Configuring QoS on VLAN interface

[echahine]

Hi guys,

We want to apply QoS on our inside zone for downloads, but it's not hitting the QoS Policy, here's our conifg:

• For the Inside Zone (users zone) we have an L2 interface eth1/1 and one VLAN interface linked to the subnet.
• We created a QoS Profile with Class 1 Egress Max = 0.2 mbps (everything else was left at default).
• In Network > QoS, we added interface eth1/1 with Egress Max = 1000 mbps, assigned Clear Text to our QoS Profile, and in the Clear Text tab, we created a new rule with our same QoS Profile and assigned it to the VLAN interface.
• We create a QoS Policy -> Source: Inside, Destination: Outside, Application&Service: Any, Class: 1

In theory, this is a straightforward configuration, but traffic is not being shaped. In Network > QoS > Statistics, the traffic is hitting the default class (class4) of the default group (not the one we created for Clear Text for the VLAN). Also, the Hit Counter of the QoS Policy is always at 0.

We're not seeing where we're going wrong. Any ideas?

[OtakarKlier]

Hello,

I'm sure you've found this article and double checked the settings. Maybe time for a support ticket?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClS0CAK

Just a thought.

[durgasety]

Thanks! Having similar issues but got it fixed through https://mcdvoiceonline.xyz/  Knowledgebase.

[echahine]

Yes. Of course, I checked this knowledgebase article. Again, it only indicates how to set up QoS on a physical interface, not VLANs.

However, I noticed something. According to this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UPaCAM&lang=en_US%E2%80%A... there are selected models where you can apply QoS on sub-interfaces, I was wondering if it is the same behavior for VLANs...

[BPry]

@echahine,

You can't enable QoS across VLAN interface. You can apply QoS on sub-interfaces on PA-3200, PA-5200, and PA-7000* series equipment but that still doesn't give you the ability to enable it on the VLAN interface.