According to fundamental design principles, which location is best for implementing Cisco QoS policies?