Cisco APIC QoS

Table 1. New Features and Changed Behavior in Cisco APIC
Cisco APIC Release Version	Feature	Description	What Changed
Release 3.1(2m)	QoS for L3Outs	In this release, QoS policy enforcement on L3Out ingress traffic is enhanced.	QoS for L3Outs
Release 2.2(1n)	Translating QoS Ingress Markings to Egress Markings	Added additional information	Translating QoS CoS Using the REST API
Release 2.1(1h)	Translating QoS Ingress Markings to Egress Markings	In this release, you can enable the ACI Fabric to classify the traffic for devices that classify the traffic based only on the CoS value.	Translating QoS Ingress Markings to Egress Markings
Release 2.0(2f)	Multipod QoS	Support for Preserving CoS and DSCP settings was added for multipod topologies.	Multipod QoS

QoS for L3Outs

To configure QoS policies for an L3Out, use the following guidelines:

To configure the QoS policy to be enforced on the border leaf where the L3Out is located, the VRF instance must be in egress mode (Policy Control Enforcement Direction must be "Egress").
To enable the QoS policy to be enforced, the VRF Policy Control Enforcement Preference must be "Enforced."

When configuring the contract governing communication between the L3Out and other EPGs, include the QoS class or target DSCP in the contract or subject.

Note

Only configure a QoS class or target DSCP in the contract, not in the external EPG (l3extInstP).

When creating a contract subject, you must choose a QoS priority level. You cannot choose Unspecified.

Note

With the exception of Custom QoS Policies as a custom QoS Policy will set the DSCP/CoS value even if the QoS Class is set to Unspecified.

Configuring QoS for L3Outs Using the GUI

QoS for an L3Out is configured as part of the L3Out configuration.

Procedure

Step 1

Configure the VRF instance for the tenant consuming the L3Out to support QoS to be enforced on the border leaf switch that is used by the L3Out.

On the menu bar, choose Tenants > tenant-name.
In the Navigation pane, expand Networking, right-click VRFs, and choose Create VRF.
Enter the name of the VRF.
In the Policy Control Enforcement Preference field, choose Enforced.
In the Policy Control Enforcement Direction choose Egress
Complete the VRF configuration according to the requirements for the L3Out.

Step 2

When configuring filters for contracts to enable communication between the EPGs consuming the L3Out, include a QoS class or target DSCP to enforce the QoS priority in traffic ingressing through the L3Out.

On the Navigation pane, under the tenant that that will consume the L3Out, expand Contracts, right-click Filters and choose Create Filter.
In the Name field, enter a filter name.
In the Entries field, click + to add a filter entry.
Add the Entry details, click Update and Submit.
Expand the previously created filter and click on a filter entry.
Set the Match DSCP field to the desired DSCP level for the entry, for example, EF.

Step 3

Add a contract.

Under Contracts, right-click Standard and choose Create Contract.
Enter the name of the contract.
In the QoS Class field, choose the QoS priority for the traffic governed by this contract. Alternatively, you can choose a Target DSCP value.
Click the + icon on Subjects to add a subject to the contract.
Enter a name for the subject.
In the QoS Priority field, choose the desired priority level. You cannot choose Unspecified.
Under Filter Chain, click the + icon on Filters and choose the filter you previously created, from the drop down list.
Click Update.
On the Create Contract Subject dialog box, click OK.

Configuring QoS for L3Outs Using the NX-OS Style CLI

QoS for L3Out is configured as part of the L3Out configuration.

Procedure

Step 1

When configuring the tenant and VRF, to support QoS priority enforcement on the L3Out, configure the VRF for egress mode and enable policy enforcement, using the following commands:

Example:

apic1# configure
apic1(config)# tenant t1
apic1(config-tenant)# vrf context v1
apic1(config-tenant-vrf)# contract enforce egress
apic1(config-tenant-vrf)# exit
apic1(congig-tenant)# exit
apic1(config)#

Step 2

When creating filters (access-list), include the match dscp command, in this example with target DSCP level EF. When configuring contracts, include the QoS class, for example, level1, for traffic ingressing on the L3Out. Alternatively, it could define a target DSCP value. QoS policies are supported on either the contract or the subject.

Example:

apic1(config)# tenant t1
apic1(config-tenant)# access-list http-filter
apic1(config-tenant-acl)# match ip
apic1(config-tenant-acl)# match tcp dest 80
apic1(config-tenant-acl)# match dscp EF
apic1(config-tenant-acl)# exit
apic1(config-tenant)# contract httpCtrct
apic1(config-tenant-contract)# scope vrf
apic1(config-tenant-contract)# qos-class level1
apic1(config-tenant-contract)# subject http-subject
apic1(config-tenant-contract-subj)# access-group http-filter both 
apic1(config-tenant-contract-subj)# exit
apic1(config-tenant-contract)# exit
apic1(config-tenant)# exit
apic1(config)#

Configuring QoS for L3Outs Using the REST API

QoS for L3Out is configured as part of the L3Out configuration.

Procedure

Step 1

When configuring the tenant, VRF, and bridge domain, configure the VRF for egress mode (pcEnfDir="egress") with policy enforcement enabled (pcEnfPref="enforced"). Send a post with XML similar to the following example:

Example:

<fvTenant  name="t1">
      <fvCtx name="v1" pcEnfPref="enforced" pcEnfDir="egress"/>
        <fvBD name="bd1">
            <fvRsCtx tnFvCtxName="v1"/>
            <fvSubnet ip="44.44.44.1/24" scope="public"/>
            <fvRsBDToOut tnL3extOutName="l3out1"/>
        </fvBD>"/>
</fvTenant>

Step 2

When creating the filters and contracts to enable the EPGs participating in the L3Out to communicate, configure the QoS priority.

The contract in this example includes the QoS priority, level1, for traffic ingressing on the L3Out. Alternatively, it could define a target DSCP value. QoS policies are supported on either the contract or the subject.

The filter also has the matchDscp="EF" criteria, so that traffic with this specific TAG received by the L3out processes through the queue specified in the contract subject.

Example:

<vzFilter name="http-filter">
     <vzEntry  name="http-e" etherT="ip" prot="tcp" matchDscp="EF"/>
</vzFilter>
<vzBrCP name="httpCtrct" prio="level1" scope="context">
     <vzSubj name="subj1">
          <vzRsSubjFiltAtt tnVzFilterName="http-filter"/>
     </vzSubj>
</vzBrCP>

Configuring a Custom QoS Policy

You can configure a custom QoS policy.

Procedure

Step 1

On the menu bar, choose Tenants > tenant-name.

Step 2

In the Navigation pane, expand Application Profiles > Application Profile-name, right-click Application Profile-name, and choose Create Application EPG.

Step 3

In the Create Application EPG dialog box, choose Create Custom QOS Policy from the Custom QoS drop-down list. The Create Custom QOS Policy dialog box appears.

Step 4

Complete the following fields:

Name	Description
Name field	The name of the QoS policy.
Description field	The description of the QoS policy.

Step 5

In the DSCP to priority map section, click + to add a differentiated services code point (DSCP) to the prority map.

Step 6

Complete the following fields:

Name	Description
Name field	The name of the DSCP.
Priority drop-down list	Choose the priority of the DSCP.
DSCP Range From drop-down list	Choose the starting point of the DSCP range.
DSCP Range To drop-down list	Choose the ending point of the DSCP range.
DSCP Target drop-down list	Choose the desired DSCP value.

Step 7

In the Dot1P Classifiers section, click + to add a dot1p classifier.

Step 8

Complete the following fields:

Name	Description
Name field	The name of the DSCP.
Priority drop-down list	Choose the priority of the DSCP.
DSCP Range From drop-down list	Choose the starting point of the DSCP range.
DSCP Range To drop-down list	Choose the ending point of the DSCP range.
DSCP Target drop-down list	Choose the desired DSCP value.

Step 9

Click SUBMIT. The Create Custom QOS Policy dialog box closes and the custom QoS policy is created.

Preserving 802.1P Class of Service Settings

APIC enables preserving 802.1P class of service (CoS) settings within the fabric. Enable the fabric global QoS policy dot1p-preserve option to guarantee that the CoS value in packets which enter and transit the ACI fabric is preserved.

802.1P CoS preservation is supported in single pod and multipod topologies.

In multipod topologies, CoS Preservation can be used where you want to preserve the QoS priority settings of 802.1P traffic entering POD 1 and egressing out of POD 2, but you are not concerned with preserving the CoS/DSCP settings in interpod network (IPN) traffic between the pods. To preserve CoS/DSCP settings when multipod traffic is transitting an IPN, use a DSCP policy. For more information, see Preserving QoS Priority Settings in a Multipod Fabric.

Observe the following 801.1P CoS preservation guidelines and limitations:

The current release can only preserve the 802.1P value within a VLAN header. The DEI bit is not preserved.
For VXLAN encapsulated packets, the current release will not preserve the 802.1P CoS value contained in the outer header.

802.1P is not preserved when the following configuration options are enabled:

Multipod QoS (using a DSCP policy) is enabled.
Contracts are configured that include QoS.
Dynamic packet prioritization is enabled.
The outgoing interface is on a FEX.
Preserving QoS CoS priority settings is not supported when traffic is flowing from an EPG with isolation enforced to an EPG without isolation enforced.

A DSCP QoS policy is configured on a VLAN EPG and the packet has an IP header. DSCP marking can be set at the filter level on the following with the precedence order from the innermost to the outermost:

Contract
Subject
In Term
Out Term

Note

When specifying vzAny for a contract, external EPG DSCP values are not honored because vzAny is a collection of all EPGs in a VRF, and EPG specific configuration cannot be applied. If EPG specific target DSCP values are required, then the external EPG should not use vzAny.

Preserving QoS CoS Settings Using the GUI

To ensure that QoS priority settings are handled the same for traffic entering and transiting a single-pod fabric, or for traffic entering one pod and egressing another in a multi-pod fabric, you can enable CoS preservation using the GUI.

Note

Enabling CoS preservation applies a default mapping of the CoS priorities to DSCP levels to the various traffic types.

Procedure

Step 1	From the menu bar, navigate to Fabric > External Access Policies.
Step 2	In the left-hand navigation pane, select Policies > Global > QOS Class.
Step 3	In the Global - QOS Class main window pane, check the Preserve COS: Dot1p Preserve checkbox.
Step 4	Click Submit.

Preserving QoS CoS Settings Using the NX-OS Style CLI

To ensure that QoS priority settings are handled the same for traffic entering and transiting a single-pod fabric, or for traffic entering one pod and egressing another in a multi-pod fabric, you can enable CoS preservation using the NS-OS style CLI.

Note

Enabling CoS preservation applies a default mapping of the CoS priorities to DSCP levels to the various traffic types.

Procedure

Step 1	Enters APIC configuration mode. Example: `apic1# configure`
Step 2	Enables CoS preservation. Example: `apic1(config)# qos preserve cos`

Preserving QoS CoS Settings Using the REST API

To ensure that QoS priority settings are handled the same for traffic entering and transiting a single-pod fabric, or for traffic entering one pod and egressing another in a multi-pod fabric, you can enable CoS preservation using the REST API.

Note

Enabling CoS preservation applies a default mapping of the CoS priorities to DSCP levels to the various traffic types.

Procedure

You can use the following example to enable CoS preservation.

POST https://<apic-ip>/api/node/mo/uni/infra/qosinst-default.xml

Example:

<imdata totalCount="1">
    <qosInstPol ownerTag="" ownerKey="" name="default"
                dn="uni/infra/qosinst-default" descr="" ctrl="dot1p-preserve"/>
</imdata>

To disable CoS preservation, you can use the same POST message but with the ctrl field set to empty:

Example:

<imdata totalCount="1">
    <qosInstPol ownerTag="" ownerKey="" name="default"
                dn="uni/infra/qosinst-default" descr="" ctrl=""/>
</imdata>

Preserving QoS Priority Settings in a Multipod Fabric

This topic describes how to guarantee QoS priority settings in a multipod topology, where devices in the interpod network are not under APIC management, and may modify 802.1p settings in traffic transiting their network.

Note

You can alternatively use CoS Preservation where you want to preserve the QoS priority settings of 802.1p traffic entering POD 1 and egressing out of POD 2, but you are not concerned with preserving the CoS/DSCP settings in interpod network (IPN) traffic between the pods. For more information, see Preserving 802.1P Class of Service Settings.

As illustrated in this figure, traffic between pods in a multipod topology passes through an IPN, which may not be under APIC management. When an 802.1p frame is sent from a spine or leaf switch in POD 1, the devices in the IPN may not preserve the CoS setting in 802.1p frames. In this situation, when the frame reaches a POD 2 spine or leaf switch, it has the CoS level assigned by the IPN device, instead of the level assigned at the source in POD 1. Use a DSCP policy to ensure that the QoS priority levels are preserved in this case.

Configure a DSCP policy to preserve the QoS priority settings in a multipod topology, where there is a need to do deterministic mapping from CoS to DSCP levels for different traffic types, and you want to prevent the devices in the IPN from changing the configured levels. With a DSCP policy enabled, APIC converts the CoS level to a DSCP level, according to the mapping you configure. When a frame is sent from POD 1 (with the PCP level mapped to a DSCP level), when it reaches POD 2, the mapped DSCP level is then mapped back to the original PCP CoS level.

DSCP Settings

Note

For traffic passing through the IPN, do not map any DSCP value to COS6 (except traceroute traffic).

DSCP or TOS Level	Description
AF11	Assured Forwarding Class 1, low probability of dropping
AF12	Assured Forwarding Class 1, medium probability of dropping
AF13	Assured Forwarding Class 1, high probability of dropping
AF21	Assured Forwarding Class 2, low probability of dropping
AF22	Assured Forwarding Class 2, medium probability of dropping
AF23	Assured Forwarding Class 2, high probability of dropping
AF31	Assured Forwarding Class 3, low probability of dropping
AF32	Assured Forwarding Class 3, medium probability of dropping
AF33	Assured Forwarding Class 3, high probability of dropping
AF41	Assured Forwarding Class 4, low probability of dropping
AF42	Assured Forwarding Class 4, medium probability of dropping
AF43	Assured Forwarding Class 4, high probability of dropping
CS0	TOS Class Selector value 0 (the default)
CS1	TOS Class Selector value 1 (typically used for streaming traffic)
CS2	TOS Class Selector value 2 (typically used for OAM traffic such as SNMP, SSH, and Syslog)
CS3	TOS Class Selector value 3 (typically used for signalling traffic)
CS4	TOS Class Selector value 4 (typically used for Policy Plane traffic and to priority queue)
CS5	TOS Class Selector value 5 (typically used for broadcast video traffic)
CS6	TOS Class Selector value 6 (typically used for Network control traffic)
CS7	TOS Class Selector value 7
Expedited Forwarding	EF is dedicated to low-loss, low-latency traffic
Voice Admit	Similar to EF, but also admitted through CAC

Creating a DSCP Policy Using the GUI

Create a DSCP policy to enable guaranteeing QoS priority settings in a multipod topology and configure DSCP mappings for various traffic streams in the fabric. The mappings must be unique within the policy.

