You have a normal TV working, right?
So if I have what are my let's have this right here.
What are my characteristics?
Tunnel.
Tunnel zero Tunnel Source Something and Tunnel Destination 23.3 IP Address
1.2255255355.
See, this is what I do, right?
And then I protect it.
IPsec IPV IPsec Profile I from.
Right.
The other thing that I can do is I'll create a separate policy class map.
Remember, class map.
I'll call it anything.
I'll call it VPN one.
I'll say match any.
I'll create another policy map.
I'll call it PM VPN one.
I'll call the class.
And for this I'll have an IP precedence of, say, five.
Let me show it to you on a larger class map.
I'll call it anything.
VPN.
CM VPN.
Match any policy map.
PM VPN.
Call the class cm VPN.
And then I'll say.
This should be precedence.
I can say priority also.
I can give it a priority.
But there is a precedence set precedents.
Set IP precedence.
Now I can have it as an internet route.
A flash.
A critical critical means treated with a critical precedence.
This traffic should be given the highest priority to go through.
I can have an internet, I can say network, priority, anything.
These are just values which have a predefined.
Set of rules.
So when they see an President five, they have that guidebook which says five is critical.
It's the same here.
It'll be the same everywhere.
Okay.
So I can say IP precedence this and give it a precedence of five.
Critical policy is created.
Where do I apply this policy on the service policy?
Input.
I can say input and output both.
So I'll say output right now because my traffic is going out.
Should have an IP precedence.
PM VPN on your mac.
It will mark the packets.
Right now I'm setting the precedence.
What else?
What else we can do is class map.
I'll create another one on the other side.
On the other side.
Say this is the receiving end.
Right VPN receive.
I'll say match.
I won't match this.
I match IP precedence.
If anything comes with an IP precedence of I will be matched in this class.
Then I'll have another policy map.
PM vpn receive.
In the class of CM VPN.
What was it called?
VPN and the class of this.
This class matches what any IP precedent.
Five I can do other stuff with it.
I can police it.
Do this bit per second.
Do not let him go about this bit.
Or I could prioritize him.
I'll give him a priority of, say, 25%.
25% of the bandwidth will be allocated for this guy.
So I make sure that whatever traffic is coming out through the tunnel does not go missing.
If it is congested, at least 25% is dedicated to this guy.
He will go through using that 25%.
There.
We have done all of this before.
The only difference here is you apply this precedence on the tunnel.
You only apply it on the tunnel.
And you get one more single so that.
I see.
Yeah.
For the cereal, you'll keep a different IP precedence value so you'll know that.
See, if you match only one.
He will never match the cereal.
He will do nothing to the cereal.
Let him go as a common man.
Right now what I'm doing is for the IP traffic going out of the tunnel.
I'm giving him that VIP status of five.
I'm giving him an ambassador to go and.
So when on the other guy, the guy sees this, this traffic is coming in, an ambassador.
He's a VIP.
He clears out the road and lets him go out.
Even if this traffic jam, he goes in and clears it out for him, 25% he keeps for him.
Remember Commonwealth divided the roads for for for VIPs.
They did that, right.
They had this separate line only for those people.
That's what you do here.
Yeah.
Priority for those people.
For the common man.
You don't mark him at all.
He goes wherever he wants to go, but he cannot go on this 25% mango people.
But the mango people.
Right.
The other way.
Now, if you don't have a tunnel, if you're doing with, say, easy VPN, there's also one more way
of doing this.
It's not this.
You don't mark it this way.
I'm showing you marking right now.
You do it in.
I can profile.
You have something called group.
For this I I tunnel.
Your group market call it anything group is to.
So for this tunnel, it belongs to a group two.
When it reaches the other side, you can say class map shows VPN.
Match.
What?
Group.
And then apply the policies in another policy map.
PM shows group class is it called.
Vasquez VPN and then do whatever you want.
Again, policy.
Prioritize.
You can do again, same thing, compress it, give it a bandwidth of this dedicated bandwidth to this
guy, given priority, police the data queue limit a lot of things.
We have done all of them before.
This is was only applying to VPNs.
Right.
Is this a.
Yeah.
This is just marking.
See there?
I did it in precedence.
So I put him in an ambassador.
Now I'm doing group means I'm still marking him, but I'm not putting him in an ambassador.
I'm giving him a black leather jacket of number two.
So from the other other end, they're all checking who's coming with the black jacket of number two.
Whoever is with the black jacket.
Come here.
I have a separate line for you.
We'll have different groups now see, for this tunnel, I'll have group two.
I have another tunnel coming in from America.
I'll keep it as group five.
For group five, I'll give a priority of 25% for the group coming from India, I'll give a priority
of 25, 10%, 20%, 15%, whatever you want it just marking.
And then you do that stuff on the mark.
So that would be helpful.
What is the difference between maritime traffic shaping?
Traffic shaping.
Shaping.
This shape.
These are all different values that you can do because the traffic shaping, we also try to prioritize
the data.
Yeah, this is this is the policy that you apply.
Shaping is applying policies is also you do a step.
See I told you remember policy map does the class map is used for classification.
The group that we did before.
It was used only for classification shaping means he will shape it and put him in a good queue.
He will put him ahead in the queue.
With the thing, the bandwidth or priority.
I divide my bandwidth of my link.
I don't do anything to the queue.
I'll divide my bandwidth in the link and let him go out.
I keep that bandwidth for this.
Anything that is marked with IP precedence of five or group of two.
Where are these things?
Marked.
There is a special t o.
S field in your IP header.
It's called type of service.
It's a special field which has this value.
When you have a group of five, the value of that field will be zero zero 1 or 0 one 0 or 1 zero one
different values.
It's A33 bit field.
The field.
You know, you can do that in that field.
In that field, you'll get that different value.
One, two, three, one, four, five.
See, as I told you, priority, not priority.
Precedence was 15278.
So three bit field with different values.
One is one means 00100.
One means IP precedence of 1010 means IP precedence of 2011 is 3100 is 6664.
You understand what I'm saying?
This is normal.
This is your normal stress is applied here.
The only difference is how you mark the traffic.
Us is applied using class maps and policy maps.
The only one thing you have to learn is how to mark the traffic going out of your turn.
Right.
These are only two ways.
There are many.
But these are the most predominantly used.
See an IPCC.
The most well known way of applying a tunnel of creating a tunnel is through vice.
Or Gretna's.
Crypto maps are not used.
Usually used.
Why?
Because you don't send.
You cannot send multicast through a crypto map.
You cannot send a broadcast to a crypto.
It can only be sent through tunnels or tunnels or IPsec or or your normal tunnels.
So just.
In crypto, you can't.
You can't know it'll be because the other side should be a reflection of this side.
You cannot you can never have a reflection with a source of 220 400.
What will you have on the other side?
The source of 224 001.
The traffic will never come back as a source of 220 400 ten.
He will come back with the source of that interface.
The traffic from here is coming from this source too.
220 400 ten.
The reflection should be the source should be 220 400 ten, which will never be the case, but the source
will change IP and can.
It doesn't work.
Try it.
It should again be a reflection on the other side.
Have you tried it?
Does it work?
It doesn't.
That is the one big problem with crypto maps.
Multicast and dynamic broadcasts do not work with crypto.
That is why grids were introduced.
That's why you cannot run routing protocols over crypto maps.
So when you use this it's easy to do your cuz you either you either do it on a tunnel or you go to your
profile.
And in that profile you apply that group profile, you apply that group.
Okay.
Is that clear?
Clear is very simple.
Very, very simple.
If you know how to do it with.
All this policing and shaping and all the things we did there.
All you have to do is how to match it.
Do it on the notepad.
The two ways of doing this.
The first is this You have your tunnel.
You have your tunnel.
You go back inside your tunnel interface.
Tunnel zero service policy.
What is the name of the policy?
This and the traffic which is going.
I'm marking it with precedence of.
Yes.
The other way is.
Crypto Ik v2 v2 Icy camp
profile i ik Graph shows Group two.
So you're doing it for the profile.
Whenever that profile is used, all that traffic will be marked with the group of two.
The marking will be done for you.
Good.