Cisco IOS Intelligent Services Gateway Configuration Guide, Release 12.2SR - MQC Support for IP Sessions [Cisco IOS Software Releases 12.2 SR]

Table Of Contents

Configuring MQC Support for IP Sessions

Finding Feature Information

Contents

Restrictions for MQC Support for IP Sessions

Restrictions for MQC Support for IP Sessions on Cisco 7600 Series Systems

Information About MQC Support for IP Sessions

Supported Interfaces

ISG Policers

Precedence Order in Policy Maps

Inheritance Rules on Cisco 10000 Series Systems

How to Configure MQC Support for IP Sessions

Local Subscriber Profile MQC Support

Configuring ISG QoS to IP Sessions

Configuration Examples for MQC Support for IP Sessions

QoS Policy-Map, Service Profile, and Command Policy-Map Configurations: Example

Additional References

Related Documents

Standards

MIBs

RFCs

Technical Assistance

Feature Information for MQC Support for IP Sessions

Configuring MQC Support for IP Sessions

First Published: March 21, 2008

Last Updated: November 20, 2009

The MQC Support for IP Sessions feature provides modular quality of service (QoS) command-line interface (CLI) provisioning on Cisco Intelligent Services Gateway (ISG) IP sessions. It makes the full set of modular QoS CLI (MQC) syntax available for the sessions, whether they are configured locally or downloaded from a remote authentication, authorization, and accounting (AAA) server.

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the "Feature Information for MQC Support for IP Sessions" section.

Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Contents

•Restrictions for MQC Support for IP Sessions

•Information About MQC Support for IP Sessions

•How to Configure MQC Support for IP Sessions

•Configuration Examples for MQC Support for IP Sessions

•Additional References

•Feature Information for MQC Support for IP Sessions

Restrictions for MQC Support for IP Sessions

The following restrictions apply to the MQC Support for IP Sessions feature:

•Creation of IP sessions over PPP sessions is not supported.

Note This document uses the generic term PPP to cover all protocol types. Examples of protocols include PPP over Ethernet (PPPoE) and PPP over ATM (PPPoA). The specific protocol supported varies by platform. For example, the Cisco 7600 series router does not support PPPoA or PPP over Ethernet over ATM (PPPoEoA). For information about the Cisco 7600 series router, see the Cisco 7600 Series Cisco IOS Configuration Guide for the Cisco IOS release you are using.

•Access-side interface redundancy for port-channel links is not supported on Cisco 10000 series systems. Beginning in Cisco IOS Release 12.2(33)SRE, on Cisco 7600 series systems, one is to one access-side interface redundancy for port-channel links is supported, but only on the Ethernet Services Plus (ES+) line cards. However, core-side redundancy is supported on both Cisco 10000 and Cisco 7600 series systems.

•Only the marking and policing features work in upstream traffic, All queueing, policing, and marking MQC features work in downstream traffic.

•Class-level queues are allowed only at the child level in session policy maps. All other levels must have a single-level policy and use the default queues.

•IP sessions over ATM virtual circuits (VCs) do not support queueing policy maps on Cisco 10000 series systems. However, you can configure queueing policy maps for point-to-point interfaces on ATM subinterfaces,

•IP sessions over Gigabit EtherChannel (GEC) are not supported.

•ISG policer support is limited to traffic-class sessions on Cisco 10000 series systems.

•Because IP sessions cannot be load-balanced, load balancing is not supported on any system.

Restrictions for MQC Support for IP Sessions on Cisco 7600 Series Systems

The following restrictions apply to the MQC Support for IP Sessions feature on Cisco 7600 series systems.

•Traffic classes are not supported.

•Beginning in Cisco IOS Release 12.2(33)SRE, on Cisco 7600 series systems, one is to one access-side interface redundancy for port-channel links is supported, but only on the ES+ line cards.

•Sessions on ATM interfaces are not supported.

•IP sessions are not supported on ambiguous IEEE 802.1Q in 802.1Q (QinQ) subinterfaces.

Information About MQC Support for IP Sessions

To use and troubleshoot the MQC Support for IP Sessions feature, you should understand the following concepts:

•Supported Interfaces

•ISG Policers

•Precedence Order in Policy Maps

•Inheritance Rules on Cisco 10000 Series Systems

Supported Interfaces

MQC on IP sessions is supported through the following interfaces, arranged by system:

•Cisco 10000 series systems

–Physical Ethernet

–.1Q, QinQ (unambiguous only)

•Cisco 7200 and Cisco 7300 series systems

–Physical Ethernet

–.1Q, QinQ (unambiguous only)

–Nonqueuing MQC over ATM

–ATM 1483 RBE and ATM routed permanent virtual circuits (PVCs)

–Generic routing encapsulation (GRE) tunnel. Policy maps are not allowed on the session and tunnel simultaneously.

