ASA per IP BW shaping

[Difan Zhao]

Hi guys,

I have a 5506-X. I am wondering if it can do per-ip shaping. For example if I create an object with the subnet 192.168.1.0/24. Can the ASA limit BW for each IP in the subnet to 1mbps?

Thanks

[Karsten Iwen]

You can't do shaping, that's not supported. But with the help of service policies you can configure policing which drops traffic above a given rate.

[Difan Zhao]

ok but can it do it per IP address in the subnet? Not policing the entire subnet as a whole.

Thanks,

[Pranay Prasoon]

unfortunately there is no
way to limit down the amount of bandwidth each user uses. What you could
do is limit the overall bandwidth used per subnet so that if you have
many subnets only a certain amount of users would be affected if one
user was doing a large download. Also if you have cisco switches in your
environment you might be able to do microflow policing which could
police on a per port basis.