Procedure

Step 1	On the menubar, click TENANTS > infra.
Step 2	In the Navigation pane, expand Protocol Policies > DSCP class-cos translation policy for L3 traffic.
Step 3	In the Properties panel, click Enabled to enable the DSCP policy.
Step 4	Map each traffic stream to one of the available levels. They must all be unique.
Step 5	Click Submit.

Creating a DSCP Policy Using the NX-OS Style CLI

Create a DSCP map (known as a DSCP policy in the APIC GUI) to guarantee QoS priority settings in a multipod topology. The mappings must be unique within the policy.

Configure a DSCP map with custom mappings for traffic streams with the following steps:

Procedure

Step 1

Enters global configuration mode.

Example:

apic1# configure

Step 2

Enters tenant configuration mode for the infra tenant.

Example:

apic1(config)# tenant infra

Step 3

Configures the DSCP map.

Example:

apic1(config-tenant)# qos dscp-map default

Step 4

Sets the custom DSCP mappings, similar to the following example. The mappings must all be unique within a DSCP map.

Note

For traffic passing through the IPN, do not map any DSCP value to COS6 (except traceroute traffic).

Example:

apic1(config-qos-cmap# set dscp-code control CS3
apic1(config-qos-cmap# set dscp-code span CS5
apic1(config-qos-cmap# set dscp-code level1 CS0
apic1(config-qos-cmap# set dscp-code level2 CS1
apic1(config-qos-cmap# set dscp-code level3 CS2
apic1(config-qos-cmap# set dscp-code policy CS4
apic1(config-qos-cmap# set dscp-code traceroute CS6

Step 5

Enables the DSCP map.

Example:

apic1(config-qos-cmap)# no shutdown

Creating a DSCP Policy Using the REST API

Procedure

Step 1

Configure and enable a DSCP policy with a post, such as the following:

POST https://192.0.20.123/api/node/mo/uni/tn-infra/dscptranspol-default.xml

Example:

<imdata totalCount="1">
    <qosDscpTransPol traceroute="AF43" span="AF42" policy="AF22" ownerTag=""
                     ownerKey="" name="default" level3="AF13" level2="AF12"
                     level1="AF11" dn="uni/tn-infra/dscptranspol-default"
                     descr="" control="AF21" adminSt="enabled"/>
</imdata>

Step 2

Disable the DSCP policy with a post such as the following:

POST https://192.0.20.123/api/node/mo/uni/tn-infra/dscptranspol-default.xml

Example:

<imdata totalCount="1">
    <qosDscpTransPol traceroute="AF43" span="AF42" policy="AF22" ownerTag=""
                     ownerKey="" name="default" level3="AF13" level2="AF12"
                     level1="AF11" dn="uni/tn-infra/dscptranspol-default"
                     descr="" control="AF21" adminSt="disabled"/>
</imdata>

Translating QoS Ingress Markings to Egress Markings

APIC enables translating the 802.1P CoS field (Class of Service) based on the ingress DSCP value. 802.1P CoS translation is supported only if DSCP is present in the IP packet and dot1P is present in the Ethernet frames.

This functionality enables the ACI Fabric to classify the traffic for devices that classify the traffic based only on the CoS value. It allows mapping the dot1P CoS value based on the ingress dot1P value. It is mainly applicable for Layer 2 packets, which do not have an IP header.

Observe the following 802.1P CoS translation guidelines and limitations:

Enable the fabric global QoS policy dot1p-preserve option.
802.1P CoS translation is not supported on external L3 interfaces.
802.1P CoS translation is supported only if the egress frame is 802.1Q encapsulated.

802.1P CoS translation is not supported when the following configuration options are enabled:

Contracts are configured that include QoS.
The outgoing interface is on a FEX.
Multipod QoS using a DSCP policy is enabled.
Dynamic packet prioritization is enabled.
If an EPG is configured with intra-EPG endpoint isolation enforced.
If an EPG is configured with allow-microsegmentation enabled.

Translating QoS CoS Settings Using the GUI

Create a custom QoS policy and then associate the policy with an EPG.

Before you begin

Create the tenant, application, and EPGs that will consume the custom QoS policy.

