All topic guides
IP ServicesAmalgamated guide

Quality of Service (QoS)

Classification, marking, queuing, shaping, and trust boundaries.

How the sources were combined

Both repos have QoS markdown. Panagiss provides the classify-mark-queue pipeline diagram; jdepew88 has two QoS files with policy detail — deduplicated into one pipeline-centric guide.

Overview

QoS prioritizes delay-sensitive traffic (voice, video) over bulk data through classification, marking, queuing, and shaping. CCNA focuses on the classify → mark → queue pipeline and trust boundaries at the access layer.

Why QoS exists

Without QoS, all traffic competes equally for bandwidth. Voice and video are delay-, jitter-, and loss-sensitive; large data transfers are greedy and delay-tolerant. QoS provides managed unfairness — priority to critical applications.

QoS pipeline — classify, mark, queue, and optionally shape or police traffic.

QoS pipeline — classify, mark, queue, and optionally shape or police traffic.

Supplementary figure from Panagiss CCNAmd

One-way requirements (voice/video)

MetricVoice targetVideo target
Latency (delay)≤ 150 ms≤ 150 ms
Jitter≤ 30 ms≤ 30 ms
Loss≤ 1%0.1–1%

These are one-way — each direction must meet targets independently.

Traffic types

TypePatternSensitivityTransport
DataBursty, greedyDrop/delay tolerantTCP (retransmits)
VoiceSmooth, steadyDrop/delay sensitiveUDP (no retransmit)
VideoBursty, bandwidth-hungryDelay sensitiveUDP

Interactive data (Telnet) is more delay-sensitive than bulk transfer (FTP download).

Congestion

When output rate exceeds link capacity, packets queue. Queues cause delay; changing queue depth causes jitter; full queues cause drops. Voice calls degrade quickly under congestion without QoS.

Congestion — packets wait in queues, increasing delay and jitter.

Congestion — packets wait in queues, increasing delay and jitter.

Supplementary figure from Panagiss CCNAmd

The QoS pipeline

  1. Classification — identify traffic (ACL, NBAR, CoS, DSCP)
  2. Marking — label packets (CoS at L2, DSCP at L3)
  3. Queuing / scheduling — prioritize dequeue order
  4. Shaping / policing — rate-limit traffic

Classify and mark as close to the source as possible (edge of network). Every hop uses the marking to apply consistent treatment.

Classification and marking

Layer 2 — CoS (Class of Service)

802.1Q trunk headers include a 3-bit CoS field (values 0–7):

CoSTypical use
0Best effort (default)
5Voice bearer
3Voice signaling
6–7Reserved for network control

CoS only exists on tagged frames — requires a trunk between phone and switch (or switch and router).

Layer 3 — DSCP

The IPv4/IPv6 DSCP field uses 6 bits (64 values) in the former ToS byte:

MarkingBinary (first 6 bits)DecimalUse
Best Effort0000000Default
CS3 (Class Selector 3)01100024Signaling
AF3101101026Mission-critical data
EF (Expedited Forwarding)10111046Voice bearer
AF4110010034SD video
Info

IP phones mark signaling as CoS 3 / DSCP 24 (CS3) and voice payload as CoS 5 / DSCP 46 (EF). Know these pairs for the exam.

DSCP markings — EF (46) for voice, CS3 (24) for signaling.

DSCP markings — EF (46) for voice, CS3 (24) for signaling.

Supplementary figure from Panagiss CCNAmd

Assured Forwarding (AF) classes use the first 3 bits for class (AF1–AF4) and next 2 bits for drop probability — higher drop probability = more likely to be discarded under congestion.

Other classification methods

MethodLayerExample
ACLL3/L4Match TCP port 22 for SSH
NBARL3–L7Application signatures (Cisco downloadable)
NBAR — deep inspection to recognize applications for classification.

NBAR — deep inspection to recognize applications for classification.

Supplementary figure from Panagiss CCNAmd

Trust boundaries

The trust boundary is where the network decides whether to accept or rewrite QoS markings from an endpoint.

