How this can be done is dependent on the features of your equipment. In principle, placing a shaper of policer in the path will limit the Internet bandwidth to your users.
Do you want to limit bandwidth both in and out? If so, likely you need at least two active policies.
Also note, if you limit inbound Internet bandwidth after it's already entered your network, the restriction won't be as effective at limiting the bandwidth before it crosses your Internet link.
