Bandwidth Restriction Config Check

[Patrick McHenry]

Hi,

Could anyone please go over my config example for a check. I believe I've configured a bandwidth restriction for host xx.xx.xx.xx to have a Internet bandwidth restriction of 50Mbps from 8am to 6pm and a Internet bandwidth restriction of 75Mbps from 6pm to 8am.

Thank you

time-range REPLIWEB-8AM-6PM
 periodic daily 08:00 to 17:59
!
time-range REPLIWEB-6PM-8AM
 periodic daily 18:00 to 07:59
!
ip access-list extended POLICE-THIS-8AM-6PM
 remark REPLIWEB BETWEEN 8AM and 6PM
 permit tcp any eq 2837 host xx.xx.xx.xx time-range REPLIWEB-8AM-6PM
 permit tcp any eq 5745 host xx.xx.xx.xx time-range REPLIWEB-8AM-6PM
 permit tcp host xx.xx.xx.xx any eq 2837 time-range REPLIWEB-8AM-6PM
 permit tcp host xx.xx.xx.xx any eq 5745 time-range REPLIWEB-8AM-6PM
!
ip access-list extended POLICE-THIS-6PM-8AM
 remark REPLIWEB BETWEEN 6PM and 8AM
 permit tcp any eq 2837 host xx.xx.xx.xx time-range REPLIWEB-6PM-8AM
 permit tcp any eq 5745 host xx.xx.xx.xx time-range REPLIWEB-6PM-8AM
 permit tcp host xx.xx.xx.xx any eq 2837 time-range REPLIWEB-6PM-8AM
 permit tcp host xx.xx.xx.xx any eq 5745 time-range REPLIWEB-6PM-8AM
!
class-map match-any POLICING-CLASS-8AM-6PM
 match access-group name POLICE-THIS-8AM-6PM
!
class-map match-any POLICING-CLASS-6PM-8AM
 match access-group name POLICE-THIS-6PM-8AM
!
policy-map OUTBOUND
 class POLICING-CLASS-8AM-6PM
  police 50000000 conform-action transmit  exceed-action transmit  violate-action drop
policy-map INBOUND
 class POLICING-CLASS-8AM-6PM
  police 50000000 conform-action transmit  exceed-action transmit  violate-action drop
!
policy-map OUTBOUND
 class POLICING-CLASS-6PM-8AM
  police 75000000 conform-action transmit  exceed-action transmit  violate-action drop
policy-map INBOUND
 class POLICING-CLASS-6PM-8AM
  police 75000000 conform-action transmit  exceed-action transmit  violate-action drop
!
interface GigabitEthernet0/0
 description WAN LINK
 bandwidth 100000
 ip address public address
 ip access-group DID in
 no ip redirects
 ip flow ingress
 ip flow egress
 duplex full
 speed 100
 no cdp enable
 service-policy input INBOUND
 service-policy output OUTBOUND
!

[Tagir Temirgaliyev]

I think that service-policy output OUTBOUND is ok. it works in output direction.

but service-policy input INBOUND not ok. it should be in output direction in interface connected to user host

and in service-policy I am using class default and daughter class inside

and dont forget to rate post

[Akash Agrawal]

Hi,

Can you please explain why service-policy would not work in inbound direction. To me configuration looks OK and should work as expected.

Regards,

Akash