DomainExamplesTrust markings?
UntrustedPCs, printersNo — switch re-marks or uses default
TrustedIP phones, managed switchesYes — honor CoS/DSCP from phone
Trap

By default, Cisco switches do not trust a PC's DSCP/CoS. Configure mls qos trust cos or mls qos trust dscp on ports connected to IP phones (often with switchport voice vlan).

Mark at the edge; classify on every device along the path using the marking.

MQC — Modular QoS CLI

Cisco QoS uses three building blocks:

ComponentConfig modePurpose
Class mapclass-mapDefine traffic to match
Policy mappolicy-mapDefine action (mark, queue, police)
Service policyservice-policyApply policy to interface
MQC structure — class-map → policy-map → service-policy.

MQC structure — class-map → policy-map → service-policy.

Supplementary figure from Panagiss CCNAmd

MQC example — mark voice EF

class-map match-all VOICE match access-group name VOICE-ACL ! policy-map WAN-EDGE class VOICE set dscp ef class class-default fair-queue ! interface GigabitEthernet0/0 service-policy output WAN-EDGE

Full MQC policy config is awareness-level for CCNA — focus on concepts and markings.

Queuing mechanisms

Queuing activates during congestion (output queue full). Scheduling decides dequeue order.

AlgorithmBehaviorDrawback
FIFOFirst in, first outLarge packets delay voice
PQ (Priority Queue)Strict high/medium/normal/lowLower queues starve
WFQFair share per flow; favors small packetsNo bandwidth guarantees
CBWFQGuaranteed bandwidth per classNo strict latency guarantee
LLQCBWFQ + priority queue for voiceCCNA gold standard for voice

LLQ (Low Latency Queuing) gives voice a strict priority queue with policing — voice goes first, but capped so it cannot starve other traffic.

Queuing — priority traffic dequeued before best-effort during congestion.

Queuing — priority traffic dequeued before best-effort during congestion.

Supplementary figure from Panagiss CCNAmd

WRED (awareness)

Weighted Random Early Detection randomly drops packets before the queue is full to signal TCP senders to slow down — avoids tail-drop synchronization. Typically applied to TCP data, not UDP voice.

Shaping vs policing

Both measure traffic rate against a configured limit:

ToolExcess trafficTypical placement
PolicingDrops or re-marksIngress — drop early, save resources
ShapingBuffers/delaysEgress — smooth bursts to meet SLA
Policing vs shaping — drop vs buffer excess traffic.

Policing vs shaping — drop vs buffer excess traffic.

Supplementary figure from Panagiss CCNAmd

Tri-color policing: conform (transmit) → exceed (re-mark) → violate (drop).

AutoQoS (awareness)

Cisco AutoQoS macros generate MQC policies for common designs (voice + data). Useful in labs; understand what it accomplishes, not every macro keyword.

End-to-end voice QoS checklist

  1. Phone marks voice EF / CoS 5 and signaling CS3 / CoS 3
  2. Access switch trusts phone CoS on voice VLAN port
  3. Queuing (LLQ) on WAN edge gives priority to EF
  4. Bandwidth guarantees for signaling and video classes
  5. Avoid congestion where possible; QoS mitigates, does not create bandwidth

See Voice VLAN topic for phone/switch integration.

Exam checklist

TrapKey fact
EF DSCP value46 (binary 101110)
Voice CoS5 bearer, 3 signaling
CoS field location802.1Q tag (L2) — needs trunk
DSCP field namesIPv4 ToS byte; IPv6 Traffic Class
Trust boundaryUsually at access switch uplink / phone port
LLQ vs CBWFQLLQ adds strict priority queue for real-time
Policing vs shapingPolice drops; shape delays
Queuing whenOnly during congestion

Related lessons on this site

Continue in this domain

IP Services · guide 4 of 4

Sources & further reading

Panagiss CCNAmd

jdepew88 CCNA Notes (markdown)

psaumur CCNA Course Notes

Additional references

This page is an amalgamated study guide synthesized from the markdown sources above, cross-checked against Cisco's official CCNA exam topics. Verify scope before your exam date.