There are two ways you can do this:
1) Set the CSU/DSU's to a specific speed, and let that perform
your rate limiting.
2) Use the 12.0 rate-limit command to do your traffic shaping.
You can provide yourself with various bit buckets to dump
the traffic into, and do things like rate-limit icmp echo-reply
(prevent smurf stuff, etc).
You can also permit tcp/udp, and prioritize it over icmp with
the rate-limit commands on the interface, and you can do this in both
the inbound and outbound direction, as opposed to the old way of using
the traffic-shape command, which only did one direction.
You can also make a rate-limit command that will not drop any
packets, and use that to determine how much traffic of a specific type
goes across that link.
- jared
(examples:)
Extended IP access list 195
permit icmp any any echo-reply (253729 matches)
Input
matches: access-group 195
params: 256000 bps, 8000 limit, 8000 extended limit
conformed 131137 packets, 20765856 bytes; action: transmit
exceeded 0 packets, 0 bytes; action: drop
last packet: 55524452ms ago, current burst: 0 bytes
last cleared 1w3d ago, conformed 0 bps, exceeded 0 bps
Output
matches: access-group 195
params: 256000 bps, 8000 limit, 8000 extended limit
conformed 122588 packets, 20621245 bytes; action: transmit
exceeded 0 packets, 0 bytes; action: drop
last packet: 664ms ago, current burst: 0 bytes
last cleared 1w3d ago, conformed 0 bps, exceeded 0 bps
On Sun, Jun 11, 2000 at 07:59:21PM -0500, nicholas harteau wrote:
> As long as the subject has been brought up, what's the best method for
> rate limiting DS3s using the PA-2T3 and PA-MC-2T3+?
>
>
> Paolo Bevilacqua wrote:
> > At 02:41 PM 6/10/00 -0400, George Robbins wrote:
> > >Plus version supports sub-rate t3's (aka fractional t3). I
> > >don't think
> > >there was an upgrade program, it's not something to get excited
> > >about
> > >unless your provider offers offers cheap channelized sub-rate
> > >t3's. 8-)
> >
> > channelized and sub-rate T3 are two different things.
> > channelized means that in the T3 are muxed up to 28 t1's so you
> > can connect to multiple remote locations using a single
> > interface, aka m13 mux functionality. subrate means that the t3
> > is circuit is provisioned point-to-point clear-channel, but is
> > not used at full bandwidth. Before PA-MC-2T3+ you needed two
> > different types of PA to do the two applications described
> > above. Now, you can do clear channel OR sub-rate OR channelized
> > T3 using the same hardware. The full functionality will be
> > released shortly with a software upgrade for the PA-MC-2T3+.
> >
> > /pab
>
> --
> nicholas harteau
> nrh@ikami.com
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. END OF LINE |
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:13 EDT