QOS Config

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

QOS Config

L1 Bithead

Hi,

     I want to define separate profiles for upload and download for sub-interface, I couldn't succeed, can you help with the issue?
(ip subnets and zone is correct)

 if the TEST_DOWLOAND RULE is top it working for dowloand qos but not working UPLOAD qos rule. firefox_t4jDLdAYiB.png

 if the TEST_UPLOAD RULE is top it working for UPLOADqos but not working DOWLOAND qos rule.

firefox_HsrhiQvNv3.pngfirefox_OSvinKUDMi.png
 
 
 


Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.
1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

Same session can't be classified to both class 2 and class 3 at the same time.

First QoS policy that matches will be applied and no further policies checked.

Leave only 1 QoS policy.

Set both Download and Upload profiles to same class (same you use in QoS policy).

 

It is always good to have class 4 in QoS profile as best practice even if you don't use it in policies as it is default class.

 

Also do they need real-time priority?

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

View solution in original post

4 REPLIES 4

Cyber Elite
Cyber Elite

Same session can't be classified to both class 2 and class 3 at the same time.

First QoS policy that matches will be applied and no further policies checked.

Leave only 1 QoS policy.

Set both Download and Upload profiles to same class (same you use in QoS policy).

 

It is always good to have class 4 in QoS profile as best practice even if you don't use it in policies as it is default class.

 

Also do they need real-time priority?

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Cyber Elite
Cyber Elite

as @Raido_Rattameister mentioned you can't apply 2 different classes to the same traffic

you also need to take into account QoS is only applied in 1 direction (egress) at a time, so you need to have a QoS profile on the external interface for the upload, and a profile on the internal interface for the download. since you can only classify a flow once, you need to make sure the same class is represented in both interfaces and has the appropriate configuration for what you want to apply in that 'direction' (ie you can set a max of 40 on class 3 in the upload profile and a max of 1000 on class 3 in the download profile)

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

"Also do they need real-time priority? - No, I dn't need i'll change it.

 

Thank your help i get it now it's working.

 

I want to do 10 qos profil like that QOS 1= 1 dowloand and upload QOS 2= 2 dowloand and upload ...... QOS 10= 50+ dowloand and upload. When i do this it's not working.

mcterzioglu_2-1671089305824.png

 

mcterzioglu_0-1671089258707.png

mcterzioglu_4-1671089524226.png

 

 

 

if i change (NETWORK>OQS>INTERFACE>DEFAULT PROFILE>CLEAR TEXT) clear text profile just work this QOS profile the other not working.

mcterzioglu_3-1671089355833.png

 

In some sources, it says that you can only do subinterface qos in pa 3000, 5000 and 7000 series. My device is pa-440 can i do qos on sub-interface?

 

 

 

 

 

 

 

 

 

 

Thank you for help, i understandclearly now.
  • 1 accepted solution
  • 3322 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!