anyone tell me if this is right or need changes?
configure switch 1 with policies on the 3750 switch:

1: ensure cos value 5 is mapped to dscp ef /cue signal with cs3

2: in giga int 1/0/4, make sure all incoming cue signal traffic is amrked
with cs3  and guarantee to 7k bandwidth.
Anything in excess should be first amrked down to dsco value of 8 before
being transmitted.

3. use requirements listed in the cue section to deliver teh list of
protocols to be policed.

----------------------------------------------------------------------------------------------------
On HQ Switch side:
-----------------
mls qos map policed-dscp  24 to 8
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos

class-map match-any SUB_TO_CUE
 match access-group name SUB_TO_CUE

policy-map SUB_TO_CUE
class SUB_TO_CUE
  set ip dscp cs3
  police 8000 8000 exceed-action policed-dscp-transmit
class class-default
  trust dscp

ip access-list extended SUB_TO_CUE
 permit tcp host 142.100.64.12 eq 2748 host 142.1.66.253
 permit tcp host 142.100.64.12 eq smtp host 142.1.66.253
 permit tcp host 142.100.64.12 eq 443 host 142.1.66.253
 permit tcp host 142.100.64.12 eq 8443 host 142.1.66.253
 permit tcp host 142.100.64.12 eq www host 142.1.66.253

interface GigabitEthernet1/0/1
description R1 Trunk
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,100,102,202
switchport mode trunk
mls qos trust dscp
spanning-tree portfast trunk

interface GigabitEthernet1/0/3
description Publisher Port
switchport mode access
mls qos trust dscp
spanning-tree portfast


interface GigabitEthernet1/0/4
description Subscriber Port
service-policy input SUB_TO_CUE
switchport access vlan 100
switchport mode access
spanning-tree portfast

interface GigabitEthernet1/0/13
description *** IP Phones switchports
switchport access vlan 202
switchport mode access
switchport voice vlan 102
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast

interface GigabitEthernet1/0/14
description *** IP Phones switchports
switchport access vlan 202
switchport mode access
switchport voice vlan 102
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast

interface GigabitEthernet1/0/15
description *** IP Phones switchports
switchport access vlan 202
switchport mode access
switchport voice vlan 102
mls qos trust device cisco-phone
mls qos trust cos
spanning-tree portfast
!

=====================================================================

On R3 router side:
------------------
-----------------
!
class-map match-any cue_TO_sub
 match access-group name cue_TO_sub
!
policy-map cue_TO_sub
class cue_TO_sub
  set ip dscp cs3
  police 8000 8000 exceed-action policed-dscp-transmit
class class-default
  trust dscp
!
ip access-list extended cue_TO_sub
 permit tcp host 142.1.66.253 eq 2748 host 142.100.64.12
 permit tcp host 142.1.66.253 eq smtp host 142.100.64.12
 permit tcp host 142.1.66.253 eq 443 host 142.100.64.12
 permit tcp host 142.1.66.253 eq 8443 host 142.100.64.12
 permit tcp host 142.1.66.253 eq www host 142.100.64.12
!

interface serial 0/1/0:0.1 point-to-point
description serial port to HQ Router
service-policy output cue_TO_sub
!



-- 
Thanks & Regard's
Amit Sharma
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to