cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1437
Views
0
Helpful
1
Replies

Output bandwidth limit on ASA 5505

Robin Olofsson
Level 1
Level 1

Hello everyone,

I'm having a bit trouble to limit the bandwidth on outgoing traffic with a Cisco ASA 5505.

In my case I want to limit the bandwidth to 31mbit/s up and down on the outside interface.

but with my current configuration, just the download rate gets limited to 31mbit/s when I do a tptest.

and the upload is around 40/50mbit.

Here is the policy configuration,

access-list outside_bw extended permit ip any any

class-map outside_bw

match access-list outside_bw

policy-map bw_policy

class outside_bw

police output 31000000 1000000

police input 31000000 1000000

service-policy bw_policy interface outside

Am I thinking wrong? Or do anyone know what the problem could be?

Thanks in advance!

/Robin

1 Reply 1

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Robin,

When you talk about policing on the input direction you have to be aware that the traffic already hit your interface, So this is why you are still seeing a higher rate,

Different than from output direction where the traffic has not been send to the interface TX,

Regards,

Julio Carvajal

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: