Kvalita služby v sítích IPsec VPN

Abstract

This thesis describes the implementation of quality-of-service tools in IPsec VPN networks. On the theoretical level, it first describes the basic characteristics of the quality-of-service. This segment of the thesis will also describe the specific mechanisms which tend to be implemented within the quality-of-service tools. Next, the theoretical part of this thesis describes the characteristics of IPsec VPN technology. The principles on the basis of which this technology works are explained. The practical part discusses the specific problems which arise when quality-of-service tools and IPsec VPN technology interact. Quality-of-service tools for classification, marking, shaping, policing and prioritization are sequentially applied to an IPsec VPN topology using the equipment from Cisco and Huawei. The implementation section also describes the mismarking of the packets on Cisco devices running on IOS version 12.4 and proposes an alternative IPsec VPN implementation procedure which can be able to solve the mismarking of the packets.