ASA5505 QoS for Voice using EZVPN

[ahuffer]

My customer has a 5505 at home that is using EZVPN back to a 5510 head end. Behind the 5505 he has a laptop and a Cisco 'Soft' phone installed upon it. He can make calls but is getting only one way audio. People can hear him but he cannot hear anyone.

I want to install a service policy for voice on both the head end and on the 5505, but because the VPN is using EZVPN with NEM I am not sure how to match the tunnel-group within the class-map.

Is it enough to just match the markings and not the tunnel-group?

class-map voip.class

match dscp cs3 af31 ef

!

policy-map voip.policy

class voip.class

priority

class class-default

police output 640000

!

service-policy voip.policy interface outside

This policy on both the headend 5510 and remote 5505.

[wiley-wes]

Usually one-way audio is a routing issue. Have him place a call and then look at the audio stream traffic. I would imagine the return traffic doesn't know how to get back to him. Could be a NAT or routing issue.

[ahuffer]

Yeah actually I checked into that and all looks good. Actually learned from the customer that the problem isn't really behind the 5505, but instead when he uses the VPN client direct. Still can't find a NAT problem but it would appear that perhaps his IP communicator needs to be set to use the VPN adapter interface instead of the real laptop interface. Waiting to hear back from him.

Still would like to know about how to apply the QoS policy when using EZVPN though...for now I have just applied it et. al and am not matching against a tunnel-group. I am thinking this will have the same affect but if anyone can confirm that would be cool.

Thanks everyone.