Dell Force10 Z9000 Configuration Manual page 731

FTOS Behavior: An explicit "deny any" rule in a Layer 3 ACL used in a (match any or match all)
class-map creates a "default to Queue 0" entry in the CAM, which causes unintended traffic
classification. Below, traffic is classified in two Queues, 1 and 2. Class-map ClassAF1 is "match any,"
and ClassAF2 is "match all".
FTOS#show running-config policy-map-input
!
policy-map-input PolicyMapIn
service-queue 1 class-map ClassAF1 qos-policy QosPolicyIn-1
service-queue 2 class-map ClassAF2 qos-policy QosPolicyIn-2
FTOS#show running-config class-map
!
class-map match-any ClassAF1
match ip access-group AF1-FB1 set-ip-dscp 10
match ip access-group AF1-FB2 set-ip-dscp 12
match ip dscp 10 set-ip-dscp 14
!
class-map match-all ClassAF2
match ip access-group AF2
match ip dscp 18
FTOS#show running-config ACL
!
ip access-list extended AF1-FB1
seq 5 permit ip host 23.64.0.2 any
seq 10 deny ip any any
!
ip access-list extended AF1-FB2
seq 5 permit ip host 23.64.0.3 any
seq 10 deny ip any any
!
ip access-list extended AF2
seq 5 permit ip host 23.64.0.5 any
seq 10 deny ip any any
FTOS#show cam layer3-qos interface gigabitethernet 4/49
Cam Port Dscp Proto Tcp
Index
---------------------------------------------------------------------------------------------
20416 1 18 IP
20417 1 18 IP
20418 1 0 IP
20419 1 0 IP
20420 1 0 IP
20421 1 0 IP
20422 1 10 0
24511 1 0 0
Above, the ClassAF1 does not classify traffic as intended. Traffic matching the first match criteria is classified to
Queue 1, but all other traffic is classified to Queue 0 as a result of CAM entry 20419.
When the explicit "deny any" rule is removed from all three ACLs, the CAM reflects exactly the desired
classification.
FTOS#show cam layer3-qos interface gigabitethernet 4/49
Cam Port Dscp Proto Tcp
Index
---------------------------------------------------------------------------------------------
20416 1 18 IP
20417 1 0 IP
20418 1 0 IP
20419 1 10 0
24511 1 0 0
Src Dst SrcIp
Flag Port Port
0x0 0 0 23.64.0.5/32
0x0 0 0 0.0.0.0/0
0x0 0 0 23.64.0.2/32
0x0 0 0 0.0.0.0/0
0x0 0 0 23.64.0.3/32
0x0 0 0 0.0.0.0/0
0x0 0 0 0.0.0.0/0
0x0 0 0 0.0.0.0/0
Src Dst SrcIp
Flag Port Port
0x0 0 0 23.64.0.5/32
0x0 0 0 23.64.0.2/32
0x0 0 0 23.64.0.3/32
0x0 0 0 0.0.0.0/0
0x0 0 0 0.0.0.0/0
DstIp DSCP
Marking
0.0.0.0/0 20
0.0.0.0/0 -
0.0.0.0/0 10
0.0.0.0/0 -
0.0.0.0/0 12
0.0.0.0/0 -
0.0.0.0/0 14
0.0.0.0/0 -
DstIp DSCP
Marking
0.0.0.0/0 20
0.0.0.0/0 10
0.0.0.0/0 12
0.0.0.0/0 14
0.0.0.0/0 -
Quality of Service (QoS) | 731
Queue
2
0
1
0
1
0
1
0
Queue
2
1
1
1
0