•Cisco 7600 series systems

–Gigabit Ethernet with .1Q or QinQ subinterfaces

–Routed bridge encapsulation (RBE)

–Permanent virtual connection (PVC)

MQC is not supported on the following interfaces:

•Bridge-Group Virtual Interface (BVI)

•GEC

•Interfaces configured for Layer 2 Tunnel Protocol (L2TP) sessions (on L2TP Network Servers (LNS))

The following features and configurations are used on MQC on IP sessions:

•ISG policer for traffic classes

Note Traffic classes are not supported on Cisco 7600 series systems.

ISG Policers

You can create configurations to work on an IP session with multiple traffic classes, and with one or more of the traffic classes acting as a policer. ISG policer is retained for backward compatibility and is fully supported if you do not want to migrate to MQC now. However, if you have both ISG policer and MQC, you should either use the ISG policer or migrate fully to MQC. If you do not migrate fully from ISG policer to MQC, a misconfiguration will occur.

Precedence Order in Policy Maps

A policy map can be attached to one or more interfaces to specify a service policy. Configuration sources combined with context determines which QoS policy map is applied. The three configuration sources and their general order of precedence are as follows:

1. Per-user (per-subscriber) configuration

2. Service profile

3. Interface configuration

This order of precedence shows the general condition, that is, service profiles and per-user configurations have higher priority than interface configurations.

However, a change of authorization (CoA) per-user push replaces the current per-user configuration for any overlapping or common feature. Similarly, when a new service logs in, its configuration replaces any overlapping feature, from previously configured service profiles, that is not already in effect from a per-user configuration source

If the new service then logs off, the previously existing configuration is reapplied if no higher-precedence configuration source is in effect.

Given those precedence qualifications, the policy map is determined as follows:

•If there is no policy map on the session, the incoming policy map is not applied.

•If an existing policy map is configured from a higher priority source than an incoming one, the incoming policy map is not applied.

•If an existing policy map is configured from a lower priority source than an incoming one, the incoming policy map replaces it.

Inheritance Rules on Cisco 10000 Series Systems

The inheritance rules on Cisco 10000 series systems for policies and queues from the parent interface are as follows:

•When a session that does not have a policy map starts, it inherits the policy and queues from the immediate parent that has a policy; for example, a subinterface or main interface.

•When a session with an inherited policy receives a policy from a RADIUS server, it first removes the inherited policy and then applies the policy from the RADIUS server.

•When a session that does not have a policy starts and its parent interfaces also do not have a policy but a policy is later attached to the parent, there are two possible outcomes:

–The policy is attached to the main interface, and sessions directly on that interface inherit it. Sessions on subinterfaces under the main interface that do not have a policy of their own also inherit it.

–The policy is attached to the subinterface, and sessions under that subinterface inherit it.

•When a user removes a policy from the parent interface, there are two possible outcomes:

–The policy is removed from a subinterface and is uninherited from any sessions on the subinterface that inherited the policy from it. If the main interface has a policy, sessions on the subinterface from which the policy was removed inherit that.

–The policy is removed from the main interface and is uninherited from the main interface and also from any sessions under its subinterfaces that inherited this policy.

•When a session that does not already have a policy receives one from the RADIUS server, you need only install the new policy. However when a session that already has a policy inherited from the parent receives a new one from the RADIUS server, you must first uninherit the parent policy and then install the new one.

•When a session policy is removed, the session inherits the policy from its nearest parent, subinterface, or main interface that has a policy.

How to Configure MQC Support for IP Sessions

This section contains the following procedure:

•Configuring ISG QoS to IP Sessions

See the section "Configuring Per-Session QoS Using the ISG Framework" in the "Configuring ISG Control Policies" chapter in Cisco IOS Intelligent Services Gateway Configuration Guide for information about configuring a local service profile.

Local Subscriber Profile MQC Support

To configure QoS policy maps on service profiles, perform the steps in the following procedure:

SUMMARY STEPS

1. enable

2. configure terminal

3. policy-map type service service-name

4. service-policy policy-name

DETAILED STEPS

Command or Action

Purpose

Step 1

enable
Example:

Router> enable

Enables privileged EXEC mode.

•Enter your password if prompted.

Step 2

configure terminal
Example:

Router# configure terminal

Enters global configuration mode.

Step 3

policy-map type service service-name
Example:

Router# (config)# policy-map type service service1

Enters policy-map configuration mode. Specifies the policy-map name and its service configuration.

Step 4

service-policy policy-name
Example:

Router# (config-service-policymap)# service-policy service-policy1

Configures the service policy.

