QOS over ISA VPN tunnel

Unanswered Question
Dec 12th, 2007
User Badges:

Hello,

Has anyone implemented QOS for ISA-terminated VPN tunnel? For Cisco VPN tunnel, I would have to preclassify traffic to be given priority, but how is this done in ISA?


-Shikamaru

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
hadbou Wed, 12/19/2007 - 12:02
User Badges:
  • Bronze, 100 points or more

These are the commands that I used to configure QoS on your IPSec Tunnel:

----------------

no crypto map mymap interface outside

no crypto isakmp enable outside


clear cry isa sa

clear cry ips sa

clear cry ips sa coun


class-map L2L01-Voice

description "This class-map matches all dscp ef traffic for tunnel-grp 134.71.2.1"

match dscp ef

match tunnel-group 134.71.2.1

exit


class-map L2L01-BestEffort

description "This class-map matches all best-effort traffic for tunnel-grp 134.71.2.1"

match tunnel-group 134.71.2.1

match flow ip destination-address

exit


policy-map qos

class L2L01-Voice

priority

exit

class L2L01-BestEffort

police output 200000 37500

class class-default

police output 1000000 37500

exit

exit

priority-queue outside

queue-limit 2048

exit


service-policy qos interface outside


crypto map mymap interface outside

crypto isakmp enable outside


Actions

This Discussion