Hi All,

I have a question regarding Throttling Bandwidth on an ASA 5510.

Lets say for simplicities sake I Have two physical interfaces connected.

OUTSIDE -  Connects to my ISP.

Inside - with 2 subinterfaces connected.
                            192.168.1.1/24 VLAN 5
                            10.10.1.1/24  VLAN 10

Now what I want to do is restrict the bandwidth to and from the 192.168.1.1/24 network to 2mb/s

and

limit the bandwidth to and from the 10.10.1.1/24 network to 1mb/s.

NOTE: The two internal networks cannot talk to each other.

Now I understand I can do something like this say for the 192.168.1.0/24 network.

access-list 2mbs_throttle extended permit ip host 1.1.1.1 any
access-list 2mbs_throttle extended permit ip any host 1.1.1.1
access-list 2mbs_throttle extended permit ip host 1.1.1.2 any
access-list 2mbs_throttle extended permit ip any host 1.1.1.2

where 1.1.1.1 is the 192.168.1.0's PAT'd address AND 1.1.1.2 is an internal servers NAT'ed (via a STATIC) public address.

class-map cm_2mb_throttle
match access-list 2mbs_throttle

policy-map restrict-bandwidth-policy
class cm_2mb_throttle
police output 2000000 2000
police input 2000000 2000

service-policy restrict-bandwidth-policy interface outside

Does this look correct?

Is this restricting the total size of the servers NAT'ed behind 1.1.1.1 and 1.1.1.2 to 2mb/s with a small burst?

Also is there a better way of doing this? Could I somehow apply this policy to the VLANs?

Any help is very much appreciated.

Cheers.