Configuring WAN QoS | Casio ISA550WBUN3K9 instruction

Networking	4
Networking
Configuring Quality of Service

STEP 3 Click Save to apply your settings.

Configuring WAN QoS

This section describes how to configure WAN QoS. Refer to the following topics:

•Managing WAN Bandwidth for Upstream Traffic, page 156

•Configuring WAN Queue Settings, page 157

•Configuring Traffic Selectors, page 158

•Configuring WAN QoS Policy Profiles, page 160

•Configuring WAN QoS Class Rules, page 160

•Mapping WAN QoS Policy Profiles to WAN Interfaces, page 161

•WAN QoS Configuration Example, page 162

•Configure WAN QoS for Voice Traffic from LAN to WAN, page 164

•Configuring WAN QoS for Voice Traffic from WAN to LAN, page 165

Managing WAN Bandwidth for Upstream Traffic

Use the Bandwidth page to specify the maximum bandwidth for upstream traffic allowed on each WAN interface.

STEP 1 Click Networking > QoS > WAN QoS > Bandwidth.

STEP 2 Enter the amount of maximum bandwidth for upstream traffic allowed on each WAN interface. The default value is 6000 Kbps, which indicates that there is no limit for upstream traffic.

STEP 3 Click Save to apply your settings.

Cisco ISA500 Series Integrated Security Appliances Administration Guide

156

Image 156

Casio ISA550WBUN3K9 manual Configuring WAN QoS, Managing WAN Bandwidth for Upstream Traffic

