-
User Guide for CiscoWorks QoS Policy Manager 4.0.3
-
Preface
-
Chapter 1 Introduction
-
Chapter 2 Planning for Quality of Service
-
Chapter 3 Getting Started
-
Chapter 4 Managing Devices
-
Chapter 5 Provisioning: Working with Policy Groups
-
Chapter 6 Provisioning: Configuring QoS for IP Telephony
-
Chapter 7 Provisioning: Working with Macros
-
Chapter 8 Provisioning: Working with Policies, Properties, and Traffic Rules
-
Chapter 9 Provisioning: Deploying QoS Policies
-
Chapter 10 Monitoring: Using QoS Analysis
-
Chapter 11 Using Administration Features
-
Chapter 12 Troubleshooting QPM
-
Appendix A Devices Tab Reference
-
Appendix B Provision Tab Reference: Macros and Policy Creation
-
Appendix C Provision Tab Reference: Policy Preview and Deployment
-
Appendix D Monitor Tab Reference
-
Appendix E Administration Tab Reference
-
Appendix F CLI Command Reference for QPM Actions
-
Index
-
Table Of Contents
Provisioning: Working with Macros
Understanding Policy Templates
Viewing Policy Template Information
Disconnecting Policies from Policy Templates
Disconnecting an Individual Policy from its Template
Disconnecting Several Policies from a Template
Working with NBAR Custom Mappings
Modifying NBAR Custom Mappings
Creating Time Ranges for Time-based ACL
Defining a Class Map Traffic Classifier
Defining QoS Class Map Traffic Actions
Enabling and Disabling Class Maps
Changing the Priority of Class Maps
Provisioning: Working with Macros
QPM provides you with Macros to define certain values and features that will be used while working with policies. The following topics describe the macros used in QPM:
•
Working with Policy Templates
•
Working with Aliases
Definitions of IP aliases, and application aliases, can be stored in QPM libraries, and used in policy definitions across all your policy groups. When you change the alias definition, all policies that reference the definition are affected.
When you deploy historical jobs with referenced alias definitions, QPM performs a validation check on the referenced definitions. See Chapter 9, "Provisioning: Deploying QoS Policies".
The following topics describe how to work with alias definitions:
Defining IP Aliases
An IP alias is an alias for a named group of IP addresses (including masks) or host names. It can be used for both source IP and destination IP conditions within a traffic classifier. IP aliases are stored in the IP Aliases library.
To define IP alias:
Step 1
The IP Aliases page appears, displaying IP alias definitions in the IP Alias library.
Step 2
Step 3
Step 4
a.
b.
To remove an IP address that you added, select the IP address in the list, and click Remove.
For more details, see IP Alias Editor Dialog Box, page B-2.
Step 5
The IP Alias page displays the new alias.
Related Topics
Defining Application Aliases
An application alias is an alias for a defined protocol and port (or group of ports). It can be used in a traffic classifier definition for source and destination application conditions. Application aliases are stored in the Application Aliases library.
To define application alias:
Step 1
The Application Aliases page appears displaying application alias definitions in the Applications library.
Step 2
The Application Alias dialog box opens.
Step 3
Step 4
For more details, see Application Alias Editor Dialog Box, page B-3.
Step 5
The Applications page reappears displaying the application alias.
Related Topics
Modifying Aliases
You can change IP aliases and application aliases. When you modify an alias, all policies that reference it, are modified.
To modify aliases:
Step 1
Step 2
Step 3
The Alias dialog box opens, displaying details for the alias.
Step 4
For more details, see:
•
•
Step 5
Related Topics
Deleting Aliases
You can delete aliases if they are not currently being used in policies.
To delete aliases:
Step 1
Step 2
Step 3
Step 4
Working with Policy Templates
Policy templates contain QoS properties and traffic rules, but do not contain network element assignments. Policy templates can be used to create policies in any policy group. You can create global policy templates and store them in the Policy Templates library.
The following topics describe how to work with policy group templates:
•
•
•
Understanding Policy Templates
Policy templates can be used to create and share policies across policy groups and device groups. A policy template contains a set of QoS properties and QoS traffic rules for specified device constraints. It does not include any device assignments. Policy templates are stored in the Policy Templates library.
You can create policies by copying policy templates, or by attaching the policy template to the policy. When a policy template is attached to policies, any change in the policy template will affect the attached policies. You can disconnect policies from their attached policy template at any time.
QPM generates voice policy templates, which are used to create voice policies for IP telephony QoS configuration. You can edit the voice policy templates created by QPM.
