QoS on VPN traffic

[bigeric]

Dear All,

I would like to know how to classify IPSec VPN traffic for QoS. Shall I only classify the IPSec port or there is other ports in the VPN connection.

thx

[aacole]

If you want to give IPSec priority over other traffic then prioritise IP protocol 50, which is IPSec ESP. This is the most common form of IPSec.

You may also want to include ISAKMP, key management for setting up the tunnel, this runs over UDP port 500. However the exchanges are so small that I dont really think you will get any benefit, I'd just stick with ESP which is your encapsulated data.

The alternative IPSec protocol is AH, this runs over IP protocol 51 but I've never seen it deployed in the real world.

Andy

[bigeric]

Dear Andy,

Thanks for your reply, Can I clarify a bit more?

After the IPSec tunnel was estabished, are all traffic passing through the tunnel using protocol 50/51 ?

In fact, I would like to priortiy all IPSec VPN traffic so I need to know what ports/protocols are involved.

thanks

Eric

[aacole]

Hi Eric,

Your on the case, once the tunnel is up all the traffic will be encapsulated in IP protocol 50, this assume your using IPSec ESP which would be normal.

So set your prioritisation for IP protocol 50 and your there. Hope that clarifies the situation.

Andy