Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Bandwidth Restriction Config Check

Hi,

 

Could anyone please go over my config example for a check. I believe I've configured a bandwidth restriction for host xx.xx.xx.xx to have a Internet bandwidth restriction of 50Mbps from 8am to 6pm and a Internet bandwidth restriction of 75Mbps from 6pm to 8am.

 

Thank you

 

time-range REPLIWEB-8AM-6PM
 periodic daily 08:00 to 17:59
!
time-range REPLIWEB-6PM-8AM
 periodic daily 18:00 to 07:59
!
ip access-list extended POLICE-THIS-8AM-6PM
 remark REPLIWEB BETWEEN 8AM and 6PM
 permit tcp any eq 2837 host xx.xx.xx.xx time-range REPLIWEB-8AM-6PM
 permit tcp any eq 5745 host xx.xx.xx.xx time-range REPLIWEB-8AM-6PM
 permit tcp host xx.xx.xx.xx any eq 2837 time-range REPLIWEB-8AM-6PM
 permit tcp host xx.xx.xx.xx any eq 5745 time-range REPLIWEB-8AM-6PM
!
ip access-list extended POLICE-THIS-6PM-8AM
 remark REPLIWEB BETWEEN 6PM and 8AM
 permit tcp any eq 2837 host xx.xx.xx.xx time-range REPLIWEB-6PM-8AM
 permit tcp any eq 5745 host xx.xx.xx.xx time-range REPLIWEB-6PM-8AM
 permit tcp host xx.xx.xx.xx any eq 2837 time-range REPLIWEB-6PM-8AM
 permit tcp host xx.xx.xx.xx any eq 5745 time-range REPLIWEB-6PM-8AM
!
class-map match-any POLICING-CLASS-8AM-6PM
 match access-group name POLICE-THIS-8AM-6PM
!
class-map match-any POLICING-CLASS-6PM-8AM
 match access-group name POLICE-THIS-6PM-8AM
!
policy-map OUTBOUND
 class POLICING-CLASS-8AM-6PM
  police 50000000 conform-action transmit  exceed-action transmit  violate-action drop
policy-map INBOUND
 class POLICING-CLASS-8AM-6PM
  police 50000000 conform-action transmit  exceed-action transmit  violate-action drop
!
policy-map OUTBOUND
 class POLICING-CLASS-6PM-8AM
  police 75000000 conform-action transmit  exceed-action transmit  violate-action drop
policy-map INBOUND
 class POLICING-CLASS-6PM-8AM
  police 75000000 conform-action transmit  exceed-action transmit  violate-action drop
!
interface GigabitEthernet0/0
 description WAN LINK
 bandwidth 100000
 ip address public address
 ip access-group DID in
 no ip redirects
 ip flow ingress
 ip flow egress
 duplex full
 speed 100
 no cdp enable
 service-policy input INBOUND
 service-policy output OUTBOUND
!

Everyone's tags (1)
2 REPLIES

I was told that service

I think that service-policy output OUTBOUND is ok. it works in output direction.

but service-policy input INBOUND not ok. it should be in output direction in interface connected to user host

and in service-policy I am using class default and daughter class inside

 

and dont forget to rate post

Cisco Employee

Hi, Can you please explain

Hi,

 

Can you please explain why service-policy would not work in inbound direction. To me configuration looks OK and should work as expected.

 

Regards,

Akash

54
Views
5
Helpful
2
Replies
CreatePlease login to create content