Wired Intelligent Edge

 View Only

  • 1.  Question about QoS

    Posted Dec 16, 2025 06:18 PM
    Edited by ralvarez Dec 16, 2025 06:20 PM

    Hi All,

    I have a hub and spoke network with several VLAN, like video surveillance, phone, user, etc.  The gateway IP address for each of those VLAN, lives on the core switch.  The access switches do not have IP addresses assigned to the VLAN interfaces.

    I'd like to setup QoS for our video surveillance VLAN.  This system used TCP/UDP 4100.

    I started by just turning on "qos trust dscp" on all switches.   To verify I did the command "sh interface queues" and it looks like traffic is being placed in at least the default queues and in some cases dropped.  SO I thought this was a good start.

    I next need to classify TCP/UDP 4100 as video (DSCP 40.)  This is what I came up with:

    Class ip "VideoSurveilience"

    10 match tcp any any eq 4100

    20 match udp any any eq 4100

    policy DSCP_40

    10 class ip "VideoSurveilience" action set dscp 40

    My issue now is how do I apply this?  I would think I need to apply the policy to the VLAN interface  on the access switches since that is where the security cameras are connected.  But if that is true, should I be using CoS instead?  What about the core switch that has an IP address on the VLAN interface?



    -------------------------------------------



  • 2.  RE: Question about QoS

    Posted Dec 17, 2025 06:28 PM

    to apply a qos policy to say a VLAN, you can use the following example.

    vlan 20
        apply policy DSCP_40 in

    Here is the QoS user guide



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: Question about QoS

    Posted Dec 17, 2025 06:40 PM
    Edited by ralvarez Dec 17, 2025 06:52 PM

    Thank ariyap for the reply.  I did that, but I'm not sure how to verify it's working.   I'm wondering about the QoS policy setup for layer 3, but isn't the VLAN 20 interface layer 2?

    -------------------------------------------

    Original Message


  • 4.  RE: Question about QoS

    Posted Dec 17, 2025 07:05 PM

    you can refer to the QoS guide, there is a section on monitoring  queue operation.

    also you can apply your policy directly to interfaces or to user-role.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 5.  RE: Question about QoS

    Posted Dec 18, 2025 10:10 AM
    Edited by ralvarez Dec 18, 2025 10:11 AM

    Ok thanks for the link to the guide.  I've been using the guide and other resources online.  I'm having a hard time understanding QoS.  So I'm reaching out to the Airheads "Community" where I'm on a "discussion" group.  If you don't want to discuss this, don't reply to my posts.  It's not helpful.

    -------------------------------------------

    Original Message


  • 6.  RE: Question about QoS

    Posted Dec 18, 2025 06:21 PM

    there are three parts to the overall QoS, Trust mode, Classification/Marking/remarking finally queue/scheduling

    generally we'll do the classification/marking at the ingress ports of the access switches and queue/scheduling at the egress ports. But the first part is Trust mode, where by default behaviour of all the switches is not to trust any QoS markings. This is to check if the switch is set to trust DSCP marking or not. So generally you should not trust QoS markings at access switches and trust it on all non-access switches like agg and core.

    note that each interface has 8x queues that you can map DSCP and all by default will be using Dynamic Weighted Round Robin (DWRR), but , you can also assign 1x Strict Priority (SP) queue which will be Queue 7.

    so to pull it together you need a qos queue-profile, if you want to use SP for queue7 for your vice traffic, then you also need qos schedule-profile. these should be then applied to the interfaces. you already have your classifications rules that is referenced in your QoS policy, you need to apply that policy to ingress interfaces.

    QoS is a big topic, here is a whitepaper "HPE Aruba Networking CX QoS For Crestron NVX/NAX Products" that describes it along with configuration snippets that you might find useful.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 7.  RE: Question about QoS

    Posted Dec 18, 2025 07:01 PM

    Thanks so much.  that document is great.  I didn't know about the local-priorities too.  This give me something to try.

    -------------------------------------------

    Original Message


Related Content