Restrict Network Bandwidth

ray_stone · ‎04-19-2008

Hi, We have around 100 users in our inside network. Can we restrict on downloading or assign bandwidth speed to users like in the way of divide bandthwidth. I want if user need to download then he wont able to take highter bandwidth except upto 15 kb. Can anyone suggest which options we can use in this regard. Thanks.

ROBERTO TACCON · ‎04-19-2008

QoS support on PIX/ASA is very limited - if you need more features, you need IOS platform.

We can do Policing and Prioritizing on the ASA firewall, but can not do traffic shaping and bandwidth reservation upto minimum level on the ASA as of now. This is IOS feature.

Traffic shaping was ported from IOS and scheduled to be added in version 7.2(4) and 8.0(4) via the commit of CSCsk06260.

It is filed as future enhancement request. ID :- CSCsk06260.

To have more info on it, please check it with following link:-

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk06260

ROBERTO TACCON · ‎04-19-2008

However you can try to rate limit with your asa:

PIX/ASA 7.x and Later: Bandwidth Management(Rate Limit) Using QoS Policies

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008084de0c.shtml#rate

HTH

cisco24x7 · ‎04-19-2008

Pix 7.x supports very limited QoS. Furthermore,

most of the 7.x and 8.x codes are in ED

releases which I do not trust to run it in

a production enviroment.

From what I can see in your requirements,

you can use IOS. If your requirements dictates

that you must have both QoS and Firewall on the

same device, then Checkpoint firewall is

better suited for your requirements.

Checkpoint firewall comes with standard

QoS (free) or a more granular version which

is not free.

ROBERTO TACCON · ‎04-19-2008

If the solution need a real traffic shaper (with advanced DPI technology upgradable without security problem ...) the better solution is a product like ALLOT

http://www.allot.com

HTH