cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
262
Views
0
Helpful
1
Replies

QOS over ISA VPN tunnel

shikamarunara
Level 4
Level 4

Hello,

Has anyone implemented QOS for ISA-terminated VPN tunnel? For Cisco VPN tunnel, I would have to preclassify traffic to be given priority, but how is this done in ISA?

-Shikamaru

1 Reply 1

hadbou
Level 5
Level 5

These are the commands that I used to configure QoS on your IPSec Tunnel:

----------------

no crypto map mymap interface outside

no crypto isakmp enable outside

clear cry isa sa

clear cry ips sa

clear cry ips sa coun

class-map L2L01-Voice

description "This class-map matches all dscp ef traffic for tunnel-grp 134.71.2.1"

match dscp ef

match tunnel-group 134.71.2.1

exit

class-map L2L01-BestEffort

description "This class-map matches all best-effort traffic for tunnel-grp 134.71.2.1"

match tunnel-group 134.71.2.1

match flow ip destination-address

exit

policy-map qos

class L2L01-Voice

priority

exit

class L2L01-BestEffort

police output 200000 37500

class class-default

police output 1000000 37500

exit

exit

priority-queue outside

queue-limit 2048

exit

service-policy qos interface outside

crypto map mymap interface outside

crypto isakmp enable outside

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: