cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1247
Views
0
Helpful
5
Replies

ASA VPN tunnel-group bandwidth Reservation

shijomon scaria
Level 1
Level 1

Dear All,

Is there any effective meothods in ASA to reserve bandwidh on tunnel-group basis.

Thanks in advance

Shijo.

5 Replies 5

Hello Shijomon,

To My knowledge there is no way of matching tunnel-group in policy maps. Please refer the below link

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_qos.html#wp1172898

regards

Harish

Please rate all helpful posts!

Hi Harish,

Thanks for the reply.

Please have a look on the below configuration.

Suppose I have two tunnel groups 1.1.1.1 and 2.2.2.2

class-map CMAP-1

     match tunnel-group 1.1.1.1

     match flow ip destination-address

class-map CMAP-2

     match tunnel-group 2.2.2.2

     match flow ip destination-address

plicy-map PMAP

     class CMAP-1

     police output 8000 1000

     class CMAP-2

     police output 16000 2000

service-policy PMAP interface outside

Does this make the intented result ??

Hello Shijomon,

that does the job but it applies only for the outgoing interface as on this case the traffic will be policed before encryption

regards

Harish

Hi Harish,

Can you tell me what will be the impact of these two situations ??

1. Applies only for outgoing interface

2. Traffic will be policed before ecryption

Regards,

Shijo

Hello Shijomon,

What I mean is the policing will happen for the traffic which is going out of the outgoing interface does not apply to the incoming traffic. Lets say if your amount of traffic in to out direction ( upload) then you are good enough I believe

regards

Harish

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: