Overview
QoS prioritizes delay-sensitive traffic (voice, video) over bulk data through classification, marking, queuing, and shaping. CCNA focuses on the classify → mark → queue pipeline and trust boundaries at the access layer.
Why QoS exists
Without QoS, all traffic competes equally for bandwidth. Voice and video are delay-, jitter-, and loss-sensitive; large data transfers are greedy and delay-tolerant. QoS provides managed unfairness — priority to critical applications.

QoS pipeline — classify, mark, queue, and optionally shape or police traffic.
Supplementary figure from Panagiss CCNAmd
One-way requirements (voice/video)
| Metric | Voice target | Video target |
|---|---|---|
| Latency (delay) | ≤ 150 ms | ≤ 150 ms |
| Jitter | ≤ 30 ms | ≤ 30 ms |
| Loss | ≤ 1% | 0.1–1% |
These are one-way — each direction must meet targets independently.
Traffic types
| Type | Pattern | Sensitivity | Transport |
|---|---|---|---|
| Data | Bursty, greedy | Drop/delay tolerant | TCP (retransmits) |
| Voice | Smooth, steady | Drop/delay sensitive | UDP (no retransmit) |
| Video | Bursty, bandwidth-hungry | Delay sensitive | UDP |
Interactive data (Telnet) is more delay-sensitive than bulk transfer (FTP download).
Congestion
When output rate exceeds link capacity, packets queue. Queues cause delay; changing queue depth causes jitter; full queues cause drops. Voice calls degrade quickly under congestion without QoS.

Congestion — packets wait in queues, increasing delay and jitter.
Supplementary figure from Panagiss CCNAmd
The QoS pipeline
- Classification — identify traffic (ACL, NBAR, CoS, DSCP)
- Marking — label packets (CoS at L2, DSCP at L3)
- Queuing / scheduling — prioritize dequeue order
- Shaping / policing — rate-limit traffic
Classify and mark as close to the source as possible (edge of network). Every hop uses the marking to apply consistent treatment.
Classification and marking
Layer 2 — CoS (Class of Service)
802.1Q trunk headers include a 3-bit CoS field (values 0–7):
| CoS | Typical use |
|---|---|
| 0 | Best effort (default) |
| 5 | Voice bearer |
| 3 | Voice signaling |
| 6–7 | Reserved for network control |
CoS only exists on tagged frames — requires a trunk between phone and switch (or switch and router).
Layer 3 — DSCP
The IPv4/IPv6 DSCP field uses 6 bits (64 values) in the former ToS byte:
| Marking | Binary (first 6 bits) | Decimal | Use |
|---|---|---|---|
| Best Effort | 000000 | 0 | Default |
| CS3 (Class Selector 3) | 011000 | 24 | Signaling |
| AF31 | 011010 | 26 | Mission-critical data |
| EF (Expedited Forwarding) | 101110 | 46 | Voice bearer |
| AF41 | 100100 | 34 | SD video |
IP phones mark signaling as CoS 3 / DSCP 24 (CS3) and voice payload as CoS 5 / DSCP 46 (EF). Know these pairs for the exam.

DSCP markings — EF (46) for voice, CS3 (24) for signaling.
Supplementary figure from Panagiss CCNAmd
Assured Forwarding (AF) classes use the first 3 bits for class (AF1–AF4) and next 2 bits for drop probability — higher drop probability = more likely to be discarded under congestion.
Other classification methods
| Method | Layer | Example |
|---|---|---|
| ACL | L3/L4 | Match TCP port 22 for SSH |
| NBAR | L3–L7 | Application signatures (Cisco downloadable) |

NBAR — deep inspection to recognize applications for classification.
Supplementary figure from Panagiss CCNAmd
Trust boundaries
The trust boundary is where the network decides whether to accept or rewrite QoS markings from an endpoint.
| Domain | Examples | Trust markings? |
|---|---|---|
| Untrusted | PCs, printers | No — switch re-marks or uses default |
| Trusted | IP phones, managed switches | Yes — honor CoS/DSCP from phone |
By default, Cisco switches do not trust a PC's DSCP/CoS. Configure mls qos trust cos or mls qos trust dscp on ports connected to IP phones (often with switchport voice vlan).
Mark at the edge; classify on every device along the path using the marking.
MQC — Modular QoS CLI
Cisco QoS uses three building blocks:
| Component | Config mode | Purpose |
|---|---|---|
| Class map | class-map | Define traffic to match |
| Policy map | policy-map | Define action (mark, queue, police) |
| Service policy | service-policy | Apply policy to interface |

MQC structure — class-map → policy-map → service-policy.
Supplementary figure from Panagiss CCNAmd
class-map match-all VOICE match access-group name VOICE-ACL ! policy-map WAN-EDGE class VOICE set dscp ef class class-default fair-queue ! interface GigabitEthernet0/0 service-policy output WAN-EDGE
Full MQC policy config is awareness-level for CCNA — focus on concepts and markings.
Queuing mechanisms
Queuing activates during congestion (output queue full). Scheduling decides dequeue order.
| Algorithm | Behavior | Drawback |
|---|---|---|
| FIFO | First in, first out | Large packets delay voice |
| PQ (Priority Queue) | Strict high/medium/normal/low | Lower queues starve |
| WFQ | Fair share per flow; favors small packets | No bandwidth guarantees |
| CBWFQ | Guaranteed bandwidth per class | No strict latency guarantee |
| LLQ | CBWFQ + priority queue for voice | CCNA gold standard for voice |
LLQ (Low Latency Queuing) gives voice a strict priority queue with policing — voice goes first, but capped so it cannot starve other traffic.

Queuing — priority traffic dequeued before best-effort during congestion.
Supplementary figure from Panagiss CCNAmd
WRED (awareness)
Weighted Random Early Detection randomly drops packets before the queue is full to signal TCP senders to slow down — avoids tail-drop synchronization. Typically applied to TCP data, not UDP voice.
Shaping vs policing
Both measure traffic rate against a configured limit:
| Tool | Excess traffic | Typical placement |
|---|---|---|
| Policing | Drops or re-marks | Ingress — drop early, save resources |
| Shaping | Buffers/delays | Egress — smooth bursts to meet SLA |

Policing vs shaping — drop vs buffer excess traffic.
Supplementary figure from Panagiss CCNAmd
Tri-color policing: conform (transmit) → exceed (re-mark) → violate (drop).
AutoQoS (awareness)
Cisco AutoQoS macros generate MQC policies for common designs (voice + data). Useful in labs; understand what it accomplishes, not every macro keyword.
End-to-end voice QoS checklist
- Phone marks voice EF / CoS 5 and signaling CS3 / CoS 3
- Access switch trusts phone CoS on voice VLAN port
- Queuing (LLQ) on WAN edge gives priority to EF
- Bandwidth guarantees for signaling and video classes
- Avoid congestion where possible; QoS mitigates, does not create bandwidth
See Voice VLAN topic for phone/switch integration.
Exam checklist
| Trap | Key fact |
|---|---|
| EF DSCP value | 46 (binary 101110) |
| Voice CoS | 5 bearer, 3 signaling |
| CoS field location | 802.1Q tag (L2) — needs trunk |
| DSCP field names | IPv4 ToS byte; IPv6 Traffic Class |
| Trust boundary | Usually at access switch uplink / phone port |
| LLQ vs CBWFQ | LLQ adds strict priority queue for real-time |
| Policing vs shaping | Police drops; shape delays |
| Queuing when | Only during congestion |