QOS and rate limited on ASA

ronald.su — Thu, 26 Nov 2020 10:16:40 GMT

hello, we have an ASA and with broadband line: 100M download / 50M upload

we wanna to do a qos on a specific IP 192.168.47.30

since ASA interface is 1G interface (but the broadband line only has 50M upload capacity), we decided to limited the outside interface rate so let QOS can take effect, below is my config:

access-list 100 extended permit ip host 192.168.47.30 any
class-map cmap_cctv
match access-list 100
!
policy-map pmap_cctv
class cmap_cctv
priority
!
priority-queue outside
service-policy pmap_cctv interface outside
!
!
access-list 101 extended permit ip any any
!
class-map traffic-cmap
match access-list 101
!
policy-map traffic-pmap
class traffic-cmap
police output 50000000 conform-action transmit exceed-action drop
!
service-policy traffic-pmap interface outside
!
priority-queue outside

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I have 2 questions:

Can QOS can work ? (if we don't limited the rate, interface never reach the 1G so we think the qos will never work)

please help to check the rate limited part, my acl is any any. I wondering the rate will limited per IP or per interface?

e.g each IP will limited 50M or total limited to 50M ?

Re: QOS and rate limited on ASA

ronald.su — Mon, 30 Nov 2020 05:07:08 GMT

🙂

Re: QOS and rate limited on ASA

ronald.su — Tue, 01 Dec 2020 10:03:40 GMT

please...any idea?

topic Re: QOS and rate limited on ASA in Network Security

QOS and rate limited on ASA

Re: QOS and rate limited on ASA

Re: QOS and rate limited on ASA