|
|
<- Previous Message | Next Message ->
Thread Index
RE: Rate-limiting
I have this IOS on a 1720 with one T1 WIC and one ISDN WIC
IOS (tm) C1700 Software (C1700-K8O3SY7-M), Version 12.2(2)XH, EARLY
DEPLOYMENT RELEASE SOFTWARE (fc1)
And it has rate-limit on it. You only get the rate-limit command if you
are in the config mode of an interface though, not from just enable
mode.
william
-----Original Message-----
From: Timothy S. Bowers [mailto:tim@...
Sent: Wednesday, February 27, 2002 12:31 AM
To: isp-dsl@isp-dsl.com
Subject: RE: Rate-limiting
Hi,
I've checked my Cisco 1720 router by I don't have any "rate-limit"
command. I only have "Traffic-shape limit"
Do I need any special software on my router to have "rate-limit" ?
Thank you,
Timothy Bowers
At 04:41 PM 02/02/26 -0600, you wrote:
>You can rate limit inbound traffic typically so you to ratelimit a
>specific IP#, subnet or port/protocol, you'd need to rate limit the
>inbound traffic from the Internet and the inbound traffic from the
>server. If you only want to rate limit the outbound traffic FROM the
>server, then you rate limit the inbound (on the router) traffic on the
>server segment. If you want to rate limit the inbound traffic TO the
>server, you rate limit inbound (on the router) traffic from your
>Internet feed. Having said that, you basically setup an ACL that
>matches what you want to rate limit.
>IE to rate limit outbound HTTP traffic from an internal server on IP#
>123.123.123.123 to only 128Kilobits/s you would do the following:
>
>access-list 100 permit tcp host 123.123.123.123 eq www any
>
>Then assuming your FastEthernet 0/0 port was your ingress for that
>server you'd do
>
>Router(config)# int FastEthernet 0/0
>Router(config-int)# rate-limit input access-group 100 128000 24000
>24000 conform-action transmit exceed-action drop
>
>If you wanted to ratelimit the whole server to 1Megabit/s you'd do
> access-list 100 permit ip host 123.123.123.123 any
>Then 'rate-limit input access-group 100 1000000 24000 24000
>conform-action ransmit exceed-action drop' On the FastEthernet0/0 port.
>
>Another example, if you want to make a T1 look like an ADSL line, do
>the following
>
> access-list 100 permit ip any 123.123.123.64 0.0.0.15 access-list
> 101 permit ip 123.123.123.64 0.0.0.15 any
>
> then on their serial interface do,
> rate-limit input access-group 101 128000 24000 24000 conform-action
>transmit exceed-action drop
>
> and on your ingress from your Internet feed do
> rate-limit input access-group 100 384000 24000 24000 conform-action
>transmit exceed-action drop
>
>At least that's what a crappy ADSL line looks like, 384k down and 128k
>up :-P
>
>William
>
>
>
>-----Original Message-----
>From: JunoGuy [mailto:junoguy@...>Sent: Tuesday, February 26, 2002 4:18 PM
>To: isp-dsl@isp-dsl.com
>Subject: Rate-limiting
>
>
>Can anyone send me a sample configuration for rate limiting traffic on
>a FastEthernet port on a 7206 vxr?
>
>
>Thanks!
>
>
>JunoGuy
>--
>
>
>
>
>
>
>
>
>
>
- Replies
-
- RE: Rate-limiting, Timothy S. Bowers
<- Previous Message | Next Message ->
Thread Index
|
|
