Implementing Committed Access Rate (CAR)

[Machi Ma]

Hello,

Just studying to setup rate late of traffic by CAR.  However, is it possible to shun the IP rather than limit its bandwidth?

Thanks!

[Ajay Saini]

You can shun the ip address by using the shun command:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s15.html

This means that any traffic for the concerned (src or dst) ip address will be disallowed. Please see if that is what you are looking for.

HTH

-

AJ

[Machi Ma]

Hi,

I would like to shun the IP once is over the limit of bandwidth.  Which I looking for.  Is it able to do it?

Thanks!