VoIP QoS for Site-to-Site Tunnel

[Tobi]

Hi all,

I need some help with setting up QoS for VoIP between two Cisco ASA 5505 with Site-to-Site VPN.

There is no need for bandwith reservation, only DSCP 46 (EF) should be highest and DSCP 26 second highest queue and the rules should only apply to a site-to-site VPN.

Usually i try to configure the ASAs via ASDM and found out in the Cisco Documentations how to setup QoS for the DSCP bits with a Service Policy and how to set up QoS for a Site-to-Site VPN (Service Policy Rule -> Traffic Match). But how do i configure the QoS for a DSCP bit to only apply to a Site-to-Site Tunnel? And how do i configure different priorities for the two DSCP bits, is this defined by the order of Service Policies?

The QoS has to be enabled on both ASAs for the inside interface?

Thanks in advance

Tobias

[Collin Clark]

The ASA is pretty limited in what it can QoS wise. I think this link will help you out-

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/82310-qos-voip-vpn.html#anc17

[Tobi]

Hi Collin,

ok so from the document i think this has to be added on both ASAs to prioritize DSCP 46. Could you have a quick look if this is all i need?

_________________________________________________

class-map voice_traffic
match dscp ef

class-map data
match tunnel-group <Tunnel Name>
match flow ip destination-address

policy-map voice_policy
class voice_traffic
  priority

class Data
 police output 200000 37500

service-policy voice_policy interface outside

_________________________________________________

But there is still the question how two configure another DSCP bit for priority 2, I could not find out how this is done, neither CLI nor ASDM. Any ideas?

BR

Tobias

[Collin Clark]

You'll have to put voice signal in the priority queue as well.

[Tobi]

Hi Collin,

are you referring to this?

priority-queue outside
 queue-limit 2048
 tx-ring-limit 256

BR

Tobias

[Collin Clark · Accepted solution]

More like-

class-map voice_traffic
 match dscp ef
 match dscp 26

[Tobi]

OK thanks so this should get the job done

class-map voice_traffic
match dscp ef
match dscp 26

class-map data
match tunnel-group <Tunnel Name>
match flow ip destination-address

policy-map voice_policy
class voice_traffic
  priority

service-policy voice_policy interface outside