topic Re: 2 different QoS rules For the same flow in Network Security

2 different QoS rules For the same flow

sameesin — Tue, 12 Mar 2019 14:13:43 GMT

Hi All,

Can we apply 2 different Qos rules for the same flow. One on the ingress interface and other on the egress interface.

I need to limit one drive traffic to X mbps and out of that each user should be limited to Y mbps.

Re: 2 different QoS rules For the same flow

Sheraz.Salim — Wed, 16 Jan 2019 08:35:55 GMT

Each interface has two levels of queuing available. One is a hardware queue (called tx-ring) which is serviced by FIFO (First In First Out) method. Second is a software queue which is configurable (default serviced by FIFO as well). As Voice and business critical application’s traffic is more important than other corporate traffic (like Web traffic) it is recommended to make use from software queue and prioritize some traffic over the other. Prioritize in software queue will allow important traffic to go sooner to the hardware queue than non-important traffic. This is most useful for latency-dependant traffic like Voice or Video. Voice traffic is usually marked by EF (Expedited Forwarding) bit in the Layer 3 header. We can use this information to match the traffic and prioritize it. We can also use an ACL to mark the traffic.
It is important to enable priority queuing on the respective interface before configuring action for class map. Finally, our policy map must be attached globally or on the interface. Attaching it globally has effect on every interface where priority queuing is enabled.
Also note that priority queuing is an outbound only solution. We cannot prioritize inbound traffic.

Re: 2 different QoS rules For the same flow

sameesin — Wed, 16 Jan 2019 08:40:07 GMT

This needs to be done on an FTD

Re: 2 different QoS rules For the same flow

Abheesh Kumar — Wed, 16 Jan 2019 14:23:44 GMT

need to do a try to see if it will work or not on FTD.

Re: 2 different QoS rules For the same flow

Sheraz.Salim — Wed, 16 Jan 2019 14:30:19 GMT

just a thought as major of the function are inherit from ASA to FTD so it could be a limitation in FTD too. unless cisco engineer want to try and let us know what is the out come of this.