Vinod,
The order of NAT and CAR might matter...
You can give it a try with a new access-list, referring to the non-NATed IP address
--Z
>>> "Vinod Anthony Joseph Cherunni" <vac@antarix.net> 2/8/01 >>>
Dear All,
I do have some very basic doubts in my mind. Kindly help out on clarifying
it. On a Cisco 2610 router connected to an upstream core ISP, I have
configured CAR on the 2610 router limiting all inbound & outbound IP
traffic to and from a particular server only at the rate of 64 Kbps with
the following configuration -
interface Ethernet0/0
description ### Link to local LAN ###
ip address 1.1.1.1
ip nat inside
rate-limit input access-group 101 64000 64000 64000 conform-action
transmit exceed-action drop
interface Serial0/0
description ### Upstream Link to Core ISP ###
ip address 2.2.2.2
rate-limit input access-group 102 64000 64000 64000 conform-action
transmit exceed-action drop
access-list 101 permit ip host 3.3.3.3 any log
access-list 102 permit ip any host 4.4.4.4 log (NAT Address)
After applying the following config CAR does not seem to work. The "show
interface s0/0 rate-limit" does not indicate any conformed or dropped
packets at all. But the same command shows some packets as conforming at
the ethernet interface.
Kindly advice.
With warm regards,
Vinod.
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:28 EDT