10-31-2006 11:28 AM - edited 02-21-2020 01:16 AM
I have 2 sites setup with IPsec vpn between then. They are at 7.0 on the pix. How do I go about setting up the QoS for Voice between the 2 sites. Would I also have to set up QoS on the screening router??
11-02-2006 02:29 AM
Hi ,
Pls do let us know is your Voice application working fine with Ipsec bcos a real time application getting encrypted and getting decrypted will have performance issues and doing QOS is not going to help you out.
Pls share the same.
regards
vanesh k
11-02-2006 05:41 AM
Hi,
QoS is - among other things - used to sort out overload conditions. So every device will need QoS configuration if an interface can potentially be overloaded.
VoIP over IPSec can work given that the voice requirements/recommendations are met: less than 150 ms one-way delay, less than 30 ms jitter, less than 1% packet drop (ITU G.114 standard).
IPSec standard mandates, that the DSCP values from the original IP header are copied to the new IPSec header. Thus an intermediate router can implement QOS based on DSCP values, IF the markings are set properly before encryption. VoIP phones usually do this for voip traffic.
On the intermediate routers LLQ with properly set priority bandwidth to support all your voip calls would be advisable.
Regards, Martin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide