Cisco Systems ASR 1000 manual Two-Rate Three-Color Policing and Marking

Page 53

Chapter 5 Quality of Service and Bandwidth Management

Two-Rate Three-Color Policing and Marking

Two-Rate Three-Color Policing and Marking

Traffic policing is a traffic regulation mechanism that is used to limit the rate of traffic streams. Policing allows you to control the maximum rate of traffic sent or received on an interface. When the traffic rate exceeds the configured maximum rate, policing drops or re-marks the excess traffic.

The ETSI TS 102 333 Traffic Management (Tman) package defined a number of properties to allow traffic policing to be explicitly enabled. However, because the current H.248 standard only supported specifying one rate with a traffic flow, the only action available in the H.248 standard for non-conforming packets had been to discard them. (See the “Enhanced Event Notification and Auditing” section on page 11-2).

The Two-Rate Three-Color Policing and Marking feature is an enhancement to how the DBE polices traffic flow by introducing two-rate policing and three-color marking.

The DBE previously supported three tman properties—pol (policing), sdr (sustainable data rate), and mbs (maximum burst size). In supporting the Two-Rate Three-Color Policing and Marking feature, the DBE uses one additional property of the ETSI TS 102 333 Traffic Management (Tman) package:

pdr (peak data rate)—Defines the peak data rate in bytes per second that is permitted for the stream.

See the “H.248 Traffic Management Package Support” section on page 5-1for more information on the tman properties.

Enabling Two-Rate Three-Color Policing and Marking

All of the following conditions must occur to enable the Two-Rate Three-Color Policing and Marking feature for a specific flow:

•The DSCP value is provisioned via diffserv package during call setup.

•The sdr and mbs are provisioned via the Tman package during call setup. (The mbs property is used for pdr policing as well and has an assumed minimal value of 1500 bytes.)

•Two DSCP values (control and marker DSCPs) and the pdr coefficient are configured via the control-dscpmarker-dscppdr-coefficientCLI.

•The control-dscpvalue configured must match the diffserv DSCP value for a specific flow to enable the Two-Rate Three-Color Policing and Marking feature.

If any one of the conditions is not met, this feature is not enabled for the flow.

Implementing Two-Rate Three-Color Policing and Marking

In the Two-Rate Three-Color Policing and Marking feature, only two rates—sdr and pdr—allow traffic to be policed into three categories of traffic, which are handled as follows:

•Traffic conforming to both sdr and pdr.

These packets are colored using the DSCP value provisioned via the H.248 diffserv package; that is, H.248 passes the DSCP value. These packets are forwarded and the DSCP value comes from the H.248 diffserv package.

Cisco IOS XE Integrated Session Border Controller Configuration Guide for the Cisco ASR 1000 Series Aggregation Services Routers

 

OL-15421-01

5-5

 

 

 

