23-10
Cisco ASA Series Firewall CLI Configuration Guide
Chapter23 Configuring QoS
Configuring QoS
Restrictions
•You cannot use the class-default class map for priority traffic.
•You cannot configure traffic shaping and standard priority queuing for the same interface; only
hierarchical priority queuing is allowed.
•(ASASM) The ASASM only supports policing.
•For policing, to-the-box traffic is not supported.
•For policing, traffic to and from a VPN tunnel bypass interface is not supported.
•For policing, when you match a tunnel group class map, only outbound policing is supported.
Guidelines
•For priority traffic, identify only latency-sensitive traffic.
•For policing traffic, you can choose to police all other traffic, or you can limit the traffic to certain
types.
Detailed Steps
Command Purpose
Step1 class-map priority_map_name
Example:
ciscoasa(config)# class-map
priority_traffic
For priority traffic, creates a class map to identify the traffic for
which you want to perform priority queuing.
Step2 match parameter
Example:
ciscoasa(config-cmap)# match access-list
priority
Specifies the traffic in the class map. See the “Identifying Traffic
(Layer 3/4 Class Maps)” section on page 1-12 for more
information.
Step3 class-map policing_map_name
Example:
ciscoasa(config)# class-map
policing_traffic
For policing traffic, creates a class map to identify the traffic for
which you want to perform policing.
Step4 match parameter
Example:
ciscoasa(config-cmap)# match access-list
policing
Specifies the traffic in the class map. See the “Identifying Traffic
(Layer 3/4 Class Maps)” section on page 1-12 for more
information.
Step5 policy-map name
Example:
ciscoasa(config)# policy-map QoS_policy
Adds or edits a policy map.