On Sun, May 18, 2008 at 09:47:51PM -0700, Ted Mittelstaedt wrote: > rate limiting doesen't work on data coming into an interface.
I think you are talking about shaping not CAR or MQC with police. They work on input. Rodney > > You have to rate limit on the data going out, on the interface > that is facing the customer. > > Ted > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Church, Charles > > Sent: Sunday, May 18, 2008 8:25 PM > > To: Richey; [email protected] > > Subject: Re: [c-nsp] access-list speed limiting. > > > > > > Richey, > > > > I can't tell if your ethernet int you have a config for faces > > the customers or the upstream, but it seems that the direction is the > > issue. Your access list matches a particular host to any. But not the > > opposite. Add a second entry to the ACL matching any -> host, see if it > > now works correctly. > > > > Chuck > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Richey > > Sent: Sunday, May 18, 2008 10:57 PM > > To: [email protected] > > Subject: [c-nsp] access-list speed limiting. > > > > > > I've got a several users on our wireless network I need to limit to > > 3Mb. > > I've tried several ways to limit their speed but they are still getting > > 12Mbps to 15Mbps when I push an .iso across the link with an FTP > > session. > > For our average user I wouldn't care but these guys get home in the > > evening > > and hit it for all it's worth for hours on end. > > > > > > > > I am coming out of a 3660 into a 3524 switch. I then take it into a > > point > > to point wireless link where the far end radio connects to an AP. > > > > > > > > Right now I am doing the following: > > > > > > > > interface FastEthernet0/1.103 > > > > description DA1-SM2 Link > > > > encapsulation dot1Q 103 > > > > ip address x.x.34.193 255.255.255.248 > > > > ip access-group 102 out > > > > rate-limit input access-group 150 3000000 16000 24000 conform-action > > transmit exceed-action drop > > > > rate-limit output access-group 150 3000000 16000 24000 conform-action > > transmit exceed-action drop > > > > > > > > access-list 150 permit ip host x.x.10.71 any > > > > > > > > > > > > I've also tried the following: > > > > > > > > interface FastEthernet0/1.103 > > > > description DA1-SM2 Link > > > > encapsulation dot1Q 103 > > > > ip address x.x.34.193 255.255.255.248 > > > > ip access-group 102 out > > > > traffic-shape group 155 3000000 75000 75000 1000 > > > > > > > > > > > > Richey > > > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