Procedure

Step 1	On the menu bar, click Tenant > Tenant Name > Networking > Protocol Policies > Custom QoS.
Step 2	From the Actions drop-down list, choose Create Custom QoS Policy.
Step 3	In the Create Custom QoS Policy window, specify the Target CoS in the DSCP to priority map field. This setting allows you to map ingress DSCP value to egress CoS value.
Step 4	In the Create Custom QoS Policy window, specify the Target CoS in the Dot1P Classifiers field. This setting allows you to translate ingress CoS value to egress CoS value.
Step 5	Click Submit.
Step 6	On the menu bar, click Tenant > Tenant Name > Application Policies > Application Policy Name > Application EPGs > Application EPG Name.
Step 7	In the EPG panel, select the custom QoS policy you created in step 3.
Step 8	Click Submit.

Translating QoS CoS Settings Using the NX-OS CLI

Create a custom QoS policy and then associate the policy with an EPG using the following commands:

Before you begin

Create the tenant, application, and EPGs that will consume the custom QoS policy.

Procedure

Command or Action Purpose

Step 1

configure

Example:

apic1#configure

Enters global configuration mode.

Note

Enter the commands listed in steps 1-5 to create a custom QoS policy.

Step 2

tenant tenant-name

Example:

apic1(config)#tenant t001

Enters tenant configuration mode for the tenant.

Step 3

policy-map type qos QoS-policy-name

Example:

apic1(config-tenant)#policy-map type qos baz

Creates QoS policy.

Step 4

match dscp AF23 AF31 set-cos 6

Example:

apic1(config-tenant-pmap-qos)#match dscp AF23 AF31 set-cos set-cos 6

Sets DCSP value and target QoS value.

Step 5

exit

Example:

apic1(config-tenant-pmap-qos)#exit

Returns to the tenant configuration mode.

Step 6

application app-name

Example:

apic1(config-tenant)#application ap2

Creates an application profile.

Note

Enter the commands listed in steps 6-9 to associate the custom QoS policy with an EPG.

Step 7

epg epg-name

Example:

apic1(config-tenant-app)# epg ep2

Creates an EPG in the application profile.

Step 8

service-policy policy-name

Example:

apic1(config-tenant-app-epg)#service-policy baz

Associates the EPG to the policy.

Step 9

exit

Example:

apic1(config-tenant-app-epg)#exit

Returns to the tenant configuration mode.

Step 10

external-l2 epg epg-name

Example:

apic1(config-tenant)#external-l2 epg myout:12

Creates an external layer 2 EPG.

Note

Enter the commands listed in steps 10-12- to associate the custom QoS policy with an external L2 EPG.

Step 11

service-policy policy-name

Example:

apic1(config-tenant-12ext-epg)#service-policy baz

Associates the EPG to the policy.

Step 12

exit

Returns to the tenant configuration mode.

Translating QoS Ingress Markings to Egress Markings Using the REST API

Create a custom QoS policy and then associate the policy with an EPG.

Before you begin

Create the tenant, application, and EPGs that will consume the custom QoS policy. The example creates the vrfQos001 custom QoS policy and associates it with the ep2 EPG, that will consume it.

Procedure

Step 1

Create a custom QoS policy by sending a post with XML such as the following example:

Example:

<qosCustomPol name="vrfQos001" dn="uni/tn-t001/qoscustom-vrfQos001">
    <qosDscpClass to="AF31" targetCos="6" target="unspecified"
                  prio="unspecified" from="AF23"/>
    <qosDot1PClass to="1" targetCos="6" target="unspecified"
                   prio="unspecified" from="0"/>
</qosCustomPol>

Step 2

Associate the policy with an EPG that will consume it by sending a post with XML such as the following example:

Example:

<fvAEPg prio="unspecified" prefGrMemb="exclude" pcEnfPref="unenforced"
        name="ep2" matchT="AtleastOne" isAttrBasedEPg="no" fwdCtrl=""
        dn="uni/tn-t001/ap-ap2/epg-ep2">
    <fvRsDomAtt tDn="uni/vmmp-VMware/dom-vs1" resImedcy="lazy" 
                primaryEncap="unknown" netflowPref="disabled"
                instrImedcy="lazy" encapMode="auto" encap="unknown"
                delimiter="" classPref="encap"/>
    <fvRsCustQosPol tnQosCustomPolName="vrfQos001"/>
    <fvRsBd tnFvBDName="default"/>
</fvAEPg>

Configuring QoS for Multipod

Use this procedure to configure QoS on a multipod setup.

Before you begin

You must have configured Multipod.

Procedure

Step 1

Preserve QoS CoS settings to ensure QoS priority settings are handled the same, in APIC traffic through the fabric.

On the menu bar, click Fabric > Access Policies.
In the Policies pane, expand Global Polices and click QOS Class Policies.

In the Global Policies - QOS Class Policies panel, click the Preserve COS Dot1p Preserve check box.

Note

By configuring Multipod QoS along with DPP, 802.1p is preserved.

Click Submit.

