QOS on Tunnel

Just Kennie · ‎02-24-2009

I have a router at the HQ connecting to the one at the branch. I configured a tunnel between them...(int tun 0). Now I need to do QoS CB Marking on the traffic going from the HQ to the branch. My challenges are

1. Will the traffic be automatically encryted as it go through the tunnel

2. If yes, how will I do CB Marking since the packet will have been encryted

3. The tunnel wont allow to apply the service policy,how will I go about it.

Joseph W. Doherty · ‎02-24-2009

#1 Depends on the tunnel

#2 Mark on device ingress, mark on tunnel egress (supported on some devices' IOSs, I believe), mark on interface egress after using QoS pre-classify(?)

#3 Mark on device ingress, mark on interface egress after using QoS pre-classify(?)

bmcginn · ‎02-24-2009

Hi there,

The original TOS byte from the IP packet is automatically copied into the new Tunnel header. Having said that, the qos pre-classify command instructs the router to take a copy of the original packet, put it in memory and perform the QoS functions from information in that copy.

This link may help:

http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfvpn.html

or this link may help:

http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a008017405e.shtml