[c-nsp] cisco 2811 and rate-limit

Jorge Evangelista netsecuredata at gmail.com
Wed Aug 1 16:21:02 EDT 2007


I think that you should reduce  normal and extended burst, for example
I usually configure these way and it works fine, if  I want to limit
64Kbps (for upload & download)  to  192.168.1.20
Normal Burst = configured rate * (1 byte)/(8 bits) * 1.5 seconds
Extended Burst = 2 * normal burst
Normal Burst = 64000 / 8 * 1.5 = 12000
Extended Burst = 24000

My CAR should shows something as it:
rate-limit output access-group 10 64000 12000 24000 conform-action
transmit exceed-action drop
rate-limit input access-group 10 64000 12000 24000 conform-action
transmit exceed-action drop

access-list 10 permit 192.168.1.20


For more information
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fqos_c/fqcprt1/qcfcar.htm



On 8/1/07, fernando fernandes <op306685b at mail.telepac.pt> wrote:
> lo guys ... itsme again :|
> so i'm trying to rate limit some wifi clients..... they are eating all
> the internet pipeline :(
> i googled and found something like this lines as it follows.....
>
> in the f0/0 will be adding this 2 rate lines....
> rate-limit input access-group 101 512000 512000 512000 conform-action
> transmit exceed-action drop
> rate-limit output access-group 101 128000 128000 128000 conform-action
> transmit exceed-action drop
> and then adding this into the acl list....
> access-list 101 permit any 192.168.1.20 <--- ip of 1 wifi client...
>
> will this work nice or will i need to do something else???
>  help would be great!!
>
>
>
> ff
>
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


-- 
"The network is the computer"


More information about the cisco-nsp mailing list