• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1393
  • Last Modified:

Shoretel Qos over Cisco ASA site to site vpn.

I have a Shoretel voip pbx. I have a remote user that connects via Site to Site vpn (Cisco ASA 5505 to Cisco ASA 5510).

How do I properly setup Qos over this link.

Gary Dewrell
Gary Dewrell
1 Solution
Pete LongTechnical ConsultantCommented:
Here you go don't forget to change the tunnel group name to match yours ("show run tun" will tell you).

Petes-ASA(config)# class-map Voice-Traffic
Petes-ASA(config-cmap)# match dscp ef
Petes-ASA(config-cmap)# class-map Data-Traffic
Petes-ASA(config-cmap)# match tunnel-group Remote-VPN <<<Yours will be different!!
Petes-ASA(config-cmap)# match flow ip destination-address
Petes-ASA(config-cmap)# policy-map Voice-Policy
Petes-ASA(config-pmap)# class Voice-Traffic
Petes-ASA(config-pmap-c)# priority
Petes-ASA(config-pmap-c)# class Data-Traffic
Petes-ASA(config-pmap-c)# police output 200000 37500
Petes-ASA(config-pmap-c)# service-policy Voice-Policy interface outside
ERROR: Class Voice-Traffic has 'priority' set without 'priority-queue' in any interface
Petes-ASA(config)# priority-queue outside
Petes-ASA(config-priority-queue)# queue-limit 2048
Petes-ASA(config-priority-queue)# tx-ring-limit 256

Is the site to site vpn over a private backbone or over the Internet?  Given it is site to site, I am going to assume Internet.  Keep in mind that once you hit the Internet, you are at the mercy of the Internet where you are no longer control of your packets.
Gary DewrellSenior Network AdministratorAuthor Commented:
It is over the internet.  Let me explain what I am hopeing to accomplish.

Since this is for a remote worker, I want to prioritize the viop traffic over normal data so that even if the worker is downloading a large file that his voip traffic will not suffer.  I know I can not guaranty the same accross the entire link, but if I could protect the worker from himself that would be great.

Gary DewrellSenior Network AdministratorAuthor Commented:
Pete that look great but what is the:
ERROR: Class Voice-Traffic has 'priority' set without 'priority-queue' in any interface

In the middle of your example?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Choose an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now