QOS on Tunnel

Unanswered Question
Feb 24th, 2009
User Badges:

I have a router at the HQ connecting to the one at the branch. I configured a tunnel between them...(int tun 0). Now I need to do QoS CB Marking on the traffic going from the HQ to the branch. My challenges are

1. Will the traffic be automatically encryted as it go through the tunnel

2. If yes, how will I do CB Marking since the packet will have been encryted

3. The tunnel wont allow to apply the service policy,how will I go about it.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Joseph W. Doherty Tue, 02/24/2009 - 16:46
User Badges:
  • Super Bronze, 10000 points or more

#1 Depends on the tunnel

#2 Mark on device ingress, mark on tunnel egress (supported on some devices' IOSs, I believe), mark on interface egress after using QoS pre-classify(?)

#3 Mark on device ingress, mark on interface egress after using QoS pre-classify(?)

bmcginn Tue, 02/24/2009 - 17:51
User Badges:
  • Bronze, 100 points or more

Hi there,

The original TOS byte from the IP packet is automatically copied into the new Tunnel header. Having said that, the qos pre-classify command instructs the router to take a copy of the original packet, put it in memory and perform the QoS functions from information in that copy.

This link may help:


or this link may help:



This Discussion