How to can I set bandwidth limitations on Catalyst 3550 / 2950 ?

[davettz]

Hello,

I need some advice on how best to set bandwidth limitations on our Cisco Catalyst 2950 Switches. This would be to control the internet bandwidth and stop a single user with a massive download from commandeering our T1 lines.

We have a main 3550 cisco with two 2950's about 30-50 users.

Thanks

 

[IRudebwoy]

That would best be performed elsewhere in your network. Maybe it is time to set up a proxy server to better service your customers' bandwidth requirements. Any bandwidth limits on the switch would effect all traffic including internal services that would benefit from the full bandwidth your LAN provides.

 

[jeter]

QOS



Go Army!
CCVP, CCNA Voice, CCNA R&S, N+
Tek-TIP Member 19,650

 

[burtsbees]

Yes, QoS or CAR/policy maps, in the 3550, or whatever the edge L3 device is.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[billyj1900]

Create a class map on your router.

class-map match-any ALL-TRAFFIC
match any
class-map match-any INTERNET-TRAFFIC
match access-group name INTERNET-TRAFFIC-PAT

!
!
policy-map INTERNET-POLICER-OUT
class INTERNET-TRAFFIC
police cir 1500000
exceed-action drop
class class-default
policy-map INTERNET-POLICER-IN
class INTERNET-TRAFFIC
police cir 1500000
exceed-action drop

 

[burtsbees]

Uh, if the acl matches the user that is doing all the downloading, then that config guarantees him/her 1.5Mbps...

access-list 10 permit x.x.x.x---the ip of the offender

class-map match any OFFENDER
match access-group 10
!
policy-map DROP
class OFFENDER
police cir 256000
conform-action transmit
exceed-action drop
interface (outside-interface)
policy-map DROP out

OR
interface (outside interface)
rate-limit input access-group 10 256000 24000 24000 conform-action transmit exceed-action drop
rate-limit output access-group 10 256000 24000 24000 conform-action transmit exceed-action drop

This allocates/limits the specific ip address of access-list 10 to 256Kbps, which is 1/6th of a T1.

/



tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[billyj1900]

Yeah change your police cir to the desire limit.

 

[burtsbees]

Yes, sorry---I misread the post. Billy, your solution does it for everyone, which I now believe the poster needs. Mine was for a single offender.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!