QoS on Cisco Pix 515e? FTP is taking all the internet bandwidth

[whiteford]

Hi, I'm not sure if the Pix should be doing this or our Internet router which is a Cisco 2600. Anyway I don't have and QoS running on my Internet pipe. I recently put Netflow on the Cisco 2600 router and suddenly realised that the ftp downloads and uploads slow the Internet pipe quite a lot.

The Internet Cisco 2600 routers (a 10mb lease line) inside port plugs into a VLAN on a Cisco 3535 switch and the outside port of the Pix also plugs into this. So I am wondering should the Pix or our router do the QoS and how do I do this if it's possible. I have also noticed other traffic I need to prioritise on, maybe put VPN's top, email, http/https, ftp last. Just giving ftp a small % of the bandwidth would help I think.

Hope you can advise.

[srue]

what version of OS is on the PIX? only 7.x and later support QoS.

If you just want to limit ftp downloads, either device can handle this (with the right OS). But routers typically have greater QoS functionality overall. Personally though, depending on your model of 2600 router, it might not have the horsepower for it.

[whiteford]

Hi, the os is version 7 so I was wondering how I could achieve this?

Many thanks

[srue]

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cbeb67c

[whiteford]

Does that policy you created limit inbound and outbound? So clients uploading to us and download from our ftp server?

The Windows ftp server plugs into a VLAN on a cisco switch can I aslo limit the speed on the port?

[srue]

that example is for limiting download speeds..

if you want to limit upload speeds, adjust your ACL accordingly, and apply to external interface.