rate-limit

[koshu]

Hi router gru,

Kindly help me on this.I have a 2610 router and 122-7c is the ios.I am retsricting bandwidth on my isdn ras.The restriction is applied on etherenet of my router by rate-limit command.But my mrtg is showing that isd ras is geting more bandwidth it is geting near about 512 Kbits and I have restricted to 300 kbits.Below is the conf of my router

Senario
Isdn user(geting ip from ras 202.78.169.64/255.255.255.192)--------RAs Ethernet ip 202.78.173.18-------RasGateway 202.78.173.21(cisco)




interface Ethernet0/0
ip address 202.78.164.3 255.255.252.0 secondary
ip address 202.78.173.21 255.255.255.240 secondary
ip address 202.78.168.26 255.255.252.0
no ip proxy-arp
rate-limit input access-group 121 48000 52000 52000 conform-action transmit exceed-action drop
rate-limit output access-group 121 248000 300000 300000 conform-action transmit exceed-action drop
ip route-cache policy
no ip mroute-cache
full-duplex
service-policy input mark-inbound-http-hacks
service-policy output mark-inbound-http-hacks

access-list 121 permit ip any 202.78.169.64 0.0.0.63

 

[rburke]

Well that makes sense because they are using up all the burst size along with the normal 248kbps that you are rate-limiting them to. Since your burst size is 300kbps and your average size is 248kbps add it up and you get 548 kbps. Which is around what you are saying you see in your MRTG graphs. Remeber that the MRTG graphs are averages over 5 minutes, so they are maxing out the allowed bandwidth and the burst. Try lowering your burst size and that will limit them. Just an idea. Let me know if it helps...


Burke