Contents

Administration Guide Cisco Systems, Inc. All rights reserved 78-20776-03 Important Note FCC Radiation Exposure Statement For ISA550W and ISA570W Industry Canada statement Canada Radiation Exposure Statement For ISA550W and ISA570WDéclaration dexposition aux radiations UL/CB Configuration Wizards Getting Started Using Remote Access VPN Wizard for SSL Remote Access Status Networking 115 Understanding Dscp Values 171 Wireless for ISA550W and ISA570W only 206 Vlan Setup 180 Wireless Setup 181 User Authentication Vlan Setup 222 Wireless Setup 223 User Authentication Firewall 251 Security Services 291 General Application Control Settings 314 VPN 333 Client Mode 366 Network Extension Mode 367 User Management 388 Device Management 403 Contents Appendix a Troubleshooting 453 Appendix D Where to Go From Here 479 Getting Started Model Description Configuration IntroductionGetting Started ISA550W Product Overview Front PanelFront Panel, Back Panel, POWER/SYS Light DescriptionVPN USB Back Panel SpeedLINK/ACT ISA550 and ISA550W Back Panel Feature Description ANT01/ANT02 Getting Started with the Configuration Utility Reset ButtonPower Switch Power Logging in to the Configuration Utility Navigating Through the Configuration Utility Number Component Description Using the Help System Configuration Utility IconsIcon Description Action Getting Started Factory Default Settings Default Settings of Key Features Restoring the Factory Default Settings Performing Basic Configuration Tasks Changing the Default Administrator PasswordParameter Default Value Upgrading your Firmware After your First Login Click Continue Backing Up Your Configuration Configuration Wizards Using the Setup Wizard for the Initial Configuration Configuration Wizards Starting the Setup Wizard Enabling Firmware Upgrade Validating Security License Enabling Bonjour and CDP Discovery Protocols Configuring Remote Administration Configuring Physical Ports Configuring the Primary WAN Configuring the Secondary WANConfiguring WAN Redundancy Configuring Default LAN Settings Configuring DMZ Configuring DMZ Services Configuration Wizards Configuring Wireless Radio Settings WANWAN IP Configuring Intranet Wlan Access Configure Security Services Security Services Viewing Configuration Summary Configuring a Configurable Port as a Secondary WAN Port Click Configuration Wizards Dual WAN WizardStarting the Dual WAN Wizard Configuring the Primary WAN Configuring Network Failure Detection Using the Remote Access VPN Wizard Using the Remote Access VPN Wizard for IPsec Remote Starting the Remote Access VPN Wizard Configuring IPsec Remote Access Group PolicyClick Configuration Wizards Remote Access VPN Wizard Configuring WAN Settings Configuring Operation Mode Configuring Access Control Settings Configuring DNS and Wins Settings Configuring Backup Servers Configuring Split TunnelingViewing Group Policy Summary Configuring IPsec Remote Access User Groups Viewing IPsec Remote Access Summary Using Remote Access VPN Wizard for SSL Remote Access Configuring SSL VPN Gateway Client Netmask Client Address Pool Configuring SSL VPN Group Policy Configuration Wizards Configuration Wizards Configuring SSL VPN User Groups Using the Site-to-Site VPN Wizard to Configure Site-to-Site Viewing SSL VPN Summary Configuring VPN Peer Settings Click Configuration Wizards Site-to-Site VPN WizardStarting the Site-to-Site VPN Wizard Configuring IKE Policies Configuring Transform Policies Configuring Local and Remote Networks Using the DMZ Wizard to Configure DMZ Settings Configuring Ddns ProfilesClick Configuration Wizards DMZ Wizard Starting the DMZ Wizard Configuring DMZ Network Configuration Wizards Configuring DMZ Services WAN Using the Wireless Wizard for ISA550W and ISA570W only Starting the Wireless WizardClick Configuration Wizards Wireless Wizard Configuring Wireless Connectivity Types Specify Wireless Connectivity Settings for All Enabled SSIDs Configuring the Ssid for Intranet Wlan Access Configuring Wireless Security, Configuring the Ssid for Guest Wlan Access Configuration Wizards Configuration Wizards Configuration Wizards Device Status Dashboard Status DashboardField Description System Information Status Resource UtilizationLicenses Syslog Summary Remote Access VPN Routing ModeSite-to-Site VPN Physical Ports Field Network Status Status SummaryStatus Summary Ethernet Vlan Pvid Vlan DMZ Traffic Statistics Traffic Statistics Usage Reports Status WAN Bandwidth Reports ARP Table Dhcp BindingsARP Table Dhcp Bindings STP Status STP Status Global StatusInterface Status Table Status CDP Neighbor Wireless Status for ISA550W and ISA570W only Wireless StatusWireless Status, Client Status, NAT Status Client StatusNAT Status VPN Status IPsec VPN StatusIPsec VPN Status, SSL VPN Status, VPN Status IPsec VPN Status Statistics SSL VPN Status Teleworker VPN ClientVPN Status SSL VPN Status SSL VPN Statistics Active User Sessions Active User Sessions Security Services Reports Web Security Report Anti-Virus Report Email Security Report Network Reputation Report IPS Report Application Control Report System Status ProcessesProcesses, Resource Utilization, System Status Processes Resource Utilization System Status Resource UtilizationCPU Utilization Memory Utilization Status Networking Configuring IPv4 or IPv6 Routing Viewing Network StatusManaging Ports Networking Viewing Status of Physical Interfaces Configuring Physical Ports Configuring Port Mirroring Configuring Port-Based 802.1x Access Control Networking Configuring the WAN Configuring WAN Settings for Your Internet ConnectionRelease or renew a Dhcp WAN connection, Configure the primary WAN Networking Configure a secondary WAN Network Addressing ModeNetwork Addressing Configuration Mode Dhcp Client Static IP PPPoE ISP Pptp L2TP Dual WAN Settings Networking Configuring Link Failover Detection Networking Configuring Dynamic DNS Ddns Services TableAdding or modifying a Ddns service Measuring and Limiting Traffic with the Traffic Meter Networking Configuring a Vlan Networking Networking Networking Configuring DMZ About DMZ networks Example DMZ with One Public IP Address for WAN and DMZ Configuring a DMZ Example DMZ with Two Public IP Addresses Networking Networking Configuring Zones Security Levels for Zones Configuring Zones Predefined Zones Services Configuring Dhcp Reserved IPs Configuring Routing Configuring Routing Mode Viewing the Routing Table Configuring Static Routing Configuring Dynamic Routing RIP Configuring Policy-Based Routing Networking Configuring Quality of Service General QoS SettingsClick Networking QoS General Settings Configuring WAN QoS Managing WAN Bandwidth for Upstream TrafficClick Networking QoS WAN QoS Bandwidth Configuring WAN Queue Settings Configuring Traffic Selectors Click Networking QoS WAN QoS Queue Settings Networking Configuring WAN QoS Policy Profiles Configuring WAN QoS Class RulesClick Networking QoS WAN QoS QoS Policy Profile Mapping WAN QoS Policy Profiles to WAN Interfaces WAN QoS Configuration Example WAN1 WAN1IP Configure WAN QoS for Voice Traffic from LAN to WAN Class NameSource Address Policy Name Configuring WAN QoS for Voice Traffic from WAN to LAN QoS Class RuleQoS Class Rules Configuring LAN QoS Configuring LAN Queue Settings Configuring LAN QoS Classification MethodsClick Networking QoS LAN QoS Queue Settings Click Networking QoS LAN QoS Classification Methods Mapping CoS to LAN Queue Mapping Dscp to LAN QueueLAN Queue CoS Value Click Networking QoS LAN QoS Mapping CoS to Queue Configuring Wireless QoS Configuring Default CoSDefault Wireless QoS Settings 802.1p Priority 802.11e Priority Configuring Wireless QoS Classification Methods Click Networking QoS Wireless QoS Classification MethodsIeee 802.11e to 802.1p Mapping 802.11e Priority 802.1p Priority Mapping CoS to Wireless Queue Mapping Dscp to Wireless QueueUnderstanding Dscp Values Dscp Value Decimal Value Meaning Configuring Igmp 011100 Click Networking Igmp Configuring Vrrp Click Networking Vrrp Networking Configuring Addresses Configuring Addresses, Configuring Address Groups,Address Management Click Networking Address Management Configuring Address Groups Service Management Configuring ServicesConfiguring Services, Configuring Service Groups, Click Networking Service Management Configuring Service Groups Configuring Captive Portal Requirements Vlan Setup Before You Begin Configuring a Captive Portal Wireless SetupUser Authentication Networking Networking Networking Troubleshooting Using External Web-Hosted CGI Scripts Networking Networking Networking Networking Networking Networking Networking Networking CGI Source Code Example No Authentication and Accept Button Networking Networking Networking Networking Networking If result == 2 result == 5 //document.form1.UserName.focus Networking Networking Related Information SupportDocumentation Cisco Small Business Cisco Small Business Home Wireless for ISA550W and ISA570W only Viewing Wireless Status Viewing Wireless StatisticsWireless for