https://efb97021.aww-3cz.pages.dev/tags/physical/ Recent content in Physical on Aaron's Worthless Words Hugo en Thu, 04 Feb 2010 00:00:00 +0000 https://efb97021.aww-3cz.pages.dev/posts/2010/02/ont-notes-pre-classify-and-end-to-end-qos/ Thu, 04 Feb 2010 00:00:00 +0000 https://efb97021.aww-3cz.pages.dev/posts/2010/02/ont-notes-pre-classify-and-end-to-end-qos/ <ul> <li>VPNs (Didn&rsquo;t ISCW cover this?) <ul> <li>Provide <ul> <li>Confidentiality</li> <li>Integrity</li> <li>Authentication</li> </ul> </li> <li>Types <ul> <li>Remote-access <ul> <li>Client-initiated</li> <li>NAS-initiated</li> </ul> </li> <li>Site-to-site <ul> <li>LAN-to-LAN</li> <li>Extranet</li> </ul> </li> </ul> </li> </ul> </li> <li>L3 Tunneling protocols <ul> <li>GRE</li> <li>IPSec</li> </ul> </li> <li>Pre-classify allows traffic to be classified before being sent across a tunnel or crypto-ed. <ul> <li><em>qos pre-classify</em></li> <li>Provides a view into the original IP headers</li> <li>To classify on pre-tunnel header, apply the policy to the tunnel interface WITHOUT pre-classify.</li> <li>To classify on post-tunnel header, apply the policy to the physical interface WITHOUT pre-classify.</li> <li>To classify on pre-tunnel header, apply the policy to the physical interface WITH pre-classify.</li> </ul> </li> <li>SLA - agreement with provider to guarantee QoS mechanisms across their network based on your markings. <ul> <li>Assures availability, loss, throughput, delay, and jitter.</li> </ul> </li> <li>End-to-end QoS <ul> <li>To be effective, each hop in the path must have QoS configured similarly.</li> <li>Necessary in three locations <ul> <li>Campus - within the customer network</li> <li>The edges - customer facing the provider, provider facing customer</li> <li>On the provider network</li> </ul> </li> </ul> </li> <li>QoS tasks <ul> <li>Campus access switches <ul> <li>Speed/duplex settings</li> <li>Classification</li> <li>Trust</li> <li>Phone/access switch configs</li> <li>Multiple queues on switch ports, including priority for VOIP</li> </ul> </li> <li>Campus distribution <ul> <li>L3 policing and marking</li> <li>Multiple queues on switch ports, including priority for VOIP</li> <li>WRED</li> </ul> </li> <li>WAN edge <ul> <li>SLA definitions</li> <li>LLQ</li> <li>LFI</li> <li>WRED</li> <li>Shaping</li> </ul> </li> <li>Provider cloud <ul> <li>Capacity planning</li> <li>PHB</li> <li>LLQ</li> <li>WRED</li> </ul> </li> </ul> </li> <li>Enterprise campus QoS implementation <ul> <li>Implement multiple queues to avoid congestion</li> <li>Assign VOIP and video to highest priority queue</li> <li>Esablish trust boundaries</li> <li>Use policing to rate-limit excess traffic</li> <li>Use hardware QoS when possible</li> </ul> </li> <li>Control Plane Policing (CoPP) <ul> <li>Applies QoS policy to traffic destined for the router <ul> <li>Routing protocols</li> <li>Management protocols</li> </ul> </li> <li>Can be used to avoid DOS attacks</li> <li>Applied to <em>control-plane</em> in global config</li> </ul> </li> </ul>