QoS: How to classify RDP traffic?

QoS: How to classify RDP traffic?

NewsGroups | Search | Tools
 alt.certification.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
QoS: How to classify RDP traffic? Peter Danes 07-10-2008
Posted by Peter Danes on July 10, 2008, 11:02 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi All,

I am trying to classify RDP traffic to mark it with a DSCP value but I
can't seem to get my ACL to pick it up. The router is a Cisco 877 and I
can't see an RDP option using NBAR either.

I have tried the following with no luck:

permit tcp any eq 3389 any eq 3389
permit tcp any any eq 3389
permit tcp any eq 3389 any

Can anyone think of a way to classify RDP traffic?

Kind Regards

Peter

home networking made easy, greater protection, less stress, introducing nm 5.0, 728x90
Posted by Scott Perry on July 23, 2008, 2:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Implementing QoS is about classification, marking, then the queueing. From
that, follow these steps:
(1) create access-list to identify the traffic
(2) create class-maps to identify types of traffic
(3) create a policy-map to modify the traffic
(4) apply the policy-map to a direction on an interface

Forget this line from your access-list: "permit tcp any eq 3389 any eq
3389". It is not what remote desktop protocol uses. The source port is a
"random/sequential" and the destination port is TCP 3389.

Try this:

access-list 190 remark *** Remote Desktop Protocol ***
access-list 190 permit tcp any eq 3389 any
access-list 190 permit tcp any any eq 3389
!
class-map match-any RDP_Class
description *** Remote Desktop Protocol ***
match access-group 190
!
policy-map RDP_Policy
class RDP_Class
set dscp af41
!
interface FastEthernet0/0
service-policy output RDP_Policy

The direction of the serivce policy is based on which direction the traffic
will be going to get to the remote desktop protocol server. This is also
impacting to the actual line of the access-list which is relevant. In my
example above, the traffic was tagged AF41 but not affected in limiting the
bandwidth. You can do what you want from here. This configuration was
tested in a lab environment on Cisco 2600 series routers.

-----
Scott Perry
Indianapolis, IN
-----

> Hi All,
>
> I am trying to classify RDP traffic to mark it with a DSCP value but I
> can't seem to get my ACL to pick it up. The router is a Cisco 877 and I
> can't see an RDP option using NBAR either.
>
> I have tried the following with no luck:
>
> permit tcp any eq 3389 any eq 3389
> permit tcp any any eq 3389
> permit tcp any eq 3389 any
>
> Can anyone think of a way to classify RDP traffic?
>
> Kind Regards
>
> Peter



Similar ThreadsPosted
Dividing networks (local traffic, global traffic) March 17, 2008, 5:42 pm
Traffic-shaping traffic with precedence 2 Options June 18, 2008, 4:39 am
traffic shaping and ip precedence June 7, 2006, 9:08 am
Syslog to monitor traffic April 29, 2007, 10:30 am
PIX command to check SMTP traffic August 8, 2005, 7:56 am
Frame Relay Traffic Shaping May 10, 2006, 7:58 am
Make traffic for test the link July 11, 2006, 4:48 pm
How to monitor traffic using Cisco NetFlow v5 August 7, 2006, 9:21 am
ip accounting precedence for non-transit traffic May 25, 2008, 5:23 pm
Network Monitoring Analysis - traffic, issues etc? May 10, 2007, 2:07 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map