topic QOS Configuration on ASA 5585 in Network Security

QOS Configuration on ASA 5585

prashantrecon — Mon, 11 Mar 2019 21:57:16 GMT

Hi ,

I want to configure Qos for 2 diffrent Vlan 2 , each vlan for 2 mbps bandwidth .(VLAN details VLAN 10 (10.10.x.x /24) and vlan 20(20.20.x.x/24)

Is any difference regarding initials configuration B/w ASA 5520 and 5585

QOS Configuration on ASA 5585

prashantrecon — Thu, 01 Dec 2011 08:29:12 GMT

Can anyone suggest is it possible or not ?

QOS Configuration on ASA 5585

Julio Carvajal — Thu, 01 Dec 2011 17:53:26 GMT

Hello Prashant,

Yes, it is possible, just do it like you have done it on the ASA5520.

Please let us know the result.

Regards,

Julio

QOS Configuration on ASA 5585

prashantrecon — Fri, 02 Dec 2011 04:26:01 GMT

Just to clear you we have not configured even on 5520.

Request you to guide us to configure qos as mentioned above

QOS Configuration on ASA 5585

Julio Carvajal — Fri, 02 Dec 2011 07:51:34 GMT

Hello Preshatn kumar,

So you will need to use the Modular Policy Framework to be able to configure QOS on an ASA.

So lets say you want to limit the bandwith for those vlans when they try to access the Internet.

Vlan 2= 192.168.10.0 /24

Vlan1= 192.168.20.0 /24

1-Create the traffic flow:

access-list POLICE permit tcp 192.168.10.0 255.255.255.0 any eq 80

access-list POLICE permit tcp 192.168.20.0 255.255.255.0 any eq 80

2-Create a class map and match the traffic:

class-map POLICE

match access-list POLICE

3-Create a Policy-map and take an action to the matched traffic:We can use the already created by default Policy map

Policy-map global_policy

class POLICE

police output 125000 250000 exceed-action drop.

That is all you need, Here is a document that will explain every step I have placed in here

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/qos.html#wp1075499

Please rate helpful posts.

Julio

QOS Configuration on ASA 5585

prashantrecon — Fri, 02 Dec 2011 09:28:32 GMT

Thank a lot ,

QOS Configuration on ASA 5585

prashantrecon — Fri, 02 Dec 2011 12:05:45 GMT

Hi jcarvaja,

If i create object group and put both access-list in that object group is that 2mbps bandwidth is divided among the object group or 2mbps is dedicated for each access-list

QOS Configuration on ASA 5585

Julio Carvajal — Fri, 02 Dec 2011 15:53:24 GMT

Hello Prashant,

The bandwith restriction is applyed to both networks.

Regards,

Julio

QOS Configuration on ASA 5585

prashantrecon — Mon, 05 Dec 2011 06:12:25 GMT

Hi jcarvaja

If i want to limit the vlan to 3 Mbps than it is burst sizewould be

burstsize= 3000000x1.5/8

=562500

Is it correct?

Re: QOS Configuration on ASA 5585

Julio Carvajal — Mon, 05 Dec 2011 06:23:32 GMT

Hello Prashant,

That is correct. Please give it a try and let us know if there is something else I can help you with if not mark the question as answered so future users can learn from this discussion.

Have a good one.

Julio!!