[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1304
  • Last Modified:

Configure QoS in PIX7.2(4) using ASDM5.2(4) to a specific IP range

How do i prioritize any IP traffic to/from specific IP range?
I have PIX515e with PIX7.2(4) and ASDM5.2(4)
I want to configure this using ASDM
  • 3
  • 2
1 Solution
ryder0707Author Commented:
any expert can help?
Alan Huseyin KayahanCommented:
Hello ryder0707,
   I cant remember exact screens ins ASDM, but here is how to do it via CLI (easier)

1) Define the IP traffic with an ACL
access-list Priority_Traffic permit ip sourcenetwork sourcenetmask destinationnetwork destinationnetmask

2)Create a class map and let it match the ACL
class-map prioritized_traffic
match access-list Priority_Traffic

3)Create a policy-map to define an action for the class-map
policy-map outside_policy
class prioritized_traffic

4)Bind the policy-map to interface
service-policy outside_policy interface outside

5)To show traffic statistics that are prioritized, run
show priority-queue statistics

ryder0707Author Commented:
you make it sound so easy :)
i will try this thanks!
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

ryder0707Author Commented:
any impact to the existing rules? if there are other access-lists with no qos, they will be processed as usual rite?
Alan Huseyin KayahanCommented:
No impact on existing rules :)
Larry LarmeuManaging DirectorCommented:
If the destination IP address is through a site-to-site VPN, do you use the internal IP address on the remote side as the destination, or the external IP address on the remote side?

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now