Cisco ASA QoS Configuration: Valid Traffic Selection Criteria

Valid Traffic Selection Criteria for Cisco ASA QoS Configuration

Prev Question Next Question

Question

When you are configuring QoS on the Cisco ASA appliance, which four are valid traffic selection criteria? (Choose four.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

BCDE.

When configuring Quality of Service (QoS) on a Cisco ASA (Adaptive Security Appliance) appliance, there are several valid traffic selection criteria to consider. These criteria are used to identify and classify traffic for QoS purposes.

The four valid traffic selection criteria are:

A. VPN group: This criteria is used to identify traffic that is associated with a specific VPN group. This can be useful for applying QoS policies to VPN traffic that may have different requirements than other types of traffic.

B. Tunnel group: This criteria is used to identify traffic that is associated with a specific tunnel group. Similar to VPN groups, this can be useful for applying QoS policies to traffic that is coming in or going out through a particular tunnel.

C. IP precedence: This criteria is used to identify traffic based on the IP precedence field in the IP header. IP precedence values range from 0 to 7, with 0 being the lowest priority and 7 being the highest priority. This is a legacy QoS mechanism that is being replaced by DSCP.

D. DSCP: This criteria is used to identify traffic based on the DSCP (Differentiated Services Code Point) value in the IP header. DSCP is a more modern QoS mechanism that provides finer granularity than IP precedence. DSCP values range from 0 to 63, with higher values indicating higher priority.

E. Default-inspection-traffic: This criteria is used to identify traffic that is being inspected by default ASA inspection policies. These policies include protocols like HTTP, FTP, DNS, and SIP. This criteria can be useful for applying QoS policies to specific types of traffic that are commonly inspected.

F. qos-group: This criteria is used to identify traffic that has been assigned a specific qos-group value. qos-group values are configured using the qos-group command and can be used to apply QoS policies to specific types of traffic based on their characteristics.

Overall, these criteria can be used in combination to create more granular and effective QoS policies on Cisco ASA appliances.