topic Re: Traffic shaping per users , ip ,application using ASA in Network Security

Traffic shaping per users , ip ,application using ASA

acharyr123 — Mon, 11 Mar 2019 20:17:32 GMT

Hi,

I hava Cisco ASA 5520 with AIP-SSM module. I would like to have the below features with ASA installed in Transparent mode.

1. Traffic shapping per user

2. Traffic shapping per IP subnet

3. Traffic shapping per Application

Is it possible with ASA installed in Transparent mode??

Re: Traffic shaping per users , ip ,application using ASA

padatta — Wed, 06 Apr 2011 12:42:55 GMT

Hi,

Unfortunately traffic shaping is not supported in transparent mode.

Here is the reference.

http://www.cisco.com/en/US/partner/docs/security/asa/asa82/configuration/guide/conns_qos.html#wp1111709

Paps

Re: Traffic shaping per users , ip ,application using ASA

acharyr123 — Wed, 13 Apr 2011 16:34:55 GMT

Thanks for your prompt support....

Whether this feature is supported in Routed mode??

Regards,

Partha

Re: Traffic shaping per users , ip ,application using ASA

csaxena — Wed, 13 Apr 2011 17:40:10 GMT

Hello Partha,

The feature is supported in Routed mode.

Please mark the post answered for others to refer in future.

Cheers,
Chirag

Re: Traffic shaping per users , ip ,application using ASA

Asia Hooks — Thu, 12 May 2011 12:59:45 GMT

Hello,

I have an ASA 5520 in routed mode and would like to shape based on IP address. Can anyone share any configuration examples for this?

Trent

Re: Traffic shaping per users , ip ,application using ASA

sean_evershed — Thu, 12 May 2011 13:46:49 GMT

Hi, See below a QoS config example for an ASA

https://supportforums.cisco.com/docs/DOC-1230

Don't forget to rate posts that are helpful.

Re: Traffic shaping per users , ip ,application using ASA

Asia Hooks — Thu, 12 May 2011 14:11:29 GMT

Thanks for the link. If I apply a QoS policy, be it shaping or policing, does that affect EACH INDIVIDUAL CONNECTION (ip address) on the interface? Or does it QoS the ENTIRE interface? I am looking limit bandwitdh on a per connection/ip address basis.

Trent

Re: Traffic shaping per users , ip ,application using ASA

varrao — Thu, 12 May 2011 14:15:22 GMT

Daryl,

It rate limits the connection based on ip address for traffic going from that particular interface only. It woudl not rate limit any other IP address not specified in the ACL for QoS that we have created. We specify the interface just to notify the ingress and egress point of the traffic.

Thanks,

Varun

Re: Traffic shaping per users , ip ,application using ASA

Asia Hooks — Thu, 12 May 2011 14:43:55 GMT

Just to clarify, all I would need to do is set up policing and it will be done on a per IP basis (kinda new at this ASA)? Also, can shaping be done in the ASDM or can I only police?

Trent

Re: Traffic shaping per users , ip ,application using ASA

varrao — Thu, 12 May 2011 15:57:46 GMT

FOr shaping you can follow this doc:

http://www.cisco.com/en/US/partner/docs/security/asdm/6_2/user/guide/qos.html#wp1065249

Plicing would b done as per IP basis, through ACL

Thanks,

Varun