I have small problem with my edge router. I use QoS, standard CBWFQ template with one LLQ queue. Howewer I have match in access-list of 'ef' class, router probably not mark packet properly.
My configuration is below; hopefully this gives a better explanation.
Whole queuing/scheduling and shaping map:
! policy-map etm-blazeknet class realtime priority 512 police 512000 conform-action transmit exceed-action drop class priority bandwidth remaining percent 40 random-detect dscp-based class missioncritical bandwidth remaining percent 39 random-detect dscp-based class transactional bandwidth remaining percent 16 random-detect dscp-based class general bandwidth remaining percent 1 random-detect dscp-based class class-default bandwidth remaining percent 4 random-detect dscp-based policy-map shape-etm-blazeknet class class-default shape average 3400000 service-policy etm-SpiraxSarco-SXSNet
Class map for realtime and ef:
class-map match-any realtime match ip dscp cs5 ef class-map match-all ef match access-group name ef match protocol rtp . . .
Part of marking map:
policy-map ingress-mark class ef set ip dscp ef class af41 set ip dscp af41 . . .
Access-list for ef class-map and show command that show match:
ip access-list extended ef permit udp any range 49152 57500 any range 49152 57500 permit tcp any range 49152 57500 any range 49152 57500 sxs-sgsingapor-2677033#sh access-lists ef Extended IP access list ef 10 permit udp any range 49152 57500 any range 49152 57500 20 permit tcp any range 49152 57500 any range 49152 57500 (234 matches) sxs-sgsingapor-2677033#
As you can see, in the ef access-list has matches, but when I look into stats of my marking map, I see that no packets was marked.
sxs-sgsingapor-2677033#sh policy-map int in GigabitEthernet0/0 GigabitEthernet0/1 Service-policy input: ingress-mark Class-map: ef (match-all) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group name ef Match: protocol rtp QoS Set dscp ef Packets marked 0 . . .
The same is in output map, priority class doesn't works for me. Yeah of course, marking map is attached on LAN interface.
If anybody had same problem, how I can solve it? Everything seems to be OK and I've never had a similar problem. Marking for other class is OK.