10-31-2012 11:09 PM
Dear All,
Is there any effective meothods in ASA to reserve bandwidh on tunnel-group basis.
Thanks in advance
Shijo.
10-31-2012 11:19 PM
Hello Shijomon,
To My knowledge there is no way of matching tunnel-group in policy maps. Please refer the below link
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_qos.html#wp1172898
regards
Harish
Please rate all helpful posts!
11-01-2012 12:46 AM
Hi Harish,
Thanks for the reply.
Please have a look on the below configuration.
Suppose I have two tunnel groups 1.1.1.1 and 2.2.2.2
class-map CMAP-1
match tunnel-group 1.1.1.1
match flow ip destination-address
class-map CMAP-2
match tunnel-group 2.2.2.2
match flow ip destination-address
plicy-map PMAP
class CMAP-1
police output 8000 1000
class CMAP-2
police output 16000 2000
service-policy PMAP interface outside
Does this make the intented result ??
11-01-2012 01:41 AM
Hello Shijomon,
that does the job but it applies only for the outgoing interface as on this case the traffic will be policed before encryption
regards
Harish
11-01-2012 04:10 AM
Hi Harish,
Can you tell me what will be the impact of these two situations ??
1. Applies only for outgoing interface
2. Traffic will be policed before ecryption
Regards,
Shijo
11-01-2012 04:36 AM
Hello Shijomon,
What I mean is the policing will happen for the traffic which is going out of the outgoing interface does not apply to the incoming traffic. Lets say if your amount of traffic in to out direction ( upload) then you are good enough I believe
regards
Harish
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: