Cisco ASA Voice Traffic Optimization: Traffic Shaping and Priority Queuing Explained

In many network environments, handling voice traffic effectively is critical due to its sensitivity to latency, jitter, and packet loss. In earlier ASA configurations, achieving both traffic prioritization and shaping on the same interface required some creative workarounds. This was especially true for scenarios where we needed to restrict voice traffic to a certain bandwidth while ensuring it received priority treatment.

However, since Cisco ASA firmware version 9.7, configuration capabilities have been updated, allowing more flexibility and efficiency. Here, we’ll explore the modern approach for managing and prioritizing voice traffic on ASA, with step-by-step guidance to implement nested policy maps and create effective traffic shaping.

### Why Prioritize Voice Traffic?

Voice over IP (VoIP) and similar real-time services rely on timely packet delivery. Inadequate prioritization can lead to voice degradation, dropped calls, or delays. By properly prioritizing voice traffic, we ensure the following:

- **Reduced Jitter:** Minimizes variance in packet arrival time.

- **Low Latency:** Ensures that voice packets are delivered in real time.

- **Controlled Bandwidth Usage:** Prevents voice traffic from consuming excessive bandwidth.

### Traditional Approach vs. ASA Post-9.7

Traditionally, the challenge was the inability to configure both Low Latency Queuing (LLQ) and traffic shaping on the same interface. A workaround was to create two sub-queues within a shaped queue:

- A **priority queue** for voice traffic

- A **best-effort queue** for other traffic

In this setup, we used the **service-policy** command to nest a priority policy map within a shaper policy map. While effective, this approach was complex and sometimes inefficient in high-demand networks. ASA firmware post-9.7 introduces improvements that simplify these configurations, enabling easier implementation of traffic shaping and prioritization.

### How to Configure Traffic Shaping and LLQ on ASA Post-9.7

With ASA version 9.7 and newer, Cisco introduced more advanced capabilities for shaping and prioritizing traffic. The new configuration allows for more straightforward nested policy maps that can handle prioritized queues within shaped policies without complex workarounds.

#### Step-by-Step Configuration

Here’s how to configure voice traffic prioritization under a traffic-shaping policy in an ASA post-9.7 environment.

1. **Define Class Maps for Voice and Best-Effort Traffic**

   - Class maps are used to match the types of traffic we wish to handle differently.

   

   

   class-map VOICE

     match dscp ef ! Matches DSCP ‘ef’ for Expedited Forwarding

   class-map BEST_EFFORT

     match any ! Matches all other traffic

   

2. **Configure the Priority Policy Map (LLQ Policy)**

   - Create a policy map with LLQ settings to prioritize voice traffic. The LLQ mechanism will assign strict priority to the specified traffic up to a set limit.

   

   policy-map PRIORITY_POLICY

     class VOICE

       priority 2000 ! Allocate 2 Mbps (2000 kbps) for voice

     class BEST_EFFORT

       bandwidth remaining percent 100 ! Allocates remaining bandwidth for other traffic

   

3. **Configure the Shaping Policy Map**

   - Define a shaping policy map that includes both the priority queue for voice and the best-effort queue for other traffic. This is where we set the shaping parameters for the overall interface or sub-interface.

   

   policy-map SHAPER_POLICY

     class class-default

       shape average 5000000 ! Shape the total output to 5 Mbps

       service-policy PRIORITY_POLICY ! Nest the LLQ policy within the shaper

   

4. **Apply the Shaping Policy to the Interface**

   - Finally, apply the shaping policy to the interface where you want to manage traffic prioritization and shaping.

   

   interface GigabitEthernet0/1

     service-policy output SHAPER_POLICY

   

### Explanation of the Configuration

1. **Class Maps:** These classify traffic into categories: `VOICE` for high-priority traffic marked by DSCP EF, and `BEST_EFFORT` for all other traffic.

   

2. **Priority Policy (PRIORITY_POLICY):** This policy prioritizes voice traffic with a strict 2 Mbps limit, ensuring voice traffic never exceeds the desired bandwidth cap. The best-effort class receives any remaining bandwidth not used by voice.

   

3. **Shaper Policy (SHAPER_POLICY):** Shapes the total output to 5 Mbps on the interface, where both the voice and other traffic will operate. By applying `service-policy PRIORITY_POLICY` within this shaping policy, we create a nested queue structure that allows prioritized voice handling while maintaining control over the total bandwidth usage.

4. **Interface Application:** The policy is applied directly to the desired interface, ensuring that the configured shaping and priority rules are enforced in real-time.

### Benefits of This Approach

- **Simplified Configuration:** The nesting of policies within the shaper eliminates the need for older workarounds.

- **Consistent Voice Quality:** By strictly enforcing a 2 Mbps cap on voice traffic and prioritizing it, this approach maintains high call quality.

- **Flexibility:** Other traffic can still use remaining bandwidth without negatively impacting voice services.

  

### Final Thoughts

In Cisco ASA firmware post-9.7, configuring traffic shaping and LLQ is far simpler and more efficient. The ability to nest policies provides greater control over network resources and ensures that real-time traffic, like VoIP, receives the prioritization it needs. This configuration method minimizes network latency and jitter, leading to high-quality voice communication and optimal overall network performance.

By following these steps, network administrators can ensure that voice traffic remains efficient, low-latency, and within a controlled bandwidth, while also optimizing network resources for all other traffic.