O'Reilly logo

End-to-End QoS Network Design by Christina Hattingh, Tim Szigeti - CCIE No. 9794

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 16. IPSec VPN QoS Design

IPSec VPNs are the most widely deployed VPNs and are found in three main contexts:

  • Site-to-site IPSec VPNs

  • Teleworker IPSec VPNs

  • Remote-access client (mobility) IPSec VPNs

QoS considerations for site-to-site and teleworker IPSec VPNs are examined in this design chapter (as QoS is rarely–if ever–deployed in remote-access client IPSec VPN scenarios). These considerations include the following:

  • IPSec modes of operation

  • Bandwidth and delay increases because of encryption

  • IPSec and cRTP incompatibility

  • IP ToS byte preservation through IPSec encryption

  • QoS and Anti-Replay interaction implications

Following a discussion of these considerations, design recommendations for site-to-site and teleworker (DSL and cable) solutions are ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required