Step 2

Match the QoS Class Policy-Level 1, QoS Class Policy-Level 2, and QoS Class Policy-Level 3 according to the policy determined in the IP network (IPN to IPN).

On the menu bar, click Fabric > Access Policies.
In the Policies pane, click Global Policies > QOS Class Policies > Level 1.
In the QOS Class Policy - Level1 panel, update the Scheduling Algorithm and Bandwidth Allocated (in%) drop-down list.
Click Submit.
Repeat the steps for QoS Class Policy-Level 2 and QoS Class Policy-Level 3.

Step 3

Create a DSCP policy to enable guaranteeing QoS priority settings in a multipod topology and configure DSCP mappings for various traffic streams in the fabric.

On the menubar, click TENANTS > infra.
In the Navigation pane, expand Protocol Policies > DSCP class-cos translation policy for L3 traffic.
In the Properties panel, click Enabled to enable the DSCP policy.

Map each traffic stream to one of the available levels. They must all be unique.

Note

The traffic in the IP network (from IPN to IPN) is treated as priority traffic.

Click Submit.

Example:

Sample example of DSCP mappings

User Level 1 traffic is mapped to Expedited Forwarding, since it carries voice and real time traffic.
User Level 2 traffic is mapped to CS3, as it is often used for traffic marked for precedence 3 treatment.
User Level 3 traffic is mapped to CS0, as it is the default traffic.
Control Plane Traffic is mapped with CS7 and to priority queue.
Policy Plane Traffic is mapped with CS4 and to priority queue.
Span Traffic is mapped with CS1, as it is traditionally treated as background or scavenger class traffic.
Traceroute Traffic is mapped with CS5.

Note

For traffic passing through the IPN, do not map any DSCP value to COS6 (except traceroute traffic).

Step 4

Create class maps to match the markings configured on the APIC.

Example:

class-map type qos match-all UserLevel1
  match dscp 46
class-map type qos match-all UserLevel2
  match dscp 24
class-map type qos match-all UserLevel3
  match dscp 0
class-map type qos match-all SpanTraffic
  match dscp 8
class-map type qos match-all iTraceroute
  match dscp 40
class-map type qos match-all CONTROL-TRAFFIC
  match dscp 48,56

Step 5

Create a policy map to label the ingress Control Plane and Policy Plane traffic with a QoS group.

Example:

policy-map type qos ACI-CLASSIFICATION
  class CONTROL-TRAFFIC
    set qos-group 7
  class UserLevel1
    set qos-group 6
  class UserLevel2
    set qos-group 3
  class UserLevel3
    set qos-group 0
  class SpanTraffic
    set qos-group 1
  class iTraceroute
    set qos-group 5

Step 6

Configure priority queue for the QoS group.

Example:

policy-map type queuing IPN-8q-out-policy
  class type queuing c-out-8q-q7
    priority level 1
  class type queuing c-out-8q-q6
    priority level 2
  class type queuing c-out-8q-q5
    bandwidth remaining percent 0
  class type queuing c-out-8q-q4
    bandwidth remaining percent 0
  class type queuing c-out-8q-q3
    bandwidth remaining percent 40
  class type queuing c-out-8q-q2
    bandwidth remaining percent 0
  class type queuing c-out-8q-q1
    bandwidth remaining percent 1
  class type queuing c-out-8q-q-default
    bandwidth remaining percent 58

Step 7

Apply the policy map to system level QoS.

Example:

system qos
  service-policy type queuing output IPN-8q-out-policy

Step 8

Associate the interfaces connected to the spine switch with the service policy.

Example:

interface Ethernet1/49.4
    description POD2-Spine-401 e1/5
  mtu 9150
  encapsulation dot1q 4
  vrf member IPNACISJC
  service-policy type qos input ACI-CLASSIFICATION
  ip address 10.149.195.106/30
  ip ospf network point-to-point
  ip router ospf IPNACISJC area 0.0.0.0
  ip pim sparse-mode
  ip dhcp relay address 10.0.0.1 
  ip dhcp relay address 10.0.0.2 
  ip dhcp relay address 10.0.0.3 
  no shutdown

interface Ethernet1/50.4
  description POD2-Spine-402 e1/5
  mtu 9150
  encapsulation dot1q 4
  vrf member IPNACISJC
  service-policy type qos input ACI-CLASSIFICATION
  ip address 10.149.195.110/30
  ip ospf network point-to-point
  ip router ospf IPNACISJC area 0.0.0.0
  ip pim sparse-mode
  ip dhcp relay address 10.0.0.1 
  ip dhcp relay address 10.0.0.2 
  ip dhcp relay address 10.0.0.3 
  no shutdown

Step 9

Verify the ingress interface on IPN.

