Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

2 Vpn Tunnels with QOS

Hello Experts,

I have a simple doubt for you :-)

I have a topology where 2 routers are connecting via VPN to my Central Router.

I need to implement QOS for video on my Spoke (external) routers.

After some research I found the configuration that goes something like this:

class-map match-all Video

match access-group 199

!

!

policy-map QOS-Video

class Video

priority percent 50

class class-default

fair-queue

Then use the "qos pre-classify" on the crypto map.

After all this...my question is this:

Do I need to set up QOS on my receiving router (Hub) as well or I'm I fine just receiving the VPN tunnels????

2 REPLIES

Re: 2 Vpn Tunnels with QOS

Hi Ran

Qos should be configured end to end on both the routers.

So you need to have same kinda policies configured in your remote end router too..

regds

Community Member

Re: 2 Vpn Tunnels with QOS

Thanks for your information spremkumar. That leaves me with a doubt. Any idea on how I should configure QOS on my

receiving (main/hub) router, or a links that gives me an explanation. The thing that tricks me is the following,

1- On the receiving router how do I configure the qos for 2 routers?

Do I need to create 2 service-policy and apply 2 service policy to the interface, or is 1 ok???

2- Do I need to apply the policy input instead of output?

3- Do I need to configure the policy on the receiving router even though I won't send video traffic back???

For example, if I have this 2 crypto maps on the main router

Spoke

crypto map 3desmap 18 ipsec-isakmp

set peer 1.1.1.1

set transform-set test

match address 1_vpn

crypto map 3desmap 19 ipsec-isakmp

set peer 2.2.2.2

set transform-set transform

match address 2_vpn

access-l 1_vpn permit ip 10.1.1.0 0.0.0.255 10.10.10.0 0.0.0.255

access-l 2_vpn permit ip 10.1.1.0 0.0.0.255 10.5.5.0 0.0.0.255

Will this policy work???------------------

Main router to peer

access-l 199 permit ip 10.1.1.0 0.0.0.255 10.10.10.0 0.0.0.255

access-l 200 permit ip 10.1.1.0 0.0.0.255 10.5.5.0 0.0.0.255

class-map match-all Video

match access-group 199

class-map match-all Video2

match access-group 200

!

!

policy-map QOS-Video

class Video

priority percent 50

class Video2

priority percent 20

class class-default

fair-queue

interface fa0/0

service-policy INPUT QOS-Video

I appreciate all your time in helping out.

162
Views
0
Helpful
2
Replies
CreatePlease to create content