ASA QoS options

Colin Higgins — Tue, 12 Mar 2019 01:38:18 GMT

I was looking at this article regarding QoS implementation on the ASA through VPN tunnels

https://supportforums.cisco.com/docs/DOC-1230

I though that you could either do a traffic policing policy, OR a traffic shaping policy on one interface (or for one tunnel).

The author seems to suggest we can do both.

Can we? Will there be a conflict?

ASA QoS options

sokakkar — Fri, 03 May 2013 19:29:52 GMT

Hi Colin,

No, we can't. Also in the doc Panos mentioned this while defining shaping:

Traffic Shaping with Prioritization

Now, lets assume that we have the same ASA as in the previous case. And we now want to traffic shape all traffic and prioritize the voice through the VPN.

Check out the service-policies he applied:

In case of policing:

ASA(config-pmap-c)# service-policy police-priority-policy interface outside

In case of shaping:

ASA(config-pmap-c)# service-policy shape-priority-policy interface outside

For further clarity, check this section on configuration guide which explains how various QOS features interact:

http://www.cisco.com/en/US/customer/docs/security/asa/asa84/configuration/guide/conns_qos.html#wp1234418

As per above link:

Typically, if you enable traffic shaping, you do not also enable policing for the same traffic, although the ASA does not restrict you from configuring this.

Because it won't make much of a sense anyways.

HTH.

Sourav

topic ASA QoS options in Network Security

ASA QoS options

ASA QoS options

Traffic Shaping with Prioritization