royalblues Mon, 12/03/2007 - 00:10

If your device supports NBAR, you can do something like this


interface

ip nbar protocol-discovery

service-policy output WAN-IPSEC


class-map match-all IPSEC

match protocol ipsec


policy-map WAN-IPSEC

class IPSEC

bandwidth 2000

class class-default

fair-queue


HTH

Narayan

vidyaprakash Mon, 12/03/2007 - 00:15

Hi Narayan,

Thanks for the reply.

In the IPSEC packets , there is voice and data packets , for the voice i want to do EF marking and data is AF marking.

I dont want to mark IPSEC packets as such.



Actions

This Discussion