EasyManuals Logo

Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

Cisco 5510 - ASA SSL / IPsec VPN Edition
1822 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #1066 background imageLoading...
Page #1066 background image
49-8
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 49 Configuring QoS
Configuring QoS
Detailed Steps
Step 1 To configure priority queueing, configure a service policy rule in the Configuration > Firewall > Service
Policy Rules pane according to Chapter 29, “Configuring a Service Policy.
You can configure QoS as part of a new service policy rule, or you can edit an existing service policy.
For priority traffic, identify only latency-sensitive traffic. You can match traffic based on many
characteristics, including access lists, tunnel groups, DSCP, precedence, and more. You cannot use the
class-default class map for priority traffic. You cannot configure priority queueing for the global policy
if you also enable traffic shaping on any interfaces.
Step 2 In the Rule Actions dialog box, click the QoS tab.
Step 3 Click Enable priority for this flow.
If this service policy rule is for an individual interface, ASDM automatically creates the priority queue
for the interface (Configuration > Properties > Priority Queue; for more information, see the “Creating
the Standard Priority Queue for an Interface” section on page 49-5). If this rule is for the global policy,
then you need to manually add the priority queue to one or more interfaces before you configure the
service policy rule.
Step 4 Click Finish. The service policy rule is added to the rule table.
Step 5 To configure policing, configure a service policy rule for the same interface in the Configuration >
Firewall > Service Policy Rules pane according to Chapter 29, “Configuring a Service Policy.
For policing traffic, you can choose to police all traffic that you are not prioritizing, or you can limit the
traffic to certain types.
Step 6 In the Rule Actions dialog box, click the QoS tab.
Step 7 Click Enable policing, then check the Input policing or Output policing (or both) check boxes to
enable the specified type of traffic policing. For each type of traffic policing, configure the following
fields:
Committed Rate—The rate limit for this traffic flow; this is a value in the range 8000-2000000000,
specifying the maximum speed (bits per second) allowed.
Conform Action—The action to take when the rate is less than the conform-burst value. Values are
transmit or drop.
Exceed Action—Take this action when the rate is between the conform-rate value and the
conform-burst value. Values are transmit or drop.
Burst Rate—A value in the range 1000-512000000, specifying the maximum number of
instantaneous bytes allowed in a sustained burst before throttling to the conforming rate value.
Step 8 Click Finish. The service policy rule is added to the rule table.
Step 9 Click Apply to send the configuration to the device.
Creating a Policy for Traffic Shaping and Hierarchical Priority Queueing
You can configure traffic shaping for all traffic on an interface, and optionally hierarchical priority
queueing for a subset of latency-sensitive traffic. See the “How QoS Features Interact” section on
page 49-4 for information about valid QoS configurations.

Table of Contents

Other manuals for Cisco 5510 - ASA SSL / IPsec VPN Edition

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco 5510 - ASA SSL / IPsec VPN Edition and is the answer not in the manual?

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General IconGeneral
BrandCisco
Model5510 - ASA SSL / IPsec VPN Edition
CategoryFirewall
LanguageEnglish

Related product manuals