Related Topics
•
•
•
Creating a Policy Template
Create a policy template when you want to share policies across policy groups or device groups.
You create a new policy template in the same way as you create a new policy using the Policy Definition wizard. You can create a new template by copying another template or a policy.
To create a policy template:
Step 1
Step 2
Step 3
Related Topics
•
Viewing Policy Template Information
You can view information about the QoS properties and traffic rules for a specific policy template. You can then modify the policy template as required.
You can also view the policies that are attached to a policy template, and you can then disconnect a policy from its template.
To view a policy template information:
Step 1
The Templates page appears displaying the global policy templates.
Step 2
•
The General page appears, displaying general definitions for the selected policy template.
•
The QoS Properties page appears, displaying the QoS properties and mappings for the selected policy template.
•
The In Policies page appears, displaying the inbound traffic rules for the selected policy template.
•
The Out Traffic Rules page appears, displaying the outbound traffic rules for the selected policy template.
After you have opened a policy template information page, the TOC changes to the Template TOC.
Step 3
In addition to the pages referred to in the previous step, you can also open the Device Constraints page, which displays device constraint definitions for the selected policy template.
You can modify policy template details from these information pages.
Step 4
The Attached Policies page appears, displaying the list of attached policies.
You can disconnect a policy from its template in this page.
Related Topics
•
Modifying a Policy Template
Modify a policy template when you want to modify:
•
•
–
–
•
•
Note
This topic describes how to change a policy template's general definitions, and device constraint definitions.
To modify a policy template:
Step 1
The Templates page appears displaying the global policy templates.
Step 2
a.
•
•
The Policy Definition wizard opens, displaying the General Definition page.
b.
To add, edit, or remove device constraint definitions, open the Device Constraints page in the Policy Definition wizard in one of the following ways:
•
•
The Device Constraints page appears. Click Edit. The Policy Definition wizard opens, displaying the Device Constraint Definition page.
Modify device constraint definitions as required:
•
–
The Device Definitions page appears.
–
Note
–
The Device Constraints page reappears displaying the modified device constraint.
•
Note
•
–
The Device Definitions page appears.
–
Note
–
The Device Constraints page reappears displaying the new device constraint.
•
–
–
Note
–
–
The Device Constraints page reappears displaying the new device constraint.
Step 3
Related Topics
•
•
Disconnecting Policies from Policy Templates
You can disconnect an individual policy from its template, and you can disconnect several policies from a policy template.
The following topics describe how to disconnect policies from templates:
•
•
Disconnecting an Individual Policy from its Template
This topic describes how to disconnect an individual policy from its policy template.
To disconnect an individual policy fron its template:
Step 1
The Policy Table page appears displaying the policies for the current policy group.
Step 2
The General page appears for the selected policy. The TOC changes to the Policy TOC.
Step 3
Related Topics
•
Disconnecting Several Policies from a Template
This topic describes how to disconnect one or more policies from the Policy Templates page.
To disconnect a number of policies from the template:
Step 1
The Templates page appears displaying the global policy templates.
Step 2
The Attached Policies page appears, displaying the list of attached policies.
Step 3
Related Topics
•
Deleting Policy Templates
You can delete policy templates that are not attached to any policies.
To delete policy templates:
Step 1
The Templates page appears.
Step 2
Step 3
Related Topics
•
Working with NBAR Custom Mappings
Network-Based Application Recognition (NBAR) is a classification engine that recognizes and classifies a wide variety of protocols and applications.
When NBAR recognizes and classifies a protocol or application, the network can be configured to apply the appropriate quality of service (QoS) for that application or traffic with that protocol
NBAR supports the use of custom protocols to identify custom applications. Custom protocols support static port-based protocols and applications that NBAR does not currently support. With NBAR supporting the use of custom protocols, NBAR can map static TCP and UDP port numbers to the custom protocols.
The following are the features related to custom protocols with NBAR support:
•
•
•
•
Examples of the QoS features that can be applied to the network traffic (using the MQC) after NBAR has recognized and classified the application or protocol include the following:
•
•
•
•
•
NBAR Custom Mappings are used while defining the traffic classifier properties for In/Out Traffic Rules of a policy. They can also be used while defining the traffic classifier properties for Class Maps under a Policy Map.
Related Topics
•
•
•
Creating NBAR Custom Mappings
To create an NBAR Custom Mapping in QPM:
Step 1
The NBAR Custom Mappings page opens.