Configuring ISG QoS to IP Sessions

To associate a previously configured traffic class with a policy map, perform the steps in the following procedure:

SUMMARY STEPS

1. enable

2. configure terminal

3. policy-map type service service-name

4. class type traffic class-name

DETAILED STEPS
Command or Action

Purpose

Step 1

enable
Example:

Router> enable

Enables privileged EXEC mode.

•Enter your password if prompted.

Step 2

configure terminal
Example:

Router# configure terminal

Enters global configuration mode.
Step 3
policy-map type service service-name
Example:
Router# (config)# policy-map type service
Enters policy-map configuration mode. Specifies the policy-map name and its service configuration.
Step 4

class type traffic class-name
Example:

Router# (config-service-policymap)# class type traffic

Associates a previously configured traffic class with the policy map.
Configuration Examples for MQC Support for IP Sessions

This section provides the following configuration example:

•"QoS Policy-Map, Service Profile, and Command Policy-Map Configurations: Example" section

QoS Policy-Map, Service Profile, and Command Policy-Map Configurations: Example

The following example shows how to configure a QoS policy map, a service profile, and a command policy map on Cisco 7600 series systems. The command policy map is then configured onto interface Ethernet 0/0 with the service-policy keyword.
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# class-map match-any EF-customer
Router(config-cmap)# match access-group name CUSTOMER-EF
Router(config-cmap)# class-map match-any EF-WAN
Router(config-cmap)# match qos-group 6
Router(config-cmap)# policy-map PREMIUM_MARK_IN
Router(config-pmap)# class EF-customer
Router(config-pmap-c)# set cos 6
Router(config-pmap-c)# set dscp ef
Router(config-pmap-c)# set qos-group 6
Router(config-pmap-c)# class class-default
Router(config-pmap-c)# set dscp af11
Router(config-pmap-c)# set qos-group 1
Router(config-pmap-c)# set cos 1
Router(config-pmap-c)# policy-map PREMIUM_UB_OUT
Router(config-pmap)# class EF-WAN
Router(config-pmap-c)# police cir 200000000
Router(config-pmap-c-police)# priority
Router(config-pmap-c)# class class-default
Router(config-pmap-c)# policy-map type service PREMIUM_SERVICE
Router(config-service-policymap)# service-policy input PREMIUM_MARK_IN
Router(config-service-policymap)# service-policy output PREMIUM_UB_OUT
Router(config-service-policymap)# policy-map type control INT
Router(config-control-policymap)# class type control always event account-logon
Router(config-control-policymap-class-control)# 1 service-policy type service name 
PREMIUM_SERVICE
Router(config-control-policymap-class-control)# interface Ethernet0/0
Router(config-if)# ip address 10.0.0.1 255.255.255.0
Router(config-if)# pppoe enable group global
Router(config-if)# service-policy type control INT
Additional References

The following sections provide references related to the MQC Support for IP sessions feature.

Related Documents

Related Topic

Document Title

How to configure ISG control policies

"Configuring ISG Control Policies" chapter in Cisco IOS Intelligent Services Gateway Configuration Guide

How to configure QoS policies using the MQC

Cisco IOS Quality of Service Solutions Configuration Guide

ISG commands

Cisco IOS Intelligent Services Gateway Command Reference

How to apply QoS features on a per-session basis.

Per-Session QoS" chapter in Cisco IOS Quality of Service Configuration Solutions Guide

Standards

Standard

Title

No new or modified standards are supported by this feature, and support for existing standards has not been modified by this feature.

—

MIBs

MIB

MIBs Link

No new or modified MIBs are supported by this feature, and support for existing MIBs has not been modified by this feature.

None

RFCs

RFC

Title

No new or modified RFCs are supported by this feature, and support for existing RFCs has not been modified by this feature.

—

Technical Assistance

Description

Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies.

To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds.

Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http://www.cisco.com/techsupport

Feature Information for MQC Support for IP Sessions

Table 1 lists the release history for this feature.

Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.

Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Note Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.

Table 1 Feature Information for MQC Support for IP Sessions

Feature Name

Releases

Feature Information

MQC Support for IP Sessions

12.2(33)SRC

Provides MQC provisioning on Cisco ISG IP sessions.

The following commands were introduced or modified: policy-map and service-policy.

ISG: Session: Multicast: Coexistance

12.2(33)SRE

In Cisco IOS Release 12.2(33)SRE, ISG Session Multicast Coexistence feature support was added on Cisco 7600 series routers.

CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Nurse Connect, Cisco Pulse, Cisco SensorBase, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, Flip Gift Card, and One Million Acts of Green are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Lumin, Cisco Nexus, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Follow Me Browsing, GainMaker, iLYNX, IOS, iPhone, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, SenderBase, SMARTnet, Spectrum Expert, StackWise, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0910R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2006-2009 Cisco Systems, Inc. All rights reserved.