Lab 17 Qn 1.5 - ASA QoS question requires us to limit outbound traffic to
5MB using traffic shaping, along with priority for Voice traffic and
SSH/Telnet.
In the solution, the service-policy is applied to the "inside" interface and
not to the "outside" interface as I was expecting it would. Why ? Because my
understanding is that Traffic Shaping is applied to all egress traffic only
and not to ingress traffic, so to apply traffic shaping to outbound traffic,
wouldnt the policy have to be applied to the "outside" interface and not the
"inside" interface ?
My reference configuration is below (I applied the service-policy to the
"outside" interface instead):
class-map SSH
match port tcp eq 22
class-map TELNET
match port tcp eq 23
class-map VOICE
match dscp cs3 ef
policy-map PRIORITY
class VOICE
priority
class SSH
priority
class TELNET
priority
policy-map OUTSIDE-POLICY
class class-default
shape average 5000000
service-policy PRIORITY
service-policy OUTSIDE-POLICY interface outside
*****
ASA1# show service-policy inter outside
Interface outside:
Service-policy: OUTSIDE-POLICY
Class-map: class-default
shape (average) cir 5000000, bc 20000, be 20000
(pkts output/bytes output) 154/8917
(total drops/no-buffer drops) 0/0
Service-policy: PRIORITY
Class-map: VOICE
priority
Queueing
queue limit 83 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 0/0
*Class-map: SSH*
priority
Queueing
queue limit 83 packets
(queue depth/total drops/no-buffer drops) 0/0/0
*(pkts output/bytes output) 33/2504*
*Class-map: TELNET*
priority
Queueing
queue limit 83 packets
(queue depth/total drops/no-buffer drops) 0/0/0
* (pkts output/bytes output) 116/5913*
Class-map: class-default
Default Queueing
queue limit 83 packets
(queue depth/total drops/no-buffer drops) 0/0/0
(pkts output/bytes output) 5/500
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