Step 2
The NBAR Custom Mapping Editor dialog box opens.
Step 3
Step 4
Related Topics
•
•
•
Modifying NBAR Custom Mappings
You can modify the properties of the NBAR Custom Mappings you already created.
To modify NBAR Custom Mappings:
Step 1
The NBAR Custom Mapping Editor dialog box opens.
Step 2
You cannot modify the name of an NBAR Custom Mapping you already created. Therefore the Name field in the dialog box is not editable.
Related Topics
•
•
•
Deleting NBAR Custom Mappings
You can delete the NBAR Custom Mappings that you do not want to use while defining the traffic classifier properties for Traffic Rules or Class Maps.
Note
To delete the NBAR Custom Mappings:
Step 1
Step 2
The selected NBAR mappings will be deleted.
Related Topics
•
Working with Time-Based ACL
QPM provides you with time based ACL that allows access control based on time, for the configured policies. You create a time range that defines specific times of the day and week in order to implement time-based ACLs.
The time range is identified by a name and then referenced by a function. Therefore, the time restrictions are imposed on the function itself.
Time-based ACLs provide enhanced control over permitting or denying the access to resources for a user. They also enhance policy-based routing (PBR) and queuing functions. For example, when the provider's access rates vary by time of day, it is possible to automatically and cost effectively reroute traffic. Service providers can dynamically change a committed access rate (CAR) configuration to support the QoS service level agreements (SLAs) that are negotiated for certain times of day.
To configure time-based QoS service policies, QPM uses time-based ACLs as the match-on criteria for a class of traffic. You can create both absolute and periodic time ranges. These time ranges are later referenced by the In/Out Traffic Rules of a policy.
Related Topics
•
Creating Time Ranges for Time-based ACL
To create time ranges for defining time-based ACLs in QPM:
Step 1
The Time Based ACL page opens.
Step 2
The Time Based ACL dialog box opens.
Step 3
The time range relies on the system's software clock. For the time range feature to work the way you intend, you need a reliable clock source. Cisco Systems recommends that you use Network Time Protocol (NTP) to synchronize the system's software clock.
Related Topics
•
Working with Policy Maps
QPM provides you with Policy Maps that are based on the hierarchical QoS feature. Policy Maps enable the creation of nested policies, so that you can create multiple levels of policies and attach the same to child policies, which in turn can be attached to the interface.
This feature of QPM helps the users who want to segregate traffic based on flow source or destination, and apply different policing or shaping rules to each class of traffic.
The Policy Map helps you to configure a traffic policy and associate the traffic policy with Class Maps, which contain one or more QoS features. You later attach this Policy Map to an In Traffic Rule or Out Traffic Rule of another policy, using the Service Policy feature.
Related Topics
Creating Policy Maps
To create Policy Maps in QPM:
Step 1
The Policy Maps page opens.
Step 2
The Policy Map Definition page opens.
Step 3
Step 4
The Class Definitions for the Policy Map - new Policy Map page opens, where new Policy Map is the name of the policy map you just created. You can create Class Maps for the Policy map, in this page.
Related Topics:
Creating Class Maps
After you have created a Policy Map by entering the name and description, you should create Class Maps for the Policy Map. The Class Maps contain traffic classifiers and traffic actions, similar to Traffic Rules.
To create Class Maps:
Step 1
The Class Map Definition Wizard opens, displaying the first page - General.
Step 2
•
•
•
•
Related Topics
•
•
Defining a Class Map Traffic Classifier
Define a traffic classifier to specify the traffic to which the Class Map should be applied. A traffic classifier can contain multiple traffic classifier rules. Each traffic classifier rule is a set of traffic classifier conditions—to satisfy the traffic classifier rule, a packet must satisfy all conditions of the traffic classifier rule.
To match the traffic classifier, a packet must satisfy any one of the traffic classifier rules.
The available traffic classifier elements change according to the policy's device constraints and congestion management properties. Typically, you can identify the traffic by any of the following characteristics:
•
•
•
In addition, you might be able to classify traffic using:
•
When an application is recognized and classified by NBAR, a network can invoke services for that specific application.
•
•
•
•
•
•
•
You can also define a class default traffic classifier for unclassified traffic that does not match any other traffic classifier condition.
If you want to monitor a Class Map, do not define more than 12 match statements in the Class Map traffic classifier.
The Class Map Definition Wizard guides you through the process of defining traffic classifier conditions and rules for your Class Map.
