• September 21, 2020, 08:24:12 AM
Welcome, Guest. Please login or register. Registration is free.
Did you miss your activation email?

Author Topic: A better way to change DSCP markings on VSP 7000?  (Read 1764 times)

0 Members and 1 Guest are viewing this topic.

Offline Garrick

  • Rookie
  • **
  • Posts: 8
A better way to change DSCP markings on VSP 7000?
« on: April 02, 2014, 02:21:48 PM »
Hi All,

I have several different devices on the edge that are connected to a VSP 7024 which also has the provider routers connected to it.  The need was to have one place to mark traffic before it got to the routers and off in to the customer net.  What I did was create a few policies to remark the traffic based on src or dst ports.  I have reviewed a number of other posts, but they all seem to be about doing l2-elements and marking based on vlans.  What I needed to do is based off the port of the traffic, not the port of the switch and each device, either session border controllers or firewalls, would be sending multiple types of traffic.  I have ran in to the issue where the switch will not take more than three (3) policies applied to an if-group.  If I try, I get the error of 'no more resources' when applying the policy. 

So I was wondering, is there a better way to do this?  Thanks in advance!

! *** QOS ***
!
qos if-group name TrustAllMArkings class trusted
qos if-group name ChangeDSCP class unrestricted
qos action 10 name "Remark_CS3-24" drop-action disable update-dscp 24 update-1p 4
qos action 11 name "Remark_AF42-11" drop-action disable update-dscp 36 update-1p 3
qos ip-element 1 name "Signaling1_src" protocol 6 src-port-min 5060 src-port-max 5060
qos ip-element 2 name "signaling1_dst" protocol 6 dst-port-min 5060 dst-port-max 5060
qos ip-element 3 name "voice1_src" protocol 17 src-port-min 5000 src-port-max 5059
qos ip-element 4 name "voice2_src" protocol 17 src-port-min 5062 src-port-max 5100
qos ip-element 5 name "voice1_dst" protocol 17 dst-port-min 5000 dst-port-max 5059
qos ip-element 6 name "voice2_dst" protocol 17 dst-port-min 5062 dst-port-max 5100
qos ip-element 7 name "video1_src" protocol 17 src-port-min 6000 src-port-max 6100
qos ip-element 8 name "video1_dst" protocol 17 dst-port-min 6000 dst-port-max 6100
qos ip-element 9 name "ipsi1_src" protocol 6 src-port-min 5010 src-port-max 5012
qos ip-element 10 name "ipsi1_dst" protocol 6 dst-port-min 5010 dst-port-max 5012
qos ip-element 11 name "netman1_dst" protocol 6 dst-port-min 80 dst-port-max 80
qos ip-element 12 name "netman2_dst" protocol 6 dst-port-min 443 dst-port-max 443
qos ip-element 13 name "netman3_dst" protocol 6 dst-port-min 162 dst-port-max 162
qos ip-element 14 name "netman4_dst" protocol 17 dst-port-min 161 dst-port-max 162
qos ip-element 15 name "netman5_dst" protocol 17 dst-port-min 22 dst-port-max 23
qos ip-element 16 name "critical1_dst" protocol 6 dst-port-min 1433 dst-port-max 1433
qos ip-element 17 name "critcal2_dst" protocol 6 dst-port-min 9001 dst-port-max 9001
qos ip-element 18 name "critical3_dst" protocol 6 dst-port-min 9998 dst-port-max 9999
qos ip-element 19 name "bulk1_dst" protocol 6 dst-port-min 20 dst-port-max 25
qos ip-element 20 name "bulk2_dst" protocol 6 dst-port-min 6101 dst-port-max 6101
qos ip-element 21 name "bulk3_dst" protocol 6 dst-port-min 6106 dst-port-max 6106
qos ip-element 22 name "bulk4_dst" protocol 6 dst-port-min 3527 dst-port-max 3527
qos ip-element 23 name "bulk5_dst" protocol 6 dst-port-min 10000 dst-port-max 10000                                       
qos ip-element 24 name "signaling2_src" protocol 6 src-port-min 5061 src-port-max 5061
qos ip-element 25 name "signaling2_dst" protocol 6 dst-port-min 5061 dst-port-max 5061
qos classifier 1 set-id 1 name "class_1" element-type ip element-id 1
qos classifier 2 set-id 2 name "class_2" element-type ip element-id 2
qos classifier 3 set-id 3 name "class_3" element-type ip element-id 3
qos classifier 4 set-id 4 name "class_4" element-type ip element-id 4
qos classifier 5 set-id 5 name "class_5" element-type ip element-id 5
