Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

qos pre-classify

Can qos pre-classify be enable over an IPSec VPN running from a 3825 ISR router to a VPN concentrator? I know it will work over GRE and IPSec site-to-site VPN's where the termination point is a router but I'm not sure about the concentrator. Any thoughts??

1 REPLY
New Member

Re: qos pre-classify

I don't think my response directly answers you question, but I can share my experience with qos pre-classify. Likewise we run it on router to router ipsec vpn tunnels, and define qos marking and honoring for LLQ.

Regarding the 3000 Concentrator I cannot say directly, however, I do know that on the ASA firewalls (next gen of VPN Concentrator/PIX), you can honor qos marked traffic or prioritize it into vpn tunnels that terminate on the device via acl's. Since the ASA's don't use tunnel interfaces (tunnel-groups instead), the qos voip assignments are placed on the physical interface, but is applied to the rtp stream. The method below rate limits all non voice traffic, then llq prioritizes the rtp stream based on either the dscp value or the rtp udp range. Below is a qos example on the ASA5505 for a DSL line with 768kb download, 128kb upload, allowcating 64-80kb for a G729 call...not sure how it would apply to the VPN Conecntrator:

class-map non_voice

match any

class-map voice-rtp-non-marked

description Match non-Marked VoIP (RTP) packets

match rtp 16384 16383

class-map voice-dscp-marked

description match Marked VoIP (RTP) packets

match dscp ef

policy-map VoIP-outside

class non_voice

police input 704000 (rate limit non voice in bps)

police output 64000 (rate limit non voice in bps)

class voice-dscp-marked

priority

class voice-rtp-non-marked

priority

priority-queue outside

service-policy VoIP-outside interface outside

I didn't cover the router pre-qos side..I figure you're solid on that.

Hope this helps...if so please rate.

-Scott

595
Views
4
Helpful
1
Replies
CreatePlease to create content