To define a Class Map traffic classifier:
Step 1
•
The Class Map wizard opens, displaying the Class Map Wizard - General page. Click Next.
•
Step 2
The traffic classifier name helps you identify the defined traffic classifier in the CLI translation.
Step 3
•
•
Step 4
a.
The Rule Setting page appears, displaying the conditions you can define for each traffic classifier rule.
b.
A dialog box opens.
c.
See the following topics for information about these dialog boxes:
•
•
•
•
•
•
Note
d.
The Rule Setting table reappears.
e.
f.
Step 5
Step 6
The Rule Setting page appears.
Step 7
Step 8
Step 9
•
•
Related Topics
•
Defining QoS Class Map Traffic Actions
The Class Map Traffic Actions step of the Class Map Definition wizard includes several substeps to define the actions to be applied to traffic that matches the traffic classifier definition:
•
•
•
•
•
•
•
•
Cisco Express Forwarding (CEF) must be enabled on a device if you want to deploy NBAR or class-based QoS policies. On VIP platforms, distributed CEF (dCEF) must be enabled.
The global CLI command to enable CEF or dCEF is:
ip cef [distributed] switchThe following procedure describes all the available actions in the Class Map Defenition Wizard - Actions step.
To define QoS Class Map Actions:
Step 1
•
a.
b.
The Class Map Definition Wizard opens, displaying the General page.
c.
•
The Class Map Defenition Wizard - Traffic Actions page for Marking appears.
Step 2
See the following topics for information about these dialog boxes:
•
•
•
•
•
•
•
•
Step 3
Related Topics
•
Viewing the Class Map Summary
After you have finished defining your Class Map, review the Class Map definitions in the Summary page. You can go back and revise definitions before completing the Class Map Definition wizard.
To view the Class Map Summary:
Step 1
Step 2
Step 3
Step 4
Related Topics
•
•
Modifying a Class Map
You can modify a Class Map (in a Policy Map) by changing its name, traffic classifier, or actions. When you redeploy the traffic rules that contains this Policy Map, the modified Class Map replaces the old Class Map on the policy's assigned network elements.
To modify a Class Map:
Step 1
Step 2
•
•
Step 3
Related Topics
Deleting Class Maps
When you no longer want to use a Class Map, you can delete it from the Policy Map. When you redeploy the traffic rules (in a policy) that contains this Policy Map, the deleted Class Map is removed from the policy's assigned network elements.
Before You Begin
If you are not sure whether you will need a Class Map, consider disabling it instead of deleting it. See Enabling and Disabling Class Maps for information on disabling a Class Map.
To delete Class Maps:
Step 1
Step 2
Related Topics
•
Enabling and Disabling Class Maps
When you create a Class Map, it is enabled by default, so that when you deploy to the devices, the Class Map is distributed and takes effect. However, you can disable a Class Map, so that it exists in the policy, but is not deployed to the network. This allows you to define Class Maps before you want to make them effective, or temporarily remove a Class Map from the network without erasing it completely. You can also enable Class Maps that have been disabled.
To enable or disable Class Maps:
Step 1
Step 2
Step 3
Related Topics
Changing the Priority of Class Maps
The device examines QoS Class Maps in order until a match is found for the packet. Even if a packet satisfies more than one Class Map, it will be treated as satisfying only the first Class Map that the device encounters, unless you define your Class Map to include the Continue setting, in which case a subsequent match will be sought.
Class Maps on an interface are examined top-down according to the QPM display. Therefore the Class Maps in a policy should appear in order of importance, from top to bottom, to ensure that Class Maps get the priority you require. If you are creating complex Class Map structures that include Continue settings (so that you can set multiple policies on a given packet), ensure that the statements with the Continue setting come before the subsequent Class Map statement you want applied.
Initially, Class Maps are listed in the order in which they are defined. You can change the order of Class Maps in the list.
To change the priority of Class Maps:
Step 1
Step 2
The Reorder dialog box opens.
Step 3
Related Topics
•
Modifying a Policy Map
You can modify a Policy Map by changing its Class Maps and the associated traffic classifiers and traffic actions.
To modify a Policy Map:
Step 1
The Policy Map Definition page opens.
Note
Step 2
The Class Definitions for the Policy Map - Policy Map name page opens.
Step 3
Related Topics
Deleting Policy Maps
You can delete the Policy Maps that you do not want to use in any nested policies.
Note
To delete Policy Maps:
Step 1
Step 2
The Policy Maps along with the attached Class Maps will be deleted.
Related Topics
