Solved: Traffic Shaping with acl

drojasug33 · ‎05-12-2010

Hello,

I'm thinking about applying differente traffic shaping to packets with different destination in the same interface. So the idea is to identify the traffic in the inbound interface, and then if the packet destination is X then he gets 5Mbps but if the packet destination is Y then he gets 10 Mbps.I've tried with acls, but I figured that you can't assign two different acls to the same intreface. I cant use subinterfaces.

Thanks in advance.

Regards,

Daniel

Giuseppe Larosa · ‎05-12-2010

Hello Daniel,

first of all shaping can only be done outbound on outgoing interface

you need to use QoS, modular QoS, and you can define different traffic classes and in defining those traffic classes you use different ACLs

access-list 111 permit ip host x host y

access-list 112 permit ip host x host z

class CM-1

match access-group 111

class CM-2

match access-group 112

policy-map shape_multiple

class CM-1

shape average 5000000

class CM-2

shape average 10000000

int wan

service-policy output shape_multiple

you can define more classes as needed

Hope to help

Giuseppe

View solution in original post

Giuseppe Larosa · ‎05-12-2010

Hello Daniel,

first of all shaping can only be done outbound on outgoing interface

you need to use QoS, modular QoS, and you can define different traffic classes and in defining those traffic classes you use different ACLs

access-list 111 permit ip host x host y

access-list 112 permit ip host x host z

class CM-1

match access-group 111

class CM-2

match access-group 112

policy-map shape_multiple

class CM-1

shape average 5000000

class CM-2

shape average 10000000

int wan

service-policy output shape_multiple

you can define more classes as needed

Hope to help

Giuseppe

drojasug33 · ‎05-12-2010

Thanks a lot for your help.

I'm going to try it.

Regards,

Daniel

drojasug33 · ‎05-12-2010

Hi giuslar,

I have another question. Do I have to apply the acl on the interface?

Thanks.

Regards,

Daniel Rojas

Jon Marshall · ‎05-12-2010

drojasug33 wrote:

Hi giuslar,

I have another question. Do I have to apply the acl on the interface?

Thanks.

Regards,

Daniel Rojas

Daniel

No you don't. ACL's can be used for a number of different things eg. route-maps, NAT, QOS and none of these need the acl to be applied to the interface. Just apply the service-policy and you will be fine.

Jon