Example:

IPNPOD2# show policy-map interface ethernet 1/50.4 input

Global statistics status :   enabled

Ethernet1/50.4

  Service-policy (qos) input:   ACI-CLASSIFICATION 
    SNMP Policy Index:  285215377

    Class-map (qos):   CONTROL-TRAFFIC (match-all)

     Slot 1
        1434 packets 
     Aggregate forwarded :
        1434 packets 
      Match: dscp 48,56
      set qos-group 7

    Class-map (qos):   UserLevel1 (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 46
      set qos-group 6

    Class-map (qos):   UserLevel2 (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 24
      set qos-group 3

    Class-map (qos):   UserLevel3 (match-all)

     Slot 1
        25 packets 
     Aggregate forwarded :
        25 packets 
      Match: dscp 0
      set qos-group 0

    Class-map (qos):   SpanTraffic (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 8
      set qos-group 1

    Class-map (qos):   iTraceroute (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 40
      set qos-group 5
 
 
IPNPOD2# show policy-map interface ethernet 1/49.4 input
Global statistics status :   enabled

Ethernet1/49.4

  Global statistics status :   enabled

Ethernet1/49.4

  Service-policy (qos) input:   ACI-CLASSIFICATION 
    SNMP Policy Index:  285215373

    Class-map (qos):   CONTROL-TRAFFIC (match-all)

     Slot 1
        5149 packets 
     Aggregate forwarded :
        5149 packets 
      Match: dscp 48,56
      set qos-group 7

    Class-map (qos):   UserLevel1 (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 46
      set qos-group 6

    Class-map (qos):   UserLevel2 (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 24
      set qos-group 3

    Class-map (qos):   UserLevel3 (match-all)

     Slot 1
        960 packets 
     Aggregate forwarded :
        960 packets 
      Match: dscp 0
      set qos-group 0

    Class-map (qos):   SpanTraffic (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 8
      set qos-group 1

    Class-map (qos):   iTraceroute (match-all)
     Aggregate forwarded :
        0 packets 
      Match: dscp 40
      set qos-group 5

Step 10

Verify the egress interface on IPN.

Example:

IPNPOD1# show queuing interface e 1/3 | b "GROUP 7"

slot  1
=======


Egress Queuing for Ethernet1/3 [System]
------------------------------------------------------------------------------
QoS-Group# Bandwidth% PrioLevel                Shape                   QLimit
                                   Min          Max        Units   
------------------------------------------------------------------------------
      7             -         1           -            -     -            9(D)
      6             -         2           -            -     -            9(D)
      5             0         -           -            -     -            9(D)
      4             0         -           -            -     -            9(D)
      3            20         -           -            -     -            9(D)
      2             0         -           -            -     -            9(D)
      1             1         -           -            -     -            9(D)
      0            59         -           -            -     -            9(D)
+-------------------------------------------------------------+
|                              QOS GROUP 0                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |          125631|              70|
|                   Tx Byts |        42902871|            8836|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 1                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 2                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 3                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 4                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 5                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 6                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |          645609|             217|
|                   Tx Byts |       115551882|           25606|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 7                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |           23428|               9|
|                   Tx Byts |         4132411|            1062|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                      CONTROL QOS GROUP                      |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |            6311|               0|
|                   Tx Byts |          809755|               0|
|            Tail Drop Pkts |               0|               0|
|            Tail Drop Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                         SPAN QOS GROUP                      |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
|            Tail Drop Pkts |               0|               0|
|            Tail Drop Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+


Ingress Queuing for Ethernet1/3
-----------------------------------------------------
QoS-Group#                 Pause                     
           Buff Size       Pause Th      Resume Th   
-----------------------------------------------------
      7              -            -            - 
      6              -            -            - 
      5              -            -            - 
      4              -            -            - 
      3              -            -            - 
      2              -            -            - 
      1              -            -            - 
      0              -            -            - 


Per Port Ingress Statistics
--------------------------------------------------------
     Hi Priority Drop Pkts                           0
    Low Priority Drop Pkts                           0
Ingress Overflow Drop Pkts                           0



PFC Statistics
------------------------------------------------------------------------------
TxPPP:                    0,   RxPPP:                    0
------------------------------------------------------------------------------
PFC_COS QOS_Group   TxPause             TxCount   RxPause             RxCount
      0         0  Inactive                   0  Inactive                   0
      1         0  Inactive                   0  Inactive                   0
      2         0  Inactive                   0  Inactive                   0
      3         0  Inactive                   0  Inactive                   0
      4         0  Inactive                   0  Inactive                   0
      5         0  Inactive                   0  Inactive                   0
      6         0  Inactive                   0  Inactive                   0
      7         0  Inactive                   0  Inactive                   0
------------------------------------------------------------------------------
 
 
 
