Optimizing VPN tunnels

[frelaxx]

Our companies central office is in New York City. We have offices in Tennesse and California fed over a VPN using a PIX. One of the offices in California is significantly larger that the other satelite offices and I want to increase the performance to that office. What are my options? I am using isakmp with IPSec.

[sachinraja]

Hello ,

It is tough to implement qos if the tunnels terminate on the PIX. The router can do a lot of qos mechanisms, but in this case, the IPSEC should terminate on the router in which the links terminate. once encapsulated, any intermediate device cannot do qos.

My advice will be to change the IPSEC tunnel to the router and do WFQ on the router.

you can see the following site.

http://cisco.com/en/US/netsol/ns340/ns394/ns171/ns109/networking_solutions_white_paper09186a008018913f.shtml