cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
264
Views
0
Helpful
1
Replies

QOS over ISA VPN tunnel

shikamarunara
Level 4
Level 4

Hello,

Has anyone implemented QOS for ISA-terminated VPN tunnel? For Cisco VPN tunnel, I would have to preclassify traffic to be given priority, but how is this done in ISA?

-Shikamaru

1 Reply 1

hadbou
Level 5
Level 5

These are the commands that I used to configure QoS on your IPSec Tunnel:

----------------

no crypto map mymap interface outside

no crypto isakmp enable outside

clear cry isa sa

clear cry ips sa

clear cry ips sa coun

class-map L2L01-Voice

description "This class-map matches all dscp ef traffic for tunnel-grp 134.71.2.1"

match dscp ef

match tunnel-group 134.71.2.1

exit

class-map L2L01-BestEffort

description "This class-map matches all best-effort traffic for tunnel-grp 134.71.2.1"

match tunnel-group 134.71.2.1

match flow ip destination-address

exit

policy-map qos

class L2L01-Voice

priority

exit

class L2L01-BestEffort

police output 200000 37500

class class-default

police output 1000000 37500

exit

exit

priority-queue outside

queue-limit 2048

exit

service-policy qos interface outside

crypto map mymap interface outside

crypto isakmp enable outside