Can CAR on router rate-limit per address?

hetao1601 · ‎06-09-2008

Hi, everyone

I have a question about CAR on router. The router have a G703 E1 WAn interface and an ethernet interface. My goal is to rate-limiting access-rate of every ip address under ethernet, that is, for example, every PC under the ethernet interface cannot over 1Mb/s.

Can CAR on the router achieve this goal? If be, how to achieve it?

Very Thanks.

Tao

Farrukh Haroon · ‎06-10-2008

Yes it can, but Policing is the new way to go about things.

Have a look at:

http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a00800d7276.shtml

Sample CAR config:

access-list 101 permit ip host any

access-list 102 permit ip host any

interface FastEthernet0/0

rate-limit input access-group 101 1000000 35000 35000 conform-action transmit exceed-action drop

rate-limit input access-group 102 1000000 35000 35000 conform-action transmit exceed-action drop

Regards

Farrukh

hetao1601 · ‎06-11-2008

Farrukh

Very thanks for your reply.

My purpose is to put a maximum access-rate limit for every PC in a LAN. So if there are 100 PCs in the LAN, with the above CAR, I have to make 100 ACL, as below:

access-list 101 permit ip host 192.168.1.1 any

access-list 102 permit ip host 192.168.1.2 any

If so, there will be too many acl items. And I don't know how many acl can we applied under FastEthernet0/0. So it maybe unreasonable.

I know Huawei's Quidway router can support this feature, as below:

qos carl 1 source-ip-address range 192.168.0.2 to 192.168.0.200 per-address

I want to know Cisco can support this feature, or have some methods to achieve it.

Very Thanks

Tao

Farrukh Haroon · ‎06-11-2008

I'm sorry, I don't know about any such feature in IOS.

Regards

Farrukh