[cisco-nas] IP CEF Problem

[Rommel Y. Catabian]

Thank you for the advise, we will coordinate with the supplier for  the IOS
upgrade.
Actually, we need to rate-limit (or traffic shape) both input and output on
the interface connected to our Uplink provider. We do not want to go beyond
our subscribed BW as we will be charged for the excess BW used.

How do I shape the input traffic? What's the command.

 Thanks again for the immediate reply.

Rommel Y. Catabian

Website: www.eaccelera.com

----- Original Message ----- 
From: "Gert Doering" <gert at greenie.muc.de>
To: "Rommel Y. Catabian" <rommel.catabian at eaccelera.com>
Cc: <cisco-nas at puck.nether.net>
Sent: Saturday, January 24, 2004 7:31 PM
Subject: Re: [cisco-nas] IP CEF Problem


> Hi,
>
> On Sat, Jan 24, 2004 at 07:28:05PM +0800, Rommel Y. Catabian wrote:
> > As i read it, i need to enable "IP CEF" on the router (Cisco3660) which
also
> > double as a Remote Access Server, to make rate-limiting work. However,
> > the problem is our dial-up connections become slower when I enable ip
cef.
>
> CEF is not required for rate-limiting.
>
> > CISCO-3660-NAS2#sh version
> > Cisco Internetwork Operating System Software
> > IOS (tm) 3600 Software (C3660-IS-M), Version 12.2(2)T4,  RELEASE
SOFTWARE
> > (fc3)
>
> ... but this is something you might want to upgrade anyway.  It's "T", and
> the number in brackets is way too low...  there is at least one serious
> security vulnerability in this IOS version, which entitles you to a free
> upgrade.
>
> > interface FastEthernet0/0
> >  description **UPLINK CONNECTION**
> >  ip address 203.190.xx.xx 255.255.255.252
> >  ip nat outside
> >  rate-limit input 2048000 4000 4000 conform-action transmit
exceed-action drop
>
> Why *input*?
>
> You want to do traffic-shaping for *output*.
> Eaccelera, Incorporated
Unit D, 34F Tower 2, RCBC Plaza
6819 Ayala Ave. cor. G. Puyat Ave.
Makati City, 1226 Philippines

Email   : rommel.catabian at eaccelera.com
Tel. No.: +632-7574715 or +632-7535000 local 406
Fax No.: +632-753-5013

> (Also, traffic-shaping is more gentle to the packets than rate-limiting).
>
> gert
>
> -- 
> USENET is *not* the non-clickable part of WWW!
>
//www.muc.de/~gert/
> Gert Doering - Munich, Germany
gert at greenie.muc.de
> fax: +49-89-35655025
gert at net.informatik.tu-muenchen.de