ISA550W and ISA570W only Wireless Wireless Status Wireless Status Configuring the Basic Settings Viewing Wireless Client StatusClick Wireless Basic Settings Wireless for ISA550W and ISA570W only Configuring Ssid Profiles Configuring Wireless Security Security Mode DescriptionOpen WEP WPA WPA2 WPA + WPA2WPA/WPA2-Personal mixed Supports WPA/WPA2-Enterprise mixed Supports Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Controlling Wireless Access Based on MAC Addresses Configuring Ssid Schedule Mapping the Ssid to Vlan Configuring Wi-Fi Protected Setup Click Wireless Wi-Fi Protected Setup Wireless for ISA550W and ISA570W only Configuring Captive Portal Requirements Configuring a Captive Portal Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Troubleshooting Using External Web-Hosted CGI Scripts Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only CGI Source Code Example No Authentication and Accept Button Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only If result == 2 result == 5 //document.form1.UserName.focus Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Related Information Configuring Wireless Rogue AP Detection Click Wireless Rogue AP Detection Advanced Radio Settings Click Wireless Advanced Settings Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Firewall About Security Zones Firewall Security Levels and Predefined Zones Description Default Firewall Settings Click Firewall Access Control Default Policies Preliminary Tasks for Configuring Firewall Rules Priorities of Firewall Rules General Firewall Settings Click Firewall Access Control ACL Rules Configuring a Firewall Rule Configuration Examples, Firewall Configuring a Firewall Rule to Allow Multicast Traffic MAC Address Filtering to Permit or Block Traffic, Configuring Firewall Logging Settings Configuring NAT Rules to Securely Access a Remote Network Viewing NAT Translation Status Firewall NAT NAT Status Priorities of NAT Rules Inbound TrafficOutbound Traffic Configuring Dynamic PAT Rules Click Firewall NAT Dynamic PAT Configuring Static NAT Rules Click Firewall NAT Static NAT Configuring Port Forwarding Rules Click Firewall NAT Port Forwarding Firewall Configuring Port Triggering Rules Click Firewall NAT Port Triggering Configuring Advanced NAT Rules Click Firewall NAT Advanced NAT Configuring IP Alias for Advanced NAT rules As Any Http Configuring an Advanced NAT Rule to Support NAT Hairpinning From Any Default DefaultnetworkFTP-CONTROL WAN WAN1 WAN IP WAN1IP Firewall and NAT Rule Configuration Examples Allowing Inbound Traffic Using the WAN IP Address Enable Port Forwarding Translated IP InternalFTPANY Allowing Inbound Traffic Using a Public IP Address RDPTranslated IP RDPServer WAN WAN1 WAN IP Address Original Destination PublicIP Original Services Name NetmaskPort Zone Enable Port Forwarding Create Firewall Rule Off CU-SEEMETranslated IP InternalIP Blocking Outbound Traffic by Schedule and IP Address Range Blocking Outbound Traffic to an Offsite Mail ServerSchedule Configuring Content Filtering to Control Internet Access Configuring Content Filtering Policy ProfilesClick Firewall Content Filtering Content Filtering Policies Configuring Website Access Control List Mapping Content Filtering Policy Profiles to Zones Click Firewall Content Filtering Policy to Zone Mapping Configuring Advanced Content Filtering Settings Click Firewall Content Filtering Advanced Settings Configuring MAC Address Filtering to Permit or Block Traffic Click Firewall MAC Filtering MAC Address Filtering Configuring IP-MAC Binding to Prevent Spoofing Click Firewall MAC Filtering IP MAC Binding Rules Configuring Attack Protection Click Firewall Attack Protection Configuring Session Limits Click Firewall Session Limits Configuring Application Level Gateway Click Firewall Application Level Gateway Firewall Security Services About Security Services IPS Activating Security Services Priority of Security Services Security Services Dashboard Click Security Services Dashboard Viewing Security Services Reports Viewing Web Security Report Viewing IPS Report, Viewing Application Control Report, Viewing Anti-Virus Report Viewing Email Security Report Viewing Network Reputation Report System DateTotal Since Activated Total Last 7 Days Viewing IPS Report Total TodayGraph Viewing Application Control Report Configuring Anti-Virus General Anti-Virus Settings Click Security Services Anti-Virus General Settings Protocol Action Notify + Drop Connection Drop the connectionHttp Notification, FTP