IPNPOD2# show queuing interface e 1/4 
 
 slot  1
=======


Egress Queuing for Ethernet1/4 [System]
------------------------------------------------------------------------------
QoS-Group# Bandwidth% PrioLevel                Shape                   QLimit
                                   Min          Max        Units   
------------------------------------------------------------------------------
      7             -         1           -            -     -            9(D)
      6             -         2           -            -     -            9(D)
      5             0         -           -            -     -            9(D)
      4             0         -           -            -     -            9(D)
      3            20         -           -            -     -            9(D)
      2             0         -           -            -     -            9(D)
      1             1         -           -            -     -            9(D)
      0            59         -           -            -     -            9(D)
+-------------------------------------------------------------+
|                              QOS GROUP 0                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |           63049|               0|
|                   Tx Byts |        15968783|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 1                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 2                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 3                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 4                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 5                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 6                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |         1141418|               0|
|                   Tx Byts |       237770324|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                              QOS GROUP 7                    |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |           32440|               0|
|                   Tx Byts |         6986806|               0|
| WRED/AFD & Tail Drop Pkts |               0|               0|
| WRED/AFD & Tail Drop Byts |               0|               0|
|              Q Depth Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                      CONTROL QOS GROUP                      |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |            6275|               0|
|                   Tx Byts |          804748|               0|
|            Tail Drop Pkts |               0|               0|
|            Tail Drop Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+
|                         SPAN QOS GROUP                      |
+-------------------------------------------------------------+
|                           |  Unicast       |Multicast       |
+-------------------------------------------------------------+
|                   Tx Pkts |               0|               0|
|                   Tx Byts |               0|               0|
|            Tail Drop Pkts |               0|               0|
|            Tail Drop Byts |               0|               0|
|       WD & Tail Drop Pkts |               0|               0|
+-------------------------------------------------------------+


Ingress Queuing for Ethernet1/4
-----------------------------------------------------
QoS-Group#                 Pause                     
           Buff Size       Pause Th      Resume Th   
-----------------------------------------------------
      7              -            -            - 
      6              -            -            - 
      5              -            -            - 
      4              -            -            - 
      3              -            -            - 
      2              -            -            - 
      1              -            -            - 
      0              -            -            - 


Per Port Ingress Statistics
--------------------------------------------------------
     Hi Priority Drop Pkts                           0
    Low Priority Drop Pkts                           0
Ingress Overflow Drop Pkts                           0



PFC Statistics
------------------------------------------------------------------------------
TxPPP:                    0,   RxPPP:                    0
------------------------------------------------------------------------------
PFC_COS QOS_Group   TxPause             TxCount   RxPause             RxCount
      0         0  Inactive                   0  Inactive                   0
      1         0  Inactive                   0  Inactive                   0
      2         0  Inactive                   0  Inactive                   0
      3         0  Inactive                   0  Inactive                   0
      4         0  Inactive                   0  Inactive                   0
      5         0  Inactive                   0  Inactive                   0
      6         0  Inactive                   0  Inactive                   0
      7         0  Inactive                   0  Inactive                   0
------------------------------------------------------------------------------

Troubleshooting Cisco APIC QoS Policies

The following table summarizes common troubleshooting scenarios for the Cisco APIC QoS.


Problem	Solution
Unable to update a configured QoS policy.	Invoke the following API to ensure that `qospDscpRule` is present on the leaf. `GET https://192.0.20.123/api/node/class/qospDscpRule.xml` Ensure that the QoS rules are accurately configured and associated to the EPG ID to which the policy is attached. Use the following NX-OS style CLI commands to verify the configuration. `leaf1# show vlan leaf1# show system internal aclqos qos policy detail apic1# show running-config tenant tenant-name policy-map type qos custom-qos-policy-name apic1# show running-config tenant tenant-name application application-name epg epg-name`

Cisco APIC QoS

Available Languages

Download Options

New and Changed Information

QoS for L3Outs

Configuring QoS for L3Outs Using the GUI

Procedure

Configuring QoS for L3Outs Using the NX-OS Style CLI

Procedure

Example:

Example:

Configuring QoS for L3Outs Using the REST API

Procedure

Example:

Example:

Configuring a Custom QoS Policy

Procedure

Preserving 802.1P Class of Service Settings

Preserving QoS CoS Settings Using the GUI

Procedure

Preserving QoS CoS Settings Using the NX-OS Style CLI

Procedure

Example:

Example:

Preserving QoS CoS Settings Using the REST API

Procedure

Example:

Example:

Preserving QoS Priority Settings in a Multipod Fabric

DSCP Settings

Creating a DSCP Policy Using the GUI

Procedure

Creating a DSCP Policy Using the NX-OS Style CLI

Procedure

Example:

Example:

Example:

Example:

Example:

Creating a DSCP Policy Using the REST API

Procedure

Example:

Example:

Translating QoS Ingress Markings to Egress Markings

Translating QoS CoS Settings Using the GUI

Before you begin

Procedure

Translating QoS CoS Settings Using the NX-OS CLI

Before you begin

Procedure

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Translating QoS Ingress Markings to Egress Markings Using the REST API

Before you begin

Procedure

Example:

Example:

Configuring QoS for Multipod

Before you begin

Procedure

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Troubleshooting Cisco APIC QoS Policies

Contributed by Cisco Engineers

Was this Document Helpful?