Lab 8: Objective Implement QoS, mark traffi c, and display and interpret QoS output. Lab Topology For this lab, your network design will include two pods of devices. You will be responsible for confi guring the devices in both pods. The devices on the left side of the topology are in Pod 1. The devices on the right side of the topology are in Pod 2. P1PC1 and P2PC2 are PC workstations. P1ASW1 and P2ASW2 are access-layer switches. P1DSW1 and P2DSW2 are distribution-layer switches. The access and distribution layers are two of the three layers in the Cisco three-layer hierarchical network model, which also includes the core layer. The Topology diagram below represents the NetMap in the Simulator. To access each of the devices from within the Simulator, select the device name from the appropriate menu in the Simulator. For example, to access P1ASW1, click the eswitches button and select P1ASW1 from the drop-down menu. 168 Boson NetSim for CCNP Lab Manual
Command Summary Command confi gure terminal enable exit end interface fastethernet slot/port ping ip_address shutdown; no shutdown access-list access_list_number [dynamic dynamic_name [timeout minutes] ] {deny permit} protocol source source_wildcard destination destination_wildcard [precedence precedence] [tos tos] [log log-input] mls qos show mls qos class-map [match-all match-any] class_map_ name match {access-group acl_index_or_name ip dscp dscp_list ip precedence ip_precedence_list} show class-map policy-map policy_map_name class class_map_name set {cos new_cos ip dscp new_dscp ip precedence new_precedence} show policy-map [policy_map_name [class class_name]] service-policy {input policy_map_name output policy_map_name} Description enters global confi guration mode enters privileged EXEC mode exits from current mode returns to privileged EXEC mode enters interface confi guration mode for the specifi ed Fast Ethernet interface sends an ICMP echo request disables; enables an interface creates an IP extended ACL enables QoS globally verifi es MLS QoS confi guration creates a class map, and changes to class map confi guratoin mode defi nes matching criteria for class map verifi es class map creates a policy map, and changes to policy map confi guration mode defi nes a traffi c classifi cation, and enters policy map class confi guration mode classifi es IP traffi c by setting a new value in the packet verifi es policy map applies a policy map to an interface Boson NetSim for CCNP Lab Manual 169
Lab Tasks Task 1: Enable QoS and Mark Traffi c 1. Enable QoS globally on each DSW. Use the mls qos command to accomplish this task. 2. Verify that QoS is globally enabled. Use the show mls qos command to accomplish this task. 3. Separate traffi c into two classes, one for ICMP traffi c and one for TFTP traffi c. First, select these types of traffi c with an Access Control List (ACL). Create Access List 101 to permit all TFTP traffi c. Create Access List 102 to permit all ICMP echo traffi c and echo reply traffi c. 4. Classify these types of traffi c by mapping the Access Lists to a Class Map. Create a Class Map named TFTP; match Access List 101 to this class. Create a Class Map named ICMP; match Access List 102 to this class. 5. Once the traffi c has been classifi ed, change the IP precedence values for the traffi c so that it can be queued later. Create a Policy Map named Precedence. For the TFTP class, change the IP precedence to 5. For the ICMP class, change the IP precedence to 1. 6. Apply the policy map to the inbound interfaces of the traffi c. In the Lab Topology, these are the trunks that connect to the ASWs. Use the service-policy command to accomplish this task. Task 2: Display and Interpret QoS Output 1. Use the show mls qos command to verify that QoS is enabled. 2. Verify that the Access Lists are correct. Use the show access-lists command. 3. Verify the Class Map confi guration. Use the show class-map command. 4. Verify the Policy Map confi guration. Use the show policy-map command. 5. Verify the application of the policy to the interface. Use the show run command. Lab Solutions BCMSN LAB 8 Task 1: Enable QoS and Mark Traffi c 1. mls qos 2. show mls qos 3. access-list 101 permit udp any any eq tftp access-list 102 permit icmp any any echo access-list 102 permit icmp any any echo-reply 4. class-map tftp match access-group 101 class-map icmp match access-group 102 5. policy-map precedence class tftp set ip precedence 5 class icmp set ip precedence 1 6. interface range fastethernet 0/1-4 170 Boson NetSim for CCNP Lab Manual
Task 2: Display and Interpret QoS Output 1. P1DSW1#show mls qos QoS is enabled 2. P1DSW1#show access-lists Extended IP access list 101 permit udp any any eq tftp Extended IP access list 102 permit icmp any any echo permit icmp any any echo-reply 3. P1DSW1#show class-map Class Map match-all tftp (id2) Match access-group 101 Class Map match-all icmp (id 3) Match access-group 102 Class Map match-any class-default (id 0) Match any 4. 5. P1DSW1#show policy-map Policy Map precedence class tftp set ip precedence 5 class icmp set ip precedence 1 P1DSW1#show run interface FastEthernet0/1 interface FastEthernet0/2 Boson NetSim for CCNP Lab Manual 171
interface FastEthernet0/3 interface FastEthernet0/4 172 Boson NetSim for CCNP Lab Manual
Sample Initial Confi guration Scripts P1DSW1 Version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname P1DSW1 ip subnet-zero ip routing mls qos spanning-tree extend system-id class map match-all tftp Match access-group 101 class map match-all icmp Match access-group 102 policy map precedence Class tftp set ip precedence 5 Class icmp set ip precedence 1 interface FastEthernet0/1 interface FastEthernet0/2 interface FastEthernet0/3 interface FastEthernet0/4 interface FastEthernet0/5 switchport mode access interface FastEthernet0/6 BCMSN LAB 8 P1DSW1 (continued) interface FastEthernet0/7 interface FastEthernet0/8 interface FastEthernet0/9 interface FastEthernet0/10 interface FastEthernet0/11 description P1DSW1 to P2DSW2 interface FastEthernet0/12 description P1DSW1 to P2DSW2 interface GigabitEthernet0/1 interface GigabitEthernet0/2 vtp Server vtp domain bigdomain interface Vlan 1 ip address 172.16.1.100 255.255.255.0 no ip route-cache no shutdown interface Vlan0011 ip address 172.16.11.100 255.255.255.0 no ip route-cache no shutdown router eigrp 100 network 172.16.0.0 ip classless no ip http server access-list 101 permit udp any any eq tftp access-list 102 permit icmp any any echo access-list 102 permit icmp any any echo-reply line con 0 transport input none line aux 0 line vty 0 4 no scheduler allocate end Boson NetSim for CCNP Lab Manual 173