Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

QoS on site-site vpns


I have the following challenge:

My Cisco ASA5505, has two working site-site vpn tunnels. Over these tunnels (remote sites are also ASA5505), i want to run both data and voice traffic. I want to apply QoS on these vpn's, so that my voice traffic wont be affected by to much data going through.

I have looked at some simple QoS samples, but i'm a bit stuck, since this involves multiple vpns, not only one.

Any help is appreciated

Best regards



Re: QoS on site-site vpns

Hi OV,

Below mentioned link should be able to give you some insight..

HTH..rate if helpful...

Re: QoS on site-site vpns

also this link contin details about bandwidth management in ASA:

New Member

Re: QoS on site-site vpns

Ok, i've looked at the links.

Is this a valid configuration? I dont have the ASA's here right now, so i cant test it:


class-map Voice

match dscp ef

match tunnel-group tunnel-grp1

match tunnel-group tunnel-grp2

policy-map Voicepolicy

class Voice


service-policy Voicepolicy interface outside


Can i do a double tunnel-group match?

Re: QoS on site-site vpns

not practtical

becase this mean it should be the traffic from both tunnel-groups

while u need to match each one saparate

and make sure u have the voice marked correctly as EF in ur network

New Member

Re: QoS on site-site vpns

Ok, i need to match each tunnel-group separate, and apply the qos on the outside interface. How can i do this, when i can only apply one policy on the interface at a time?

New Member

Re: QoS on site-site vpns

You might be able to use the qos-group feature to mark each individual tunnel at the spokes, this way you could employ QOS at the hub based on these cos-groups.

New Member

Re: QoS on site-site vpns

Any chance of elaborating a bit on this?