12-02-2007 11:20 PM - edited 03-03-2019 07:45 PM
Hi ,
Would it possible to configure the Qos for the IPSEC packets received in the router ?
12-03-2007 12:10 AM
If your device supports NBAR, you can do something like this
interface
ip nbar protocol-discovery
service-policy output WAN-IPSEC
class-map match-all IPSEC
match protocol ipsec
policy-map WAN-IPSEC
class IPSEC
bandwidth 2000
class class-default
fair-queue
HTH
Narayan
12-03-2007 12:15 AM
Hi Narayan,
Thanks for the reply.
In the IPSEC packets , there is voice and data packets , for the voice i want to do EF marking and data is AF marking.
I dont want to mark IPSEC packets as such.
12-03-2007 12:22 AM
This is not possible if you are using ESP in IPSEC. The very essence of doing IPSEC is to encrypt the data contained withtin the packet.
You might want to have a look QoS-preclassify
http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087ac4.html
HTH
Narayan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide