Table Of Contents
Working with Policy Groups and Policies
Working with Policy Groups
Understanding Policy Groups
Creating a Policy Group
Defining QoS Properties and Mappings
Defining QoS Properties
Defining Mappings
Setting Network Element Assignments
Copying Policy Groups
Uploading Device QoS Configurations to Policy Groups
Viewing Policy Group Information
Modifying a Policy Group
Deleting a Policy Group
Viewing Policy Translations
Working with Policies
Understanding Policies
Displaying the Policies Pages
Displaying Policies in a Policy Group
Displaying Policies in a Policy Group Template
Creating a Policy
General Policy Definition
Defining a Policy Filter
Defining QoS Policy Actions
Viewing the Policy Summary
Modifying a Policy
Deleting Policies
Enabling and Disabling Policies
Changing the Priority of Policies
Searching for QoS Properties and Policies
Working with Aliases
Defining IP Aliases
Defining Application Aliases
Modifying Aliases
Deleting Aliases
Working with Policy Group Templates
Understanding Policy Group Templates
Creating a Policy Group Template
Viewing Policy Group Template Information
Modifying a Policy Group Template
Disconnecting Policy Groups from Policy Group Templates
Disconnecting an Individual Policy Group from its Template
Disconnecting Several Policy Groups from a Template
Deleting Policy Group Templates
More Information on Policy Configuration
QoS Configuration on Network Element Types
Configuring FRTS Policies
Configuring VLAN Policies
Working with Policy Groups and Policies
A major part of your Quality of Service (QoS) configuration is the definition of policy groups and policies. QoS policies define the QoS actions that will be applied to specific data packets. These policies are managed within policy groups, which are applied to a specified set of network elements.
The following topics provide information about creating and managing policy groups and policies:
•
Working with Policy Groups
•Working with Policies
•Working with Aliases
•Working with Policy Group Templates
•More Information on Policy Configuration
Related Topics
•Basic Concepts in QPM, page 1-47
Working with Policy Groups
The following topics describe how to create and work with policy groups in QPM:
•Understanding Policy Groups
•Creating a Policy Group
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
•Copying Policy Groups
•Uploading Device QoS Configurations to Policy Groups
•Viewing Policy Group Information
•Modifying a Policy Group
•Deleting a Policy Group
•Viewing Policy Translations
Related Topics
•Working with Policies
•Working with Policy Group Templates
Understanding Policy Groups
Policy groups are constrained sets of QoS policies, and assigned network elements. A policy group consists of:
•Device constraints—These are defined by device properties, such as device model, operating system version, network element type, and so on. These constraints determine the QoS features that can be defined in the policy group, and the type of network elements on which the policies can be configured. You can define multiple device constraints in a policy group, but they must all be for the same network element type.
•QoS properties—These include the policy group's scheduling type, and other properties and QoS mappings that are applied to all traffic on the network elements to which they are deployed. The scheduling type can affect the QoS properties that can be defined for the policy group, for example, CRTP, LFI, trust state, and so on.
•Assigned network elements—These are the network elements to which the policy group's properties and policies are deployed. A network element can be assigned to only one policy group in a deployment group.
If you need to be able to change policies on a given network element (for example, applying certain policies during the first shift, and different policies during the second shift), you can create two deployment groups. In each group, define the appropriate policy groups, and assign the network element to each policy group. Then, when you deploy a deployment group, the network element will take on the policies of its assigned policy group within that deployment group.
•QoS policies—QoS policies are applied to specific traffic flows entering or leaving the network elements on which they are deployed.
Note Voice policy groups contain the QoS properties and policies for each relevant point in the IP telephony network. Each voice policy group contains a voice role attribute, which specifies the role of an interface, according to its type, function, and location on the network. For more information about voice policy groups, see Chapter 5, "Configuring QoS for IP Telephony."
Policy groups are managed within deployment groups. You can define shared policies across deployment groups by either copying policy group definitions, or by using a global policy group template. Policy group templates are policy group definitions without network element assignments.
Figure 6-1 shows the relationship between a deployment group, its policy groups, policy group templates, and assigned network elements.
Figure 6-1 Relationship between Policy Groups, Policy Group Templates, and Assigned Network Elements
The example deployment group has been created in the San Jose device group. The deployment group contains three policy groups—Edge1, Edge2, and Core. Policy group Edge1 is linked to Policy Group Template A. This means that its policies and properties are inherited from Template A. Policy group Core is linked to Template B. Policy group Edge2 is not linked to a template.
Interfaces ifE0 on Dev1, and ifE0 on Dev3, are assigned to policy group Edge1. This means that the policies in policy group Edge1 will be deployed to those interfaces. Interfaces ifE1 on Dev1, and ifE1 on Dev3, are assigned to policy group Edge2. Different interfaces on a single device can be assigned to different policy groups. Interfaces ifGE on Dev2, and ifGE on Dev4 are assigned to policy group Core.
When working with a policy group, QPM presents you with only those QoS properties and policy actions, and network elements that are valid for the defined device constraints.
For information about the devices and QoS features supported by QPM, see the device support tables at:
http://www.cisco.com/en/US/products/sw/cscowork/ps2064/products_device_support_tables_list.html
Related Topics
•Creating a Policy Group
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
•Working with Policies
•Copying Policy Groups
•Uploading Device QoS Configurations to Policy Groups
•Working with Policy Group Templates.
•Viewing Policy Group Information
•More Information on Policy Configuration
•Basic Concepts in QPM, page 1-47
Creating a Policy Group
Create a policy group when you want to define a group of QoS properties and policies for a set of device elements with common properties.
This topic describes how to use the Policy Group Definition wizard to create a new policy group in the following ways:
•Define the policy group's device constraints using the Policy Group Definition wizard—You can define device constraints manually, or from a set of selected network elements. When you use a set of network elements, QPM uses their common device properties to create one or more device constraint definitions. After you have defined the device constraints, you can continue to define QoS properties and policies, or assign network elements.
•Link the new policy group to a policy group template—The policy group you are creating will use the device constraint definitions, and the QoS properties and policies defined for the template. You cannot edit the policy group's properties or policies while it is linked to the template. You can disconnect the template, and then edit the policy group.
•Copy the device constraints, QoS properties, and policies, from a policy group template—The policy group is not linked to the template, and you can edit the policy group without affecting the template. Policy group templates do not include network element assignments, so you must assign network elements to the policy group.
•Copy the device constraints and, optionally, QoS properties and policies, from another policy group—The source policy group can reside in a different deployment group from the policy group you are creating. You can also copy the device assignments from the source policy group to the new policy group, if the policy groups are in different deployment groups in the same device group.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To create a policy group in a different deployment group, select the required deployment group in the Deployment Group list box.
Step 2 Click Create. The Policy Group Definition wizard opens.
Step 3 In the General Definition page:
a. Enter the name of the new policy group.
b. Enter a description for the policy group (optional).
c. To define device constraints using the wizard, go to step e. To define the policy group using advanced options, click on the triangle next to Advanced. The Advanced field expands.
d. Select how you want to create the policy group, and fill in the appropriate fields.
For more information about the General Definition page fields, see Policy Group Definition Wizard: General Definition Page, page B-445.
e. Click Next.
•If you are creating the policy group manually, the Device Constraints page appears. Continue with Step 4.
•If you are creating the policy group from a template, or other policy group, the Capabilities Report page appears. Continue with Step 5.
Note You can also navigate through the wizard using the wizard navigation TOC in the left pane.
Step 4 In the Device Constraints page, define the policy group's device constraint definitions. This determines the QoS features you can use, and the type of network elements that can be assigned to the policy group:
•Click Define Manually to define a new constraint manually. The Device Definitions page appears.
