12-17-2007 01:30 PM - edited 03-05-2019 08:02 PM
I've looked over this forum and can't seem to find an answer. I have a 3550 with several customers can I rate-limit egress and ingress by IP addresses?
12-17-2007 01:30 PM
I have the EMI image on my 3550
12-17-2007 02:29 PM
Hey there. Yes you can do this, but you can only apply the policy-map ingress to an interface (not egress).
Example.
I want to rate-limit traffic coming into fastethernet 0/1. Traffic sourced from 10.1.1.x is policed/rate-limited to 1mbps and traffic sourced from 20.1.1.x is policed/rate-limited to 9mbps. Check out the config:
class-map match-all 20Network
match access-group 2
class-map match-all 10Network
match access-group 1
!
!
policy-map My-test-ratelimit
class 10Network
police 1000000 8000 exceed-action drop
class 20Network
police 9000000 8000 exceed-action drop
!
!
!
interface FastEthernet0/1
service-policy input My-test-ratelimit
!
access-list 1 permit 10.1.1.0 0.0.0.255
access-list 1 deny any
access-list 2 permit 20.1.1.0 0.0.0.255
access-list 2 deny any
!
Hope this helps. Please rate all helpful posts.
Dazzler
12-17-2007 03:00 PM
That looks good. At least ingress is the most important (downloads).
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: