Rate limiting by IP on a Cisco 2600

[rtdoran]

I have a customer that would like to limit the bandwith of a particular IP address out his WAN on a Cisco 2611 with one T1 WIC. Can this be done using an ACL and rate-limiting?

 

[Rucus1]

You need to make sure you have a router image that supports GTS (generic traffic shapeing). You define 2 access list. One for his inbound traffic, and one for his outbound. You then apply them to the egress interface he resides on, and your egress to your network.

 

[Rucus1]

I didnt mean to say just apply the access list. You need to use the "traffic-shape group num CIR BC BC" command.

 

[sokonta]

rate-limit input 5120000 64000 64000 conform-action transmit exceed-action drop
rate-limit output 5120000 64000 64000 conform-action transmit exceed-action drop

This is the rate limit config looks like

 

[Beggo]

here u have example

interface Fastethernet0/0
traffic-shape group 100 128000
!
interface Fastethernet0/1
traffic-shape group 100 128000

access-list 100 permit ip host 192.168.1.7 any
access-list 100 permit ip any host 192.168.1.7

 

[rtdoran]

In the command:
traffic-shape group <access-list> CIR (bps) [Bc (bits) [Be (bits)]]
what exactly do the CIR, Bc and Be do?

 

[Rucus1]

The config that beggo posted is right on the money. You dont want to do rate-limit like sokonta suggested because that will drop there traffic. You want to shape it and not drop it. Otherwise they will hang you for the packet loss. There are some other options you can use with the traffic-shape command like burst and commited burst but the config beggo posted will work very well if u just want them to have a continuos amount of bandwidth.

 

[Rucus1]

The second number determines how long they can burst above the CIR. If you set the second number to 4 times the CIR then they can burst for 4 seconds. The third number is how many total bits they are allowed to pull during the burst period. So if you say they can burst for 4 seconds, as long as they pull no more than 200 kilobit in that period.
traffic-shape group <access-list> 128000 512000 200000