–Define the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
–Click OK. The Device Constraints page reappears displaying the new device constraint.
–Repeat this step to create additional device constraints.
Note The network element type is the same for all constraints in the policy group and cannot be changed.
•Click Define from Inventory to define a new constraint from network elements.
–Select the device model, and type of network element you want to use to define the device constraint. Click OK.
–In the page that appears, select the network elements you want to use to define the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
–Click Define Constraint. The Device Constraints page reappears displaying the new device constraint.
–Repeat this step to create additional device constraints.
In the Device Constraints page, click Next. The Capabilities Report page appears.
Step 5 In the Capabilities Report page, you can view a summary of the QoS features that can be configured for the policy group, according to the device constraints.
For more information about this page, see Policy Group Definition Wizard: Capabilities Report Page, page B-453.
•Click Finish. The QoS Properties page appears. See Defining QoS Properties and Mappings.
More Ways to Create Policy Groups
•Copy an existing policy group in the Policy Groups page. See Copying Policy Groups.
•Upload a device's existing QoS configuration into QPM. QPM will convert the device's QoS configuration into policies in new or existing policy groups. See Uploading Device QoS Configurations to Policy Groups.
Related Topics
•Understanding Policy Groups
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
•Modifying a Policy Group
•Working with Policies
•Working with Policy Group Templates
•Viewing Policy Group Information
•More Information on Policy Configuration
Defining QoS Properties and Mappings
A policy group's QoS properties and mappings apply to all flows passing through the interface. QoS properties include scheduling properties, traffic control features, and other QoS features, depending on the device constraints for the policy group. Mappings include NBAR port mappings, DSCP to CoS, CoS to DSCP, IP precedence to DSCP, DSCP to markdown, and excess markdown values.
The following topics describe how to configure QoS properties and mappings for a policy group or a policy group template:
•Defining QoS Properties
•Defining Mappings
Defining QoS Properties
This topic describes how to define QoS properties using the QoS Properties wizard.
The following QoS properties can be configured for a policy group or policy group template (depending on the device constraints):
•Congestion Management—The type of scheduling and the scheduling parameters, if required.
•Shaping Settings:
–Frame Relay Traffic Shaping (FRTS) parameters
–Modular Shaping parameters
•Traffic Control Settings:
–IP RTP priority parameters
–IP RTP header compression (CRTP) parameters
–Link Fragmentation and Interleaving (LFI) parameters
–Voice configuration (FRF) parameters
–Signaling parameters
–Trust state parameters
–QoS style—port-based or VLAN-based
–Tx ring
–Inline power—Implements inline power on power-enabled Ethernet line cards.
•Congestion Avoidance—Weighted Random Early Detect (WRED) parameters
After you create a policy group, or policy group template, and define its device constraints using the Policy Group Definition wizard, you can define its QoS properties using the QoS Properties wizard. The QoS Properties wizard lets you configure only those QoS properties that conform to the device constraints of the policy group. Some QoS properties are inter-dependent, therefore the selection of available QoS properties might change as you proceed through the wizard.
Note When you create a policy group, or policy group template, from another policy group, or policy group template, its QoS properties are defined automatically.
Note The following procedure describes all the pages in the QoS Properties wizard. However, when you define QoS properties, some (or occasionally, all) of the pages or options might not appear, depending on the device constraints for the policy group, or policy group template.
Procedure
Step 1 Open the QoS Properties page in one of the following ways:
•After you finish the Policy Group Definition wizard, click Finish.
•In the Policy Groups page, or in the Policy Group Templates page, click the number in the QoS Properties column for the required policy group.
•In the Policy Group TOC, or in the Policy Group Template TOC, select QoS Properties.
Step 2 In the QoS Properties page, click Edit in the QoS Properties table.
The Scheduling page of the QoS Properties wizard appears.
Step 3 In the Scheduling page:
a. Choose the scheduling type from the list box.
b. Configure the queuing properties, if required. If you do not fill in the queuing property fields, the defaults on the device will be used. For more information about the fields in this page, see QoS Properties Wizard: Congestion Management Page, page B-455.
c. Click Next to proceed to the next available page.
Note You can also navigate through the wizard using the wizard navigation TOC in the left pane.
Step 4 In the Shaping Settings page:
a. Configure the FRTS properties, or modular shaping properties. For more information about the fields in this page, see QoS Properties Wizard: Shaping Settings Page, page B-467.
b. Click Next to proceed to the next available page.
Step 5 In the Traffic Control Settings page:
a. Configure the Traffic Control properties. For more information about the fields in this page, see QoS Properties Wizard: Traffic Control Settings Page, page B-472.
b. Click Next to proceed to the next available page.
Step 6 In the Congestion Avoidance Settings page:
a. Configure the WRED properties. For more information about the fields in this page, see QoS Properties Wizard: Congestion Avoidance Page, page B-479.
b. Click Next to proceed to the Summary page.
Step 7 Review the summary page. For more information about the fields in this page, see QoS Properties Wizard: Summary Page, page B-482.
After you are satisfied with the configuration, click Finish. The QoS Properties page reappears, displaying the QoS properties you have configured.
You can now do one of the following:
•Define mappings. See Defining Mappings.
•Define policies. See Creating a Policy.
•Assign the policy group to network elements. See Setting Network Element Assignments.
Related Topics
•Defining Mappings
•Viewing Policy Group Information
•Configuring FRTS Policies
Defining Mappings
The following mappings can be configured for a policy group or policy group template (depending on the device constraints):
•NBAR port mappings
•DSCP to markdown and excess markdown tables
•DSCP mapping tables
Procedure
Step 1 Open the QoS Properties page in one of the following ways:
•After you finish the Policy Group Definition wizard, click Finish.
•In the Policy Groups page, or in the Policy Group Templates page, click the number in the QoS Properties column for the required policy group.
•In the Policy Group TOC, or in the Policy Group Template TOC, select QoS Properties.
The available mappings are displayed in the Mappings table.
Step 2 To configure mappings, or to change the mapping settings, click Edit by a mapping. The corresponding Mappings page appears.
If the mapping has been configured, the current mapping settings are displayed.
If the mapping has not been configured, default mapping values are displayed.
See the following topics for more information about these pages:
•NBAR Port Mappings Page, page B-427
•DSCP to CoS Mappings Page, page B-429
•CoS to DSCP Mappings Page, page B-430
•IP Precedence to DSCP Mappings Page, page B-432
•DSCP to Markdown Mappings Page, page B-433
•Excess Markdown Mappings Page, page B-435
Step 3 To save the displayed default mappings, click Save Defaults. If the default mappings are not displayed, click Reset, then click Save Defaults.
Step 4 To configure or change a mapping, click Create (NBAR Port Mappings only), or select a mapping and click Edit. The corresponding Mapping dialog box opens.
Step 5 Set the mapping as required, and click OK.
See the following topics for more information about these dialog boxes:
•NBAR Port Mapping Dialog Box, page B-428
•DSCP to CoS Mapping Dialog Box, page B-430
•CoS to DSCP Mapping Dialog Box, page B-431
•IP Precedence to DSCP Mapping Dialog Box, page B-433
•DSCP to Markdown Mapping Dialog Box, page B-435
•Excess Markdown Mapping Dialog Box, page B-436
The Mappings page reappears displaying the new mapping. Repeat Step 4 and Step 5 to create or edit additional mappings.
Step 6 To delete an entire mapping configuration, click Delete in the Mappings page. The QoS Properties page appears.
Step 7 After you have finished configuring mappings, click Done in the Mappings page. to return to the QoS Properties page.
Related Topics
•Defining QoS Properties
•Viewing Policy Group Information
Setting Network Element Assignments
After you create a policy group and define its device constraints, you can assign network elements to it. QPM lets you assign only those network elements in the device group that match the policy group's device constraint definitions.
You can change network element assignments. When you assign network elements that are already assigned to a different policy group, QPM automatically removes the previous assignment and saves the new assignment.
You can also remove network element assignments.
Tip To delete the current QoS configuration on a network element, create a policy group with no configuration, and assign the network element to it.
This topic describes how to set network element assignments for the current policy group. You can also set network element assignments from the Device Table. See Setting a Device's Policy Group Assignment, page 4-114, and Setting Network Element Assignments for more information.
Procedure
Step 1 Open the Assigned Network Elements page in one of the following ways:
•In the Policy Groups page, or the Attached Policy Groups page, click in the Network Elements column for the required policy group.
•In the Policy Group TOC, select Assigned Network Elements.
The Assigned Network Elements page displays the network elements that have been assigned to the policy group.
Step 2 To assign network elements to the policy group:
a. Click Add. The Assignment window opens displaying the network elements in the current device group that match the policy group's device constraints.
b. Select the desired network elements, and click Assign. The Assigned Network Elements page reappears, displaying all the network elements assigned to the policy group.
Step 3 To remove network elements from the policy group assignment, select the assigned network elements in the Assigned Network Elements page, and click Remove.
See the following topics for more information about these pages:
•Assigned Network Elements Page, page B-440
•Add Assignment Dialog Box, page B-442
Related Topics
•Creating a Policy Group
•Defining QoS Properties and Mappings
•Working with Policies
•Viewing Policy Group Information
Copying Policy Groups
You can create new policy groups by copying existing policy groups. The new policy group contains the source policy group's device constraint definitions, and QoS properties, and, optionally, its policies. If you are copying to a different deployment group within the current device group, you can also copy the source policy group's network element assignments.
The new policy group is given the default name, "Copy <number> of <source policy group>." You should rename the policy group with a more meaningful name.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To change deployment group, select the required deployment group in the Deployment Group list box.
Step 2 Select the check box next to the policy group you want to copy, and click Copy. The Copy Policy Group dialog box opens.
Step 3 Choose how to copy the policy group:
a. Select the device group and deployment group to which you want to copy the selected policy group.
b. To copy the properties and policies to the new policy group, select the Copy with policies and properties check box.
c. To copy the network element assignments to the new policy group, select the Copy with assignments check box. This check box is not available if you are copying within a deployment group, or to another device group.
d. Click OK. The Policy Groups page reappears.
See Copy Policy Group Dialog Box, page B-422 for more information about the fields in this dialog box.
Step 4 If you copied to a different deployment group, select the required deployment group in the Deployment Group list box, to view the new policy groups.
Related Topics
•Setting Network Element Assignments
•Viewing Policy Group Information
•Modifying a Policy Group
Uploading Device QoS Configurations to Policy Groups
You can upload the existing QoS configurations on devices into QPM policy groups. This is useful if you install QPM in a network where you already have QoS-configured devices.
The upload process incorporates the following steps for each device:
•The configuration that is running on the device is translated to QoS properties and policies.
If the configuration contains commands that QPM does not support, those commands are not uploaded. Supported commands that were not successfully uploaded are identified in the upload report.
•For each interface, QPM creates a new policy group containing the policies and properties configured on the interface, and assigns the interface to it.
If the interface is already assigned to a policy group in the same deployment group, the assignment is deleted before the assignment to the new policy group is set.
•After all device configurations have been uploaded, QPM minimizes the number of policy groups by aggregating network elements that have similar constraints and are assigned to policy groups with identical properties and policies. Each set of network elements is then assigned to a single policy group.
•After the upload operation is complete, an HTML report is generated, which you can view in your browser. This report provides:
–A summary of the new policy groups, and details of the network element assignments to those policy groups.
–Details of the QoS configurations that were not successfully uploaded. Upload failure may be caused by incomplete configurations that exist on the router, or unsupported options.
Note On deployment, some uploaded QoS configurations might use a different CLI from the original, however the QoS capabilities remain unchanged. If QPM uses different naming conventions, the old configuration might be deleted and recreated using QPM's conventions, even if there are no configuration changes.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To upload a device's configuration into a different deployment group, select the required deployment group in the Deployment Group list box.
Step 2 Select Upload QoS Configuration in the TOC. The Upload QoS Configuration page appears displaying the list of devices in the current device group.
Step 3 Select the check boxes next to the devices you want to upload, and click Upload.
A dialog box appears informing you that the upload process has started.
Step 4 In the Upload dialog box, do one of the following:
•View a report showing the status and other details of the upload process:
–Click View. The Upload Reports page appears.
–Select the report you want to view, and click View. The selected report is displayed in a separate window. See Upload Report, page D-588 for information about the Upload report.
Note To view a report later, select Reports > Upload to display the Reports page.
•Click Continue to continue editing policies. The Policy Groups page appears. If the upload is still in progress, not all uploaded policy groups will be listed. Refresh the browser window to see additional policy groups as they are uploaded.
Related Topics
•Modifying a Policy Group
•Working with Policies
Viewing Policy Group Information
You can view information about the properties, policies, and network element assignments for a specific policy group. You can then modify the policy group as required.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To modify a policy group in a different deployment group, select the required deployment group in the Deployment Group list box.
Step 2 To open policy group information pages from the Policy Groups page, do any of the following:
•Click the required policy group name. The General page appears, displaying general definitions for the selected policy group.
•Select a policy group, and click Edit. The General page appears, displaying general definitions for the selected policy group.
•Click the number of QoS properties for the required policy group. The QoS Properties page appears, displaying the QoS properties and mappings for the selected policy group.
•Click the number of In policies for the required policy group. The In Policies page appears, displaying the inbound policies for the selected policy group.
•Click the number of Out policies for the required policy group. The Out Policies page appears, displaying the outbound policies for the selected policy group.
•Click the network elements link for the required policy group. The Assigned Network Elements page appears, displaying the network elements that are assigned to the selected policy group.
After you have opened a policy group information page, the TOC changes to the Policy Group TOC.
Step 3 Open any policy group information page from the Policy Group TOC. In addition to the pages referred to in the previous step, you can also open the Device Constraints page, which displays device constraint definitions for the selected policy group.
You can modify policy group details from these information pages.
See the following topics for more information about these pages:
•General Page (Policy Group and Template), page B-422
•Device Constraints Page, page B-424
•QoS Properties Page, page B-425
•In Policies/Out Policies Page, page B-437
•Assigned Network Elements Page, page B-440
Related Topics
•Modifying a Policy Group
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
•Working with Policies
Modifying a Policy Group
Modify a policy group when you want to modify:
•General definitions
•Device constraint definitions:
–After you define the first device constraint in a policy group, you cannot change the network element type definition. All constraints in a policy group must be for the same network element type. If you want to change the network element type, you must create a new policy group.
–A policy group must contain at least one constraint definition. You cannot delete a constraint definition if it is the only constraint definition for the policy group.
•QoS properties and mappings—See Defining QoS Properties and Mappings.
•QoS policies—You can add, remove, and edit policies. See Working with Policies.
•Network element assignments—You can add and remove network element assignments. See Setting Network Element Assignments.
Note You cannot modify a policy group that is linked to a policy group template. You must disconnect the policy group from the template, or modify the template. See Disconnecting Policy Groups from Policy Group Templates.
This topic describes how to change a policy group's general definitions, and device constraint definitions.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To modify a policy group in a different deployment group, select the required deployment group in the Deployment Group list box.
The Policy Groups page displays for each policy group, the number of QoS properties, and the number of QoS policies it contains, and the number of assigned network elements.
For policy groups that are linked to templates, the linked template name is displayed, and the properties and policies are shown as "inherited." For more information about the Policy Groups page, see Policy Groups Page, page B-419.
Step 2 To edit the general definitions for the policy group:
a. Click the required policy group name, or select the required policy group, and click Edit.
The General page appears for the selected policy group. The TOC changes to the Policy Group TOC.
b. Click Edit in the General page.
The Policy Group Definition wizard opens, displaying the General Definition page.
c. Edit the name and description in the General Definition page, as required.
Step 3 To add, edit, or remove device constraint definitions, open the Device Constraints page in the Policy Definition wizard in one of the following ways:
•If the Policy Group Definition wizard is open, continue to the Device Constraints Definition page.
•Select Device Constraints in the Policy Group TOC. The Device Constraints page appears. Click Edit. The Policy Group Definition wizard opens, displaying the Device Constraint Definition page.
Modify device constraint definitions as required:
•To edit an existing constraint:
–Select the constraint definition, and click Edit. The Device Definitions page appears.
–Edit the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
Note You cannot change the network element type after it has been defined for the first device constraint in the policy group.
–Click OK. The Device Constraints page reappears displaying the modified device constraint.
•To delete an existing constraint definition:
–Select the constraint definition, and click Delete.
Note A policy group must contain at least one constraint definition. You cannot delete a constraint definition if it is the only constraint definition for the policy group.
•To create a new constraint manually:
–Click Define Manually. The Device Definitions page appears.
–Define the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
Note You cannot change the network element type after it has been defined for the first device constraint in the policy group.
–Click OK. The Device Constraints page reappears displaying the new device constraint.
•To define a new constraint from network elements:
–Click Define from Inventory.
–Select the type and model of network element to use to define the device constraint. Click OK.
Note You cannot change the network element type after it has been defined for the first device constraint in the policy group.
–Select the network elements you want to use to define the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
–Click Define Constraint. The Device Constraints page reappears displaying the new device constraint.
Step 4 After you have completed your policy group definitions, click Finish to exit the Policy Group Definition wizard.
Related Topics
•Creating a Policy Group
•Viewing Policy Group Information
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
•Working with Policies
•Working with Policy Group Templates
Deleting a Policy Group
Delete a policy group when you no longer want to apply its QoS properties and policies to any of the assigned devices.
Note When you delete a policy group, all its contents are deleted.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To delete a policy group in a different deployment group, select the required deployment group in the Deployment Group list box.
Step 2 Select the policy group you want to delete, and click Delete. A warning message appears.
Step 3 Click OK to confirm the deletion. The policy group and its contents are deleted.
Related Topics
•Viewing Policy Group Information
•Modifying a Policy Group
Viewing Policy Translations
You can view the CLI translations of the QoS configurations that will be deployed to devices assigned to policy groups in the current deployment group.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
To view policy translations for a different deployment group, select the required deployment group in the Deployment Group list box.
Step 2 In the TOC, select View CLI Translation. The Policy Translation page appears, displaying the list of devices that have assigned network elements to policy groups in the current deployment group. See Policy Translation Page, page B-509 for more information about this page.
Step 3 Select the check boxes next to the devices whose policy translation you want to view. Click Translate. The Translate page appears, displaying the CLI translation for the devices. See Translation Report Page, page B-510 for more information about this page.
Related Topics
•Viewing Policy Group Information
•Modifying a Policy Group
Working with Policies
Your policies define the QoS actions that are to be applied to specific traffic flows.
The following topics describe how to create and manage policies:
•Understanding Policies
•Displaying the Policies Pages
•Creating a Policy
•Modifying a Policy
•Deleting Policies
•Changing the Priority of Policies
•Searching for QoS Properties and Policies
Understanding Policies
After you have defined a policy group or policy group template with device constraints and QoS property definitions, you can add policies to it.
Using QPM, you can create the following types of policies:
•QoS policies—A QoS policy is a conditional statement that applies one or more specified QoS actions to a packet if the packet satisfies the conditions (filters) defined in the policy.
•Access control policies—An access control policy permits or denies the flow of data if the data packet satisfies the conditions (filters) defined in the policy. An access control policy does not have an associated QoS action.
Note You cannot create access control policies on all Cisco devices.
The filter you create for a policy can be broad, in which case the policy is applied to a high percentage of the traffic that travels through the device or interface, or it can be very narrow and selective. When the device determines that a packet satisfies the conditions of the policy, it applies the policy's action to it.
In general, if there is more than one policy defined on the interface or device, the device looks at the policies in order, top to bottom, until the first match is found, at which point it applies the policy and ignores remaining policies. (If you are creating an advanced policing policy, however, you can specify that additional policies be considered after the device applies a matching policy.)
When you define policies, QPM presents you with only actions and settings that are valid for the device constraints and QoS properties defined for the policy group.
You can enable and disable policies without deleting them, and you can change the order in which policies are checked on the interface.
Related Topics
•What Types of Quality of Service Does QPM Handle?, page 2-53
•Creating a Policy
•Modifying a Policy
•Enabling and Disabling Policies
•Changing the Priority of Policies
Displaying the Policies Pages
Your starting point for working with policies, is the lists of policies in the policy group or policy group template. Inbound policies and outbound policies are displayed in separate pages.
The following topics describe how to display policies:
•Displaying Policies in a Policy Group
•Displaying Policies in a Policy Group Template
Displaying Policies in a Policy Group
You access the policies for a policy group from the Policy Groups page.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
Step 2 To view policies in a different deployment group, select the required deployment group in the Deployment Group list box.
Step 3 In the Policy Groups page, click the number of In or Out policies for the required policy group. The In Policies or Out Policies page appears, displaying the inbound or outbound policies in the current policy group.
If the Policy Group TOC is displayed, you can select In Policies, or Out Policies, as required.
Displaying Policies in a Policy Group Template
You access the policies for a policy group from the Policy Group Templates page.
Procedure
Step 1 Select Configure > Libraries.
Step 2 In the Libraries TOC, select Templates. The Templates page appears displaying the policy group templates.
Step 3 In the Templates page, click the number of In or Out policies for the required template. The In Policies or Out Policies page appears, displaying the inbound or outbound policies in the template.
If the Templates TOC is displayed, you can select In Policies, or Out Policies, as required.
Related Topics
•Creating a Policy
•Modifying a Policy
•Enabling and Disabling Policies
•Changing the Priority of Policies
Creating a Policy
Create a QoS policy to apply specific QoS actions to selected traffic flows. Create an access control policy to permit or deny specific classes of traffic. Access control policies do not contain any associated actions.
You can create policies in a policy group, or in a policy group template.
The QPM Policy wizard guides you through the following steps required to define policies in the inbound or outbound direction:
•General Policy Definition
•Defining a Policy Filter
•Defining QoS Policy Actions
•Viewing the Policy Summary
General Policy Definition
The general policy definition for inbound or outbound policies includes the following:
•Policy name
•Policy description
•Type of policy—QoS policy or access control policy (if relevant)
Procedure
Step 1 Open the In Policies or Out Policies page for the policy group or policy group template in which you want to create a new policy. See Displaying the Policies Pages.
Step 2 In the Policies page, click Create. The Policy wizard opens, displaying the Policy Wizard - General page.
Step 3 In the Policy Wizard - General page:
•Enter the policy name.
•Enter a description for the policy, if desired.
•Select the type of policy you want to create—QoS policy, or access control policy.
Step 4 Click Next to proceed to the Filter step in the wizard. See Defining a Policy Filter.
Related Topics
•Defining QoS Policy Actions
•Viewing the Policy Summary
Defining a Policy Filter
Define a filter to specify the traffic to which the policy should be applied. A filter can contain multiple filter rules. Each filter rule is a set of filter conditions—to satisfy the rule, a packet must satisfy all conditions of the rule. To match the filter, a packet must satisfy any one of the rules.
The available filter elements change according to the policy group's device constraints and congestion management properties. Typically, you can identify the traffic by any of the following characteristics:
•Source IP or destination IP. You can use IP aliases from the QPM component libraries.
•Source application or destination application. You can use application aliases from the QPM component libraries.
•Service—IP precedence or DSCP value.
In addition, you might be able to filter using:
•Network Based Application Recognition (NBAR) properties—NBAR is a classification engine that recognizes a wide variety of applications, including web-based and other difficult-to-classify protocols that utilize dynamic TCP/UDP port assignments. When an application is recognized and classified by NBAR, a network can invoke services for that specific application.
•IP RTP ports
•CoS value
•MPLS value
•Single ACL Translation—You can define a complex permit or deny filter as a single ACL. This is helpful if you are already using a lot of ACLs on the device, because you are limited in the number of ACLs that you can define on a device.
You can also define a class default filter for unclassified traffic that does not match any other filter condition.
If you want to monitor a policy, do not define more than 12 match statements in the policy filter.
The Policy wizard guides you through the process of defining filter conditions and rules for your policy.
Procedure
Step 1 Open the Policy Wizard - Filter page:
•If the Policy wizard is not open, open the relevant Policies page. See Displaying the Policies Pages. Select the policy whose filter you want to edit, and click Edit. The Policy wizard opens, displaying the Policy Wizard - General page.
•If the Policy wizard is open, click Next in the Policy Wizard - Filter page, or select Filter in the wizard navigation TOC.
Step 2 Enter a name for the filter, if desired. The filter name helps you identify the defined filter in the CLI translation.
Step 3 Select how to define the traffic type of the policy:
•Create New Filter—This policy is applied to traffic that matches any of the filter conditions. If you do not define filter rules, the policy is applied to all traffic.
•Class Default—This policy is applied to all traffic that does not match any of the filters. You do not create any filter conditions for this type of policy. Go to Step 8.
Step 4 Define a filter rule:
a. Click Create in the Filters table. The Rule Setting page appears, displaying the conditions you can define for each filter rule.
b. Click Edit next to the condition you want to define. A dialog box opens.
c. Define the condition as required.
See the following topics for information about these dialog boxes:
•Source IP / Destination IP Dialog Box, page B-491
•Application Dialog Box, page B-488
•Protocol Dialog Box, page B-489
•CoS Dialog Box, page B-493
•MPLS Dialog Box, page B-494
•Service Dialog Box, page B-493
•IP-RTP Port Range Dialog Box, page B-494
•Single ACL Translation Editor Dialog Box; Single ACL Translation Conditions Editor Dialog Box, page B-495
Note For IP and application conditions, you can choose a predefined alias. You can also save a defined condition as an alias in the QPM libraries for future use.
d. Click OK in the Condition dialog box. The Rule Setting table reappears.
e. Repeat steps b through d to create additional conditions for the filter rule.
f. After you have defined all the rules in the filter condition, click Done. The Filter page reappears displaying the filter rule you have defined.
Step 5 Repeat Step 4 to create additional filter rules.
Step 6 To edit a filter rule, select the filter rule in the Filter page, and click Edit. The Rule Setting page appears. Edit the rule conditions as required, and click Done to return to the Filter page.
Step 7 To delete a filter rule, select the filter rule in the Filter page, and click Delete.
Step 8 After you have completed your filter definitions, click Next.
•If you are defining a QoS policy, the Policy Wizard - Actions page appears. See Defining QoS Policy Actions.
•If you are defining an access control policy, the Summary page appears. See Viewing the Policy Summary.
Related Topics
•General Policy Definition
•Working with Aliases
Defining QoS Policy Actions
The Policy Actions step of the Policy wizard includes several substeps to define the actions to be applied to traffic that matches the filter definition:
•Marking—Defines a packet's relative importance. The marking can be used to identify and prioritize packets in subsequent policies.
•Microflow Policing—Limits the input transmission rate of traffic, and marks packets.
•Policing—Limits the rate of aggregate flows on a single interface or across interfaces.
•Shaping—Smooths the flow of outbound traffic.
•Queuing—Provides bandwidth guarantees and priority servicing for outbound traffic.
•Congestion Avoidance—Discards packets to avoid congestion.
Note Cisco Express Forwarding (CEF) must be enabled on a device if you want to deploy NBAR or class-based QoS policies. On VIP platforms, distributed CEF (dCEF) must be enabled.
The global CLI command to enable CEF or dCEF is:
ip cef [distributed] switch
The following procedure describes all the available actions in the Policy Wizard - Actions step. However, when you define actions for a policy, some of the options might not appear, depending on the device constraints and QoS properties of the policy group.
Procedure
Step 1 Open the Policy Wizard - Actions page:
•If the Policy wizard is not open, open the relevant Policies page. See Displaying the Policies Pages. Select the policy whose action you want to edit, and click Edit. The Policy wizard opens, displaying the Policy Wizard - General page.
•If the Policy wizard is open, click Next in the Policy Wizard - Filter page, or select Actions in the wizard navigation TOC. The Policy Wizard - Actions page for Marking appears.
Step 2 Use the Next button to navigate to the action pages you want to define, or select the actions in the wizard navigation TOC:
See the following topics for information about these dialog boxes:
•Policy Wizard: Marking Actions Page, page B-496
•Policy Wizard: Microflow Policing Actions Page, page B-497
•Policy Wizard: Policing Actions Page, page B-499
•Policy Wizard: Shaping Actions Page, page B-503
•Policy Wizard: Congestion Avoidance Actions Page, page B-508
Step 3 After you have completed defining the policy actions, click Next to proceed to the Summary step in the wizard. See Viewing the Policy Summary.
Related Topics
•General Policy Definition
•Defining a Policy Filter
Viewing the Policy Summary
After you have finished defining your policy, review the policy definitions in the Summary page. You can go back and revise definitions before completing the Policy Definition wizard.
Procedure
Step 1 If the Policy Wizard - Summary page is not displayed, select Summary in the wizard navigation TOC.
Step 2 Review the policy definitions.
Step 3 To modify any of the settings, choose the relevant step in the wizard navigation TOC, or click the Back button.
Step 4 After you are satisfied with the policy definition, click Finish to complete the policy and exit the wizard.
Related Topics
•General Policy Definition
•Defining a Policy Filter
•Defining QoS Policy Actions
Modifying a Policy
You can modify a policy by changing its properties, filter, or actions. When you redeploy the policies, the modified policy replaces the old policy on the policy group's assigned network elements.
You cannot modify policies within a policy group that is linked to a policy group template. You must either disconnect the policy group template first, or modify the policy group template.
Procedure
Step 1 Open the In Policies or Out Policies page for the policy group or policy group template in which you want to modify a policy. See Displaying the Policies Pages.
Step 2 In the Policies page, select the check box next to the policy you want to edit, and click Edit. The Policy wizard opens, displaying the Policy Wizard - General page. Change the name or description of the policy if required.
Step 3 Navigate to pages you want to edit using the wizard Next button, or by choosing a step in the wizard navigation TOC:
•To modify the policy filter, see Defining a Policy Filter.
•To modify the policy actions, see Defining QoS Policy Actions.
Step 4 After you have finished editing the policy click Finish. The Policy Wizard - Summary page appears. See Viewing the Policy Summary.
Related Topics
•Working with Aliases
•Working with Policy Group Templates
Deleting Policies
When you no longer want to use a policy, you can delete it from the policy group or policy group template. When you redeploy the policies, the deleted policy is removed from the policy group's assigned network elements.
