Hi Guys i need your comments on this.
i had a issue with my rate limit config on my ASA 5508, i had version 9.6.
I had 3 inside subinterfaces and 1 outside.Each of this subinterfaces need different bandwidth limit, one has 5 Mbps, other need 10Mbps and other 15Mbps for example , my outside or internet its for 30Mbps.
My issue its becouse one of this subinterfaces has a rate limit for 5 Mbps but didnt work, so this subinterface its consume all my 30Mbps bandwidth for internet affecting my others inside interfaces. i need to limit this subinterface traffic on 5 Mbps and apply some QoS for https and http traffic. i attache the config i do on my rate limit
1.- This is my subinterface.
interface GigabitEthernet1/2.4
description Computing ISC
vlan 4
nameif ComputingISC
security-level 100
ip address 172.16.40.254 255.255.255.0
My outside interface.
interface GigabitEthernet1/1
nameif outside
security-level 0
ip address 251.141.231.62 255.255.255.240
For rate limit i use this config.
1.-Firts ACL
access-list BW-ComputingISC extended permit ip 172.16.40.0 255.255.255.0 any
access-list BW-ComputingISC extended permit ip any 172.16.40.0 255.255.255.0
2.-create Class-map
class-map BW-ComputingISC
match access-list BW-ComputingISC
3.-Policy-map and rate limit !
policy-map 5Mb-BW-ComputingISC
class BW-ComputingISC
police input 5000000 conform-action drop
police output 5000000 conform-action drop
4.-Apply on interface
service-policy global_policy global
service-policy 5Mb-BW-ComputingISC interface ComputingISC
this config didnt work, so this interface its consume all my internet traffic, any comment on this could be greate. regards!
