2013年12月30日星期一

How to make the Cisco VOIP settings for 1921 Router


As you can imagine, we are having some voice issues across the link and I need to get QoS set up between the two routers.

One of our techs has done this on an older router by defining ports using nbar and prioritizing that way.    I am not too knowledgable in Cisco routing and definately not in QoS, so please bear with me.

We ran the QoS wizard on the 1921 and got the following output:

Configuration commands for the router: 192.168.41.10
saved on Dec 9, 2011 2:53:44 PM
class-map match-any CCP-Transactional-1
class-map match-any CCP-Management-1
class-map match-any CCP-Routing-1
class-map match-any CCP-Signaling-1
class-map match-any CCP-Voice-1
policy-map CCP-QoS-Policy-1
 class CCP-Voice-1
  set dscp ef
  priority percent 50
  exit
 class CCP-Signaling-1
  set dscp cs3
  bandwidth percent 5
  exit
 class CCP-Routing-1
  set dscp cs6
  bandwidth percent 5
  exit
 class CCP-Management-1
  set dscp cs2
  bandwidth percent 5
  exit
 class CCP-Transactional-1
  set dscp af21
  bandwidth percent 5
  exit
 class class-default
  fair-queue
  random-detect
  exit
 exit
interface Serial0/0/0
 ip nbar protocol-discovery
 service-policy output CCP-QoS-Policy-1
 exit

Now, I assume I need to modify this section "class-map match-any CCP-Voice-1
" to define the ports that are used by the Shoretel system to prioritize that traffic between the routers.  I have researched and cannot find anything as to how to tell the router to priorotize specific port traffic.

Does anyone know the correct commands or structure to type? Or am I completely wrong in how this should be done? If so, can anyone point me in the right direction?

The solution
In the Shoretel Director set the Diffserv value to 184 (under Call Control -> Options)
In the Cisco device.... configure EVERY port (for director + all phones + all trunks) to

interface x/x
qos trust dscp
or
mls qos trust dscp

Create access list to map Shoretel ports

access-list 100 remark Shoretel VoIP
access-list 100 permit udp any any eq 2427
access-list 100 permit udp any any eq 2727
access-list 100 permit udp any any range 5440 5446
access-list 101 remark Shoretel Director
access-list 101 permit udp host IP_ADDRESS_OF_DIRECTOR gt 1024 any gt 1024

Add the match statements to the Voice Priority Queue created by wizard

class-map match-any CCP-Voice-1
 match ip dscp ef
 match access-group 100
 match access-group 101

You might consider bumping up the priority percent - based on the amount of concurrent calls/codecs in use/bandwidth required.

SHOW the output of the service policy to confirm
show policy int x/x
Should see tagged packets increasing in the queue - and hopefully no drop ;>

-d
Customers interested in purchasing Cisco router or the price, please refer to below links:

2013年12月17日星期二

What’s the security license for Cisco 1900, 2900, and 3900

Security license for Cisco 1900, 2900(Cisco 2901 router), and Cisco 3900 router

Security License (Paper) for Cisco 1941:  SL-19-SEC-K9(=)
Security License (Paper) for Cisco 2901-2951: SL-29-SEC-K9(=)
Security License (Paper) for Cisco 3925/3945: SL-39-SEC-K9(=)

Security License (E-Delivery) for Cisco 1941:  L-SL-19-SEC-K9=
Security License (E-Delivery) for Cisco 2901-2951: L-SL-29-SEC-K9=
Security License (E-Delivery) for Cisco 3925/3945: L-SL-39-SEC-K9=

You can use the Cisco Network Access Control (NAC) Network Module, which adds the feature-rich Cisco NAC Appliance Server capabilities, with Cisco 2900 and 3900 Series Integrated Services Routers. The Cisco NAC Appliance (formerly Cisco Clean Access Server) is a rapidly deployable NAC product that allows network administrators to authenticate, authorize, evaluate, and remediate wired, wireless, and remote users and their machines prior to allowing users onto the network.
The integration of Cisco NAC Appliance Server capabilities into a network module for integrated services routers allows network administrators to manage a single device in a branch office for data, voice, and security requirements, reducing network complexity, IT staff training, equipment sparing requirements, and maintenance costs.

It is refered from

2013年12月16日星期一

How to solve the wrong duplex setting of Cisco Router 3900

We have a Cisco 3900, and our ISP told us that our config (below) has the wrong duplex setting. They want us to change it to 100 FULL.

1. What is the command to change the duplex to FULL (without restarting the router).
2. What if the link goes down, how do I revert back to the old settings (AUTO)?

interface GigabitEthernet0/0
 description Internet via $ETH-WAN$$FW_OUTSIDE$
 ip address 209.xx.xx.xx 255.255.255.252
 ip access-group 101 in
 no ip redirects
 no ip proxy-arp
 ip verify unicast reverse-path
 ip flow ingress
 duplex auto
 speed 100
 no mop enabled

The solution:
try
interface GigabitEthernet0/0
spped 100
duplex full
sh int gi 0/0  will show the current settings .

or just try:
show int --> shows half duplex.. did u apply the commands
regarding question number 2 ...  no need to restart .
just change the duplex to  auto ( duplex auto)
or
int gi 0/0
shut
no shut.

The other end could also just not be Cisco 3900 series router, sometimes disparate hardware requires that you force the GB connection to Full.
The standard is to set 1Gbps connections to auto, but when it first came out we often had to force it to get it to work with some hardware.
Sometimes when the duplex negotiation fails it will fall-back to half-duplex.  Therefore it's not correct to say that the other end is definitely set to half.  Negotiation could fail for a number of reasons, including manually specifying the speed.

The main reason ISPs specify manual speed and duplex settings is because they want to mitigate any chance of auto-negotiation failure which would result in half-duplex operation and therefore reduce support incidents.