Configure A Service Rule For Priority Queuing And Policing - Cisco ASA Series Configuration Manual

Chapter 17 Quality of Service
The tx-ring-limit that you specify affects both the higher priority low-latency queue and the best-effort
queue.
Examples
The following example establishes a priority queue on interface "outside" (the GigabitEthernet0/1
interface), with the default queue-limit and tx-ring-limit:
hostname(config)# priority-queue outside
The following example establishes a priority queue on the interface "outside" (the GigabitEthernet0/1
interface), sets the queue-limit to 260 packets, and sets the tx-ring-limit to 3:
hostname(config)# priority-queue outside
hostname(config-priority-queue)# queue-limit 260
hostname(config-priority-queue)# tx-ring-limit 3

Configure a Service Rule for Priority Queuing and Policing

You can configure priority queuing and policing for different class maps within the same policy map.
See
Before You Begin
•
•
•
•
•
•
•
Procedure
Create a class map to identify the traffic for which you want to perform priority queuing.
Step 1
class-map priority_map_name
Example:
hostname(config)# class-map priority_traffic
Specify the traffic in the class map.
Step 2
match parameter
Example:
hostname(config-cmap)# match access-list priority
See
Create a class map to identify the traffic for which you want to perform policing.
Step 3
How QoS Features Interact, page 17-3
You cannot use the class-default class map for priority traffic.
(ASASM) The ASASM only supports policing.
For policing, to-the-box traffic is not supported.
For policing, traffic to and from a VPN tunnel bypasses interface policing.
For policing, when you match a tunnel group class map, only outbound policing is supported.
For priority traffic, identify only latency-sensitive traffic.
For policing traffic, you can choose to police all other traffic, or you can limit the traffic to certain
types.
Identify Traffic (Layer 3/4 Class Maps), page 11-13
for information about valid QoS configurations.
for more information.
Cisco ASA Series Firewall CLI Configuration Guide
Configure QoS
17-7