means rule 0 permit type 8868 ffff? and all the others from rule 1 to 7?


These MAC addresses are the standards to the list of IP phones that are included by default in the configuration of 5500 switches. When the voice VLAN is enabled these MAC are recognized as IP phones.





i found a rule deny dest 0000-0000-0000 ffff-ffff-ffff, can someone explain me what this rule is for?


This rule deny espurious traffic coming through any IP phone that is not in the access list; it's a wildcard.





what means packet filter inbound link-group 4999 rule 8? i have no idea to that line.


It refers to the access list number 4999, which is a traffic priority rule.





traffic-priority inbound link-group 4999


rule 0 dscp ef cos voice to  traffic-priority inbound link-group 4999 rule 7 dscp ef cos voice not, because when i take a look to acl 4999 i dont need them, because i have not devices with this mac


You can delete these lines and edit with the MAC addresses you have in your IP phones.





i could not delete them because all interfaces using qos-profile default. Can i simply remove this default qos profile using undo at the interfaces? my problem,  i have about 200 interfaces, is there a way to turn this of from 3/0/1 to 8/0/24 at once?


Yes. You can edit one port first, then issue the command "copy config source gi 3/0/1 destination gi 3/0/2 to gi 3/0/24" and repeat the command to the other modules/units:  "copy config source gi 3/0/1 destination gi 4/0/1 to gi 4/0/24" and so on. I am not sure if the command is accepted to all ports at a time, maybe the last firmware versions provides this feature.





now, my big question: how can i implement QoS for Voice? from scratch?


You have to ensure what are the MAC addresses of your IP phones to insert the correct MAC addresses in the ACLs, then you can just edit the default QoS that comes in the default configuration of 5500, 4800, 8800...





i've checked an 4400 also, but all the commands from 4500 or 5500 are not working there, is there a way to implement this there?


The 4400 does not use the same operational system of the 4500 and 5500. I don't know what are the commands nor even if the 4400 does support the same QoS level as the 4500/5500.





HTH

[bytesleuth]

Hello,

thank you for your answer. I have some more questions:

at this time, i changed some parts in my configuration:

traffic-priority inbound ip-group 3997 rule 0 cos voice


traffic-priority inbound link-group 4999 rule 0 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 1 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 2 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 3 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 4 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 5 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 6 dscp ef cos voice


traffic-priority inbound link-group 4999 rule 7 dscp ef cos voice


undo voice vlan mac-address 00d0-1e00-0000


voice vlan mac-address 0030-4200-0000 mask ffff-ff00-0000 description Test


undo voice vlan security enable

please see the line undo voice vlan mac-address 00d0-1e00-0000

how can i remove undo-lines from configuration?

and questions for voice-vlan:

see line undo voice vlan security enable

i disabled voice vlan security with undo and configured my voice vlan like above with the mac of 0030-4200. After that i checked my status of my voice-vlan:

Voice Vlan status: DISABLE


Voice Vlan ID: NULL


Voice Vlan security mode: Normal


Voice Vlan aging time: 1440 minutes


Current voice vlan enabled port mode:


PORT                     MODE


----------------------------------------

as i see, my voice-vlan status is disable. how do i enable the voice-vlan? is this enabled automatically when i connect a phone to the core?

regards

bytes

[Fred_Mancen_1]

how can i remove undo-lines from configuration?


You just need to enter the same line command without the "undo" word.


how do i enable the voice-vlan?


Enter the command at the global configuration mode:


voice vlan <vlan_id> enable





HTH