qos classifier 6 set-id 6 name "class_6" element-type ip element-id 6
qos classifier 7 set-id 7 name "class_7" element-type ip element-id 7
qos classifier 8 set-id 8 name "class_8" element-type ip element-id 8
qos classifier 9 set-id 9 name "class_9" element-type ip element-id 9
qos classifier 10 set-id 10 name "class_10" element-type ip element-id 10
qos classifier 11 set-id 11 name "class_11" element-type ip element-id 11
qos classifier 12 set-id 12 name "class_12" element-type ip element-id 12
qos classifier 13 set-id 13 name "class_13" element-type ip element-id 13
qos classifier 14 set-id 14 name "class_14" element-type ip element-id 14
qos classifier 15 set-id 15 name "class_15" element-type ip element-id 15
qos classifier 16 set-id 16 name "class_16" element-type ip element-id 16
qos classifier 17 set-id 17 name "class_17" element-type ip element-id 17
qos classifier 18 set-id 18 name "class_18" element-type ip element-id 18
qos classifier 19 set-id 19 name "class_19" element-type ip element-id 19
qos classifier 20 set-id 20 name "class_20" element-type ip element-id 20
qos classifier 21 set-id 21 name "class_21" element-type ip element-id 21
qos classifier 22 set-id 22 name "class_22" element-type ip element-id 22
qos classifier 23 set-id 23 name "class_23" element-type ip element-id 23
qos classifier 24 set-id 24 name "class_24" element-type ip element-id 24
qos classifier 25 set-id 25 name "class_25" element-type ip element-id 25
qos classifier-block 1 block-number 1 name "signaling_block" set-id 1 eval-order 1
qos classifier-block 2 block-number 1 name "signaling_block" set-id 2 eval-order 1
qos classifier-block 3 block-number 2 name "voice_block" set-id 3 eval-order 1
qos classifier-block 4 block-number 2 name "voice_block" set-id 4 eval-order 1
qos classifier-block 5 block-number 2 name "voice_block" set-id 5 eval-order 1
qos classifier-block 6 block-number 2 name "voice_block" set-id 6 eval-order 1
qos classifier-block 7 block-number 3 name "video_block" set-id 7 eval-order 1
qos classifier-block 8 block-number 3 name "video_block" set-id 8 eval-order 1
qos classifier-block 9 block-number 4 name "ipsi_block" set-id 9 eval-order 1
qos classifier-block 10 block-number 4 name "ipsi_block" set-id 10 eval-order 1
qos classifier-block 11 block-number 5 name "netman_block" set-id 11 eval-order 1                                         
qos classifier-block 12 block-number 5 name "netman_block" set-id 12 eval-order 1
qos classifier-block 13 block-number 5 name "netman_block" set-id 13 eval-order 1
qos classifier-block 14 block-number 5 name "netman_block" set-id 14 eval-order 1
qos classifier-block 15 block-number 5 name "netman_block" set-id 15 eval-order 1
qos classifier-block 16 block-number 6 name "critical_block" set-id 16 eval-order 1
qos classifier-block 17 block-number 6 name "critical_block" set-id 17 eval-order 1
qos classifier-block 18 block-number 6 name "critical_block" set-id 18 eval-order 1
qos classifier-block 19 block-number 7 name "bulk_block" set-id 19 eval-order 1
qos classifier-block 20 block-number 7 name "bulk_block" set-id 20 eval-order 1
qos classifier-block 21 block-number 7 name "bulk_block" set-id 21 eval-order 1
qos classifier-block 22 block-number 7 name "bulk_block" set-id 22 eval-order 1                                           
qos classifier-block 23 block-number 7 name "bulk_block" set-id 23 eval-order 1
qos classifier-block 24 block-number 1 name "signaling_block" set-id 24 eval-order 1
qos classifier-block 25 block-number 1 name "signaling_block" set-id 25 eval-order 1
qos if-assign port 1/1,2/1 name ChangeDSCP
qos policy 1 name RemarkSignaling if-group ChangeDSCP clfr-type block clfr-id 1 in-profile-action 10 precedence 2 track-statistics individual
qos policy 2 name RemarkVoice if-group ChangeDSCP clfr-type block clfr-id 2 in-profile-action 7 precedence 3 track-statistics individual
qos policy 3 name RemarkVideo if-group ChangeDSCP clfr-type block clfr-id 3 in-profile-action 6 precedence 4 track-statistics individual