Scenario: My client has multiple sites that connect to a single POP via IPSEC tunnels over the internet. Each site has two tunnels to the POP, one for internet traffic and other for production traffic. The internet traffic breaks out from the FW at the POP and the production traffic rides the MPLS. Both the CE and PE devices are Cisco. CE devices are Cisco 1921-SEC/K9 or higher. PE device is Cisco 3925-SEC/K9.
Question: The client wants us to implement Queing for both types of traffic. It is easy to do so at the CE side as the 2 tunnels originate from a single interface and BW shaping can be implemented using Parent-Child MQC for each of the 2 tunnels. The idea here is not to dedicate or 'Police' the BW per tunnel. Rather if one tunnel is not using the assigned BW then the other tunnel should be able to use the available BW. The problem I am facing is on the PE side where multiple tunnels will terminate on a single public facing interface. I want to apply similar QoS policy on PE for CE bound traffic (return traffic), where the BW is shared by the 2 tunnels/site.
Your input will be very much appreciated.
