Selecting traffic for QoS for a VPN client

[James.Longman]

Hi,

How can I select specifc traffic for QoS when a VPN client connects?

I have:

class-map vpn-qos

match flow ip destination-address

match tunnel-group vpn-group

To prioritise all traffic for a VPN group, but what of I want to only prioritise their HTTP traffic (for example) over everything else they put through the VPN? I thought I would match TCP/80 as a source port with an ACL and add match access-list to the class-map.

However, the ASA responds that I can't mix these commands...

Am I missing something? Thanks!

[Julio Carvajal]

Hello James,

You cannot mix an ACL with the Tunnel-group match command over a class map.

You could do it like this:

class-map test

match port tcp eq http

match tunnel-group test123

Regards,

Do rate all the helpful posts

Julio