In which two locations is the qos pre-classify command applied to support QoS preclassification over an IPSec/GRE tunnel? (Choose two.)

A.
the tunnel interface

B.
the physical interface

C.
the crypto map

D.
the policy-map

E.
the class-map

Explanation:

Configuring QoS for VPNs
The QoS for VPNs feature, which is enabled by the qos pre-classify command, is restricted to tunnel and virtual template interfaces, and crypto map configuration submodes. For generic routing encapsulation(GRE) and IP in IP(IPIP) tunnel protocols, the qos pre-classify command is applied on the tunnel interface, making QoS for VPNs a configuration option on a per-tunnel basis.

For Layer 2 Forwarding(L2F) and Layer 2 Tunneling Protocol(L2TP) protocols, the qos pre-classify command is applied on the virtual template interface. L2TP clients belonging to identical virtual private dial-up network (VPDN) groups inherit the preclassification setting. The qos pre-classify command can be configured on a per-VPDN tunnel basis.

For IPSec tunnels, the qos pre-classify command is applied on the crypto map, allowing configuration on a per-tunnel basis. QoS features on the physical interface carrying the crypto map are able to classify packets before encryption.

The following example enables the QoS for Virtual Private Networks (VPNs) feature on tunnel interfaces and virtual templates:

Router(config-if)# qos pre-classify

The following example enables the QoS for VPNs feature on crypto maps:

Router(config-crypto- map)# qos pre-classify