Configuring QoS on VLAN interface

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Configuring QoS on VLAN interface

L2 Linker

Hi guys,

We want to apply QoS on our inside zone for downloads, but it's not hitting the QoS Policy, here's our conifg:

  • For the Inside Zone (users zone) we have an L2 interface eth1/1 and one VLAN interface linked to the subnet.
  • We created a QoS Profile with Class 1 Egress Max = 0.2 mbps (everything else was left at default).
  • In Network > QoS, we added interface eth1/1 with Egress Max = 1000 mbps, assigned Clear Text to our QoS Profile, and in the Clear Text tab, we created a new rule with our same QoS Profile and assigned it to the VLAN interface.
  • We create a QoS Policy -> Source: Inside, Destination: Outside, Application&Service: Any, Class: 1

In theory, this is a straightforward configuration, but traffic is not being shaped. In Network > QoS > Statistics, the traffic is hitting the default class (class4) of the default group (not the one we created for Clear Text for the VLAN). Also, the Hit Counter of the QoS Policy is always at 0.

 

We're not seeing where we're going wrong. Any ideas?

 

4 REPLIES 4

Cyber Elite
Cyber Elite

Hello,

I'm sure you've found this article and double checked the settings. Maybe time for a support ticket?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClS0CAK

 

Just a thought.

Thanks! Having similar issues but got it fixed through https://mcdvoiceonline.xyz/  Knowledgebase.

Yes. Of course, I checked this knowledgebase article. Again, it only indicates how to set up QoS on a physical interface, not VLANs.

However, I noticed something. According to this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UPaCAM&lang=en_US%E2%80%A... there are selected models where you can apply QoS on sub-interfaces, I was wondering if it is the same behavior for VLANs...

Cyber Elite
Cyber Elite

@echahine,

You can't enable QoS across VLAN interface. You can apply QoS on sub-interfaces on PA-3200, PA-5200, and PA-7000* series equipment but that still doesn't give you the ability to enable it on the VLAN interface. 

  • 3229 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!