Hello,
I've been migrating services from 5505 to 5506 and got isuess with QOS settings.
Generaly the original config from 5505 is accepted by 5506's CLI. The problem starts in ASDM.
Here's example of my QOS for IPSEC VPN tunnel (SERVICE1) and my SERVERS (GROUP1)
access-list QOS-GROUP1 extended permit ip object SERVERS object any4
tunnel-group SERVICE1 type ipsec-l2l
tunnel-group SERVICE1 ipsec-attributes
ikev1 pre-shared-key ***
class-map GROUP1
match access-list QOS-GROUP1
class-map PRI-SERVICE1
match tunnel-group SERVICE1
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect icmp
policy-map OUTSIDE-QOS
class PRI-SERVICE1
priority
class GROUP1
police input 7000000 4000
police output 7000000 4000
!
service-policy global_policy global
service-policy OUTSIDE-QOS interface outside
The problem is that if i want to use ASDM and Service Policy Rules to modify any parameter e.g. police input or "priority" i got the following error message:
You have specified default inspection traffic as the traffic match criterion.
Only inspect rule actions can be specified for the default inspection traffic.
I can modify these parameters in ASDM for 5505 but not for 5506. Any ideas why?
