cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
319
Views
0
Helpful
1
Replies

ASA and QoS

cciesec2011
Level 3
Level 3

I am running version 8.0.4 (don't tell me to upgrade please).  My ASA has an inside and outside interface.  My ISP service provider connected to the ASA is 10Mbps upload/download.  all of the internal hosts is PAT'ed to the ASA external interface

 

I would like to  implement QoS on the ASA so that when hosts on the internal hosts go to the website http://4.2.2.2 and download/upload files, they are limit to 3Mbps while traffics from other hosts to other places on the Internet will use 7Mbps.  I implement my QoS on the ASA like this:

 

priority-queue outside

access-list NMLS permit tcp host 4.2.2.2 any
access-list NMLS permit tcp any host 4.2.2.2

class-map tcp-traffic-class
  match access-list NMLS

policy-map police-priority-policy
class tcp-traffic-class
   police output 3000000
class class-default
   police output 7000000

service-policy police-priority-policy interface outside

 

I have two internal hosts, hosta 192.168.1.1 and hostb 192.168.1.2.  hosta downloads file from 4.2.2.2 while hostb download file from 1.1.1.1 website.  I am seeing hosta using 8Mbps while hostb only uses 2mbps. when I use the command "sh service-policy police", I am not seeing drops traffics.

 

Is this the correct configuration?

 

 

 

 

1 Reply 1

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

I think this is the problem with the conform action on the policy map.

Try this instead:-

police output 3000000 conform-action drop exceed-action drop

police output 7000000 conform-action drop exceed-action drop

Thanks and Regards,

Vibhor Amrodia

Review Cisco Networking for a $25 gift card