Cisco Systems and the ASA Services Module, ASA 5505, ASA 5545-X, ASA 5555-X, ASA 5585-X Step, 23-11

Chapter 23 Configuring QoS

Configuring QoS

	Command	Purpose
Step 6
	class priority_map_name	Identifies the class map you created for prioritized traffic in
		Step 1.
	Example:
	ciscoasa(config-pmap)# class
	priority_class
Step 7
	priority	Configures priority queuing for the class.
	Example:
	ciscoasa(config-pmap-c)# priority
Step 8
	class policing_map_name	Identifies the class map you created for policed traffic in Step 3.
	Example:
	ciscoasa(config-pmap)# class
	policing_class
Step 9
	police {output input} conform-rate	Configures policing for the class. See the followingoptions:
	[conform-burst][conform-action [drop	• conform-burstargument—Specifies the maximum number of
	transmit]] [exceed-action [drop
	transmit]]	instantaneous bytes allowed in a sustained burst before
		throttling to the conforming rate value, between 1000 and
	Example:	512000000 bytes.
		• conform-action—Sets the action to take when the rate is less
	ciscoasa(config-pmap-c)# police output
	56000 10500	than the conform_burst value.
		• conform-rate—Sets the rate limit for this traffic flow;
		between 8000 and 2000000000 bits per second.]
		• drop—Drops the packet.
		• exceed-action—Sets the action to take when the rate is
		between the conform-ratevalue and the conform-burstvalue.
		• input—Enables policing of traffic flowing in the input
		direction.
		• output—Enables policing of traffic flowing in the output
		direction.
		• transmit—Transmits the packet.
Step 10
	service-policy policymap_name {global	Activates the policy map on one or more interfaces. global applies
	interface interface_name}	the policy map to all interfaces, and interface applies the policy
		to one interface. Only one global policy is allowed. You can
	Example:	override the global policy on an interface by applying a service
		policy to that interface. You can only apply one policy map to
	ciscoasa(config)# service-policy
	QoS_policy interface inside	each interface.

Examples

Example 23-1 Class Map Examples for VPN Traffic

In the following example, the class-mapcommand classifies all non-tunneled TCP traffic, using an ACL named tcp_traffic:

ciscoasa(config)# access-list tcp_traffic permit tcp any any

Cisco ASA Series Firewall CLI Configuration Guide

23-11