QoS on switch or router?

[jamesgonzo]

Hi, I want to add QoS on my network, my set up is:

LAN > Pix 515 > Cisco 3750 VLAN > Cisco 2600 Internet router.

I have no QoS running anywhere. My ISP looks after my Cisco 2600, but I know there is no QoS on it. My Pix is running version 7.x.

I have noticed that http takes all the bandwidth at times of the day and wondered if I could give it say 2mb of our 10mb line and let our VPN's have 4mb, 3mb http/https and ftp 1mb. Can is be done like this?

I just hate it when http goes up to 10mb then email and VPN's suffer and just wondered what options I have as this is new to me.

[Joseph W. Doherty]

Unsure whether this reply was directed to my last reply or to prior posters.

On a 3750, see the QoS section of the configuration guide for your software version, e.g. http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_25_see/configuration/guide/swqos.html#wp1200681

Here's some more 3750 QoS examples:

http://www.cisco.com/en/US/products/hw/switches/ps5023/products_tech_note09186a0080883f9e.shtml#topic1

On a 3750, you can police different classes of traffic on ingress. Each class would be strictly limited to the bandwidth permitted. You could define a class for "other" traffic. The total bandwidth controlled by all your class could exceed 100% or be less. Normally you would configure for 100%.

Also on a 3750, you can shape to egress caps, but you only have 4 queues to work with. If you can physically configure your outbound port to match your total WAN bandwidth (10 Mbps?), you could use bandwidth sharing. This would allow the classes to use any excess bandwidth beyond their guaranteed bandwidths.