List Info

Thread: QoS on Ipsec tunnels




QoS on Ipsec tunnels
country flaguser name
United States
2007-10-08 13:55:05

Hello!

I want to configure QoS on cisco router so that I can restrict the
amount of bandwidth utilize by the IPSEC tunnels.

Please have a look at my solution below , is this the right way?

interface serial5/0:0
ip address 200.x.x.x 255.255.255.252
no-fair-queue
service-policy output to-mobile-operators
crypto map Mobile Ipsec


crypto map Mobile Ipsec 1 ipsec-isakmp
set peer 1.1.1.1
set transform-set DES-SHA
match address 130
qos pre-classify

crypto map Mobile Ipsec 2 ipsec-isakmp
set peer 2.2.2.2
set transform-set 3DES-MD5
match address 140
qos pre-classify

policy-map to-mobile-operators
class Mobile10
bandwidth 300
class Mobile20
bandwidth 400

Class map Mobile10
match access-group 130
Class map Mobile20
match access-group 140

IF any body has an idea please tell me if its the right solution
thanks


__._,_.___
.

__,_._,___
Re: QoS on Ipsec tunnels
country flaguser name
United States
2007-10-08 18:56:13

It seems cool. but I´d add another class map for the rest of the traffic not specified by the accesslists 130 and 140.
Just doesnot espect a HUGE change ot the traffic performance. it will improve by 20 to 30 % the actual performance.
 
The huge diference is noted when you configure LLQ but only in voice classs. 

raheel_it <raheel_ityahoo.com> escribió:
Hello!

I want to configure QoS on cisco router so that I can restrict the
amount of bandwidth utilize by the IPSEC tunnels.

Please have a look at my solution below , is this the right way?

interface serial5/0:0
ip address 200.x.x.x 255.255.255.252
no-fair-queue
service-policy output to-mobile-operators
crypto map Mobile Ipsec


crypto map Mobile Ipsec 1 ipsec-isakmp
set peer 1.1.1.1
set transform-set DES-SHA
match address 130
qos pre-classify

crypto map Mobile Ipsec 2 ipsec-isakmp
set peer 2.2.2.2
set transform-set 3DES-MD5
match address 140
qos pre-classify

policy-map to-mobile-operators
class Mobile10
bandwidth 300
class Mobile20
bandwidth 400

Class map Mobile10
match access-group 130
Class map Mobile20
match access-group 140

IF any body has an idea please tell me if its the right solution
thanks





¡Sé un mejor besador!
Comparte todo lo que sabes sobre besos en:
http://mx.yahoo.com/promos/mejorbesador.html

__._,_.___
.

__,_._,___
[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )