Using an ASA 5505, how can I prioritize normal web surfing over streaming, file sharing, etc?

[hippieboy9]

I assume this can be done with QOS.  I want all internet traffic that is not normal web browsing to be a lower priority so that streaming, IM, and file sharing do not slow down work related browsing.  Please provide some sample code to do it.

Thanks.

-Ryan

[astripat]

Hi Ryan,

Here I send you a configuration example how to setup QoS for Web traffic based on ACL's.

Permits outbound web port 80

access-list 105 permit tcp any any eq 80

ASA(config-cmap)#class-map Web-OUT

ASA(config-cmap)#match access-list 105

ASA(config-cmap)#policy-map qos

ASA(config-pmap)#class Web-OUT

ASA(config-pmap-c)#priority

ASA(config-pmap-c)#service-policy qos interface outside

ASA(config)#priority-queue outside

ASA(config-priority-queue)#queue-limit 2048

ASA(config-priority-queue)#tx-ring-limit 256

In order for you to check the QoS working here you have the show commands:

show service-policy interface outside
show service-policy priority
show priority-queue statistics outside

HTH

Ashu.

[Panos Kampanakis]

You would need to change astripat's config a little.

When prioritizing traffic you need to police the rest in order for prioritization to work.

Here is an example how to do it https://supportforums.cisco.com/docs/DOC-1230#Traffic_Policing_with_Prioritization. For policing I would suggest to police the rest of the traffic to the speed that you would give non-http traffic.

I hope it helps.

PK