troubleshooting Question

QoS on GRE tunnels

Avatar of paul-adam
paul-adamFlag for United Kingdom of Great Britain and Northern Ireland asked on
RoutersNetworkingVPN
6 Comments1 Solution796 ViewsLast Modified:
Hi,

I have been tasked with implementing QoS over some GRE tunnels that a client has in place.

To give a general idea of the setup
Central Site - Cisco 2811 connected to a 2048kbps Internet leased line - This holds down three GRE IPSec Tunnels to three seperate sites.

Each site is configured with a Cisco 1801 connected to an ADSL (8mb down, 800k up) link which are obviously the endpoints for each of the three GRE IPSec tunnels

2 of the sites mainly use Citrix traffic over the link back to the central site, whilst the third site is a larger branch office with their own Exchange Server etc....

Most things performance wise are fine - However there is a UNIX based terminal app hosted at the central site which performs very poorly to the larger branch office (there arent enough Citrix Licenses to allow the branch office to use the Terminal based app over Citrix - So they are Telneting in directly to the server at the central site).

lastly, the large branch office also performs the following over the Tunnel - route email, AD Replication, AD DNS etc....

So - I need to look at implementing some form of QoS on the network to hopefully improve the performance of the telnet based app in the first instance whilst not negatively impacting on the perfomance of all other apps.

I have some vague idea's about how to achieve this - but I just need some pointers to assist in achieveing my goal

For info the Tunnels are laid out in the following logical Interfaces
Central Site
Serial0/0/0 - Connected to the 2mb leased Line
Tunnel0 - Goes to the large Branch Office
Tunnel1 - Goes to small citrix based site
Tunnel2 - Goes to the second small citrix based site

All remote sites use logical interface Tunnel0 back to their respective Tunnel at the central site

I have enabled qos pre-classify on the GRE tunnels as from what I have read it would be the best starting point

Thats enough rambling about the question - Any help much appreciated

Thanks
Paul
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 6 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 6 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros