[c-nsp] prioritize vpn traffic

[Giles Coochey]

On 12/08/2013 20:31, Michael Sprouffske wrote:
> I currently have a juniper ssl vpn appliance.  Is there any way to prioritize traffic going over an ssl vpn connection?  The voip works well until someone dowloads a file through the vpn and then the voip experiences latency.  Is there a appliance that will do this on the box itself or is this not possible?  I don't think my asa 5525 will do this either.  Does anybody have a way that they can prioritize traffic going over an ssl vpn?
> _______________________________________________
>
If you are not in control of how much data the remote end sends you over 
your choke points then there is little you can do.

I believe the Juniper SSL VPN boxes have bandwidth management for 
Network Connect clients, but you cannot control how much data you 
receive from client-less VPN clients or anyone else for that matter.

For your outbound traffic you can prioritise your VoIP traffic, use 
policers & queueing on your choke points, most any IOS based router can 
be configured for that.

-- 
Regards,

Giles Coochey, CCNP, CCNA, CCNAS
NetSecSpec Ltd
+44 (0) 8444 780677
+44 (0) 7983 877438
http://www.coochey.net
http://www.netsecspec.co.uk
giles at coochey.net