Netbios Notification,Cifs Configuring Advanced Anti-Virus Settings Click Security Services Anti-Virus Advanced Settings Configuring Http Notification Configuring Email NotificationClick Security Services Anti-Virus Http Notification Click Security Services Anti-Virus Email Notification Updating Anti-Virus Signatures Configuring Application Control Updating Application Signature Database, Configuring Application Control Policies General Application Control Policy SettingsImportant Tips Adding an Application Control Policy Security Services Permitting or Blocking Traffic for an Application General Application Control Settings Enabling Application Control Service Mapping Application Control Policies to Zones Configuring Application Control Policy Mapping Rules Updating Application Signature Database Advanced Application Control Settings Click Update Database Configuring Spam Filter Click Security Services Spam Filter Security Services Configuring Intrusion Prevention Security Services Configuring Signature Actions Updating IPS Signature Database Configuring Web Reputation Filtering Click Security Services Web Reputation Filtering Configuring Web URL Filtering Configuring Web URL Filtering Policy Profiles Click Security Services Web URL Filtering Policy Profile Configuring Website Access Control List Configuring Advanced Web URL Filtering Settings Click Security Services Web URL Filtering Advanced SettingsMapping Web URL Filtering Policy Profiles to Zones Security Services Network Reputation VPN About VPNs Viewing VPN Status Viewing IPsec VPN StatusViewing IPsec VPN Status, Viewing SSL VPN Status, VPN VPN Status IPsec VPN Status Field Description Viewing SSL VPN Status VPN VPN Status SSL VPN Status SSL VPN Statistics VPN Configuring a Site-to-Site VPN Site-to-Site VPN Configuration Tasks to Establish a Site-to-Site VPN Tunnel General Site-to-Site VPN SettingsClick VPN Site-to-Site IPsec Policies VPN Configuring IPsec VPN Policies VPN VPN VPN 283058 VPN Click VPN Site-to-Site IKE Policies VPN Configuring Transform Sets Click VPN Site-to-Site Transform Policies Remote Teleworker Configuration Examples Field SettingRemote Network IKE Policy Name Enable From Transform Destination Address Translated Services Address Translated Configuring IPsec Remote Access Cisco VPN Client Compatibility Then choose Cisco VPN Client Enabling IPsec Remote Access Configuring IPsec Remote Access Group PoliciesClick VPN IPsec Remote Access VPN VPN Allowing IPsec Remote VPN Clients to Access the Internet IKE AuthenticationGroup Name WAN Interface Mode Client Pool Range for Client Start IP Client Internet Disable Access WAN FailoverName VPNClienttoWAN1 Enable From Any LAN Name VPNClienttoWAN2 Enable From Any WAN2WAN2IP Configuring Teleworker VPN Client Translated Any Destination Address Translated Services Required IPsec VPN Servers Transform Set Benefits of the Teleworker VPN Client Feature Modes of OperationClient Mode, Client Mode Network Extension Mode, Network Extension Mode IPsec VPN Network Extension Connection General Teleworker VPN Client Settings Click VPN Teleworker VPN Client Configuring Teleworker VPN Client Group Policies VPN VPN Configuring SSL VPN SSL Remote User Access Elements of the SSL VPN Configuration Tasks to Establish a SSL VPN Tunnel Installing Cisco AnyConnect Secure Mobility Client Importing Certificates for User Authentication Configuring SSL VPN UsersConfiguring SSL VPN Gateway Click VPN SSL Remote User Access SSL VPN Configuration Client Netmask Client Address Pool VPN Configuring SSL VPN Group Policies Click VPN SSL Remote User Access SSL VPN Group Policies VPN VPN Accessing SSL VPN Portal Allowing SSL VPN Clients to Access the Internet Enable From Any Name SSLVPNtoWAN1 Enable From AnyAddress Original Destination Any Original Services Sslvpnaddresspool Name SSLVPNtoWAN2 Enable From Any Configuring L2TP Server Click VPN L2TP Server Service Configuring VPN Passthrough Click VPN VPN Passthrough Viewing Active User Sessions Users Active User Sessions Configuring Users and User Groups Default User and User GroupAvailable Services for User Groups User Management Preempt Administrators Configuring Local UsersClick Users Users and Groups Configuring Local User Groups User Management Configuring User Authentication Settings Using Local Database for User Authentication Using Radius Server for User AuthenticationClick Users User Authentication Local Database Settings Radius Server Settings Local Radius Server Settings Database