cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
344
Views
0
Helpful
3
Replies

Qos on IPSEC

vidyaprakash
Level 1
Level 1

Hi ,

Would it possible to configure the Qos for the IPSEC packets received in the router ?

3 Replies 3

royalblues
Level 10
Level 10

If your device supports NBAR, you can do something like this

interface

ip nbar protocol-discovery

service-policy output WAN-IPSEC

class-map match-all IPSEC

match protocol ipsec

policy-map WAN-IPSEC

class IPSEC

bandwidth 2000

class class-default

fair-queue

HTH

Narayan

Hi Narayan,

Thanks for the reply.

In the IPSEC packets , there is voice and data packets , for the voice i want to do EF marking and data is AF marking.

I dont want to mark IPSEC packets as such.

This is not possible if you are using ESP in IPSEC. The very essence of doing IPSEC is to encrypt the data contained withtin the packet.

You might want to have a look QoS-preclassify

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087ac4.html

HTH

Narayan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco