Solved

Configuring QoS with a Cisco Firewall

Posted on 2010-11-08
8
1,084 Views
Last Modified: 2012-08-13
A requirement is needed to configure QoS on our Cisco Firewalls.
Have PIX/ASA Firewalls and looking to implement QoS on them.
After quite some reading, the "CiscoWorks" seems to arise quite
often as the much needed tool to help identify and configure your]
devices to manage QoS. It is not cheap.
Are there any best first steps and products I can use to help
do a proof of concept and start to configure simple QoS on my
firewalls.
Looking for other products and steps to aid QoS provisioning.
0
Comment
Question by:ccfcfc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 1

Assisted Solution

by:ziaic1
ziaic1 earned 100 total points
ID: 34088793
What kind of traffic are you trying to do QoS with?  I can try to give you an example.
0
 

Assisted Solution

by:ccfcfc
ccfcfc earned 0 total points
ID: 34091041
Well we are looking at VOIP soon but want to test with traffic such as FTP, HTTP or SSL traffic.
It may be useful to test internally with traffic such as "windows copy" between networks.
We have a pending requirement to send SecureFTP (FTPS) to an external customer so would be nice to control that going out. WIll be using ACCESS LIST to control.
From what I have read CiscoWorks would let you look at your traffic and help to configure.
Appreciate any help
 
0
 
LVL 7

Accepted Solution

by:
kellemann earned 200 total points
ID: 34092321
The QoS capablities on the Pix/ASA are fairly limited, and shouldn't be the weapon of choice if you are looking for granular mechanisms to control the data.
Pix/ASA only has two queues, so you can't have a high priority for voice, a medium priority for Citrix and low for everything else. You only got high and low. Configuration is described in detail in these links:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008084de0c.shtml
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008080dfa7.shtml
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 5

Assisted Solution

by:Moose Mclinn
Moose Mclinn earned 200 total points
ID: 34108527
kellemann's right especially if you're doing VOIP traffic which has high packet counts, the Cisco 851's are good (and cheap) for that and have configurable ACL's and MPLS QOS
http://www.cisco.com/en/US/prod/collateral/routers/ps5853/prod_bulletin0900aecd802d0c05_ps5854_Products_Bulletin.html
IOS 12.3 and higher.

 You most likely want to do this on the switch level as well.
0
 

Author Comment

by:ccfcfc
ID: 34119719
Thanks I will start reading these links. We have PIX's and ASA in place .
0
 
LVL 7

Expert Comment

by:kellemann
ID: 34795468
Any news on this issue?
0
 

Author Comment

by:ccfcfc
ID: 35146902
This requirement has now dropped way down the list of priorities and no work will be carried out on it any time soon.

I will award some points to each responder for their suggestions.
0
 

Author Closing Comment

by:ccfcfc
ID: 35178737
I have answered B/partially to all grading questions as we are not in a position to test them.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses
Course of the Month5 days, 13 hours left to enroll

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question