cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

955
Views
0
Helpful
5
Replies
Highlighted

ASA VPN tunnel-group bandwidth Reservation

Dear All,

Is there any effective meothods in ASA to reserve bandwidh on tunnel-group basis.

Thanks in advance

Shijo.

Everyone's tags (5)
5 REPLIES 5

ASA VPN tunnel-group bandwidth Reservation

Hello Shijomon,

To My knowledge there is no way of matching tunnel-group in policy maps. Please refer the below link

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_qos.html#wp1172898

regards

Harish

Please rate all helpful posts!

ASA VPN tunnel-group bandwidth Reservation

Hi Harish,

Thanks for the reply.

Please have a look on the below configuration.

Suppose I have two tunnel groups 1.1.1.1 and 2.2.2.2

class-map CMAP-1

     match tunnel-group 1.1.1.1

     match flow ip destination-address

class-map CMAP-2

     match tunnel-group 2.2.2.2

     match flow ip destination-address

plicy-map PMAP

     class CMAP-1

     police output 8000 1000

     class CMAP-2

     police output 16000 2000

service-policy PMAP interface outside

Does this make the intented result ??

ASA VPN tunnel-group bandwidth Reservation

Hello Shijomon,

that does the job but it applies only for the outgoing interface as on this case the traffic will be policed before encryption

regards

Harish

ASA VPN tunnel-group bandwidth Reservation

Hi Harish,

Can you tell me what will be the impact of these two situations ??

1. Applies only for outgoing interface

2. Traffic will be policed before ecryption

Regards,

Shijo

ASA VPN tunnel-group bandwidth Reservation

Hello Shijomon,

What I mean is the policing will happen for the traffic which is going out of the outgoing interface does not apply to the incoming traffic. Lets say if your amount of traffic in to out direction ( upload) then you are good enough I believe

regards

Harish

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here