Table of Contents

Getting Started with QPM

This tutorial helps you learn how to use QoS Policy Manager (QPM) to create and distribute QoS policies and configurations. It comprises a series of lessons that step you through procedures for creating different types of policies and deploying them to the network.

The tutorial contains the following topics and lessons:

• Using Policy Manager
  
  
• Using Distribution Manager
  
  
• Understanding the Tutorial Example Network
  
  
• Lesson 1Creating a QoS Database
  
  
• Lesson 2Creating and Distributing a Simple Policy for Managing Web Traffic on One Router
  
  
• Lesson 3Coloring Enterprise Resource Planning (ERP) Traffic on a Group of Devices
  
  
• Lesson 4Limiting the Bandwidth Available to FTP Traffic on a Switch
  
  
• Lesson 5Updating the Database After Software Upgrades
  
  
• Lesson 6Using NBAR and Creating Multiple Action Policies
  
  
• Lesson 7Configuring Frame Relay Traffic Shaping
  
  
• Lesson 8Providing End-to-End QoS for VoIP over the Enterprise WAN
  
  

Using Policy Manager

Policy Manager enables you to create and edit QoS policies and configurations. The following topics provide you with the basics for using Policy Manager:

• Starting Policy Manager and Logging Into QPM
  
  
• Understanding the Main Policy Manager Window
  
  
• Cutting, Copying, and Pasting Policies
  
  
• Changing the Policy Manager Display
  
  
• Saving Your Work
  
  
• Exiting Policy Manager
  
  

---

Note   When working with QPM Policy Manager, you can click the Help button in any of the dialog boxes to access context-sensitive online help.

---

Starting Policy Manager and Logging Into QPM

Start Policy Manager to create, change, delete, and view your QoS configuration and policies.

Procedure

Step 1   Select Start>Programs>QoS Policy Manager>Policy Manager.

If you are not already logged in, QPM opens the Logon Information dialog box.

Step 2   Log into QPM. You must enter a QPM user name and password according to these requirements:

• Read-write access—If you want to be able to save your changes to the QoS database, you must use a user account defined in the QPM user group. Unless you changed the group during installation, the group is QPM_Users and is defined on the machine running the QoS Manager service. QPM creates a default user in this group: QPM_User with no password.
• Read-only access—If you only want to view the QoS database, you can use a user account defined in the QPM guest group. Unless you changed the group during installation, the group is QPM_Guests and is defined on the machine running the QoS Manager service.

If you enter a correct name and password, Policy Manager starts and automatically opens the last QoS database that was open.

Tips

• The domain for the QPM_User account is the name of the machine running the QoS Manager service.
  
  
• You cannot log into QPM unless you select a domain name. If the domain list is empty, you must first log into the Windows NT network before starting QPM.
  
  
• You can also start Policy Manager from Distribution Manager by selecting Tools>Policy Manager.
  
  

Understanding the Main Policy Manager Window

The main Policy Manager window (Figure 3-1) is divided into three panes.

• Tree View—The left pane. This pane displays a hierarchical view of the devices and device groups being managed, and their associated interfaces.
  
  
• List View—The upper right pane. This pane displays the policies defined for the interface, device, or device group selected in the tree view pane, if any.
  
  
• Properties Preview—The lower right pane. This pane displays the properties of a device, interface, or policy selected in the tree or list view panes. You can choose not to display this pane by selecting View>Properties Preview.
  
  

Tree View

The tree view pane (Figure 3-2) shows the devices and device groups being managed in QPM. The Devices directory contains a separate folder for each device. Most device folders contain a list of interfaces on which you define QoS policies. For some devices, you define policies directly on the device folder.

The Device Groups directory contains the device groups you have defined. Device groups are groups of interfaces that you intend to manage using identical policies. You must treat all interfaces in a device group identically.

The tree view pane is where you start when creating a policy. If the device is not yet defined in the QoS database, you must first define it and add its interfaces. You must select the device or interface on which you want to define a policy in the tree view before you can create (or change) the policy.

List View

The list view pane (Figure 3-3) shows the policies that are defined on the interface, device, or device group selected in the tree view.

If you select an interface that belongs to a device group, the list of policies includes those defined on the device group, as well as those defined directly on the interface. You cannot edit or change the order of group policies when viewing them from a member interface. Group policies are always given lower priority than individual interface policies.

The top bar of the list view includes the following items:

• Buttons for moving a policy up or down in the list. Policy placement can be important. When a packet enters the interface, the device software looks for the first policy match, and once it matches a packet to a policy, it does not consider any of the remaining policies (unless the matched policy explicitly indicates that other policies should be analyzed).
  
  
• The name of the folder that is selected in the tree view, that is, the item with which the displayed list of policies is associated.
  
  
• A filter for specifying which policies are displayed in the list. This enables you to choose to display only policies of a certain type, for example, only enabled policies. Filtering out policies does not remove these policies from the database. It only eliminates them from the list, making it easier for you to locate a policy statement if you have defined a large number of policies for an interface.
  
  

Each policy in the list is preceded by an icon that indicates the direction of the policy (inbound or outbound) and its status (enabled or disabled). Table 3-2 describes these icons.

Properties Preview

The properties preview pane displays the properties of the device, device group, interface, or policy selected in the tree or list view panes. This can help you determine if you have defined the properties and filter conditions correctly. You can choose not to display the properties preview pane by selecting View>Properties Preview. Repeat this action to redisplay the pane.

Cutting, Copying, and Pasting Policies

You can use the standard Windows cut, copy, and paste functions to manipulate policies in the QPM list view pane.

Procedure

Step 1   Select the policy you want to cut or copy, or the folder in the tree view in which you want to paste the policy.

Step 2   Use these commands from the Edit menu or from the right mouse button popup menu to cut, copy, or paste.

• Cut—Copies the selected policy to the Windows clipboard and removes it from the current folder.
• Copy—Copies the selected policy to the Windows clipboard without removing it from the current folder.
• Paste—Pastes the policy to the selected interface, device, or device group folder. If the selected folder does not support the policy, you will not be able to paste it.

Changing the Policy Manager Display

You can change the main Policy Manager window to display information according to your preferences. Table 3-3 lists the available commands for changing the main Policy Manager window.

Saving Your Work

You must periodically save your changes to the QoS database. However, saving your changes to the database does not apply those changes to the network devices. You must use Distribution Manager to deploy your new or changed policies to the devices.

Procedure

Step 1  
Click the Save button, or select File>Save.

• If the database already has a name, the database is saved.
• If the database does not have a name, QPM opens the Save Database dialog box. Enter a relevant name and description for the database and click OK.

If the QoS Manager service is not available when you try to save the database, the database is saved to your local disk. Check the machine that is running QoS Manager to ensure it is running properly and try saving the database again.

Tips

• You can change the name of the database by selecting File>Save As.
  
  

Exiting Policy Manager

From the Policy Manager interface, you can close Policy Manager only, or close both Policy Manager and Distribution Manager.

Procedure

Step 1   To close Policy Manager without closing Distribution Manager, select File>Close.

To close both Policy Manager and Distribution Manager, select File>Exit.

Using Distribution Manager

Distribution Manager enables you to deploy policies to network devices. The following topics provide you with the basics for using Distribution Manager:

• Starting Distribution Manager
  
  
• Understanding the Main Distribution Manager Window
  
  
• Changing the Distribution Manager Display
  
  
• Starting Policy Manager from Distribution Manager
  
  
• Exiting Distribution Manager
  
  

---

Note   When working with QPM Distribution Manager, you can click the Help button in any of the dialog boxes to access context-sensitive online help.