You cannot delete a policy in a policy group that is linked to a policy group template. You must either first disconnect the policy group template, or delete the policy in the linked policy group template.
Before You Begin
If you are not sure whether you will need a policy, consider disabling it instead of deleting it. See Enabling and Disabling Policies for information on disabling a policy.
Procedure
Step 1 Open the In Policies or Out Policies page for the policy group or policy group template in which you want to delete a policy. See Displaying the Policies Pages.
Step 2 In the Policies page, select the check box(es) next to the policy or policies you want to delete. Click Delete.
Related Topics
•Enabling and Disabling Policies
Enabling and Disabling Policies
When you create a policy, it is enabled by default, so that when you deploy to the devices, the policy is distributed and takes effect. However, you can disable a policy, so that it exists in the policy group, but is not deployed to the network. This allows you to define policies before you want to make them effective, or temporarily remove a policy from the network without erasing it completely. You can also enable policies that have been disabled.
Procedure
Step 1 Open the In Policies or Out Policies page for the policy group or policy group template in which you want to work. See Displaying the Policies Pages.
Step 2 In the Policies page, select the check box(es) next to the policy or policies you want to enable or disable.
Step 3 Click Enable or Disable as required.
Changing the Priority of Policies
The device examines QoS policies in order until a match is found for the packet. Even if a packet satisfies more than one policy, it will be treated as satisfying only the first policy that the device encounters, unless you define your policy to include the Continue setting, in which case a subsequent match will be sought.
Policies on an interface are examined top-down according to the QPM display. Therefore the policies in a policy group should appear in order of importance, from top to bottom, to ensure that policies get the priority you require. If you are creating complex policy structures that include Continue settings (so that you can set multiple policies on a given packet), ensure that the statements with the Continue setting come before the subsequent policy statement you want applied.
Initially, policies are listed in the order in which they are defined. You can change the order of policies in the list.
Procedure
Step 1 Open the In Policies or Out Policies page for the policy group or policy group template in which you want to reorder policies. See Displaying the Policies Pages.
Step 2 In the Policies page, click Reorder. The Reorder dialog box opens.
Step 3 Select the policy that you want to reorder. Click the Up or Down button to reorder the policy as required.
Step 4 Change the order of policies as required. After you have finished, click Reorder. The Policies page appears displaying the new order.
Searching for QoS Properties and Policies
You can search for QoS properties and policies in policy groups or policy group templates. When searching for policy groups, you can search within a single deployment group, or across all deployment groups.
Procedure
Step 1 Select Configure > Search. The Policy/Properties Search page appears.
Step 2 Select whether to search in policy groups, or in policy group templates. To search in policy groups, select the deployment group in which you want to search, or select Select All to search in all deployment groups.
Step 3 Select the type of search:
•Select Policy to search for policies, according to policy name and/or policy action. Enter search criteria as required.
•Select Properties to search for QoS properties. Select the QoS property for which to search.
See Policy/Properties Search Page, page B-553 for more information about fields in this page.
Step 4 Click Search. After the search is complete, the Search Results page appears, displaying information for the policies or properties, that match the search criteria.
•See Policy Search Results Page, page B-554 for information about fields in the Policy Search Results page.
•See Properties Search Results Page, page B-555 for information about fields in the Properties Search Results page.
•See Templates Policies Search Results Page, page B-556 for information about fields in the Templates Policies Search Results page.
•See Templates Properties Search Results Page, page B-557 for information about fields in the Templates Properties Search Results page.
Working with Aliases
Definitions of IP aliases, and application aliases, can be stored in QPM libraries, and used in policy definitions across all your deployment groups. When you change the alias definition, all policies that reference the definition are affected.
When you deploy historical jobs with referenced alias definitions, QPM performs a validation check on the referenced definitions. See Chapter 7, "Deploying QoS Policies".
The following topics describe how to work with alias definitions:
•Defining IP Aliases
•Defining Application Aliases
•Modifying Aliases
•Deleting Aliases
Defining IP Aliases
An IP alias is an alias for a named group of IP addresses (including masks) or host names. It can be used for both source IP and destination IP conditions within a filter. IP aliases are stored in the IP Aliases library.
Procedure
Step 1 Select Configure > Libraries, or if you have been working with other library items, select IP Aliases in the Libraries TOC.
The IP Aliases page appears, displaying IP alias definitions in the IP Alias library.
Step 2 Click Create. The IP Alias dialog box opens.
Step 3 Enter the IP alias name in the Name field.
Step 4 For each IP address you want to add to the alias:
a. Enter the IP address and mask, or enter host name.
b. Click Add to add the IP address to the alias. The IP address and mask are displayed in the Alias list.
To remove an IP address that you added, select the IP address in the list, and click Remove.
For more details, see IP Alias Dialog Box, page B-407.
Step 5 After you have added all the IP addresses to the alias, click OK. The IP Alias page displays the new alias.
Related Topics
•Modifying Aliases
•Deleting Aliases
Defining Application Aliases
An application alias is an alias for a defined protocol and port (or group of ports). It can be used in a filter definition for source and destination application conditions. Application aliases are stored in the Application Aliases library.
Procedure
Step 1 Select Configure > Libraries.
Step 2 Select Applications in the Libraries TOC. The Applications page appears displaying application alias definitions in the Applications library.
Step 3 Click Create. The Application Alias dialog box opens.
Step 4 Enter the Application alias name in the Name field.
Step 5 Define the protocol, and TCP/UDP port or range, if appropriate.
For more details, see Application Alias Dialog Box, page B-409.
Step 6 Click OK. The Applications page reappears displaying the application alias.
Related Topics
•Modifying Aliases
•Deleting Aliases
Modifying Aliases
You can change IP aliases and application aliases. When you modify an alias, all policies that reference it, are modified.
Procedure
Step 1 Select Configure > Libraries.
Step 2 In the Libraries TOC, select the library that contains the alias you want to modify.
Step 3 Select the check box next to the alias you want to modify, and click Edit. The Alias dialog box opens, displaying details for the alias.
Step 4 Modify fields as required.
For more details, see:
•IP Alias Dialog Box, page B-407
•Application Alias Dialog Box, page B-409
Step 5 Click OK in the dialog box. The Alias page displays the modified alias.
Related Topics
•Defining IP Aliases
•Defining Application Aliases
Deleting Aliases
You can delete aliases if they are not currently being used in policies.
Procedure
Step 1 Select Configure > Libraries.
Step 2 In the Libraries TOC, select the library that contains the aliases you want to delete.
Step 3 Select the check boxes next to the aliases you want to delete.
Step 4 Click Delete.
Working with Policy Group Templates
Policy group templates contain QoS properties and policies, but do not contain network element assignments. Policy group templates can be used to create policy groups in any deployment group. You can create global policy group templates and store them in the Policy Group Templates library.
The following topics describe how to work with policy group templates:
•Understanding Policy Group Templates
•Creating a Policy Group Template
•Viewing Policy Group Template Information
•Modifying a Policy Group Template
•Disconnecting Policy Groups from Policy Group Templates
•Deleting Policy Group Templates
Understanding Policy Group Templates
Policy group templates can be used to create and share policy groups across deployment groups and device groups. A policy group template contains a set of QoS properties and QoS policies for specified device constraints. It does not include any device assignments. Policy group templates are stored in the Policy Group Templates library.
You can create policy groups by copying policy group templates, or by attaching the policy group template to the policy group. When a policy group template is attached to policy groups, any change in the policy group template will affect the attached policy groups. You can disconnect policy groups from their attached policy group template at any time.
QPM generates voice policy group templates, which are used to create voice policy groups for IP telephony QoS configuration. You can edit the voice policy group templates created by QPM.
