QoS en ASA with VPN hub-spoke

[jphvpichi]

Hi,

I have an ASA 5515X (9.1.5), and a four 5505 (9.1.5) installed at different sites, i have configured a vpn from each of this 5505 to the 5515X,

but i did a dynamic configuration, so there is not a tunnel group config.. and no IP address for each site.

So my question is how i could configure QoS in the 5515X for the vpn traffic (all the traffic), so this traffic have priority over other Internet traffic, i must use an acl match for the QoS class?.

or there is another way?. (i only want to configure QoS on the 5515X)

Regards,

Juan Pablo

[Santhosha Shetty]

Hi,

Irrespective of kind of vpn( RA, Site to site) vpn connection has to pick a tunnel-group if its has to succeed.

If there is no specific group configured for either for IP or a string , the connection will always fall under default group. ASA has default group for RA-vpn and l2l-vpn. You can use those group as base for Qos.

HTH.

Santhosh