advise on Policing

[cormon]

http://www---E3-7200---network/servers--3560--10

meg--remotesites*2
"
vpn sites

As you can seee above we have a 34 meg E3 connection to the internet . We have various vpn connections that come in and share our internet pipe as well as coming in our internet pipe so I want to control the BW as much as possible. As you can see we have two new sites that come in on 10 meg connection and terminate on a 3560 . My concern is that internet traffic on these connection could possibly take up 20 meg off out internet pipes . In Theory that is . Is the best way to resolve this by applying policing on the inbound interface of the 7200 and use tcp windowing to slow the tcp traffic.

Thanks alot for any input

Kevin

Thanks in advance.

 

[cormon]

any ideas on this lads

Thanks alot..

 

[vmaxwell]

Hi Kevin

Policing is only gonna "drop or mark for potential to drop" packets and should only be applied to outgoing packets with traffic-shaping.

You should be looking at appying "class-based queuing", this can allow you to give http traffic a certain amount of BW

You can have a look at how much http traffic your getting through the interfaces, apply the following command to the interfaces that you are interested in:

ip nbar protocol-discovery


Then have a look at the amount of

http://www traffic

on the router or switch:


show ip nbar protocol-discovery