thing matching is my ip any
any line.? I do not see any matches to the 2427 or 2428 line.
Per Matthew's e-mail and link the show policy-map interface is not
supported on 3750 switch:
https://supportforums.cisco.com/message/3434098#3434098
So is there no way to verify if my configuration is correct?
HQ-SW1#sh run int gi 0/6
Building configuration...
Current configuration : 243 bytes
!
interface GigabitEthernet0/6?description Trunk to HQ
?switchport trunk encapsulation dot1q
?switchport trunk allowed vlan 100,200,300
?switchport mode trunk
?ip access-group mgcp in
?mls qos trust dscp
?service-policy input limit-mgcp
end
HQ-SW1#sh access-list
Extended IP access list mgcp
??? 10 permit tcp any any eq 2000
??? 20 permit udp any eq 2427 any
??? 30 permit tcp any eq 2428 any
??? 40 permit icmp any any
??? 50 permit ip any any (89 matches)
HQ-SW1#sh run | begin policy-map
policy-map limit-mgcp
?class mgcp
? set ip dscp cs3
? police 8000 8000 exceed-action drop
?class class-default
? set ip dscp default
!
ip access-list extended mgcp
?permit tcp any any eq 2000
?permit udp any eq 2427 any
?permit tcp any eq 2428 any
?permit icmp any any
?permit ip any any
HQ-SW1#sh mls qos interface gi 0/6
GigabitEthernet0/6
Attached policy-map for Ingress: limit-mgcp
trust state: trust dscp
trust mode: trust dscp
trust enabled flag: ena
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: none
qos mode: port-based
HQ-SW1#sh policy-map interface gi 0/6
?GigabitEthernet0/6
? Service-policy input: limit-mgcp
??? Class-map: mgcp (match-all)
? 0 packets, 0 bytes
? 5 minute offered rate 0 bps, drop rate 0 bps
? Match: access-group name mgcp
??? Class-map: class-default (match-any)
? 0 packets, 0 bytes
? 5 minute offered rate 0 bps, drop rate 0 bps
? Match: any
??? 0 packets, 0 bytes
??? 5 minute rate 0 bps
Thanks!
From: Mohd Baqari baqari.voic...@gmail.com
To: Kat gkr2...@yahoo.com
Cc: Cciestudyvoice Cciestudyvoice cciestudyvo...@yahoo.com;
ccie_voice@onlinestudylist.com ccie_voice@onlinestudylist.com
Sent: Wednesday, October 5, 2011 4:42 PM
Subject: Re: [OSL | CCIE_Voice] How to limit MGCP Bandwidth from HQ from
HQ-SW?
In fact both ports are correct (default ports).
- Udp 2427 is used for mgcp messages.
- Tcp 2428 is used for mgcp backhaul traffic.
This mistake is ACL since those ports will be as source ports from R1 to
CUCM and not destenation ports (destenation ports in the other direction
from CUCM to R1). Correct ACLs should be as below.
ip access-list extended mgcp
?? permit udp any eq 2427 any
?? permit tcp any eq 2428 any
Try this and lets know the status. In between mls qos should be enabled
since switches do qos in hardware.
Regards,
Mohammed Al Baqari
Sent from my iPhone
On Oct 5, 2011, at 10:35 PM, Kat gkr2...@yahoo.com wrote:
permit tcp any any eq 2427? is incorrect, suppose to be 2428. Not sure if
that was a typo.
Thanks.
?
From: Cciestudyvoice Cciestudyvoice cciestudyvo...@yahoo.com
To: ccie_voice@onlinestudylist.com ccie_voice@onlinestudylist.com
Sent: Wednesday, October 5, 2011 11:42 AM
Subject: [OSL | CCIE_Voice] How to limit MGCP Bandwidth from HQ from
HQ-SW?
Hi all,
I am trying to figure out how I can limit MGCP traffic coming from R1 on
the switch.
I have attempted the following configuration:
class-map match all mgcp
?? match access-group name mgcp
policy-map limit-mgcp
?? class mgcp
set ip dscp cs3
police 8000 8000 exceed action drop
interface GigabitEthernet 0/6
?? switchport mode trunk
?? service-policy input limit-mgcp
ip access-list extended mgcp
?? permit udp any any eq 2427
?? permit tcp any any eq 2427
This looks right to me but when I do sh policy-map interface gi 0/6 I
never see the packets incrementing.? I can confirm that this is the only
port to which R1 is connected via sh cdp nei.
Any help appreciated.
Thanks!
___
For more information regarding industry leading CCIE Lab training, please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
___
For more information regarding industry leading CCIE Lab training, please
visit www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
-- next part --
An HTML attachment was scrubbed...
URL:
/archives/ccie_voice/attachments/20111005/c66be5bf/attachment-0001.html
--
Message: 3
Date: Wed, 5 Oct 2011 18:24:00 -0400
From: Jason Lee jas7...@gmail.com
To: ccie_voice ccie_voice@onlinestudylist.com
Subject: [OSL | CCIE_Voice] Call-Forward to VM
Message-ID
