topic Re: Configuring QoS on VLAN interface in General Topics

Configuring QoS on VLAN interface

echahine — Thu, 18 Nov 2021 15:58:49 GMT

Hi guys,

We want to apply QoS on our inside zone for downloads, but it's not hitting the QoS Policy, here's our conifg:

For the Inside Zone (users zone) we have an L2 interface eth1/1 and one VLAN interface linked to the subnet.
We created a QoS Profile with Class 1 Egress Max = 0.2 mbps (everything else was left at default).
In Network > QoS, we added interface eth1/1 with Egress Max = 1000 mbps, assigned Clear Text to our QoS Profile, and in the Clear Text tab, we created a new rule with our same QoS Profile and assigned it to the VLAN interface.
We create a QoS Policy -> Source: Inside, Destination: Outside, Application&Service: Any, Class: 1

In theory, this is a straightforward configuration, but traffic is not being shaped. In Network > QoS > Statistics, the traffic is hitting the default class (class4) of the default group (not the one we created for Clear Text for the VLAN). Also, the Hit Counter of the QoS Policy is always at 0.

We're not seeing where we're going wrong. Any ideas?

Re: Configuring QoS on VLAN interface

OtakarKlier — Thu, 18 Nov 2021 17:05:25 GMT

Hello,

I'm sure you've found this article and double checked the settings. Maybe time for a support ticket?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClS0CAK

Just a thought.

Re: Configuring QoS on VLAN interface

durgasety — Sun, 21 Nov 2021 06:56:30 GMT

Thanks! Having similar issues but got it fixed through https://mcdvoiceonline.xyz/ Knowledgebase.

Re: Configuring QoS on VLAN interface

echahine — Sat, 20 Nov 2021 12:05:05 GMT

Yes. Of course, I checked this knowledgebase article. Again, it only indicates how to set up QoS on a physical interface, not VLANs.

However, I noticed something. According to this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UPaCAM&lang=en_US%E2%80%A9 there are selected models where you can apply QoS on sub-interfaces, I was wondering if it is the same behavior for VLANs...

Re: Configuring QoS on VLAN interface

BPry — Sat, 20 Nov 2021 17:14:41 GMT

@echahine,

You can't enable QoS across VLAN interface. You can apply QoS on sub-interfaces on PA-3200, PA-5200, and PA-7000* series equipment but that still doesn't give you the ability to enable it on the VLAN interface.