Cisco WS-C6506 Software Manual page 1336

Using the Automatic QoS Macro on the Switch
Table 53-7
Item
Interface type
Policy source—config
Policy source—runtime
Trust type—config
Trust type—runtime
Default CoS—config
Default CoS—runtime
Trust-device
QoS ACL attached to port
QoS ACL name
Trust-ext
Cos-ext
1. Only the IP QoS ACLs are applied (not IPX).
2. If the ACL_IP-PHONES name is already in use, the name ACL_IP-PHONESx, where x is a value from 1 to 99, will be tried
3. ACL_IP-PHONES acl will not be created on WS-X6148-RJ-45 and WS-X6148-RJ-21 modules.
Port-Specific Automatic QoS Settings
On the ports that connect to a Cisco SoftPhone, the QoS settings must be configured to trust the Layer 3
markings of the traffic that enters the port. Trusting all Layer 3 markings is a security risk because the
PC users could send the nonpriority traffic with DSCP 46 and gain unauthorized performance benefits.
Policing on all inbound traffic prevents the malicious users from obtaining unauthorized bandwidth from
the network. Policing is accomplished by rate limiting the DSCP 46 (EF) inbound traffic to the codec
rate that is used by the Cisco SoftPhone application (worst case G.722). Any traffic that exceeds this rate
is marked down to the default traffic rate (DSCP 0 - BE). Signaling traffic (DSCP 24) is also policed and
marked down to zero if excess signaling traffic is detected. All the other inbound traffic types are
reclassified to default traffic (DSCP 0 – BE).
You must disable trusted boundary for the Cisco SoftPhone ports.
Caution
Table 53-8
ciscosoftphone macro on a port. See the
on page 53-22
Table 53-8
Item
Interface type
Policy source—config
Policy source—runtime
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
53-10
Port-Specific Settings for Voice (ciscoipphone Keyword)
sequentially. If all these names are taken, a syslog message displays.
ciscosoftphone
—
lists the port-specific settings that are implemented after executing the automatic QoS voip
for detailed configuration examples.
Port-Specific Settings for Voice (ciscosoftphone Keyword)
Value
Port-based
Local
Local (as per default)
Trust-cos
Trust-cos
0 (as per default)
0 (as per default)
Ciscoipphone
trust-cos any (if 1q4t/2q2t port, otherwise none)
ACL_IP-PHONES (if 1q4t/2q2t port, otherwise
1, 2, 3
none)
Untrusted
0
"Port-Specific Automatic QoS—voip ciscosoftphone" section
Value
Port-based
Local
Local
Chapter 53 Using Automatic QoS
OL-8978-04