Limiting bandwidth on a SF 300 switch port for specific VLAN

[jyoopro4ia]

I have a Cisco AP541N access point connected to a trunk port of a SF 300 switch with 2 WLANs setup.

1 for internal use

1 for guest use

I'm looking to limit bandwidth for guest wireless network users.  Is this possible to do on the SF 300 switch? perhaps using QoS?  Thanks in advance         

JY

[andbor600]

good day guys,

I am just looking for the same solution, has anybody found the solution for the above ?

[tjareen]

Hi Jyoopro4ia,

You can limit the bandwidth on SF300 switch through QoS. But before doing that, please upgrade the firmware to ensure the features will work correctly.

Thank you.

[andbor600]

can you be more specific ?I have got the newest firmware, honestly saying I ran out of ideas ..

[Tom Watts]

Hello, to set a bandwidth constraint per vlan, the switch must be in layer 2 mode. (by default the switch is layer 2 mode)

To make the switch operate in layer 2 perform the command

set system mode switch

*NOTICE this will factory default the switch

Next, here is a sample configuration-

config t

vlan database

vlan 2

int vlan 1

ip address x.x.x.x /24

exit

rate-limit 2 10000 15000

end

wr mem

*Notice, the value 10,000 is the commited information rate which is the average maximum traffic. The value 15,000 is the commited burst rate which is the maximum to egress the port. Both of these values is in Kbps.

-Tom
Please mark answered for helpful posts

[andbor600]

hi Tom, many thanks for a quick response.

unfortunaltey my switch musb be in 3-layer mode....

any other ideas ?

[Tom Watts]

Hi andbor, to my knowledge you may not limit traffic bandwidth per vlan in layer 3. Only per port or lag.

-Tom
Please mark answered for helpful posts

[Prithvi Manduva]

Hi,

You can try assigning a queue to the internal and external use networks with least % WRR bandwidth to the Guest users network.

CLI commands

qos advanced

ip access-list extended internal

permit ip 199.168.1.0 0.0.0.255 any

exit

ip access-list extended guest

permit ip 198.168.2.0 0.0.0.255 any

exit

priority-queue out num-of-queues 2

class-map xxx match-any

match access-group internal

exit

class-map yyy match-any

match access-group guest

exit

policy-map nolimitinternal

class xxx

set queue 2

exit

exit

policy-map limitguest

class yyy

set queue 1

exit

Thanks,

Prithvi

Please mark answered for helpful posts

[andbor600]

hi Prithvi

thanks a lot.

1. does it mean I cannot limit the bandwidth to the certain value ?

2. as I understand in the example above internal VLAN gest higher priority over guest VLAN

3. do you thnik I can somehow limit the bandwith to i.e. 2Mb/s ?

[Prithvi Manduva]

Hi Andbor,

1. It doesn't allow you to configure the bandwidth value.

2. Yes internal vlan gets higher priority over the guest vlan thats true.

3. If you add all the four queues and then assign the least to the guest and rest 3 queues to the internal then it might have less bandwidth but yu can't restrict it to 2Mb/s specifically as per my knowledge to this device with this process.

Thanks,

Prithvi

Please mark answered for helpful posts