Policy MAP Issue on ASA

helpmeplz — Fri, 21 Feb 2020 12:50:57 GMT

Hi i have configured following Policy MAp to restrict 12.203 to use 5mb bandwidth.

Issue is that i dont recieve any hits when i apply this on outside interface like that

service-policy PM-RATELIMIT interface outside

But when i add permit ip any any in ACL then i receive hits.

Else This map work fine in inside interface but i want to apply it on outside .

Conf are as follows

access-list vlan10_rate_limit extended permit ip host 192.168.12.203 any

class-map CM-RATELIMIT

match access-list vlan10_rate_limit

policy-map PM-RATELIMIT

class CM-RATELIMIT

police input 5000000

Policy MAP Issue on ASA

Jennifer Halim — Thu, 14 Mar 2013 12:51:54 GMT

the ACL that you have configured is sourcing from the internal host to any on the outside. So you would need to apply that on the inside interface.

If you would like to limit the return traffic towards that host, then you would need to configure ACL with source any and destination the NATed ip address of that internal host.

topic Policy MAP Issue on ASA in Network Security

Policy MAP Issue on ASA

Policy MAP Issue on ASA