Voice Quality Collapse Because Video Is Being Classified as EF
An MX PE sells a 10 Gbps IP transit port on ge-0/0/1 to an enterprise. CoS is a single-level design: a DSCP classifier maps EF (46) to forwarding class ef, AF41 to af41, and everything else to be; the ef scheduler is strict-high with a transmit-rate ceiling of 500 Mbps, af41 gets 2 Gbps, and be takes the remainder. The contract guarantees 300 Mbps of EF treatment. The customer reports voice MOS collapsing between 14:00 and 16:00 on weekdays. During that window show interfaces queue ge-0/0/1 shows about 700 Mbps offered to ef with roughly 200 Mbps dropped, be and af41 well inside their rates, aggregate output about 6.5 Gbps, and no interface errors or discards at the physical level. Last month the customer rolled out video conferencing; the vendor documentation states its media endpoints mark all RTP with DSCP 46, and the customer will not change endpoint markings.
1. State the most likely root cause and the verification you would do before changing any configuration.
Read the worked answer
The suspicious number is the offer rate: ef is receiving 700 Mbps while the contract only guarantees 300 Mbps of voice. The ef queue is strict-high with a 500 Mbps ceiling, so everything above the ceiling is tail-dropped, and voice shares that drop with whatever else was admitted to ef. Nothing is wrong with the physical link (6.5 Gbps on 10 Gbps) or with be/af41; the problem is classification, not scheduling capacity.
Verify in this order:
show class-of-service interface ge-0/0/1- confirm which classifier is attached to the unit; a lonedscpBA classifier is the likely answer.show class-of-service classifier name <name>- show that DSCP 46 maps toef. Once you see that, any sender marking 46 gets EF treatment.show interfaces queue ge-0/0/1at 14:00 versus 09:00 - the delta inefthroughput should match the video call volume, not the voice volume.- If you need hard proof of the source, apply a temporary counting filter on the ingress unit matching DSCP 46 and the video subnet, and read
show firewallcounters.
Do not raise the ef ceiling as the first action; that would give video strict priority over the customer's business traffic and hide the real defect.
2. Give the remediation you would implement and explain why it is preferable to simply raising the EF ceiling.
Read the worked answer
Reclassify the video before it reaches the ef queue. Because the customer will not change markings, use a multifield classifier: a firewall filter on the ingress unit that matches the video source addresses (or the video signalling/media flows) and sets forwarding-class af41, applied as an input filter so it overrides the behavior-aggregate classifier result.
set firewall family inet filter VIDEO-RECLASS term v1 from source-address 203.0.113.0/24
set firewall family inet filter VIDEO-RECLASS term v1 then forwarding-class af41
set firewall family inet filter VIDEO-RECLASS term v1 then accept
set firewall family inet filter VIDEO-RECLASS term rest then accept
set interfaces ge-0/0/1 unit <n> family inet filter input VIDEO-RECLASS
Why not raise the ceiling: the 500 Mbps cap is the only thing protecting af41 and be from a strict-high queue. Raising it to 800 Mbps would admit the video as strict-priority traffic and let a non-contracted flow starve business traffic during peak, and it would breach the 300 Mbps EF guarantee by allowing far more traffic into that class. Reclassification brings ef back to roughly 280โ300 Mbps of genuine voice, which fits comfortably under the existing ceiling and removes the drops without touching the scheduler.
3. How would you validate the change and what would you watch over the following days?
Read the worked answer
Immediate validation, after commit confirmed:
show firewallon the PE - the VIDEO-RECLASS term counters must be incrementing, proving the filter is matching and applied on the right unit.show class-of-service interface ge-0/0/1- confirm the filter is attached to the correct logical unit and that the DSCP classifier is still present for everything else.show interfaces queue ge-0/0/1at 14:00 -efshould now sit near 300 Mbps with zero or near-zero drops;af41should rise by roughly the video volume;beshould be unaffected.- Confirm no unintended drops: the
rest then acceptterm must exist, otherwise the filter silently discards all non-video traffic on that port.
Ongoing:
- Watch
efdrop counters daily for a week and correlate any residual loss with the 14:00โ16:00 window. - Watch
af41against its 2 Gbps rate; if the video estate grows,af41will start dropping and the answer is capacity, not reclassification. - Confirm with the customer that MOS recovered and that it stays recovered during a larger all-hands call, since that is when the video load and voice load peak together.
- If a second video vendor appears later, extend the filter rather than relaxing the EF ceiling.