Defining guranteed Internet bandwith for branch users

nkariyawasam · ‎08-26-2008

I have following setup;

Branch ( 30 nos) and head office. Each branches have links to head office in star-fashion. Head office has 4MB internetlink. Also, head office runs on 6500 core switch.

Users will come to proxy server at head office to access internet.

Right not internet bandwidht is shared among all branches.

Now I want to allocate guranteed Internet bandwidth ( about 512K) for a particular branch. What is the best possible way to achieve this requirement ?

andrew.prince · ‎08-26-2008

You need to configure QoS on your Branch and HQ ends.

http://www.cisco.com/en/US/products/ps6558/products_ios_technology_home.html

it depends on your platform, below is the 65xx QoS config examples:-

http://www.cisco.com/en/US/customer/products/hw/switches/ps700/products_tech_note09186a008014a29f.shtml

http://www.cisco.com/en/US/customer/products/hw/switches/ps700/products_tech_note09186a008015bf98.shtml

What platform are you using in the branch offices?

HTH>

nkariyawasam · ‎08-26-2008

I am sorry that I couldn't explain the scenario accurately.

The link between branch and HQ are dedicated to that particular branch. But, the internet link is common to all branches and sitting after the perimeter firewall. My question is how to allocate guranteed bandwidth for a particular branch on internet the link.

andrew.prince · ‎08-26-2008

If you want to do it via the firewall, you can create a service policy to allocate bandwidth in bits per second.....so say a brach office has the subnet of 192.168.1.0/24 and you want to alloctae 256kbs for http/https traffic:-

access-list restrict_bandwidth_test line 1 extended permit tcp 192.168.1.0 255.255.255.0 any eq 80

access-list restrict_bandwidth_test line 2 extended permit tcp 192.168.1.0 255.255.255.0 any eq 443

class-map web-bw

match access-list restrict_bandwidth_test

policy-map test-me

class web-bw

police 262144 1500 conform-action transmit exceed-action drop

service-policy test-me interface inside

HTH>