---

Starting Distribution Manager

Start Distribution Manager to distribute policies and QoS settings to network devices.

Procedure

Step 1  
Click the Distribution Manager button on the Policy Manager tool bar or select Tools>Distribution Manager in Policy Manager.

Distribution Manager starts.

Tips

• You can also start Distribution Manager by selecting Start>Programs>QoS Policy Manager>Distribution Manager. If you have not already logged into Policy Manager, you must log into Distribution Manager using a name defined in the Windows NT QPM user group (for viewing and deployment of jobs) or guest group (for viewing only).
  
  

Understanding the Main Distribution Manager Window

The main Distribution Manager window (Figure 3-4) is divided into three panes.

• All Jobs Tree View—The upper left pane displays all jobs that you have created from QoS databases.
  
  
• List View—The upper right pane shows the contents of the job selected in the tree view. If no job is selected, it shows the details of the jobs listed in the tree.
  
  
• Log—The lower pane shows logs for system, job, and device status.
  
  

All Jobs Tree View

The All Jobs Tree View pane (Figure 3-5) shows all the jobs that you have created from QoS databases. Each job is assigned a number, which is the name of the job.

The root of the tree shows the name of the machine that is running the QoS Manager service to which Distribution Manager is connected: localhost means that QoS Manager resides on the same machine as Distribution Manager.

When you select a job in the list, the contents of the job are displayed in the right-hand list view pane. When no job is selected, or when you select the root of the tree, the right-hand list view shows the details for all the jobs listed in the tree.

Related Topics

• Changing the Distribution Manager Display
  
  
• Options Dialog Box
  
  

List View

The list view pane shows the contents of the job selected in the All Jobs Tree View (Figure 3-6). If no job is selected in the tree, the list shows the details for all jobs listed in the tree (Figure 3-7).

Job summaries have the following details:

• Job Name—The name of the job, which is a serial number created by the system.
  
  
• Database Name—The name of the database from which this job was created.
  
  
• Database Creator—The user that last saved the current database.
  
  
• Job Handler—The user that last deployed the job.
  
  
• Total Devices—The number of devices contained in the job.
  
  
• Written Devices—The number of devices whose configurations were changed when the job was applied to the network.
  
  
• Date/Time—The date and time the job was created.
  
  
• Status—The status of the job. Possible job statuses are described in Table 8-1.
  
  

Job contents have the following details:

• Device—The IP address of a device defined in the job.
  
  
• Date/Time—The date and time the job was created.
  
  
• Status—The status of the device (see Table 8-1).
  
  

Log

The log pane (Figure 3-8) displays logs of event messages.

The pane has two tabs to display three types of logs:

• System Log tab—Shows the system log, which contains messages about general QPM system events, including the name of the user who last saved the database and who last deployed the job.
  
  
• Job or Device Log tab—Shows the job or device log, depending on what is selected in the tree or list view pane.
  
  
• • Job logs contain messages about the events for the selected job, and are only created if you apply the job to the network. The messages include the name of the user who last saved the database and who last deployed the job.
    
    
  • Device logs contain messages about the events for the selected device, and are only created when QPM starts configuring the device.
    
    

Changing the Distribution Manager Display

You can change the main Distribution Manager window to display information according to your preferences. Table 3-5 lists the available commands for changing the main Distribution Manager window.

Starting Policy Manager from Distribution Manager

If Policy Manager is not running, you can start it from Distribution Manager.

Procedure

Step 1  
Click the Policy Manager button, or select Tools>Policy Manager.

The Policy Manager application starts.

Exiting Distribution Manager

From the Distribution Manager interface, you can close Distribution Manager only, or close both Distribution Manager and Policy Manager.

Before You Begin

Check the Status column to make sure that all distribution activities are complete or have been stopped.

Procedure

Step 1   To close Distribution Manager without closing Policy Manager, select File>Close.

To close both Distribution Manager and Policy Manager, select File>Exit.

Understanding the Tutorial Example Network

This tutorial is based on an example enterprise network that consists of a campus site and several remote sites. Each tutorial lesson applies QPM techniques and principles to specific segments of this network. In each lesson, a diagram clearly illustrates the relevant network segments, the data path, and the QoS features or policies applied.

Note   This example enterprise network does not include the segments that are relevant for configuring QoS for Voice over IP (VoIP). A separate QoS database is provided for configuring QoS for VoIP. A full description of this type of configuration is provided in Lesson 8Providing End-to-End QoS for VoIP over the Enterprise WAN.

Campus Site

The campus site contains the following components:

• FTP/mail, web and application servers, which are the major servers used in the network.
  
  
• A Catalyst 6509 switch (referred to as switch S1), running CatOS version 5.5.
  
  
• Two Cisco 7200 routers (referred to as routers R1 and R4), running IOS version 12.0. Packets from the major servers pass through switch S1 to these routers, and then on to the WAN.
  
  

Remote Site (Finance and HR Users)

This remote site contains a Cisco 2500 router (referred to as router R2), running IOS version 12.0. In the scenario for this tutorial, this router connects the organization's Finance and HR users to the WAN. These users primarily require data from the application server and the FTP/Web server on the campus site. The primary path of data from these servers is from router R1 on the campus site to the remote router R2.

Remote Site (Sales Users)

This remote site contains a Cisco2500 router (referred to as router R3), running IOS version 12.0. This router connects the organization's Sales users to the WAN. These users primarily communicate with the application and web servers on the campus site. The primary path of data from these servers to the Sales users is through router R4 on the campus site to the remote router R3.

Lesson 1—Creating a QoS Database

In this lesson you will learn how to create a QoS database comprising the devices and their interfaces that will be used in Lessons 2-6 of this Tutorial. The devices you will use to create the database are based on the example enterprise network illustrated in Figure 3-9.

When creating a QoS database, you can:

• Add individual devices (routers and switches) and their interfaces to the QoS database. You must add a device to the database before you can configure the QoS settings for the device or its interfaces. When you add devices on your network, you can automatically detect the interfaces and view their properties. You can also manually add interfaces.
  
  
• Add a group of devices at one time to the QoS database by importing them from a device inventory created using CiscoWorks2000 Resource Manager Essentials. This speeds up the process of creating a new database, especially for networks with many devices.
  
  
• Upload existing device configurations. If you have previously defined QoS configurations on your devices, using the CLI, you can upload these configurations into the QoS database, when you add the devices to the database, and generate reports for them.
  
  

Before You Begin

If you want to create policies and deploy them using actual devices that exist in your network, you need to obtain the IP addresses of the appropriate devices. Otherwise, you can use the example IP addresses in this tutorial so that you can follow the lessons without affecting your network. See Sample Network Device Information.

In this lesson you will learn the following:

• Adding a Device to the QoS Database
  
  
• Adding a Device's Interfaces
  
  
• Importing Multiple Devices into the QoS Database
  
  
• Uploading Existing Device Configurations
  
  

Sample Network Device Information

Table 3-6 lists the technical details of the devices in the Tutorial example network that you need to know in order to create a QoS database and to follow lessons 2-6. Not all interfaces on the devices are listed.

Other interface and device addresses might be used in the lessons.

Adding a Device to the QoS Database

This topic describes how to add a device (router or switch) to the database. The procedure in this example describes how to add router R4 from the network configuration example. The procedure is identical for adding any other router or switch, except for the device details. Refer to Table 3-6 for the technical details of all the devices in the network configuration example. It is recommended that you perform the following procedure for all the devices in this network configuration example.

