Any suggestion for rate limiting or shaping device on ISP?

[carensantos23]

My friend's company which is ISP going for upgrade of their shaping devices which is currently an ISR router. They have hundred of clients mostly are leased lines and wireless. I suggested a metro ethernet switch but they want it to be centralized in the core. Any suggestion what appliance will they use?
 

[LJ Gabrillo]

You can try packet-shapers, NGFWs, and even just a simple cisco router 

Cisco router basic shaping:

#conf t

#access-list 1 permit 10.10.10.0 0.0.0.255
#access-list 2 permit 10.10.20.0 0.0.0.255

#interface f0/0
  #traffic-shape group 1 1024   -bps (1Mbps)
  #traffic-shape group 2 1024   -bps (1Mbps)

[carensantos23]

Thanks..

They are using ISR routers using QoS policing and rate-limit input/output command. Now, thinking of replacing ISR with an ASR router. I only notice ASR do not accept rate-limit input/output command. Any idea of command similar to rate-limit input/output command on the vlan/interface.
 

Regards,

Caren

[LJ Gabrillo]

#conf t

#access-list 101 permit ip any 192.168.10.0 0.0.0.255 

#access-list 102 permit ip any 192.168.20.0 0.0.0.255

#class-map match-any VLAN10

  #match access-group 101

#class-map match-any VLAN20

  #match access-group 102

#policy-map POLICY1

  #class VLAN10

    #shape average 8000[or 8K] -Traffic Shaping(bps)

  #class VLAN20

    #shape average 2M 

  #class class-default

APPLY

#interface f0/1

  #service-policy [input/output] POLICY1

[LJ Gabrillo]

Oh yeah, do note that rate limit is per interface, with shaping or policing, you can specific per subnet or IP range.

[carensantos23]

Hi,

    Thank you for your replies. By the way, do you have any experience with specific packet shapers in the market? I cannot find cisco appliance with specific shaping purpose.

Thanks,

Caren

[LJ Gabrillo · Accepted solution]

1. UTM firewall can do that e.g., fortigate
     -Traffic shapping is included in the bundle of the firewall 
2. Bluecoat packetshaper
    -Full blown packetshaper

3. Bluecoat ProxySG

   -much like UTM firewall with traffic shapping

 

Don't forget to rate/mark as correct :)

[carensantos23]

They buy bluecoat packetshaper but the software was corrupted just before the production deployment 'stuck in boot'.

Thanks for your reply.

Regards,

Caren