Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

QOS over ISA VPN tunnel

Hello,

Has anyone implemented QOS for ISA-terminated VPN tunnel? For Cisco VPN tunnel, I would have to preclassify traffic to be given priority, but how is this done in ISA?

-Shikamaru

1 REPLY
Bronze

Re: QOS over ISA VPN tunnel

These are the commands that I used to configure QoS on your IPSec Tunnel:

----------------

no crypto map mymap interface outside

no crypto isakmp enable outside

clear cry isa sa

clear cry ips sa

clear cry ips sa coun

class-map L2L01-Voice

description "This class-map matches all dscp ef traffic for tunnel-grp 134.71.2.1"

match dscp ef

match tunnel-group 134.71.2.1

exit

class-map L2L01-BestEffort

description "This class-map matches all best-effort traffic for tunnel-grp 134.71.2.1"

match tunnel-group 134.71.2.1

match flow ip destination-address

exit

policy-map qos

class L2L01-Voice

priority

exit

class L2L01-BestEffort

police output 200000 37500

class class-default

police output 1000000 37500

exit

exit

priority-queue outside

queue-limit 2048

exit

service-policy qos interface outside

crypto map mymap interface outside

crypto isakmp enable outside

170
Views
0
Helpful
1
Replies
CreatePlease to create content