Before You Begin

The topic assumes that you are starting with an empty database.

Procedure

Step 1   Open the New Device dialog box by selecting Devices>Device>New in the Policy Manager.

Step 2   Enter device information in the New Device dialog box.

Step 3   Select/deselect the check boxes.

Step 4   Click OK.

QPM creates a folder for the device (in this example, router R4) in the tree view using the IP address of the device.

Adding a Device's Interfaces

This topic describes how to add router interfaces and switch ports and VLANs to the database. Router R4 is used as an example. The procedure differs depending on whether or not the device is online.

Note   If you are using devices that exist online in your network, you can automatically detect their interfaces. In this tutorial, the devices and their interfaces listed in Table 3-6 3-21 are offline, enabling you to manually add them to the database without affecting your network.

When you add a switch's ports to the database, the available interfaces will include the ports and any VLANs that are configured on the switch. A VLAN includes several of the switch's ports. In order to deploy a policy defined on a VLAN to all its associated ports, you must add each port to the database and define the QoS style as VLAN-based (as opposed to port-based). See Defining the QoS Style for a Switch's Ports, for further information.

Before You Begin

This topic assumes that you have added the device (online or offline) to the database. If you are working online, continue with Adding the Interfaces if the Device Is Online. If you are working offline, continue with Adding the Interfaces if the Device Is Offline.

Adding the Interfaces if the Device Is Online

This section describes how you can automatically detect the interfaces for a device that is online in your network, once the device has been added to the database.

Procedure

Step 1   Detect the available interfaces:

QPM queries the device, fills in the Device Model and Software Version fields, and obtains a list of the device's interfaces.

---

Note   If the software version running on the device is not supported, QPM maps to the most similar supported version. This feature is described in Lesson 5Updating the Database After Software Upgrades.

---

QPM opens the Detect Interfaces dialog box when it has a complete list of interfaces.

Step 2   Select the interfaces you want to manage:

The device's interfaces are included as members of the device folder in the tree view (see Figure 3-12).

---

Note   If you want to apply QoS on a switch's VLAN (as is the case for switch S1), make sure that the VLAN and all of its ports are in the selected interfaces list.

---

Adding the Interfaces if the Device Is Offline

If the device is offline, you need to add the interfaces manually. This section describes how to manually add the interfaces for router R4, once it has been added to the database. The procedure for adding the interfaces for any other device is similar, except for the device details. Refer to Table 3-6 for the interface details of all the devices in the network configuration example. It is recommended that you perform the following procedure for all the devices in the network configuration example.

Procedure

Step 1   Add a new interface:

Figure 3-12 shows the tree view that now includes router R4 with its interfaces.

Now, repeat the above procedure in order to add the other devices in the network example to the database.

---

Note   If you are adding the interfaces for switch S1, assume that VLAN20 includes three interfaces (Ethernet2/0, Ethernet2/1 and Ethernet2/2), and define these interfaces in the database, following the procedure above. Choose fictitious IP addresses for these interfaces.

---

Importing Multiple Devices into the QoS Database

This topic explains how you can add multiple devices at one time to the QoS database. Instead of adding each device individually, you can import a list of devices from a device inventory that was created using CiscoWorks2000 Resource Manager Essentials. If you have many devices to import, consider creating separate databases, each containing a different set of devices.

Before You Begin

It is assumed that you have previously exported a device inventory using CiscoWorks2000 Resource Manager Essentials.

Procedure

Step 1   From the Policy Manager, select Devices >Import.

QPM opens the Select RME File dialog box.

Step 2   Enter the full path and name of the inventory file, or click Browse and select it. Click OK when the correct file is entered.

QPM opens the Import Devices dialog box for the selected inventory file, and begins querying the devices in the inventory, adding them to the Known Devices list. The query can take a long time if there are many devices. If a device cannot be queried, either because it is unavailable, or the SNMP query failed, this is indicated, and you will not be able to import the device.

While QPM is querying the devices, you can click Stop to make QPM stop the query. If you stop the query, QPM only lets you select from the devices already queried.

---

Note   You can make other changes in Policy Manager while QPM queries the devices. When QPM is finished with the query, you are returned to the Import Devices dialog box to continue the import process.

---

When QPM has finished querying the devices, a system message appears, informing you that the device inventory has been processed, and that you should choose the devices to be imported into the Qos database.

Step 3   Select the devices you want to add to the QoS database in the Known Devices list and click >> to add them to the import list. You can select multiple devices using Ctrl+click or a range of devices using Shift+click.

If QPM could not query a device, do not add the device to the database until you can determine why the query failed. Common causes of query failure include incorrect Telnet or SNMP passwords, incorrect IP addresses, and unavailable devices.

When you are satisfied with the list of devices to import, click OK.

Step 4   QPM asks if you want to detect interfaces on the devices. The interface detection process might take several minutes depending on the number of devices, interfaces, and speed of the network connection.

Select one of the following:

• Yes—Detects the interfaces for the device at the top of the import devices list.
  
  
• Yes All—Detects the interfaces for all remaining devices to be imported.
  
  
• No—Does not detect the interfaces for the device at the top of the import devices list. The device is added to the database without interfaces.
  
  
• No All—Does not detect the interfaces for all remaining devices to be imported. The devices are added to the database without interfaces.
  
  
• Cancel—Cancels the import of the remaining devices. The devices whose interfaces have already been detected are added to the database, and you are returned to the Import Devices dialog box, where you can change the list of devices or click Cancel to cancel the import of the remaining devices.
  
  

---

Note   You can also upload the device configuration at this time by checking the Upload Device Configuration check box. See Uploading Existing Device Configurations for more information.

---

When QPM has finished detecting interfaces, QPM adds the devices and their interfaces to the tree view and closes the Import Devices dialog box.

Related Topics

• Viewing or Changing Device Properties, page 6-21
  
  
• Removing a Device, page 6-24
  
  
• Adding Device Interfaces, page 6-26
  
  
• Viewing a Device Configuration, page 6-25
  
  
• Import Device Dialog Box, page B-26
  
  

Uploading Existing Device Configurations

QPM enables you to upload existing QoS configurations on devices. This feature is useful if you have already configured QoS properties and policies on devices, using the CLI. Instead of redefining the QoS characteristics, you can use the upload feature to automatically update the QPM database with the QoS information when you add the device.

You can only upload a QoS configuration for a device that is online. For this lesson, use any online device in your network that has a QoS configuration (but hasn't yet been imported) and add it to the database. See Adding a Device to the QoS Database.

You can upload existing device configurations:

• In the New Device dialog box, when you add a new device to the network (see Adding a Device to the QoS Database).
  
  
• In the Device Properties dialog box, before you make a QoS configuration change (see Adding a Device's Interfaces).
  
  

---

Note   You can upload a device configuration one time only. The Upload Device Configuration check box is disabled after you make QoS configuration changes to the device.

---

• In the Detect Interfaces dialog box, if you are importing devices from an inventory file (see Importing Multiple Devices into the QoS Database).
  
  

Before You Begin

This topic assumes that you have added the device and detected its interfaces, but have not yet configured its QoS properties.

Procedure

Step 1   Right-click your online device in the tree view pane and select Device Properties.

QPM opens the Device Properties dialog box.

Step 2   Select the Upload Device Configuration check box and click OK.

The QoS configuration that is running on the device is translated to QoS properties and policies and is added to the policy database.

Step 3   After the upload is completed, you will be prompted to view an HTML report generated by QPM in your system browser. Click Yes if you want to view the upload report.

This report logs all the QoS configurations that were not successfully uploaded to the database. Upload failure may be caused by incomplete configurations that exist on the router, or unsupported options.

The report displays the following information for the device:

• The interface on the device.
  
  
• The QoS action that was applied.
  
  
• The error type - Unsupported or Incomplete.
  
  
• The upload error message.
  
  

See Device Upload Error Messages, for a complete list of error messages that you may see in an Upload Device Configuration Report.

Lesson 2—Creating and Distributing a Simple Policy for Managing Web Traffic on One Router

In this lesson, you will learn how to create and deploy a simple policy on a router. As an example, this lesson uses router R4, that you added to the QoS database in the previous lesson (Adding a Device to the QoS Database). The policy in this example sets the IP precedence for web traffic that goes through router R4. See Understanding the Tutorial Example Network, for a description of the example network used in this tutorial. The purpose of this policy is to color the web traffic for the Sales group, because the web server behind R4 hosts a significant application used by Sales, and Sales requires good response from this server.

In order to make a meaningful policy, you must not only color the traffic on the inbound interface to the router (interface Ethernet2/0, which connects the web server to R4), but you must choose a QoS property for the outbound interface Serial3/0 (Figure 3-17). You will implement weighted fair queuing (WFQ). This ensures that the colored traffic receives the appropriate percentage of overall bandwidth.

In this lesson you will learn the following:

• Configuring the QoS Property
  
  
• Creating a New Policy to Color Inbound Traffic
  
  
• Distributing Policies to the Network
  
  

Before You Begin

This lesson assumes you have already added router R4 to the QoS database.

Configuring the QoS Property

This topic describes how to configure the QoS property on the interfaces to determine which queueing method will be used. You will configure the QoS property on the Serial3/0 interface so that it uses weighted fair queuing (WFQ). You do not need to change the QoS property of the Ethernet2/0 interface because you are only creating a policy for inbound traffic on Ethernet2/0.

Procedure

Step 1   Right-click Router R4's Serial3/0 interface in the tree view (Figure 3-12) and select Interface Properties.

QPM opens the Properties of Interface dialog box.

Step 2   Select WFQ in the QoS Property field (Figure 3-18).

Step 3   Click OK.

Creating a New Policy to Color Inbound Traffic

This topic describes how to create a policy to color traffic on an inbound interface. The purpose of this policy is to give high priority to web traffic passing through router R4's Ethernet2/0 inbound interface.

Procedure

Step 1   Create the policy.

Step 2   Define the policy's filter.

Step 3   Define the policy's coloring action.

Step 4  
Save your definitions and policies to the database.

Distributing Policies to the Network

After you have saved your policies in the QoS database, they must be deployed to the devices in the network where they will be implemented.

Note   If you are working with the examples provided in the tutorial and the device is not in your network, you will not be able to deploy your policies.

Procedure

Step 1  
In the Policy Manager, click the Distribution Manager button, or select Tools>Distribution Manager, to start Distribution Manager.

Step 2   In Distribution Manager, select Devices>Create Job to create a distribution job from the Tutorial database.

QPM opens the Create Job dialog box.

Step 3   Select the Tutorial database and click OK.

QPM creates a distribution job based on the policy definitions in the selected database. The job consists of the commands required to reconfigure the devices to implement your policies. Only the changes made since you last distributed the database are included in the job.

Step 4   Select the job you just created in the tree view.

When you select the job, QPM displays the contents of the job in the list view. The list view shows the devices whose configurations will be changed by the job. If you double-click the device name in the list view, QPM displays the commands that will be sent to the device when you apply the job (the device must be available on the network).

Figure 3-22 shows the job selected in the Distribution Manager window.

Step 5  
Click the Apply Job button, or select Devices>Apply.

QPM starts applying the changes defined in the job to the network devices. You can view the job results in the logs displayed in the Log pane at the bottom of the window.

Related Topics

• Working with Devices
  
  
• Understanding Policies
  
  
• Understanding Policy Distribution
  
  

Lesson 3—Coloring Enterprise Resource Planning (ERP) Traffic on a Group of Devices

In this lesson, you will learn how to treat a set of device interfaces as a group, and create and deploy a simple coloring policy across the members of that group. The policy in this example will set the IP precedence for Enterprise Resource Planning (ERP) traffic that goes through routers R1 and R4 (see Figure 3-9 for the overall network diagram).

In this lesson you will learn the following:

• Creating Device Groups
  
  
• Creating a Policy on a Device Group
  
  

Before You Begin

If you want to create a policy and deploy it on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you can use the IP addresses in this lesson so that you can follow these steps without affecting your network.

This lesson assumes that you have added routers R1 and R4 to the QoS database, as described in Lesson 1—Adding a Device to the QoS Database.

Creating Device Groups

Device groups allow you to treat selected interfaces or subinterfaces as a single unit, so that you can easily apply common policies or QoS settings to the group.

This topic describes how to create two device groups, one combining the inbound interfaces of routers R1 and R4, and the other combining the outbound interfaces of the routers.

Procedure

Step 1   Create a device group for the Serial3/0 interfaces on routers R1 and R4, and set the QoS property for the device group to WFQ.

Step 2   Create a device group for the Ethernet2/0 interfaces on routers R1 and R4.

Figure 3-25 shows the tree view with the completed device group entries.

Creating a Policy on a Device Group

A policy that is created on a device group is applied to all the interfaces belonging to the group. This avoids the need to create individual policies for each interface.

In this lesson, you will create a policy on the EdgeGroupInbound group to color ERP traffic.

Step 1   Create the policy.

Step 2   Define the policy's filter.

Step 3   Define the policy's coloring action.

Step 4  
Click the Save button, or select File>Save, to save the policy in the database. Because you used a host name for the ERP server, QPM asks if you would like the host name resolved to its IP address. Policies can be distributed to the device only if the host names are converted to IP addresses. Click Yes to have QPM resolve the host name. (Click No if you are following along in this lesson without using actual host names that exist in your network.)

Step 5   Distribute the policy to the network, following the procedure described in Distributing Policies to the Network.

Related Topics

• Working with Device Groups
  
  

Lesson 4—Limiting the Bandwidth Available to FTP Traffic on a Switch

In this lesson, you will learn how to limit the bandwidth that is available to a specific application. The policy in this example will limit FTP traffic passing through switch S1 to a specified bandwidth (see Figure 3-9 for the overall network diagram). FTP traffic that exceeds this bandwidth will be discarded. The purpose of this policy is to prevent FTP traffic from flooding the network and thus reducing the performance of the more important applications on the network.

You will define an application service alias for FTP traffic from the central site, and use the alias to set the limit for FTP traffic to 1024 Kbps (Figure 3-26).

In order to create and deploy the policy in this lesson, you must have a switch configured with a VLAN in your network. If you have one, use its IP address for the example.

Otherwise, you can use the example IP addresses and values provided in this lesson, so that you can follow the steps without affecting your network.

Before You Begin

Since you will be defining a limiting policy on the S1 switch, you first need to add the switch and its interfaces to the database. This lesson assumes that you have already added Switch S1 and its interfaces to the QoS database (see Lesson 1—Adding a Device to the QoS Database), but that you still need to define the QoS style for the switch's ports. This lesson also assumes that you have completed all the steps in the previous lessons.

