Enterprise QoS Solution Reference Network Design Guide

Site-to-Site V3PN QoS Designs
6-24
match ip dscp cs3 ! Old Call-Signaling
match ip dscp af31 ! New Call-Signaling
class-map match-any INTERNETWORK-CONTROL
match ip dscp cs6 ! IP Routing
match access-group name IKE ! References ISAKMP ACL
class-map match-all NET-MGMT
match ip dscp cs2 ! Network Management
class-map match-all MISSION-CRITICAL-DATA
match ip dscp 25 ! Interim MC Data
class-map match-all TRANSACTIONAL-DATA
match ip dscp af21 af22 ! Transactional Data
class-map match-all STREAMING-VIDEO
match ip dscp cs4 ! Streaming Video
class-map match-all BULK-DATA
match ip dscp af11 af12 ! Bulk Data
class-map match-all SCAVENGER
match ip dscp cs1 ! Scavenger
!
!
policy-map QOSBASELINE-V3PN-EDGE
class VOICE
priority percent 18 ! VoIP gets 18% LLQ
class INTERACTIVE-VIDEO
priority percent 15 ! IP/VC gets 15% LLQ
class CALL-SIGNALING
bandwidth percent 5 ! Call-Signaling provisioning
class INTERNETWORK-CONTROL
bandwidth percent 5 ! Control Plane provisioning
class NET-MGMT
bandwidth percent 2 ! Network Management provisioning
class MISSION-CRITICAL-DATA
bandwidth percent 10 ! Mission-Critical Data provisioning
queue-limit 6 ! Optional: Anti-Replay tuning
class TRANSACTIONAL-DATA
bandwidth percent 5 ! Transactional-Data provisioning
queue-limit 3 ! Optional: Anti-Replay tuning
class STREAMING-VIDEO
bandwidth percent 10 ! Streaming-Video provisioning
queue-limit 6 ! Optional: Anti-Replay tuning
class BULK-DATA
bandwidth percent 4 ! Bulk-Data provisioning
queue-limit 3 ! Optional: Anti-Replay tuning
class SCAVENGER
bandwidth percent 1 ! Scavenger throttling
queue-limit 1 ! Optional: Anti-Replay tuning
class class-default
bandwidth percent 25 ! Best Effort needs BW guarantee
queue-limit 16 ! Optional: Anti-Replay tuning
!
!
ip access-list extended IKE
permit udp any eq isakmp any eq isakmp ! ISAKMP ACL
!
Verification commands:
show policy
show policy interface
Enterprise QoS Solution Reference Network Design Guide
Chapter 6 IPSec VPN QoS Design
At remote sites, these policies can be applied to the physical interfaces connecting them to the service
provider (provided that the SLAs are for line rates—otherwise, shapers must be used). For example, if
the service provider guarantees a full T1 rate to a remote site and the access medium is Frame Relay, the
Version 3.3