Have two sites connected with 4 Channelized T1's with a VPN between them controlled by two PIX's. On each side the T1's go into a 2821 router , then into the PIX, hence into a series of 2960 switches. ( see config for router below)
Client would like to guarantee bandwidth to SQL servers on one side from just some of the computers on the other.
I read in the Cisco site docs about Low Latency Queuing, Policing and Shaping, Class Based Weighted Fair Queuing (CBWFQ) - essentially all I'm finding are abstract white papers that give me no sense if they're appropriate technologies. The only really useful bit I've found was here :
It occurs to me to wonder if I can associate a switch based (local) VPN with one or two of the T1's -
Any thoughts on basic strategy here, or examples of specific similar working configs would be much appreciated.
Many thanks -
Cisco 2821 (revision 53.51) with 249856K/12288K bytes of memory.
Processor board ID xxxxxxxxxxxxx
2 Gigabit Ethernet interfaces
4 Serial interfaces
4 Channelized T1/PRI ports
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
no network-clock-participate wic 0
no network-clock-participate wic 1
ip subnet-zero
ip cef
ip domain xxxxxxxxxxxxxxxxxx
ip ssh time-out 60
!
voice-card 0
no dspfarm
controller T1 0/0/0
framing esf
linecode b8zs
channel-group 1 timeslots 1-24
!
controller T1 0/0/1
framing esf
linecode b8zs
channel-group 1 timeslots 1-24
!
controller T1 0/1/0
framing esf
linecode b8zs
channel-group 1 timeslots 1-24
!
controller T1 0/1/1
framing esf
linecode b8zs
channel-group 1 timeslots 1-24
!
interface Multilink524754
description => xxxxxxxxxxxxxxxxx
ip address xxxxxxxxxxxx 255.255.255.252
ip access-group 100 in
no ip redirects
no ip proxy-arp
load-interval 30
no cdp enable
ppp multilink
ppp multilink group 524754
ppp multilink fragment disable
!
interface GigabitEthernet0/0
ip address xxxxxxxxxxxxx 255.255.255.240
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0:1
description MLPPP
no ip address
encapsulation ppp
tx-ring-limit 26
tx-queue-limit 26
no fair-queue
no cdp enable
ppp multilink
ppp multilink group 524754
!
interface Serial0/0/1:1
description MLPPP
no ip address
encapsulation ppp
tx-ring-limit 26
tx-queue-limit 26
no fair-queue
no cdp enable
ppp multilink
ppp multilink group 524754
!
interface Serial0/1/0:1
description MLPPP
no ip address
encapsulation ppp
tx-ring-limit 26
tx-queue-limit 26
no fair-queue
no cdp enable
ppp multilink
ppp multilink group 524754
!
interface Serial0/1/1:1
description MLPPP
no ip address
encapsulation ppp
tx-ring-limit 26
tx-queue-limit 26
no fair-queue
no cdp enable
ppp multilink
ppp multilink group 524754
!
ip classless
ip route 0.0.0.0 0.0.0.0 xxxxxxxxxxxxxxxxxxx
!
!
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
!
access-list 100 deny icmp any any redirect
access-list 100 deny icmp any any time-exceeded
access-list 100 deny ip xxxxxxxxxxx
access-list 100 deny ip xxxxxxxxx
access-list 100 deny ip xxxxxxxxxxx
access-list 100 deny ip xxxxxxxxxxxx
access-list 100 deny ip xxxxxxxxxxxxxxx
access-list 100 deny ip xxxxxxxxxxxx
access-list 100 deny ip host 0.0.0.0 any
access-list 100 permit ip any any
no cdp run
!
!
!
!
control-plane
!