In this lesson you will learn the following:

• Defining the QoS Style for a Switch's Ports
  
  
• Creating an Application Service Alias
  
  
• Creating a Limiting Policy on the Switch
  
  
• Verifying Device Configuration and Distributing to the Network
  
  

Defining the QoS Style for a Switch's Ports

Switch S1 is a Catalyst 6000 switch running CatOS version 5.5. In this example, a VLAN has been configured on switch S1. The VLAN includes several of the switch's ports. The limiting policy will be defined on this VLAN, therefore, you do not have to define the policy on each port individually. However, in order to ensure that the policy is applied to all the ports that belong to the VLAN, you must add each port to the database and define the QoS style as VLAN-based (as opposed to port-based).

It is recommended that you create a device group of the switch's ports that are included in the VLAN and define the QoS style on the device group itself. This saves you having to define the QoS style on each port separately.

The following procedure describes how to create a device group for the VLAN's ports and define their QoS style as VLAN-based.

Before You Begin

This topic assumes that each of the switch's ports have been added to the database (see Adding a Device's Interfaces).

Procedure

Step 1   Create a device group for the three ports (Ethernet2/0, Ethernet2/1 and Ethernet2/2) in VLAN20 on switch S1.

Step 2   Select VLAN Based in the QoS Style field (Figure 3-28) to determine that QoS configurations will apply to the VLAN and not to the individual ports.

Step 3   Click OK in the Device Group dialog box.

QPM creates the device group with a VLAN-based QoS style and adds it to the DeviceGroups folder in the tree view.

Creating an Application Service Alias

An application service alias can be defined when you want to identify a particular type of network traffic source from a host or subnet. You can use application service aliases to simplify the writing of your policies, because you can write a policy for the application service instead of one for each host.

In this example, you will create an application service alias for FTP traffic. The filter in your limiting policy will be based on this application alias.

Procedure

Step 1   Create an application service alias for FTP traffic.

Creating a Limiting Policy on the Switch

This topic shows how to create a policy on VLAN20 on switch S1 to limit the bandwidth available to FTP traffic.

Procedure

Step 1   Create the policy.

Step 2   Define the policy's filter. The aim is to identify all FTP traffic coming from the Central Services FTP Server.

Step 3   Define the policy's limiting action, which limits the bandwidth available to the specified application.

Step 4  
Click the Save button, or select File>Save, to save the policy in the database.

Verifying Device Configuration and Distributing to the Network

QPM enables you to verify whether the configuration of the devices in your network is different to what was defined for the devices in your QPM database. You can use this feature to check if any changes have been made to any of your network devices.

After this validation process, you can distribute policies to the network as usual.

Procedure

Step 1   Create a job in Distribution Manager.

Step 2   Check the device configuration.

Step 3   Apply the job.

Related Topics

• Adding a Device to the QoS Database
  
  
• Adding a Device's Interfaces
  
  
• Working with Device Interfaces and VLANS
  
  
• Uploading Device QoS Configurations
  
  
• Working with Application Services Aliases
  
  
• Understanding Policies
  
  

Lesson 5—Updating the Database After Software Upgrades

In this lesson, you will learn how to update the QoS database to recognize that you have upgraded the software on a device.

QPM uses the device IOS version number to load device capabilities to the database. All sub-versions of a certain version are mapped to the major version, unless QPM explicitly supports the minor version. New minor versions are mapped to the last supported minor version. For example, version 12.2(1)T would be mapped to version 12.2, and version 12.2(4)T would be mapped to version 12.2(2)T. QPM provides you with the option of manually changing the mapped version number if you require the QoS features of a different version.

In most cases, your QoS configuration and policies remain unchanged after a software upgrade. However, in certain cases, QPM changes the implementation of policies to take advantage of the features of a new software release (without changing the meaning of your policies). Table 3-7 explains the changes that are made for some software upgrades.

Upgrading the device software does not affect any device groups to which the device's interfaces belong. You must recreate the device groups if you want them to be restricted to the updated software version.

In this lesson, you will learn the following:

• Updating the QoS Database with New Software Version Information.
  
  
• Recreating Device Groups for the New Software Version.
  
  

Before You Begin

This lesson assumes that you have completed the steps in the previous lessons.

Updating the QoS Database with New Software Version Information

For the purpose of this lesson, assume that you have upgraded the IOS software version on routers R1 and R4 from version 12.0 to version 12.1(6)E.

Procedure

Step 1   Start QPM and open the Tutorial database.

Step 2   Change the device properties for router R1:

QPM queries the router and updates the software version number and device model, and makes policy conversions if required.

(If you are not using a real device, instead of clicking Verify Device Info, select 12.1(6)E in the Mapped Software Version field.)

---

Note   The detected software version is displayed in the Software Version field. If this version is not supported, QPM maps to the most recent, most similar supported version, which is displayed in the Mapped Software Version field. You can manually select a different software version in this field if you require its specific capabilities.

---

Step 3   Use the same procedure to change the software version for router R4 (10.4.4.4) to 12.1(6)E.

Recreating Device Groups for the New Software Version

At this point, you have updated the software versions on the devices. However, this change has not affected the definitions of the EdgeGroupInbound and EdgeGroupOutbound device groups, even though these device groups contain only members from the R1 and R4 routers. To take advantage of IOS software version 12.1(6)E QoS features, you must recreate these device groups as IOS software version 12.1(6)E device groups.

To avoid having to recreate the existing policies in the device groups, you can copy them over to a new device group, then delete the old device group, and then rename the new device group.

Procedure

Step 1   Create a new device group with software version 12.1(6)E:

Step 2   Copy the ERPTraffic policy from the EdgeGroupInbound device group to the new device group:

Step 3   Remove the devices from the EdgeGroupInbound device group and delete the device group.

Step 4   Add devices to the new egi device group and rename the device group.

Step 5   Change the EdgeGroupOutbound device group to an IOS software version 12.1(6)E device group. Since there are no policies defined on this device group, you only need to remove the members from the device group, change the software version and then add the members back into the device group.

Step 6  
Click the Save button, or select File>Save, to save your changes.

Step 7   Distribute your policy to the network, following the procedure described in Distributing Policies to the Network.

Related Topics

• Working with Device Groups
  
  
• How Device Software Upgrades Affect Device Groups
  
  

Lesson 6—Using NBAR and Creating Multiple Action Policies

In this lesson you will learn how to create a multiple-action policy to police and color specific traffic generated from a network-based application, using Network Based Application Recognition (NBAR) to identify the application. Refer to Using Network Based Application Recognition (NBAR) with CBWFQ.

Note   IP CEF must be enabled on the device in order to use NBAR. At deployment, QPM checks if CEF is configured on the router for the relevant features. If not configured, QPM will issue a warning. See QoS Features That Require IP CEF or dCEF for more information.

The policy in this lesson will apply the following actions to MIME type web traffic, specifically JPEG files, passing from a specific host through router R4 and out to the WAN (see Figure 3-9 for the overall network diagram):

• Queuing—Ensures that the specified traffic receives a minimum percentage of the total bandwidth during times of congestion.
  
  
• Limiting—Discards traffic that exceeds a specific rate, ensuring that the traffic does not use more than its defined minimum bandwidth.
  
  
• Coloring—Gives high IP precedence to the specified web traffic.
  
  

QPM uses modular CLI to implement this policy. Modular CLI separates traffic into classes and defines properties for each class.

Note   The policy in this lesson can be created only if your IOS software version supports modular CLI and NBAR.

In order to enable the options that will allow you to define the example policy, you will choose Class Based QoS in the QoS Property field for the outbound (Serial3/0) interface on router R4.

