cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
346
Views
0
Helpful
3
Replies

Rate-limiting on 3550 by IP addresses

sjonessha
Level 1
Level 1

I've looked over this forum and can't seem to find an answer. I have a 3550 with several customers can I rate-limit egress and ingress by IP addresses?

3 Replies 3

sjonessha
Level 1
Level 1

I have the EMI image on my 3550

Hey there. Yes you can do this, but you can only apply the policy-map ingress to an interface (not egress).

Example.

I want to rate-limit traffic coming into fastethernet 0/1. Traffic sourced from 10.1.1.x is policed/rate-limited to 1mbps and traffic sourced from 20.1.1.x is policed/rate-limited to 9mbps. Check out the config:

class-map match-all 20Network

match access-group 2

class-map match-all 10Network

match access-group 1

!

!

policy-map My-test-ratelimit

class 10Network

police 1000000 8000 exceed-action drop

class 20Network

police 9000000 8000 exceed-action drop

!

!

!

interface FastEthernet0/1

service-policy input My-test-ratelimit

!

access-list 1 permit 10.1.1.0 0.0.0.255

access-list 1 deny any

access-list 2 permit 20.1.1.0 0.0.0.255

access-list 2 deny any

!

Hope this helps. Please rate all helpful posts.

Dazzler

That looks good. At least ingress is the most important (downloads).

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: