Link to home
Start Free TrialLog in
Avatar of jwstock
jwstock

asked on

QOS for terminal services on a cisco router

I am setting up class of service on my Cisco 2600 in order to dedicate bandwidth for my remote users coming in via terminal services. I have created an access list using tcp port 3389 to identify their traffic based on another posting I saw here. access-list 101 permit tcp any any eq 3389. Will that correctly identify my remote users traffic and class it accordingly?
ASKER CERTIFIED SOLUTION
Avatar of meverest
meverest
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jwstock
jwstock

ASKER

Would that access list entry also be necessary on my firewall? I currently have the following for the access list for the terminal services server:

access-list 101 permit tcp any gt 1023 host server.ip eq www
access-list 101 permit tcp any gt 1023 host server.ip eq 3389


If I add the gre packet entry to my firewall do I still need it for classing the data?
Hi,

yes it will need to be added to any device that filters packets routed to the vpn server.

cheers.
Avatar of jwstock

ASKER

For my PIX firewall should the entry be:

access-list 101 permit gre any host server.ip
yes, something like that.  I can't remember if cisco IOS recognises 'gre' as a protocol id.  if not, then use

access-list 101 permit 47 any host server.ip

cheers.