All,

We just brought up a 20mb circuit on Friday at a branch. We have a 20mb circuit at the corporate office. The question that I posed last week was if I was controlling the traffic the best way possible on that link by police inbound and shaping outbound to 3mb.

I was thinking about this over the weekend because most answers were shape outbound on both ends. The provider is out "other end" for that branch, but they come to us using private addressing:

192.168.1.0/24 (inside) -> branch (172.5.5.1) -> provider (172.5.5.2) -> provider (172.5.7.1) -> corporate (172.5.7.1) -> (inside) 192.168.2.0/24

Could I shape for this one site (192.168.1.0) on the corporate side and not affect everyone else?

access-list 101 permit ip any 192.168.2.0 0.0.0.255

class-map Shape

match access-group 101

policy-map Shape

class Shape

shape 3000000

int s1/0

ip 192.168.1.0

service-policy output Shape

On the branch router:

policy-map TOOFAST

class class-default

shape 3000000

int s1/0

ip address 192.168.2.1 255.255.255.0

service-policy output TOOFAST

Would this work? I don't want to affect anyone else but this one location.

Thanks,

John