topic Re: QoS either on Sub Interface or Vsys in General Topics

QoS either on Sub Interface or Vsys

Mohammed_Yasin — Thu, 24 Sep 2020 13:20:36 GMT

I have 24 VSYS on the Firewall,

All of them are using the same physical interfaces for incoming and outgoing traffic but different sub-interfaces.

I have decided to apply the QoS profile for egress traffic. As I know I can apply the QoS on the physical interface.

My question, how can I configure a dedicated QoS profile using only the sub-interface or apply it to a specific Vsys?.

Firewall Model PA-5000 series.

Re: QoS either on Sub Interface or Vsys

Abdul-Fattah — Thu, 24 Sep 2020 14:03:28 GMT

you can specify which sub-interfaces you want to apply QoS on, under "source Interface" in "Clear Text Traffic" with the appropriate profile.

Re: QoS either on Sub Interface or Vsys

Mohammed_Yasin — Thu, 24 Sep 2020 14:07:48 GMT

@Abdul-Fattah

No, it does not appear in the source Interface tab

PA KB, QoS is supported on physical interfaces and it's depending on the firewall model, QoS is also supported on sub interfaces and Aggregate Ethernet (AE) interfaces.

I m not sure about PA50505 series

Re: QoS either on Sub Interface or Vsys

Abdul-Fattah — Mon, 05 Oct 2020 07:52:20 GMT

that works on lower models, like PA-800,3000 not sure about PA-5000

QoS will be applied on egress phy-interfaces/AE1 only, but for granular treatment on clear text traffic ,you can use a QoS Profile for traffic originated from a sub-interface.