Related Topics
•Creating a Policy Group Template
•Modifying a Policy Group Template
•Viewing Policy Group Template Information
•Disconnecting Policy Groups from Policy Group Templates
•Deleting Policy Group Templates
•Chapter 5, "Configuring QoS for IP Telephony"
Creating a Policy Group Template
Create a policy group template when you want to share policies across deployment groups or device groups.
You create a new policy group template in the same way as you create a new policy group using the Policy Group Definition wizard. You can create a new template by copying another template or a policy group.
Procedure
Step 1 Create a new policy group template and define its device constraints. See Creating a Policy Group.
Step 2 Define the policy group template's QoS properties and mappings. See Defining QoS Properties and Mappings.
Step 3 Define policies for the policy group template. See Creating a Policy.
Related Topics
•Viewing Policy Group Template Information
•Modifying a Policy Group Template
•Deleting Policy Group Templates
Viewing Policy Group Template Information
You can view information about the QoS properties and policies for a specific policy group template. You can then modify the policy group template as required.
You can also view the policy groups that are attached to a policy group template, and you can then disconnect a policy group from its template.
Procedure
Step 1 Select Configure > Libraries.
Step 2 Select Templates in the Libraries TOC. The Templates page appears displaying the global policy group templates.
Step 3 To open policy group template information pages from the Templates page, do any of the following:
•Click the required template name. The General page appears, displaying general definitions for the selected policy group template.
•Click the number of QoS properties for the required policy group template. The QoS Properties page appears, displaying the QoS properties and mappings for the selected policy group template.
•Click the number of In policies for the required policy group template. The In Policies page appears, displaying the inbound policies for the selected policy group template.
•Click the number of Out policies for the required policy group template. The Out Policies page appears, displaying the outbound policies for the selected policy group template.
After you have opened a policy group template information page, the TOC changes to the Template TOC.
Step 4 Open any policy group template information page from the Template TOC. In addition to the pages referred to in the previous step, you can also open the Device Constraints page, which displays device constraint definitions for the selected policy group template.
You can modify policy group template details from these information pages.
Step 5 To view a template's attached policy groups, click the number of attached policy groups for the required policy group template. The Attached Policy Groups page appears, displaying the list of attached policy groups.
You can disconnect a policy group from its template in this page.
Related Topics
•Modifying a Policy Group Template
•Deleting Policy Group Templates
•Disconnecting Policy Groups from Policy Group Templates
Modifying a Policy Group Template
Modify a policy group template when you want to modify:
•General definitions
•Device constraint definitions:
–After you define the first device constraint in a policy group template, you cannot change the network element type definition. All constraints in a policy group template must be for the same network element type. If you want to change the network element type, you must create a new policy group.
–A policy group template must contain at least one constraint definition. You cannot delete a constraint definition if it is the only constraint definition for the policy group template.
•QoS properties and mappings—See Defining QoS Properties and Mappings.
•QoS policies—You can add, remove, and edit policies. See Working with Policies.
Note If a policy group template is attached to policy groups, any change in the policy group template will affect the attached policy groups. For information on disconnecting a policy group from its attached template, see Disconnecting Policy Groups from Policy Group Templates.
This topic describes how to change a policy group template's general definitions, and device constraint definitions.
Procedure
Step 1 Select Configure > Libraries.
Step 2 Select Templates in the Libraries TOC. The Templates page appears displaying the global policy group templates.
Step 3 To edit the general definitions for the policy group template:
a. Open the Policy Group Definition wizard in one of the following ways:
•Select the required policy group template, and click Edit.
•If you want to view general information first, click the required policy group template name. The General page appears for the selected template. The TOC changes to the Template TOC. Click Edit in the General page.
The Policy Group Definition wizard opens, displaying the General Definition page.
b. Edit the name and description in the General Definition page, as required.
Step 4 To add, edit, or remove device constraint definitions, open the Device Constraints page in the Policy Definition wizard in one of the following ways:
•If the Policy Group Definition wizard is open, continue to the Device Constraints Definition page.
•Select Device Constraints in the Policy Group TOC. The Device Constraints page appears. Click Edit. The Policy Group Definition wizard opens, displaying the Device Constraint Definition page.
Modify device constraint definitions as required:
•To edit an existing constraint:
–Select the constraint definition, and click Edit. The Device Definitions page appears.
–Edit the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
Note You cannot change the network element type after it has been defined for the first device constraint in the policy group.
–Click OK. The Device Constraints page reappears displaying the modified device constraint.
•To delete an existing constraint definition, select the constraint definition, and click Delete.
Note A policy group must contain at least one constraint definition. You cannot delete a constraint definition if it is the only constraint definition for the policy group.
•To create a new constraint manually:
–Click Define Manually. The Device Definitions page appears.
–Define the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
Note You cannot change the network element type after it has been defined for the first device constraint in the policy group.
–Click OK. The Device Constraints page reappears displaying the new device constraint.
•To define a new constraint from network elements:
–Click Define from Inventory.
–Select the type and model of network element to use to define the device constraint. Click OK.
Note You cannot change the network element type after it has been defined for the first device constraint in the policy group.
–Select the network elements you want to use to define the device constraints. For more information about the fields in this page, see Policy Group/Template Definition Wizard: Constraint Definitions Page, page B-447.
–Click Define Constraint. The Device Constraints page reappears displaying the new device constraint.
Step 5 After you have completed modifying your policy group template definitions, click Finish to exit the Policy Group Definition wizard.
Related Topics
•Viewing Policy Group Template Information
•Deleting Policy Group Templates
•Modifying a Policy Group
Disconnecting Policy Groups from Policy Group Templates
You can disconnect an individual policy group from its template, and you can disconnect several policy groups from a policy group template.
The following topics describe how to disconnect policy groups from templates:
•Disconnecting an Individual Policy Group from its Template
•Disconnecting Several Policy Groups from a Template
Disconnecting an Individual Policy Group from its Template
This topic describes how to disconnect an individual policy group from its policy groups template.
Procedure
Step 1 Select Configure > Policy Groups. The Policy Groups page appears displaying the policy groups for the current deployment group.
Step 2 Click the policy group name, or select the required policy group, and click Edit.
The General page appears for the selected policy group. The TOC changes to the Policy Group TOC.
Step 3 In the Attached to Template field, click Disconnect.
Related Topics
•Disconnecting Several Policy Groups from a Template
•Modifying a Policy Group Template
•Deleting Policy Group Templates
Disconnecting Several Policy Groups from a Template
This topic describes how to disconnect one or more policy groups from the Policy Groups Templates page.
Procedure
Step 1 Select Configure > Libraries.
Step 2 Select Templates in the Libraries TOC. The Templates page appears displaying the global policy group templates.
Step 3 To view a template's attached policy groups, click the number of attached policy groups for the required policy group template. The Attached Policy Groups page appears, displaying the list of attached policy groups.
Step 4 Select the policy group to disconnect, and click Disconnect.
Related Topics
•Disconnecting an Individual Policy Group from its Template
•Modifying a Policy Group Template
•Deleting Policy Group Templates
Deleting Policy Group Templates
You can delete policy group templates that are not attached to any policy groups.
Procedure
Step 1 Select Configure > Libraries.
Step 2 In the Libraries TOC, select the Policy Group Templates. The Templates page appears.
Step 3 Select the check boxes next to the template or templates you want to delete.
Step 4 Click Delete.
Related Topics
•Disconnecting Policy Groups from Policy Group Templates
More Information on Policy Configuration
This section provides additional information about configuring QoS on different types of interfaces and devices:
•QoS Configuration on Network Element Types
•Configuring FRTS Policies
•Configuring VLAN Policies
Related Topics
•Advanced IP Telephony Network Configuration, page 5-162
QoS Configuration on Network Element Types
Policy groups can be assigned to only one type of network element. For some devices, you will need to define several policy groups to consolidate the QoS configuration on the device.
