topic QoS on VPN traffic in Network Security

QoS on VPN traffic

bigeric — Fri, 21 Feb 2020 07:37:52 GMT

Dear All,

I would like to know how to classify IPSec VPN traffic for QoS. Shall I only classify the IPSec port or there is other ports in the VPN connection.

thx

Re: QoS on VPN traffic

aacole — Thu, 16 Sep 2004 15:01:05 GMT

If you want to give IPSec priority over other traffic then prioritise IP protocol 50, which is IPSec ESP. This is the most common form of IPSec.

You may also want to include ISAKMP, key management for setting up the tunnel, this runs over UDP port 500. However the exchanges are so small that I dont really think you will get any benefit, I'd just stick with ESP which is your encapsulated data.

The alternative IPSec protocol is AH, this runs over IP protocol 51 but I've never seen it deployed in the real world.

Andy

Re: QoS on VPN traffic

bigeric — Fri, 17 Sep 2004 01:06:33 GMT

Dear Andy,

Thanks for your reply, Can I clarify a bit more?

After the IPSec tunnel was estabished, are all traffic passing through the tunnel using protocol 50/51 ?

In fact, I would like to priortiy all IPSec VPN traffic so I need to know what ports/protocols are involved.

thanks

Eric

Re: QoS on VPN traffic

aacole — Tue, 21 Sep 2004 09:09:27 GMT

Hi Eric,

Your on the case, once the tunnel is up all the traffic will be encapsulated in IP protocol 50, this assume your using IPSec ESP which would be normal.

So set your prioritisation for IP protocol 50 and your there. Hope that clarifies the situation.

Andy