Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Qos on IPSEC

Hi ,

Would it possible to configure the Qos for the IPSEC packets received in the router ?

3 REPLIES

Re: Qos on IPSEC

If your device supports NBAR, you can do something like this

interface

ip nbar protocol-discovery

service-policy output WAN-IPSEC

class-map match-all IPSEC

match protocol ipsec

policy-map WAN-IPSEC

class IPSEC

bandwidth 2000

class class-default

fair-queue

HTH

Narayan

New Member

Re: Qos on IPSEC

Hi Narayan,

Thanks for the reply.

In the IPSEC packets , there is voice and data packets , for the voice i want to do EF marking and data is AF marking.

I dont want to mark IPSEC packets as such.

Re: Qos on IPSEC

This is not possible if you are using ESP in IPSEC. The very essence of doing IPSEC is to encrypt the data contained withtin the packet.

You might want to have a look QoS-preclassify

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087ac4.html

HTH

Narayan

125
Views
0
Helpful
3
Replies