Hi all,

I have a customer which provide internet access for about 200 students. They are connected by switchport and wireless.

Now I want to restrict the bandwidth per user (2Mbps). My fist thought is, to to rate-limit on each switchport. How about the accesspoints?

My second idea is to centralized the rate-limit on my core-switch (4503, Superv.2+) an leave the switches/accesspoint untouched.

Here my sample of config (not tested yet):

access-list 101 permit ip host 192.168.1.101

access-list 102 permit ip host 192.168.1.102

access-list 103 permit ip host 192.168.1.103

.....

interface VLAN30

rate-limit input access-group 101 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit input access-group 102 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit input access-group 103 2000000 37500 37500 conform-action transmit exceed-action drop

ip address 192.168.1.1 255.255.255.0

rate-limit output access-group 101 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit output access-group 102 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit output access-group 103 2000000 37500 37500 conform-action transmit exceed-action drop

....

Here my question:

Is there a better solution to restrict per ip because with this setup, I had to build for each ip an own access-list?

Thanks for a hint.

Greets,

Norbert