Configuring QoS for VPN Support

You can configure the QoS for VPNs feature only on tunnel and virtual template interfaces and in crypto map configuration submodes.

When used with GRE and IP-in-IP (IPIP) tunnel protocols, you configure QoS on the tunnel interface, making QoS for VPNs a configuration option on a per-tunnel basis.

When used with the L2F and L2TP protocols, you apply the configuration to the virtual template interface. L2TP clients belonging to identical virtual private dialup network (VPDN) groups inherit the preclassification setting. This feature can be configured on a per-VPDN tunnel basis.

For IPSec tunnels, QoS is applied in the crypto map, allowing configuration on a per-tunnel basis. QoS features on the physical interface on which the crypto map is configured apply classification to the packets before encryption is applied.

You can use the following commands to configure the QoS for VPNs feature on a tunnel or virtual interface basis.

To enter interface configuration mode and specify the tunnel or virtual interface to configure, use this command:

R1(config)#interface [tunnel-name | virtual-template-name]

Use this command to enable the QoS for VPNs feature:

R1(config-if)#qos pre-classify

You can use the following commands to configure the QoS for VPNs feature on a crypto map configuration basis.

To enter crypto map configuration mode and specify a previously defined crypto map to configure, use this command:

R1(config)#crypto map [map-name]

This command enables the QoS for VPNs feature:

R1(config-if)#qos pre-classify

[ LiB ]