Page 52 Page 54
Image 53
Page 52 Page 54
Contents Americas Headquarters Page Iii N T E N T SQoS Bandwidth Allocation Traffic Management Package Support Local Source Properties Address and Port Vii IPv6 SupportEvents Storage Until Event Acknowledgment Document Revision History PrefaceObjectives OL-15421-01 May 5 This document was first publishedOrganization Intended AudienceDocument Conventions Related DocumentationCisco ASR 1000 Series Router Documentation Cisco IOS Release 12.2SR Software PublicationsXii Xiii Obtaining Documentation and Submitting a Service RequestXiv General Overview ContentsCisco ASR 1000 Series Routers Overview Example of SBC High Level Architecture Distributed and Unified ModelsOn page 1-3illustrates the unified model Release Feature Name Related SBC Commands Documented Supported Integrated Session Border Controller FeaturesPackage segment Cisco IOS Cisco IOS Logging Level in ConfiguringNone XE ReleaseMedia-address ipv4 Deployment of the Integrated Session Border Controller Transaction-pending commandIntegrated SBC Used for VoIP Interworking Integrated Session Border Controller DBE Deployment Scenario Restrictions for Integrated Session Border Controller Configuring Integrated Session Border ControllerPrerequisites for Integrated Session Border Controller Summary Steps PrerequisitesEnter your password if prompted Enables privileged Exec modeEnters global configuration mode Enters into interface configuration modeOwn address when connecting to the SBE Configures the DBE to use a specific IPv4 H.248 controlConfigures the H.248 controller for the DBE and enters into Controller H.248 configuration modeExamples Troubleshooting TipsWhat To Do Next Configuring H.248 Logging Level SBC-DBE configuration mode Creates the DBE service on the SBC and enters intoSets a specified logging level to generate detailed logs Messages sent and received. Turns on consoleEnabling H.248 Logging Requests and Responses Example H.248 Log Output Configuration ExamplesThis section provides the following configuration examples SBC DBE Configuration Steps Example Making Global Changes to Controllers Example == Make change to local port Following example shows the initial SBC configurationControl-address h248 ipv4 172.25.2.26 controller h248 Making Changes to Individual Controller Settings ExampleIeps Indicator Yes Topology Priority Indicator Yes Emergency IndicatorCisco H.248 Profile Overview of ProfilePackage ID Version Profile PackagesPackage ID Version Support Dependent On Information About Dtmf Interworking Dtmf InterworkingSIP to RTP Interworking Configuring Default Duration of a Dtmf EventRTP to SIP Interworking Configuration mode. Use the sbc-name argument to specify Enters the mode of a DBE service and enters into SBC-DBEName of the DBE service Configures the default duration of a Dtmf eventPage Prerequisites for Implementing Media Address Pools Restrictions for Configuring Media Address PoolsMedia Address Pools Information About Media Address Pools Configuring Media Address PoolsEnters into SBC-DBE configuration mode Is configuredConfiguration mode Creates a port range for the configured mediaConfiguring Media Address Pools Example Traffic Management Package Support Quality of Service and Bandwidth ManagementPage Parameters on AC and per SDP on Dscp Marking and IP Precedence MarkingDscp Re-Markings Rtcp Policing Not Using Tman Package Rtcp Policing Using Tman PackageQoS Bandwidth Allocation Rtcp PolicingImplementing Two-Rate Three-Color Policing and Marking Two-Rate Three-Color Policing and MarkingEnabling Two-Rate Three-Color Policing and Marking DBE Restrictions Related Commands Page Enabling Optional H.248 Packages Packages-Signaling and ControlSegmentation Package Support Address Reporting PackageSession Failure Reaction Package Termination State Control Package Tsc-quiesce FeatureTsc-suspend Feature Vlan Package Syntax-Level Support 248.1v3 SupportMGC-Controlled Gateway-Wide Properties Page Services-Signaling and Control DBE Signaling Pinhole Support Extension to H.248 Termination Wildcarding Support Extension to H.248 Audit SupportFlexible Address Prefix Provisioning Locally Hairpinned Sessions Local Source Properties Address and PortTwice Napt Pinhole Hairpinning No Napt Pinhole HairpinningMGC-Specified Local Addresses or Ports Restrictions for Nine-Tier Termination Name Hierarchy Multi-Stream TerminationsNine-Tier Termination Name Hierarchy Displaying the Nine-Tier Termination Name Hierarchy Information About Nine-Tier Termination Name HierarchyAbc/voice/gn/0/1/0/1/ac/3 Displaying the Nine-Tier Termination Name Hierarchy ExampleOptional Local and Remote Descriptors RTP Specific Behavior Support ServiceChange Notification for Interface Status ChangeRemote Source Address Mask Filtering Sbc interface-id value End Configuration Example Output Tsc-Delay Timer MAX TimerTmax-timercommand configures the value of the T-MAX timer Video on Demand VOD SupportServices-Signaling and Control Video on Demand VOD Support Services-Signaling and Control Video on Demand VOD Support Integrated Session Border Controller Security Firewall Media Pinhole Control Latch and Relatch Support Interim Authentication Header SupportLocal Source Properties Address and Port Etsi TS 102 333 version 1.1.2 Gate Management Package Napt and NAT TraversalTraffic Management Policing Topology HidingTopology Hiding IPv6 Inter-Subscriber Blocking IPv4 Twice NaptRouter# show run interface gigabitEthernet 0/1.1101 QoS Policy-Map-Based Inter-Subscriber Blocking MethodRouter# show class-map IPv6intersubscriber ACL-Based Inter-Subscriber Blocking Method IPv6 SupportIPv6 No Napt Support for Media Flows IPv6 PinholesSend Recv IPv6 Single Napt for SignalingSingle Napt Signaling Flow No Napt Pinholes Topology Hiding No Napt Pinholes 10-1 High Availability SupportIntegrated Session Border Controller High Availability Software Redundancy Hardware RedundancyRoute Processor Redundancy RPR 10-210-3 SSO SupportIssu Support High Availability Support Issu Support 10-411-1 Quality Monitoring and Statistics GatheringBilling and Call Detail Records Congestion-threshold CommandDBE Status Notification Enhanced Event Notification and Auditing11-3 Retention and Returning of H.248 Event InformationResetting the Media Timeout Timers Association ResetSilent Gate Deletion 11-411-5 Middlebox Pinhole Timer Expired EventNetwork Package Quality Alert Event 11-6 Provisioned Inactivity TimerRelated Command IN-1 IN-2 IN-3 Policing Asymmetric policing Ipv6 packets Pinhole Pinhole timeoutRTP specific behavior support SBE IN-4IN-5 IN-6
Top Page Image Contents