49-8
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 49 Configuring QoS
Configuring QoS
Detailed Steps
Step 1 To configure priority queueing, configure a service policy rule in the Configuration > Firewall > Service
Policy Rules pane according to Chapter 29, “Configuring a Service Policy.”
You can configure QoS as part of a new service policy rule, or you can edit an existing service policy.
For priority traffic, identify only latency-sensitive traffic. You can match traffic based on many
characteristics, including access lists, tunnel groups, DSCP, precedence, and more. You cannot use the
class-default class map for priority traffic. You cannot configure priority queueing for the global policy
if you also enable traffic shaping on any interfaces.
Step 2 In the Rule Actions dialog box, click the QoS tab.
Step 3 Click Enable priority for this flow.
If this service policy rule is for an individual interface, ASDM automatically creates the priority queue
for the interface (Configuration > Properties > Priority Queue; for more information, see the “Creating
the Standard Priority Queue for an Interface” section on page 49-5). If this rule is for the global policy,
then you need to manually add the priority queue to one or more interfaces before you configure the
service policy rule.
Step 4 Click Finish. The service policy rule is added to the rule table.
Step 5 To configure policing, configure a service policy rule for the same interface in the Configuration >
Firewall > Service Policy Rules pane according to Chapter 29, “Configuring a Service Policy.”
For policing traffic, you can choose to police all traffic that you are not prioritizing, or you can limit the
traffic to certain types.
Step 6 In the Rule Actions dialog box, click the QoS tab.
Step 7 Click Enable policing, then check the Input policing or Output policing (or both) check boxes to
enable the specified type of traffic policing. For each type of traffic policing, configure the following
fields:
• Committed Rate—The rate limit for this traffic flow; this is a value in the range 8000-2000000000,
specifying the maximum speed (bits per second) allowed.
• Conform Action—The action to take when the rate is less than the conform-burst value. Values are
transmit or drop.
• Exceed Action—Take this action when the rate is between the conform-rate value and the
conform-burst value. Values are transmit or drop.
• Burst Rate—A value in the range 1000-512000000, specifying the maximum number of
instantaneous bytes allowed in a sustained burst before throttling to the conforming rate value.
Step 8 Click Finish. The service policy rule is added to the rule table.
Step 9 Click Apply to send the configuration to the device.
Creating a Policy for Traffic Shaping and Hierarchical Priority Queueing
You can configure traffic shaping for all traffic on an interface, and optionally hierarchical priority
queueing for a subset of latency-sensitive traffic. See the “How QoS Features Interact” section on
page 49-4 for information about valid QoS configurations.