Patent ID: 8422374

Claim:
A method implemented by a policy server ( 34 ) in a second network for a session between a client ( 30 ) in a first network and a destination in the second network, wherein the session passes through a tunnel in the first network to the second network, said method comprising: after a tunnel has been established between the client ( 30 ) in the first network and a tunnel termination device ( 42 ) in the second network: receiving, at the policy server ( 34 ) in the second network, a mapping of a header address to a tunnel address for the tunnel, said header address identifying the session and the mapping identifying the tunnel through which data packets belonging to the session are being sent; receiving, at the policy server ( 34 ) in the second network, an instruction to apply a specified QoS to packets having said header address; mapping, at the policy server ( 34 ) in the second network and using said received mapping of said header address to said tunnel address, said header address associated with said instruction to the tunnel address; identifying, at the policy server ( 34 ) in the second network, a policy server ( 36 ) the first network that is responsible for the tunnel identified by said tunnel address; and sending, from the policy server ( 34 ) in the second network, instructions to the policy server ( 36 ) in the first network to apply the specified QoS to the packets traversing the tunnel.