Can someone explain config snipet for me..

[encarter]

The is a SoHo - Router and Cisco Phone deployment - Cisco Virtual Office. This code was supplied on the cisco website, im trying to understand how the QoS portion works (i have a good understand of VPN configs im just trying to wrap my head around how the Qos portion works here...)

http://www.cisco.com/en/US/prod/col...9_ns855_Networking_Solutions_White_Paper.html

crypto ipsec client ezvpn vpnserver
connect auto
group s3curehom3 key 6 Blaaa
mode network-extension
peer Blaaa
virtual-interface 1
username homeuser password Blaaaa
xauth userid mode local
(i get the crypto statement here, but not the line virtual-interface 1)

policy-map shaper
class class-default
shape average 600000 6000
service-policy voice_and_video (looks like a nested Policy Map, dont really get what this is doing)


policy-map voice_and_video
class voice
bandwidth 128
class call-setup
priority percent 5
class internetwork-control
priority percent 5
class video
priority 384
class class-default
fair-queue
random-detect


interface Virtual-Template1 type tunnel
no ip address
tunnel mode ipsec ipv4
service-policy output shaper
(what is virtual-tempate interface? Is that tied to virtual-interface 1 under the crypto section above?)



Router# sh ip int bri
Virtual-Access1 unassigned YES unset down down
Virtual-Access2 1.1.1.1 YES TFTP up up
Virtual-Template1 unassigned YES NVRAM down down

(why is Virtual-Tempate1 down? and where did Virtual-Access1 and 2 come from)

 

[encarter]

anyone?? any help would be appreciate, even if only in part.

 

[Cluebird]

Virtual-template will always be down. It just applies parameters to the Virtual-Access interface, which should be up and represents the virtual interface.

The QoS is a shaper for outbound traffic on the virtual-interface. It is a nested policy where all traffic is placed by default in the default class. Within that, the policy-map voice_and_video is giving voice 128K of bandwidth while creating priority queues for call setup, internetwork-control, and video. I suspect your config has some way of identifying the classes using NBAR or ACLs but I don't see that in the config you posted.

At the end of the policy-map, you're telling the box to use fair-queuing in the default queue rather than FIFO and to use WRED to control TCP tail-drop.

HTH