QoS on a PIX 506e

[hunterdw]

Is it possible to set QoS policies on a PIX 506e?

I'm looking to do site-to-site from a 506e (remote) to a 2821 (core).

I'm currently using 1760V with the VPN Module (remote) and a 1710 (core).

--DW

 

[NetworkGhost]

Not possible to do QOS with the Pix 506. I believe Version 7 of the Pix OS will allow QoS but I dont think the 506 meets the hardware requirments for 7.0. The best way to do it is to give priority before they hit the pix. Layer 3 switch or Router could do this. But you have to remember unless you are paying for QoS service with your ISP, your ISP is most likely going to drop the QoS tag once it hits their network.

 

[hunterdw]

Well, the PIX probably isn't the best choice for me.

My ISP does do QoS from end to end. That's the easy part.

My connections are VPN... so I use the qos pre-classify inside my crypto map...

Even if I do QoS before I hit the pix, I'm afraid I'll lose my QoS markings once it goes through the crypto map on the PIX.

Sounds like 1800 series ISR for me...

--DW

 

[chicocouk]

As an aside, you can get version 7 running on a 506, although it's not a supported configuration. There's still rumours that cisco will release an officially supported version that runs on the 506 at some point.

Just in case anyone wants to lab up version 7 for testing purposes, it can be done on a 506.

CCSP, CCNA, CCSA, MCSE, Cisco Firewall specialist, VPN specialist, IDS specialist