cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
2
Replies

Limit http/https user's downloads

epasqualotto
Level 1
Level 1

Dear all, I've an ASA 5516 and I'm trying to limit the http based traffic download from users.

192.168.99.0/24 is my local network and I'm using these rules:

access-list global_mpc extended permit tcp any 192.168.99.0 255.255.255.0 eq www

class-map global-class1
 match access-list global_mpc
!

class global-class1
  inspect http
  police input 100000 1500
  police output 100000 1500

But it doesn't work, it works only if I remove "eq www" so limit for the download on every port.

Anyone have suggestions?

2 Replies 2

mvsheik123
Level 7
Level 7

Hi,

Can you try by changing ACL to...

access-list global_mpc extended permit tcp any eq www 192.168.99.0 255.255.255.0 

Thx

MS

I'll make a test on next days by using cli. With ASDM there's no option to set the source port (only destination) when configuring ACL for QoS.

Thanks

Review Cisco Networking for a $25 gift card