https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949117#M148096 <P>Hello,</P> <P></P> <P>Just studying to setup rate late of traffic by CAR.&nbsp; However, is it possible to shun the IP rather than limit its bandwidth?</P> <P></P> <P>Thanks!</P> Tue, 12 Mar 2019 08:43:35 GMT Machi Ma 2019-03-12T08:43:35Z https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949117#M148096 <P>Hello,</P> <P></P> <P>Just studying to setup rate late of traffic by CAR.&nbsp; However, is it possible to shun the IP rather than limit its bandwidth?</P> <P></P> <P>Thanks!</P> Tue, 12 Mar 2019 08:43:35 GMT https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949117#M148096 Machi Ma 2019-03-12T08:43:35Z https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949118#M148097 <P>You can shun the ip address by using the shun command:</P> <P></P> <P>http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s15.html</P> <P></P> <P>This means that any traffic for the concerned (src or dst) ip address will be disallowed. Please see if that is what you are looking for.</P> <P></P> <P>HTH</P> <P>-</P> <P>AJ</P> <P></P> Tue, 03 Jan 2017 11:41:38 GMT https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949118#M148097 Ajay Saini 2017-01-03T11:41:38Z https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949119#M148099 <P>Hi,</P> <P></P> <P>I would like to shun the IP once is over the limit of bandwidth.&nbsp; Which I looking for.&nbsp; Is it able to do it?</P> <P></P> <P>Thanks!</P> Tue, 03 Jan 2017 16:05:59 GMT https://community.cisco.com/t5/network-security/implementing-committed-access-rate-car/m-p/2949119#M148099 Machi Ma 2017-01-03T16:05:59Z