In this lesson you will learn the following:

• Changing the QoS Property on an Interface
  
  
• Creating a Multiple-Action Policy with NBAR Filtering
  
  

Before You Begin

This lesson assumes that you have completed the steps in the previous lessons.

If you are using actual devices in your network, make sure that the IOS version is 12.1(6)E or above.

If you want to create a policy and deploy it on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you can use the IP addresses in this lesson so that you can follow these steps without affecting your network.

Changing the QoS Property on an Interface

The first step in this lesson is to define the QoS property on Serial3/0 on router R4 as Class Based QoS. This will enable you to use NBAR properties as a filter during policy definition.

Before you can do this, you need to remove the outbound interface (Serial3/0 on router R4 from the device group to which it belongs (EdgeGroupOutbound), so that you can change its QoS property.

Procedure

Step 1   Remove R4's S3/0 interface from the EdgeGroupOutbound device group.

Step 2   Change the QoS property on the outbound interface (Serial3/0 on router R4) to Class Based QoS.

Creating a Multiple-Action Policy with NBAR Filtering

QPM provides the capability to create multiple-action policies, if the IOS software version running on your device supports modular CLI. For this example, you will create a policy on the outbound interface (Serial3/0 on router R4) that performs three actions on the traffic that matches the filter (web traffic of MIME type from www.cisco.com):

• Queuing—creates a queue for the specified class of traffic, which is ensured a minimum percentage of the total bandwidth.
  
  
• Limiting—defines an upper limit for the bandwidth allocated to the traffic and lowers the precedence of traffic that exceeds this limit.
  
  
• Coloring—assigns high IP precedence to the specified traffic.
  
  

Procedure

Step 1   Create the policy.

Step 2   Define the policy's filter.

The NBAR Properties dialog box is displayed.

---

Note   The NBAR Properties dialog box displays a note reminding you to make sure that IP CEF is enabled on the device. If it is not configured, QPM will issue an error message on it.

---

Step 3   Define the policy's queuing action, which ensures that the specified traffic receives a minimum percentage of the total bandwidth during times of congestion.

Step 4   Define the policy's coloring action, which provides the specified traffic with high IP precedence.

Step 5   Define the policy's limiting action, which lowers the priority of the traffic if it exceeds a specific rate. This ensures that the specified traffic does not use more than its defined minimum bandwidth.

Step 6  
Click the Save button, or select File>Save, to save the policy in the database.

Step 7   Distribute your policy to the network, as described in Distributing Policies to the Network.

Lesson 7—Configuring Frame Relay Traffic Shaping

In this lesson, you will learn how to configure Frame Relay traffic shaping (FRTS) on Cisco routers. FRTS is frequently used to throttle traffic to the rate agreed upon with your WAN service provider, particularly if the destination link is running at a lower bandwidth than the source link.

For example, you might have a T1 line running at 1544 Kbps, but your service provider is committing to provide only 512 Kbps, and the destination of your traffic is a link running lower bandwidth than 1544 Kbps. By throttling the traffic rate at the source, you ensure that the traffic does not overwhelm the WAN link, resulting in dropped packets and increased delay. With FRTS, you can control the rate and smooth the traffic flow.

This example uses a different network setup than used in previous lessons. Figure 3-39 shows three routers connected over a Frame Relay cloud. All links are T1 Frame Relay lines. The Main router uses subinterfaces to enable routing between the two remote offices, Remote1 and Remote2. Most WAN traffic originates from the main office, so you will implement FRTS on the subinterfaces on the Main router. The service provider has committed to 512 Kbps for the Main-Remote1 link, and 256 Kbps for the Main-Remote2 link. There is no rate commitment for the interfaces on the remote links.

In this lesson, you will learn the following:

• Enabling FRTS on an Interface
  
  
• Configuring FRTS on a Subinterface or DLCI
  
  

Before You Begin

If you want to create a policy and deploy it on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you can use the IP addresses in this lesson so that you can follow these steps without affecting your network.

This lesson assumes that you have completed the steps in previous lessons. Although you will not use the same network setup, you should already be familiar with adding devices and interfaces to the QoS database.

Table 3-8 lists the device details for this example. Because Remote1 and Remote2 links do not have a committed information rate, you are not enabling FRTS or other QoS capabilities on these routers in this example. Therefore, you only need to add Main, its Serial3/0 interface, and its subinterfaces to the database.

Enabling FRTS on an Interface

You must first enable FRTS on an interface in order to configure FRTS on the interface's subinterfaces or DLCIs.

Procedure

Step 1   Add the Main router to the database, using 10.10.10.11 for the device name. See Lesson 1—Adding a Device to the QoS Database, for the steps for adding devices to the databases, if you are not familiar with the procedure.

Step 2   Enable FRTS on the Main router's Serial3/0 interface.

Configuring FRTS on a Subinterface or DLCI

You can choose to deploy FRTS on a subinterface or on a DLCI. This topic describes how to enable FRTS on the Main router's subinterfaces or DLCIs.

Procedure

Step 1   Right-click Serial3/0.1 in the 10.10.10.11 folder and select Interface Properties.

Step 2   Make the following selections:

• FIFO for QoS Property
• 512 for Rate
• Adaptive Shaping

---

Note   If you want to configure FRTS on the DLCI, check the Configure on DLCI check box—otherwise FRTS will be configured on the subinterface.

---

Figure 3-41 shows the completed interface properties. Click OK when finished.

Step 3   Use the same procedure to enable FRTS on the Serial3/0.2 subinterface, making the following interface selections:

• FIFO for QoS Property
• 256 for Rate
• Adaptive Shaping

---

Note   If you want to configure FRTS on the DLCI, check the Configure on DLCI check box—otherwise FRTS will be configured on the subinterface.

---

Step 4  
Click the Save button, or select File>Save, to save your changes.

Step 5   Distribute your settings to the network, as described in Distributing Policies to the Network.

Related Topics

• Frame Relay Traffic Shaping (FRTS)Controlling Traffic on Frame Relay Interfaces and Subinterfaces
  
  

Lesson 8—Providing End-to-End QoS for VoIP over the Enterprise WAN

Real-time Voice over IP (VoIP) traffic in a network is directly affected by packet loss, packet delay and delay variation. In an enterprise environment, network congestion can occur at any time in any portion of the network campus, branch office, or WAN. For successful deployment of IP telephony, you must ensure end-to-end network quality for voice traffic.

QPM provides templates for configuring QoS for IP telephony in a separate database (IP_TELEPHONY_TEMPLATE). These templates are predefined device groups that contain the QoS configurations and policies required at each relevant point in the network. To use the IP telephony templates, all you need to do is add your devices to the database, then add the device interfaces to the relevant device groups and deploy the database. For detailed information about QPM IP telephony templates, refer to "Configuring QoS for IP Telephony."

Related Topics

• Management of Voice and Other Real-Time Traffic
  
  
• Working with the QPM IP Telephony Templates
  
  

---

Note   This lesson uses a different network configuration example than in previous lessons, and a separate QoS database. The lesson describes the whole process of configuring QoS for VoIP traffic, from adding the devices to the IP Telephony QoS database through deployment to the network.

---

In this lesson, you will learn how to use IP Telephony templates to deploy QoS for VoIP over the Campus, WAN and Branch Office segments of a network, using the example network scenario illustrated in Figure 3-42.

