Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

bandwidth allocation in cisco 2921

hi all,


i have 16 mb internet line from the ISP.


i have different VLANs created in the switch 3750-x and default route pointed to cisco 2921 router.


i have 2 vlan for guest for that particular subnet i need to allocate only 3mb internet from total 16 mb and rest i need to use for my other office subnets


how i can acheive this using qos on cisco 2921




Cisco Employee

Do you have 2 differnet vlan

Do you have 2 differnet vlan as ingress interface or just one on 2921?. Do you want the accumulated traffic from both vlan not exceed 3 mb or each vlan not to exceed 3 mb?.


Accordingly you can configure ingress with policing or egress with shapng/policing.



New Member

hi Nage, i am using 2921 as a

hi Nage,


i am using 2921 as a transit network ,

it doesnt have multiple sub interface for VLAN , all  VLAN's are created in switch.

2921 has one interface IP in the one of the VLAN range

yes both vlan not exceed 3mb

Cisco Employee

You can configure a class-map

You can configure a class-map to match the traffic originated from both the source as below,

ip access-list extended GUEST

permit ip <vlan1-network> <mask> any

permit ip <vlan2-network> <mask> any


class-map GUEST

match ip address GUEST


Now configure a policy-map with this class-map and police it to 3 mb. The remaining traffic will go via class default while the traffic from guest vlans will be limited to 3 mb.


Apply this policy-map in ingress direction. 


BTW, this is under assumption that the traffic from guest vlan is only towards internet.



New Member

this is what i confiured,

this is what i confiured,


class-map match-all Guest
 match access-group name HA-Guest
policy-map Guest
 class Guest
  police 25165500 conform-action transmit  exceed-action drop
 class class-default

interface GigabitEthernet0/1
 description ========LAN Connected to Switch======
 ip address
 no ip redirects
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1452
 duplex auto
 speed auto
 service-policy output Guest

ip access-list extended HA-Guest
 permit ip any
 permit ip any


this is what i confiured , guest will access only internet nothing else.


CreatePlease login to create content