cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
772
Views
0
Helpful
5
Replies

Qos

sajjadrizvi87
Level 1
Level 1

                   Is it is possible to configure Qos on mac addresses of users of DHCP pool in ASA 5505

3 Accepted Solutions

Accepted Solutions

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

No, only based on Ip.

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Hello Syed,

From the ASA you can do it but using Ip addreses, the MPF ( Modular Policy Framework ) that is used to configure QoS on the ASA works with Ip addresses, DSCP values, destination traffic flows, port numbers,etc, but not with Mac address that is why if you want to perfom a QoS for a specific user Ip you will need to use a different device to make this happen or reserve an ip address for that user on the DHCP server and then configure the ASA to apply the police or X action to that Ip address.

Hope I could help,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Yes, The ASA can behave as a DHCP server!

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806c1cd5.shtml

Hope this helps,

Remember to rate all of the helpful posts ( If you do not know how to rate a post just let me know and I will teach you )

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

5 Replies 5

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

No, only based on Ip.

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

thanks for you response but if inside users are getting IPs dynamically via DHCP then what will be solution or is their is any way we can restrict bandwidth utilization to individual user for example tom=1mbps, tac=512

Hello Syed,

From the ASA you can do it but using Ip addreses, the MPF ( Modular Policy Framework ) that is used to configure QoS on the ASA works with Ip addresses, DSCP values, destination traffic flows, port numbers,etc, but not with Mac address that is why if you want to perfom a QoS for a specific user Ip you will need to use a different device to make this happen or reserve an ip address for that user on the DHCP server and then configure the ASA to apply the police or X action to that Ip address.

Hope I could help,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

thank ou very much julio

how can we create Dhcp pool for inside user as i dont have any dhcp server can ASA behave as Dhcp

Yes, The ASA can behave as a DHCP server!

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806c1cd5.shtml

Hope this helps,

Remember to rate all of the helpful posts ( If you do not know how to rate a post just let me know and I will teach you )

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking for a $25 gift card