ISP Bandwidth

[vishal.rane]

Hi

We got Internet Link 10mb terminating on a Router and other interface of the router connects to firewall. We need to share 2mb internet bandwidth to another department who are not part of our network.  Other department got 2801 Router and 2960 series switches.

I got a spare Cisco WS-C2950T-24 switch. what are my best options to provide 2mb internet to other department

thanks

Vishal

[Latchum Naidu]

Hi Vishal,

I woulod suggest you to connect the other departments switch to your router and then put rate-limit or policy map to control the bandwidth to 2 MB on the router interface.

Please rate the helpfull posts.
Regards,
Naidu.

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

As Latchum suggests, you can regulate bandwidth on your 2801.  You can do this real well for outbound traffic, but inbound can be problematic.  You can certainly limit the bandwidth the other department will "see" to 2 Mbps, but that not always the same as limiting the other department's inbound Internet bandwidth to 2 Mbps of your Internet link.

[vishal.rane]

Hi

I dont have another interface on the router to connect to other department

ISP--------------f0/0(Router)F0/1-----------------LAN

physically how to connect to other department and on our LAN switch.

[Joseph W. Doherty]

Disclaimer

The   Author of this posting offers the information contained within this   posting without consideration and with the reader's understanding that   there's no implied or expressed suitability or fitness for any purpose.   Information provided is for informational purposes only and should not   be construed as rendering professional advice of any kind. Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In   no event shall Author be liable for any damages whatsoever (including,   without limitation, damages for loss of use, data or profit) arising  out  of the use or inability to use the posting's information even if  Author  has been advised of the possibility of such damage.

Posting

Physically, you would connect to your LAN.  Logical connection depends on what your logical topology is and how secure you believe you need to be isolating "your" network from the other department's network.

[vishal.rane]

Hi

Considering I terminate the ISP link on switch and  one port goes to other department and another port to Router.

In this scenario can I get QOS

[Latchum Naidu]

Hi Vishal,

If that is a L3 switch then you will be fine.
See the below two individual steps may help in your scenario.

STEP-1:

Apply rate-limit on each L3 vlan interface in your 2851

Example (for 1024kbits for vlan 2):

Router# conf t
Router(config)# int vlan 2
Router(config-if)#rate-limit input 1000000 187500 375000 conform-action transmit exceed-action drop
Router(config-if)#rate-limit output 1000000 187500 375000 conform-action transmit exceed-action drop

STEP-2:

Policy a specific VLAN number on VLAN interface.

class-map vlan5
match vlan 5
match class-map class-default

policy-map vlan5-limit
class vlan5
police 2000000 250000 exceed-action drop

int vlan5
service-policy input vlan5-limit

After you apply this configuration, the traffic with VLAN 5 coming from any will be policed at 2Mbps.

Hope this will help you.

Please rate the helpfull posts.
Regards,
Naidu.

[Talha Ansari]

Hi,

On your router you can achieve this by creating subinterfaces and applying policymaps on the subinterfaces. You can tag the packets with respective vlans right on your router and no need to create svis.

Eg:

                                           F0/1.100 ----------------- LAN

                                         /

                                        /

ISP--------------f0/0(Router)

                                        \

                                         \

                                          F0/1.200 ----------------- Other Department

Tag your LAN as vlan 100 and your other dept as vlan 200. Physically, only one cable needs to be connected on fas0/1 on your WAN router and port on which this router connects must be configured as trunk. Then rate limit your other department on fas0/1.200. Connect the 2801 router of the other dept on this switch and place it in vlan 200.

Hope That Helps,

Regards,

Talha

[Marwan ALshawi]

In would recommend you to go with Talha's suggestion above,  5 +