Packet shaping with ASA5505

clark.ambrose · ‎10-09-2007

I have a client that sends periodic bulk mail to their members. When they do this it completely floods their DSL connection.

Is there a way with an ASA5505 to do packet shaping to limit the amount of smtp traffic to no more than 50% of their upload speed or no more than 25% when the utilization is above 80% for all traffic?

I haven't done any QoS configuration with these devices before so any specifics would be helpful. Thanks.

clark.ambrose · ‎10-12-2007

Anyone?

whisperwind · ‎10-12-2007

I do not believe rate limiting is possible, feel free to doouble check though in the documentation

autobot130 · ‎10-14-2007

This is an easy one. Yes you can achieve this on the ASA5505 by configuring QoS rate-limiting.

First configure a class-map to match the type of traffic.

Second, configure a policy-map to match all the class-maps.

Third, apply policy-map to the physical interface.

hostname(config)# class-map TG1-best-effort

hostname(config-cmap)# match tunnel-group Tunnel-Group-1

hostname(config-cmap)# match flow ip destination-address

hostname(config)# policy-map qos

hostname(config-pmap)# class tcp_traffic

hostname(config-pmap-c)# police output 56000 10500

hostname(config-pmap-c)# class TG1-voice

hostname(config-pmap-c)# priority

hostname(config-pmap-c)# class TG1-best-effort

hostname(config-pmap-c)# police output 200000 37500

hostname(config-pmap-c)# class class-default

hostname(config-pmap-c)# police output 1000000 37500

Reference URL: http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/qos.html#wp1045477