Priority Queuing + Policing on the ASA

From: Sadiq Yakasai (sadiqtanko@gmail.com)
Date: Wed Mar 11 2009 - 11:16:29 ARST


Hi guys,

Assuming I have the following configuration on an ASA.

crypto map VPN interface outside
!
priority-queue outside
 queue-limit 2048
 tx-ring-limit 256
!
class-map VOIP
 match dscp ef
!
class-map DATA // Match all the tunnel traffic
 match tunnel-group 10.2.1.2
 match flow ip destination-address
!
class-map inspection_default
 match default-inspection-traffic
!
policy-map VOICE_POLICY
 class VOIP
  priority
 class DATA
  police output 200000 37500
!
service-policy VOICE_POLICY interface outside
  Am I saying effectively, my total bandwidth on the interface is about
4Mbps (2Mbps assigned to the LLQ and 2Mbps assigned to policing the class
DATA)?

Any comment would be appreciated. Thanks,

-- 
CCIE #19963

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Mon Apr 06 2009 - 06:44:04 ART