Hello
I have done a number of APIC-EM EasyQoS app installs and it appears the documentation doesn't fully match up with what the EasyQoS app push out the the Switches, on two different customer installs recently, one with Catalyst 2960X Switches and one with Catalyst 3650 Switches it appears the APIC-EM doesn't create an ACL with ACEs for the class-map #VOICE or #REALTIME yet the Design Guide 1.6 says it should do, providing the Switches are set to a role of Access Layer which they are in both environments. See below example:
In the Design Guide v1.6 section “Ingress Classification & Marking Policies" https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Dec2017/APIC-EM-EasyQoS-DesignGuide-Dec2017.html#_Toc499730770 it shows class-maps with an ACL for VOICE and REALTIME, yet looking at the configs on a 2960X and 3650 in a live environment shows them missing, is there other logic or functionality at play that I'm missing or not understanding? Is anyone else seeing this in their environment? I still believe I'm seeing traffic being marked correctly, for example when I do a “show mls qos interface g1/0/x statistics” on a 2960X I see DSCP46 traffic being marked for a switchport that has an IP Phone connected.
Within the Cisco EasyQoS Solution Design Guide, APIC-EM Release 1.6:
class-map match-any prm-APIC_QOS_IN#VOICE
match access-group name prm-APIC_QOS_IN#VOICE__acl
class-map match-any prm-APIC_QOS_IN#BROADCAST
match access-group name prm-APIC_QOS_IN#BROADCAST__acl
class-map match-any prm-APIC_QOS_IN#REALTIME
match access-group name prm-APIC_QOS_IN#REALTIME__acl
class-map match-any prm-APIC_QOS_IN#MM_CONF
match access-group name prm-APIC_QOS_IN#MM_CONF__acl
class-map match-any prm-APIC_QOS_IN#MM_STREAM
match access-group name prm-APIC_QOS_IN#MM_STREAM__acl
class-map match-any prm-APIC_QOS_IN#SIGNALING
match access-group name prm-APIC_QOS_IN#SIGNALING__acl
class-map match-any prm-APIC_QOS_IN#OAM
match access-group name prm-APIC_QOS_IN#OAM__acl
class-map match-any prm-APIC_QOS_IN#TRANS_DATA
match access-group name prm-APIC_QOS_IN#TRANS_DATA__acl
class-map match-any prm-APIC_QOS_IN#BULK_DATA
match access-group name prm-APIC_QOS_IN#BULK_DATA__acl
class-map match-any prm-APIC_QOS_IN#SCAVENGER
match access-group name prm-APIC_QOS_IN#SCAVENGER__acl
class-map match-any prm-APIC_QOS_IN#TUNNELED
match access-group name prm-APIC_QOS_IN#TUNNELED__acl
Actual Config pushed by APIC-EM:
class-map match-any prm-APIC_QOS_IN#TRANS_DATA
match access-group name prm-APIC_QOS_IN#TRANS_DATA__acl
class-map match-any prm-APIC_QOS_IN#TUNNELED
match access-group name prm-APIC_QOS_IN#TUNNELED__acl
class-map match-any prm-APIC_QOS_IN#REALTIME
class-map match-any prm-APIC_QOS_IN#VOICE
class-map match-any prm-APIC_QOS_IN#MM_CONF
match access-group name prm-APIC_QOS_IN#MM_CONF__acl
class-map match-any prm-APIC_QOS_IN#SCAVENGER
match access-group name prm-APIC_QOS_IN#SCAVENGER__acl
class-map match-any prm-APIC_QOS_IN#SIGNALING
match access-group name prm-APIC_QOS_IN#SIGNALING__acl
class-map match-any prm-APIC_QOS_IN#BROADCAST
match access-group name prm-APIC_QOS_IN#BROADCAST__acl
class-map match-any prm-APIC_QOS_IN#BULK_DATA
match access-group name prm-APIC_QOS_IN#BULK_DATA__acl
class-map match-any prm-APIC_QOS_IN#MM_STREAM
match access-group name prm-APIC_QOS_IN#MM_STREAM__acl
class-map match-any prm-APIC_QOS_IN#OAM
match access-group name prm-APIC_QOS_IN#OAM__acl
Kind regards
Alisdair