Click Users User Authentication Using Ldap for User Authentication User Management Using Local Database and Ldap for Authentication Configuring Radius Servers Click Users Radius Servers User Management Device Management Viewing System Status Viewing Process StatusViewing Resource Utilization Administration Configuring Administrator Settings Example https//209.165.201.18080 Configuring Email Alert Settings Click Device Management Administration Email Alert Event Description CPU Overload AlertNew Firmware Alert Your Firmware from Cisco.com, Settings page. See Configuring Log Settings, Security License,Log Facilities, Check Site-to-Site VPN Up/Down Alert in the Enable column Up/Down AlertWAN Up/Down Alert Traffic Meter Alert Anti-Virus Alert Settings. See Configuring Application Control, IPS Alert Configuring Snmp Click Device Management Administration Snmp Backing Up and Restoring a Configuration Click Device Management Backup/Restore Device Management Managing Certificates for Authentication Viewing Certificate Status and Details Click Device Management Certificate Management Exporting Certificates to Your Local PC Certificate Type Details Exporting Certificates to a USB Device Importing Certificates from Your Local PC Importing Certificates from a USB Device Generating New Certificate Signing Requests Importing Signed Certificate for CSR from Your Local PC Configuring Cisco Services and Support Settings Configuring Cisco OnPlus Configuring Remote Support Settings Sending Contents for System Diagnosis Configuring System Time Click Device Management Date and Time Configuring Device Properties Diagnostic UtilitiesClick Device Management Device Properties Ping, Traceroute, DNS Lookup, Packet Capture, Click Device Management Diagnostic Utilities Ping Click Device Management Diagnostic Utilities TraceroutePing Traceroute Device Discovery Protocols DNS LookupPacket Capture UPnP Discovery, Bonjour Discovery, CDP Discovery, UPnP Discovery Lldp Discovery,Click Device Management Discovery Protocols UPnP Bonjour Discovery CDP DiscoveryClick Device Management Discovery Protocols Bonjour Click Device Management Discovery Protocols CDP Lldp Discovery Click Device Management Discovery Protocols Lldp Firmware Management View the firmware status. See Viewing Firmware Information, Using the Secondary Firmware Firmware Version area, click Switch FirmwareViewing Firmware Information Click Device Management Firmware Upgrading your Firmware from Cisco.com Upgrading Firmware from a PC or a USB Device Using Rescue Mode to Recover the System Firmware Auto Fall Back Mechanism Managing Security License Checking Security License Status Click Device Management License Management Installing or Renewing Security License Log Management Viewing LogsClick Device Management Logs View Logs Click Query Configuring Log Settings Click Device Management Logs Log Settings Severity Level Description Emergency levelCritical level Notification level Device Management Configuring Log Facilities Click Device Management Logs Logs Facilities Rebooting and Resetting the Device Click Device Management Reboot/ResetReset Device area, click Reset to Factory Defaults Configuring Schedules Rebooting the Security ApplianceClick Device Management Schedules Device Management Device Management Device Management Internet Connection Recommended Actions Troubleshooting Click Status Dashboard Recommended Actions Click Networking WAN WAN Settings Enable the Daylight Saving Time Adjustment feature Date and TimeDate and Time Testing the LAN Path from Your PC to Your Security Appliance Pinging to Test LAN Connectivity Testing the LAN Path from Your PC to a Remote Device Feature ISA550 ISA570 Internal Power Supply Physical Specifications Feature Setting Remote AdministrationDevice Management Factory Default Settings SnmpCDP Lldp User Management User GroupsLocal Users User Authentication Methods NetworkingIPv4 or IPv6 Routing Network Addressing Modes Port-based Access Control WAN Redundancy Operation ModesVLANs Zones Routing LAN QOS Vrrp Wireless Wi-Fi Protected Setup WPS Rogue AP DetectionCaptive Portal IKE Policies IPsec Remote Access SSL VPN Security Services Features SettingFirewall Content Filtering NATMAC Address Filtering IP MAC Binding Reports Default Service Objects Service Name Protocol Port Description Start End FTP-DATA TCP IKE UDP Rtelnet TCP Default Address Objects Address Name Type IP, IP/Netmask, or IP Range Product Resources SupportProduct Documentation Cisco Small Business