cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1515
Views
15
Helpful
9
Replies

QOS Configuration on ASA 5585

prashantrecon
Level 1
Level 1

Hi ,

I want to configure Qos for 2 diffrent Vlan 2 , each vlan for 2 mbps bandwidth .(VLAN details VLAN 10 (10.10.x.x /24) and vlan 20(20.20.x.x/24)

Is any difference regarding initials configuration B/w ASA 5520 and 5585

9 Replies 9

prashantrecon
Level 1
Level 1

Hi

Can anyone suggest is it possible or not ?

Hello Prashant,

Yes, it is possible, just do it like you have done it on the ASA5520.

Please let us know the result.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Just to clear you we have not configured even on 5520.

Request you to guide us to configure qos as mentioned above

Hello Preshatn kumar,

So you will need to use the Modular Policy Framework to be able to configure QOS on an ASA.

So lets say you want to limit the bandwith for those vlans when they try to access the Internet.

Vlan 2= 192.168.10.0 /24

Vlan1= 192.168.20.0 /24

1-Create  the traffic flow:

access-list POLICE permit tcp 192.168.10.0 255.255.255.0 any eq 80

access-list POLICE permit tcp 192.168.20.0 255.255.255.0 any eq 80

2-Create a class map and match the traffic:

class-map POLICE

match access-list POLICE

3-Create a Policy-map and take an action to the matched traffic:We can use the already created by default Policy map

Policy-map global_policy

class POLICE

police output 125000 250000 exceed-action drop.

That is all you need, Here is a document that will explain every step I have placed in here

http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/qos.html#wp1075499

Please rate helpful posts.

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Thank a lot ,

I

Hi jcarvaja,

If i create object group and put both access-list in that object group is that 2mbps bandwidth is divided among the object group or 2mbps is dedicated for each access-list

Hello Prashant,

The bandwith restriction is applyed to both networks.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi jcarvaja

If i want to limit the vlan to  3 Mbps than it is burst sizewould be

burstsize=  3000000x1.5/8

             =562500

Is it correct?

Hello Prashant,

That is correct. Please give it a try and let us know if there is something else I can help you with if not mark the question as answered so future users can learn from this discussion.

Have a good one.

Julio!!

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking for a $25 gift card