This lesson includes the following topics:

• Network Example for Configuring QoS for VoIP
  
  
• Adding Devices to the IP Telephony Database
  
  
• Assigning Interfaces to the Device Groups
  
  
• Deploying the IP Telephony Database
  
  

Network Example for Configuring QoS for VoIP

Figure 3-42: Lesson 8—Configuring QoS for VoIP Traffic

Based on the network configuration example, the following sections describe:

• Configuring QoS for the Campus Site
  
  
• Configuring QoS for the WAN
  
  
• Configuring QoS for the Remote Branch
  
  

Configuring QoS for the Campus Site

The campus site includes a Cisco CallManager and IP Phone that are connected to a QoS-aware Catalyst 6000 access switch (S2). The IP Phone ports are configured to use an auxiliary voice VLAN (VLAN20) on S2. The Catalyst 6000 access switch is connected to a Catalyst 6000 distribution layer switch (S3). Voice data from the campus site enters the WAN from a Cisco 3600 router running IOS version 12.2.

In the campus site, you need to configure QoS at the following network points:

• The IP Phone connection to the access switch port (network point 1 in Figure 3-42).
  
  
• The CallManager connection to the access switch port (network point 2 in Figure 3-42).
  
  
• The uplink ports on the Catalyst 6000 access switch connection to the Catalyst 6000 distribution switch port (network point 3 in Figure 3-42).
  
  
• The downlink ports on the Catalyst 6000 distribution switch connection to the Catalyst 6000 access switch port (network point 4 in Figure 3-42
  
  
• The LAN connection from the Catalyst 6000 distribution switch (S3) to the WAN router (network point 5 in Figure 3-42).
  
  

Configuring QoS for the WAN

The following QoS features must be configured on the device interfaces in the WAN segment of the network (network points 6 in Figure 3-42):

• Frame Relay Traffic Shaping (FRTS)—Minimizes packet loss by throttling back packets as they are forwarded into the Frame Relay cloud, based on congestion indicators.
  
  
• Frame Relay Fragmentation (FRF.12)—Ensures that voice packets are not blocked behind large data packets (such as file transfers) by fragmenting these large packets and interleaving voice packets between the fragments.
  
  
• Low Latency Queuing (LLQ)—Allows delay-sensitive data such as voice to be de-queued and sent first (before packets in other queues are de-queued), giving delay-sensitive data preferential treatment over other traffic. The relatively small size of voice packets makes it possible to use a strict priority queue for voice without degrading network quality for the remaining traffic. It also uses CBWFQ to ensure bandwidth for VoIP control traffic. The traffic classification is set according to the DSCP value.
  
  
• Compressed RTP (cRTP)—Reduces unnecessary bandwidth consumption by compressing header size from 40 bytes to 5 bytes. The benefits of using cRTP for voice are apparent when considering that the payload for a VoIP packet is only 20 bytes.
  
  

Configuring QoS for the Remote Branch

The remote site includes several IP Phones on a LAN, connected via a Catalyst 3500 switch (S4) to a Cisco 3600 router (R6) in the WAN. QoS features must be configured on the IP Phones ports (network point 1) and on the branch office router interface to switch S4 (network point 7 in Figure 3-42).

Adding Devices to the IP Telephony Database

This topic describes how to add the devices in the example network (see Figure 3-42) to the IP telephony database. The procedure in this example describes how to add router R5 from the network example. The procedure is identical for adding any network device. Refer to Table 3-9 for the technical details of the devices in the network example. You should perform this procedure also for router R6 and switches S2, S3 and S4.

Note   You can also add multiple devices at one time to the IP telephony database. Instead of adding each device individually, you can import a list of devices from a device inventory that was created using CiscoWorks2000 Resource Manager Essentials. See Importing Multiple Devices into the QoS Database, for details.

Table 3-9 lists the technical details of the devices in the example network (see Figure 3-42) that you need to add to the IP Telephony database in order to follow this lesson.

Before You Begin

If you want to deploy QoS on a device that exists in your network, obtain the IP address of an appropriate device. Otherwise, you should use the IP addresses in this lesson so that you can follow these steps without affecting your network.

The IP_TELEPHONY_TEMPLATE database is read-only. In order to work with it, you must save it under a new name.

Procedure

Step 1  
Open and save the IP Telephony Database.

Step 2   Add a device to the database.

Step 3   Add the device's interfaces.

   a. If the device is online, QPM queries the device, fills in the Device Model and Software Version fields, and obtains a list of the device's interfaces.

---

Note   If the software version running on the device is not supported, QPM maps to the most similar supported version. This feature is described in Lesson 5Updating the Database After Software Upgrades.

---

QPM opens the Detect Interfaces dialog box when it has a complete list of interfaces.

• In the Detect Interfaces dialog box, ensure that the interfaces you want to manage are in the selected interfaces list, and move any you do not want to manage to the Available Interfaces list.
  
  

---

Note   If you want to apply QoS on switch S2's VLAN, make sure that the VLAN and all of its ports are in the selected interfaces list.

---

• Click OK when finished.
  
  

QPM adds the device's interfaces as members of the device folder in the tree view.

   b. If the device is offline:

• Right-click the device in the tree view and select New Interface.
  
  

QPM opens the New Interface dialog box.

• Enter the details for the Serial1/0 interface in the appropriate fields.
  
  

At minimum, you must enter the interface Name and Type. You can obtain the relevant information for this dialog box from Table 3-9. You do not need to select the QoS Property value.

---

Note   If you are entering details for a DLCI interface, a DLCI field becomes available once you enter the DLCI name. You should enter the appropriate DLCI number in this field (see Table 3-9).

---

Figure 3-45 shows the completed New Interface dialog box.

Step 4   Repeat steps 2 and 3 in order to add the interfaces for router R6, switch S2, switch S3 and switch S4 to the database.

Assigning Interfaces to the Device Groups

This topic describes how to assign the interfaces that need QoS configuration for voice, to the appropriate device groups in the IP Telephony database.

Note   Non QoS commands that are not supported by QPM, such as power settings on ports and VLAN configuration, are beyond the scope of this Tutorial lesson.

Based on the network example in Figure 3-42, assigning the interfaces to the Device Groups requires:

• Assigning the IP Phone Interfaces
  
  
• Assigning the CallManager Interfaces
  
  
• Assigning the Uplink Interfaces to the Distribution Switch
  
  
• Assigning the Downlink Interfaces to the Access Switch
  
  
• Assigning the LAN Interface to the WAN Router
  
  
• Assigning the WAN Interfaces
  
  
• Assigning the Remote Branch Interfaces
  
  

Before You Begin

It is assumed that you have added routers R5 and R6, and switches S2, S3 and S4 and their respective interfaces to the Tutorial_IP_TELEPHONY_TEMPLATE database (see Figure 3-42). See Adding Devices to the IP Telephony Database.

Assigning the IP Phone Interfaces

To configure QoS for the IP Phone connection to the Catalyst 6000 access switch, you need to configure QoS for the ports and also the VLAN. Two device groups are available in the Policy Manager for this—Acc6000=>IP-Phones and AccDist6K=>VoiceVLAN. The Acc6000=>IP-Phones device group configures the trust state of the IP Phone and switch interface. The AccDist6K=>VoiceVLAN device group configures an ACL to trust all CoS classification on Ethernet ports in the VLAN.

Configuring QoS Using the Acc6000=>IP-Phones Device Group

The Acc6000=>IP-Phones device group configures the following features on the IP telephone port for the Catalyst 6000 access switch (S2):

• Trust-ext untrusted—Extend the trust boundary of the switch to the IP Phone and set it to "untrusted", so that the PC connected to the access port of the IP Phone is not also classifying traffic. This requires re-classifying all traffic coming from the PC with CoS=0.
  
