<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1276" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2><FONT face="Times New Roman"
size=3>Hi,</FONT></FONT></DIV>
<DIV><FONT face=Arial size=2><FONT face=Arial size=2></FONT></FONT> </DIV>
<DIV><FONT face=Arial size=2><FONT face="Times New Roman" size=3>Instead of
Serial via HDSL modem, we requested a Fast Ethernet connection <BR>from our
uplink provider who happens to be on the same floor as our office. <BR>However,
they requested us to do the rate limiting for our subscribed <BR>bandwidth of
2048Kbps.<BR><BR>As i read it, i need to enable "IP CEF" on the router
(Cisco3660) which also <BR>double as a Remote Access Server, to make
rate-limiting work. However, </FONT></FONT></DIV>
<DIV><FONT face=Arial size=2><FONT face="Times New Roman" size=3>the problem is
our dial-up connections become slower when I enable ip cef.
<BR><BR>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><BR>Here
is the IOS version and conf of our router:<BR><BR>CISCO-3660-NAS2#sh
version<BR>Cisco Internetwork Operating System Software<BR>IOS (tm) 3600
Software (C3660-IS-M), Version 12.2(2)T4, RELEASE SOFTWARE
<BR>(fc3)<BR>TAC Support: </FONT><A href="http://www.cisco.com/tac"><FONT
face="Times New Roman" size=3>http://www.cisco.com/tac</FONT></A><BR><FONT
face="Times New Roman" size=3>Copyright (c) 1986-2002 by cisco Systems,
Inc.<BR>Compiled Sat 09-Feb-02 21:48 by yiyan<BR>Image text-base: 0x600089C0,
data-base: 0x61360000<BR><BR>ROM: System Bootstrap, Version 12.0(6r)T, RELEASE
SOFTWARE (fc1)<BR><BR>CISCO-3660-NAS2 uptime is 6 weeks, 4 days, 6 hours, 51
minutes<BR>System returned to ROM by power-on<BR>System image file is
"flash:c3660-is-mz.122-2.T4.bin"<BR><BR>cisco 3660 (R527x) processor (revision
B0) with 253952K/8192K bytes of memory.<BR>Processor board ID
JAB041886C2<BR>R527x CPU at 225Mhz, Implementation 40, Rev 10.0, 2048KB L2
Cache<BR>Channelized E1, Version 1.0.<BR>MICA-6DM Firmware: CP ver 2720 -
5/30/2000, SP ver 2720 - 5/30/2000.<BR>Bridging software.<BR>X.25 software,
Version 3.0.0.<BR>SuperLAT software (copyright 1990 by Meridian Technology
Corp).<BR>Primary Rate ISDN software, Version 1.1.<BR><BR><BR>3660 Chassis type:
ENTERPRISE<BR>2 FastEthernet/IEEE 802.3 interface(s)<BR>4 Serial network
interface(s)<BR>46 terminal line(s)<BR>2 Channelized E1/PRI port(s)<BR>DRAM
configuration is 64 bits wide with parity disabled.<BR>125K bytes of
non-volatile configuration memory.<BR>24576K bytes of processor board System
flash
(Read/Write)<BR><BR>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><BR><BR> <BR>CISCO-3660-NAS2#sh
run >>>>>>>>>(IP CEF DISABLED)<BR>Building
configuration...<BR><BR>Current configuration : 7205 bytes<BR>!<BR>version
12.2<BR>no parser cache<BR>service single-slot-reload-enable<BR>service
timestamps debug uptime<BR>service timestamps log uptime<BR>service
password-encryption<BR>!<BR>hostname CISCO-3660-NAS2<BR>!<BR>boot system flash
c3660-is-mz.122-12a.bin<BR>logging rate-limit console 10 except
errors<BR>logging monitor informational<BR>aaa new-model<BR>aaa authentication
login console none<BR>aaa authentication login vty group radius enable<BR>aaa
authentication login li enable<BR>aaa authentication login radius local<BR>aaa
authentication ppp default group radius<BR>aaa authorization network default
group radius<BR>aaa accounting network default start-stop group radius<BR>enable
secret 5 $1$33u0$Q.sl.nbqdiAmkmZh45cJv.<BR>!<BR>username xxxxxxx password 7
08245B4F07120A<BR>username xxxxxxx password 7
060A0E2F48541D1816031B08<BR>username xxxxxxx password 7
02030558080303245E4F<BR>username xxxxxxx password 7
09565B05160A1F081E<BR>username xxxxxxx password 7
00171208025A090F0E2F<BR>!<BR>!<BR>clock timezone GMT+8 8<BR>ip
subnet-zero<BR>!<BR>!<BR>ip domain-name eaccelera.ph<BR>ip name-server
xxx.xxx.xx.1<BR>ip name-server xxx.xxx.xx.2<BR>ip name-server
xxx.xxx.xx.184<BR>!<BR>no ip dhcp-client network-discovery<BR>isdn
voice-call-failure 0<BR>call rsvp-sync<BR>!<BR>!<BR>!<BR>!<BR>!<BR>fax
interface-type modem<BR>mta receive maximum-recipients 0<BR>!<BR>!<BR>controller
E1 2/0<BR> framing NO-CRC4<BR> ds0-group 1 timeslots 1-15,17-31 type
r2-digital r2-compelled<BR> cas-custom 1<BR> country philippines
use-defaults<BR>!<BR>controller E1 2/1<BR>!<BR>!<BR>interface
FastEthernet0/0<BR> description **UPLINK CONNECTION**<BR> ip address
203.190.xx.xx 255.255.255.252<BR> ip nat outside<BR> rate-limit input
2048000 4000 4000 conform-action transmit exceed-action drop<BR> no ip
mroute-cache<BR> duplex auto<BR> speed
auto<BR> fair-queue<BR> no cdp enable<BR>!<BR>interface
FastEthernet0/1<BR> ip address 203.190.xx.x 255.255.255.224<BR> ip nat
inside<BR> no ip mroute-cache<BR> speed
auto<BR> full-duplex<BR> no cdp enable<BR>!<BR>interface
Group-Async0<BR> ip unnumbered FastEthernet0/1<BR> encapsulation
ppp<BR> ip tcp header-compression passive<BR> no ip
mroute-cache<BR> ip policy route-map cacheraq<BR> async default
routing<BR> async dynamic routing<BR> async mode
dedicated<BR> peer default ip address pool DialUpPool1<BR> ppp
authentication pap<BR> ppp ipcp dns 203.190.xx.x
203.190.xx.x<BR> group-range 129 158<BR>!<BR>interface
Group-Async1<BR> ip unnumbered FastEthernet0/1<BR> encapsulation
ppp<BR> ip tcp header-compression passive<BR> no ip
mroute-cache<BR> ip policy route-map cacheraq<BR> async default
routing<BR> async dynamic routing<BR> async mode
dedicated<BR> peer default ip address pool DialUpPool<BR> ppp
authentication pap<BR> ppp ipcp dns 203.190.xx.x
203.190.xx.x<BR> group-range 97 112<BR>!<BR>ip local pool DialUpPool
203.190.xx.xx 203.190.xx.xx<BR>ip local pool DialUpPool1 203.190.xx.xx
203.190.xx.xx<BR>ip classless<BR>ip route 0.0.0.0 0.0.0.0 203.190.xx.xx<BR>ip
route 203.190.xx.xx 255.255.255.224 Null0 250 (ip route for the dial-up,
<BR>Group Async1)<BR>ip route 203.190.xx.xx 255.255.255.224 Null0 250 (ip route
for the dial up, <BR>Group Async2)<BR>no ip http server<BR>!<BR>ip radius
source-interface FastEthernet0/1<BR><BR>!<BR>route-map cacheraq permit
10<BR> match ip address 110<BR> set ip next-hop
203.190.XX.XX<BR>!<BR><BR>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>><BR><BR><BR>Please
help me. Thank you in advance.<BR><BR></FONT></FONT><FONT face=Arial
size=2>Rommel Y. Catabian<BR>Eaccelera, Incorporated
<BR></FONT></DIV></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>