Hello,
I am looking for information on prioritizing our IPSEC vpn traffic over all other traffic on our Internet connection. We have 10-15 IPSEC/GRE site-to-site VPNs connecting back to our central office. We have a non-Cisco firewall connected between the Internet and our network. Our VPN router is located behind the Firewall and is statically NATed to the Internet for inbound IPSEC connections. All traffic going to the firewall and out to the Internet passes through our Catalyst 5509 with a route switch module. Multilayer switching is enabled on the RSM/switch. Occasionally an internal user will start a large ftp and cause latency on the VPNs to reach 500ms + where 60-70ms is normal.
Is there a way, using the hardware we have, to create some type of QoS policy to reserve bandwidth for the VPN traffic? Also, where would one configure this QoS policy in this scenario, on the internal router/RSM, the Catalyst 5509 itself, or on a separate router outside the firewall?
Thanks for your insight.
Billy