To create a complete QoS configuration for a single type of network element, you might need to define more than one policy group. For example, when configuring FRTS policies, and when configuring VLAN policies.
There are other cases, where you might need two policy groups. For example, you configure markdown in policing policies on Catalyst ports at the port level, but to change the default markdown mapping values, you must define an additional policy group at the device level.
This section provides tables listing the types of QoS configurations that can be configured for each network element type, for different device models:
•Types of QoS Configurations on IOS Devices
•Types of QoS Configurations on Catalyst Devices
•Types of QoS Configurations on Layer 2 Switches Running IOS
•Types of QoS Configurations on Layer 3 Devices
Table 6-1 Types of QoS Configurations on IOS Devices
Device Model
|
Network Element Type
|
Device
|
Interface
|
ATM PVC
|
FR DLCI
|
VLAN
|
1600
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
1700
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
1720
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
1750
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
1760
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
2500
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
2600
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
3200
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Not Available
|
Scheduling
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
3600
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties:
Actions
|
Scheduling
Properties
Actions
|
Not available
|
3700
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
3800
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
4000
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
4500
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
4700
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
7100
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
7200
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
7300
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
7400
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
7500
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
7600
|
DSCP Mappings
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
7700
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
AS5300
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
AS5800
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
C4GWY
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
Cat3550
|
DSCP Mappings
|
Scheduling
Properties
Actions
|
Not available
|
Not available
|
DSCP Mappings
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat3750
|
DSCP Mappings
|
Properties
Actions
|
Not available
|
Not available
|
Not available
|
Cat4000(IOS)
|
DSCP Mappings
|
Scheduling
Properties
Actions
|
Not available
|
Not available
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat4200
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
Cat4500(IOS)
|
DSCP Mappings
|
Scheduling
Properties
Actions
|
Not available
|
Not available
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat6000_PFC1(IOS)
|
DSCP Mappings
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat6000_PFC2(IOS)
|
DSCP Mappings
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat6000_PFC3(IOS)
|
DSCP Mappings
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
MSFC (QoS is supported on the FlexWan module only)
|
NBAR Port Mapping
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
RSM
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Not available
|
Scheduling
Properties
Actions
|
Not available
|
VG200
|
No QoS configuration at device level.
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Scheduling
Properties
Actions
|
Not available
|
Table 6-2 Types of QoS Configurations on Catalyst Devices
Device Model
|
Network Element Type
|
Device
|
Interface
|
VLAN
|
Cat2948
|
Scheduling
Actions
|
Properties
|
Not available
|
Cat2980
|
Scheduling
Actions
|
Properties
|
Not available
|
Cat4000
|
Scheduling
Actions
|
Properties
|
Not available
|
Cat4500
|
Scheduling
Actions
|
Properties
|
Not available
|
Cat5000
|
Actions
|
Not available
|
Not available
|
Cat6000_NO_PFC
|
Scheduling
|
Properties
|
Not available
|
Cat6000_PFC1
|
Scheduling
DSCP Mappings
Actions
|
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat6000_PFC2
|
Scheduling
DSCP Mappings
Actions
|
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Cat6000_PFC3
|
Scheduling
DSCP Mappings
Actions
|
Properties
Actions
|
Actions
(VLAN scheduling is inherited from its ports.)
|
Table 6-3 Types of QoS Configurations on Layer 2 Switches Running IOS
Devices / NEs
|
Device
|
Interface
|
Cat2900
|
Not available
|
Actions
|
Cat2950
|
Scheduling
|
Properties
Actions
|
Cat2950_SI
|
Scheduling
|
Properties
Actions
|
Cat3500
|
Not available
|
Properties
Actions
|
Table 6-4 Types of QoS Configurations on Layer 3 Devices
Devices / NEs
|
Device
|
Interface
|
POI
|
Cat2948_L3
|
Scheduling
|
Scheduling
Actions
|
Not available
|
Cat4232_L3
|
Scheduling
|
Scheduling
Actions
|
Not available
|
Cat4908_L3
|
Scheduling
|
Scheduling
Actions
|
Not available
|
Cat8500
|
Not available
|
Not available
|
Scheduling
|
Configuring FRTS Policies
This section describes how to configure Frame Relay Traffic Shaping (FRTS) on a frame relay main interface, and how to configure FRTS for frame relay subinterfaces and DLCIs.
Configuring FRTS for Frame Relay Main Interfaces
To configure FRTS for frame relay main interfaces:
1. Use the Policy Definition wizard to create a new policy group with the following constraint definition:
•Select the device's Model and OS version.
•Network Element—Select Interface.
•Interface Type—Select Frame Relay.
•Interface Card—Select NA.
2. In the QoS Properties wizard, define the following:
•In the Congestion Management page, select a scheduling method.
•In the Shaping Settings page, enable FRTS, and configure FRTS parameters.
•Define any other desired property.
3. Use the Policy wizard to configure policies if required.
4. Assign frame relay main interfaces to the policy group.
Configuring FRTS for Frame Relay Subinterfaces or DLCIs
To configure FRTS for frame relay subinterfaces or DLCIs, you must create two policy groups:
•A policy group to enable FRTS on the frame relay main interface to which the subinterfaces or DLCIs belong.
•A policy group to configure FRTS for the subinterfaces or DLCIs.
To configure FRTS for frame relay subinterfaces or DLCIs:
1. Create a policy group for the frame relay main interface:
a. Use the Policy Definition wizard to create a new policy group as described in Step 1 in Configuring FRTS for Frame Relay Main Interfaces.
b. In the QoS Properties wizard, select the Enable FRTS in the Shaping Settings page. Do not set FRTS parameters.
c. Assign the main interface of the frame relay subinterfaces or DLCIs to this policy group.
2. Create a policy group for the frame relay subinterfaces or DLCIs:
a. Use the Policy Definition wizard to create a new policy group as described in Step 1 in Configuring FRTS for Frame Relay Main Interfaces. For DLCIs, select FR DLCI as the network element in the Constraints Definition page.
b. Define FRTS properties and other policies as described in steps 2 and 3 in Configuring FRTS for Frame Relay Main Interfaces.
c. Assign frame relay subinterfaces or DLCIs to the policy group.
Note•Frame relay main interfaces and subinterfaces can have different QoS capabilities, therefore do not assign main interfaces and subinterfaces to the same policy group. Create one policy group for the main interfaces and another policy group for the subinterfaces, as described above.
•If FRTS is configured for frame relay subinterfaces or DLCIs, but their parent interfaces are not defined with FRTS, the subinterface configuration will not be deployed. You can generate a FRTS Conflicts report to display these frame relay subinterfaces or DLCIs. See FRTS Conflicts - Subinterfaces Page, page D-616 and FRTS Conflicts - DLCIs Page, page D-617 for more information about FRTS Conflicts reports.
Related Topics
•Creating a Policy Group
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
Configuring VLAN Policies
To configure policies on a VLAN, you must create two policy groups:
•A policy group for the VLAN:
–Define the type of network element in the Device Constraints Definition page of the Policy Group Definition wizard as VLAN.
–Assign the VLAN to the policy group.
–Define policies for the VLAN.
•A policy group for the VLAN interfaces on which you want to configure the VLAN policies:
–In the QoS Properties wizard, define the QoS style in the Traffic Control Settings page as VLAN-based.
–Assign the required VLAN interfaces to the policy group.
–Do not define any policies in this policy group.
Note When configuring VLAN-based policies for devices with Native IOS, the switch port CLI command must be configured on the device.
Related Topics
•Creating a Policy Group
•Defining QoS Properties and Mappings
•Setting Network Element Assignments
