ONT Question - Priority Queuing on a Pix/ASA Ipsec Tunnel

redwarrior

I have a quick question regarding a hierarchical priority queue on a Ipsec tunnel. I have an ASA 5520 with multiple VPN tunnels to remote offices. I would like to be able to apply a PQ QoS configuration to just one of these tunnels without affecting the others. Looking at the documentation I've been able to find on this, it looks like there is no way to just apply it to a IPsec tunnel, only a physical interface. Anyone have a clearer view on this?

The documentation I'm looking at - http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/qos.html

MACattack

FYI:
--Apply the policy to the tunnel interface without qos pre-classify when you want to classify packets based on the pretunnel header.

--Apply the policy to the physical interface without qos pre-classify when you want to classify packets based on the post-tunnel header. In addition, apply the policy to the physical interface when you want to shape or police all traffic belonging to a tunnel and the physical interface supports several tunnels.

--Apply the policy to a physical interface and enable qos pre-classify when you want to classify packets based on the pretunnel header.