Qos restriction

[Robo123]

Hi All,

I have "Cisco 6880" Switch where i want to restric Youtube access (10mb) in Vlan using qos .Can any one help me on this .

[balaji.bandi]

what code running on this Switch ?

check below thread :

https://community.cisco.com/t5/routing/qos-on-cisco-for-limiting-youtube-traffic/td-p/2073343

[Robo123]

Have checked same link  already seems commands are not working/accepting the device.

Running version is 15.5(1)SY10

[Joseph W. Doherty]

Re: not working - 6880 likely doesn't support NBAR and might not accept egress CBWFQ policies.

If forgoing true, should still be possible to restrict YouTube bandwidth, just would require more configuration "work".

Before getting into what might/could be done on a 6880, what devices are upstream, such as the Internet connected router?

[Robo123]

ISP is directly terminated on my 6800 chassi

[Georg Pauwen]

Hello, 

I think @Joseph W. Doherty is right, and the 6880 does not support NBAR. Creating an access list and a QoS policy can be tedious, because YouTube uses a large range of addresses. The ACL below is based on the current IP address ranges, you could give that a try. You might inadvertently limit other services as well, so no guarantees:

ip access-list extended ACL_YOUTUBE_TRAFFIC
permit ip 199.223.232.0 0.0.7.255 any
permit ip 207.223.160.0 0.0.15.255 any
permit ip 208.65.152.0 0.0.3.255 any
permit ip 208.117.224.0 0.0.31.255 any
permit ip 209.85.128.0 0.0.127.255 any
permit ip 216.58.192.0 0.0.31.255 any
permit ip 216.239.32.0 0.0.31.255 any

class-map match-all CM_YOUTUBE_TRAFFIC
match access-group name ACL_YOUTUBE_TRAFFIC

policy-map PM_YOUTUBE_POLICING
class CM_YOUTUBE_TRAFFIC
police 10000000 1562500 conform-action transmit exceed-action drop

interface <interface_name>
service-policy input PM_YOUTUBE_POLICING

[Joseph W. Doherty]

Yup, like @Georg Pauwen's "tedious", because among other reasons you may need to constantly confirm list of IPs hadn't changed.  Unfortunately, if you wish to block YouTube, believe, on a 6880, your pretty much limited to just that.

Other variations might include just limiting YouTube traffic that appears to be video, UDP, etc.  Also, the 6880, I believe, also supports micro flow policing which may allow you to restrict YouTube video flows to low def only.  (Often a huge bandwidth difference between max def and min def.)

[Robo123]

@Georg Pauwen ,Thank you...That was a useful script.Could you please clarify the below as well.

As i want to apply the "PM_YOUTUBE_POLICING" qos policy on Trunk interface where other traffic also passing via the same link (Eg.lets consider Uplink).Does this policy will block other trafic? or it will restrict only You tube dest mentioned in ACL and other trafic will pass as usual.

[Joseph W. Doherty]

The posted CBWFQ policy should only block the traffic that matches the ACL.

[balaji.bandi]

post show version completly and what sup card it has and what license you having.

[Robo123]

SUP : C6880-X-LE-SUP

Version : 15.5(1)SY10