  
• Trust-cos—Trust layer 2 CoS bits from the IP Phone. This should be the default if trust-ext is used.
  
  
• VLAN-based QoS style—Use the coloring policies from the VLAN.
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc6000=>IP-Phones Device Group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the available interfaces for IP Phone QoS configuration.

Step 2   Select the Ethernet2/1 port interface you added for switch S2 and click >> to add it to the Group Members area. Click OK.

QPM displays the following message, warning you that you will override the member interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the Device Group.

The selected interface is added to the Acc6000=>IP-Phones device group.

Configuring QoS Using the AccDist6K=>VoiceVLAN Device Group

The AccDist6K=>VoiceVLAN device group configures the policies that should be applied to IP Phone interfaces that are configured to use VLAN-based QoS. This enables only the VLAN-based policies (not the individual port's policies) to be deployed to the ports on the VLAN.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the AccDist6K=>VoiceVLAN device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the VLAN interface you added for switch S2.

Step 2   Select the VLAN20 interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the VLAN interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The VLAN20 interface is added to the AccDist6K=>VoiceVLAN device group.

Assigning the CallManager Interfaces

The IP Phone communicates with the CallManager using the Skinny Station Protocol. For example, when an IP Phone goes "off hook", it consults the CallManager, which then instructs the phone to play the dial-tone. In order to mark the importance of this control and management traffic between the CallManager and the IP Phone, ACLs are used to classify traffic streams on the Catalyst 6000 access switch.

The Acc6000=>VoIPControl device group in the Policy Manager enables you to configure QoS for the CallManager connection to the Catalyst 6000 access switch port, as follows:

• Color all the control traffic port ranges
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc6000=>VoIPControl device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying one of the Ethernet port interfaces you added for switch S2. (The other Ethernet2/1 interface is already assigned to the IP Phone connection.)

Step 2   Select the Ethernet2/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet2/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The Ethernet2/0 interface is added to the Acc6000=>VoIPControl device group.

Assigning the Uplink Interfaces to the Distribution Switch

Once you have configured QoS on the IP Phone and CallManager interfaces, you must also configure the uplink interfaces to the Catalyst 6000 distribution switch (S3).

The Acc6000_GE=>Dist template enables you to configure the uplink ports on the Catalyst 6000 access switch to the distribution switch, as follows:

• Trust CoS from the distribution layer
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc6000_GE=>Dist device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the gigabitEthernet interface you added for switch S3.

Step 2   Select the Ethernet1/1 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet1/1 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The gigabitEthernet type interface, Ethernet1/1, is added to the Acc6000_GE=>Dist device group.

Assigning the Downlink Interfaces to the Access Switch

You must also configure the downlink interfaces from the Catalyst 6000 distribution switch (S3) to the Catalyst 6000 access switch (S2).

The Dist=>Acc6K-PFC template enables you to configure the downlink ports on the Catalyst 6000 distribution switch to the access switch, as follows:

• Trust CoS
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Dist=>Acc6K-PFC device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the gigabitEthernet interface you added for switch S2.

Step 2   Select the Ethernet1/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet1/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The gigabitEthernet type interface, Ethernet1/0, is added to the Dist=>Acc6K-PFC device group.

Assigning the LAN Interface to the WAN Router

The Dist=>RouterWAN device group in the Policy Manager enables you to configure QoS on the Catalyst 6000 distribution switch port to the WAN router (router R5 in the network example), as follows:

• Trust DSCP
  
  
• Port-based QoS style
  
  

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Dist=>RouterWAN device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Ethernet port interface you added for switch S3.

Step 2   Select the Ethernet2/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet2/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The Ethernet2/0 interface is added to the Dist=>RouterWAN device group.

Assigning the WAN Interfaces

In the Policy Manager, several device groups are available for configuring QoS on the Frame Relay WAN interfaces due to the different FRTS speeds.

For this example, you need to first configure the main Frame Relay interface using the WAN-FR-Interface device group and then configure the DLCI subinterface using the WAN-FR-512K-DLCI device group.

Configuring FRTS Using the WAN-FR-Interface Device Group

The WAN-FR-Interface device group enables you to configure FRTS on the main Frame Relay interfaces. This is a prerequisite for enabling FRTS on the DLCI subinterfaces.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the WAN-FR-Interface device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Serial interfaces you added for routers R5 and R6.

Step 2   Select each of the serial interfaces and click >> in turn to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the selected interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interfaces to the device group.

The 10.2.1.1\Serial3/0 and 10.1.1.1\Serial1/0 interfaces are added to the WAN-FR-Interface device group.

Configuring QoS Using the WAN-FR-512K-DLCI Device Group

The WAN-FR-512K-DLCI device group enables you to configure the QoS property, Class Based QoS, on the routers' DLCI subinterfaces. This QoS property includes CBWFQ and enables the configuration of the other QoS features for voice (see Configuring QoS for the WAN).

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the WAN-FR-512K-DLCI device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the DLCI subinterfaces you added for routers R5 and R6.

Step 2   Select each of the DLCIs and click >> in turn to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the selected interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the DLCI interfaces to the device group.

The 10.2.1.1\Serial3/0.1 and 10.1.1.1\Serial1/0.1 interfaces are added to the WAN-FR-512K-DLCI device group.

Assigning the Remote Branch Interfaces

In the remote branch of the network, you need to configure QoS on the IP Phones ports and the branch office router R6 interface to access switch S4. For this example, you should use the Acc3500=>IP-Phone device group to configure the IP Phones ports, and then the RouterWAN=>Non6KPFC device group to configure the branch office router interface to switch S4.

Configuring QoS on the IP Phone Ports to Switch S4

The Acc3500=>IP-Phones device group configures the trust state as Trust-ext Untrusted on the IP phone ports and Catalyst 3500 access switch (S4) interfaces.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the Acc3500=>IP-Phones device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Ethernet interfaces you added for switch S4.

Step 2   Select each interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message for each interface, warning you that you will override the interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interfaces to the device group.

The Ethernet interfaces are added to the Acc3500=>IP-Phones device group.

Configuring QoS on the Branch Office Router Interface to Switch S4

The RouterWAN=>Non6KPFC device group in the Policy Manager enables you to configure QoS on the interfaces of the branch office router R6 interface to access switch S4.

Procedure

Step 1   In the DeviceGroups folder of the Policy Manager tree view (Figure 3-43), right-click the RouterWAN=>Non6KPFC device group and select Add/Remove Members.

QPM opens the Add/Remove Members dialog box, displaying the Ethernet port interface you added for router R6.

Step 2   Select the Ethernet2/0 port interface and click >> to add it to the Group Members area. Click OK.

QPM displays a message, warning you that you will override the Ethernet2/0 interface's current QoS property with the group QoS property.

Step 3   Click Yes to continue to add the interface to the device group.

The Ethernet2/0 interface is added to the RouterWAN=>Non6KPFC device group.

Deploying the IP Telephony Database

In order to distribute the QoS policies you have configured in the network example to your network devices, you must deploy the IP Telephony database to the network. The Distribution Manager enables you to do this. Refer to Starting Distribution Manager, for a full description of how to deploy a database with configuration policies to network devices.

Note   You can preview the device (CLI) commands that the Distribution Manager will use to configure the devices, using the Devices>View Commands option in the Distribution Manager. See Viewing the Configuration Commands for a Device, for details.