i want to implement LLQ for my users. I want that when specific user try to access specific subnets it gets
only 8 KBps. I have cisco router 2821 with two FE ports.
I have made the following configuration but still not able to restrict the user to 8 KBps, user when try to download
from remote computer, no policing and LLQ comes in action.
below mention is configuration that I made on router.
class-map match-all testclass
match access-group 150
!
!
policy-map testpolicy
class testclass
police cir 8000 bc 1000 be 1000
conform-action transmit
exceed-action drop
violate-action drop
interface FastEthernet0/0
ip address 10.1.3.1 255.255.255.0
ip nat outside
ip virtual-reassembly
load-interval 30
duplex auto
speed auto
service-policy input testpolicy
!
interface FastEthernet0/1
ip address 10.1.4.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.3.2
!
!
ip http server
no ip http secure-server
ip nat inside source list 100 interface FastEthernet0/0 overload
!
access-list 100 permit ip any any
access-list 150 permit ip host 10.1.4.3 any
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
!
end
Router-C#
Router-C#wr me
Building configuration...
[OK]
Router-C#show int
Router-C#show poli
Router-C#show policy-map inte
Router-C#show policy-map interface fas
Router-C#show policy-map interface fastEthernet 0/0
FastEthernet0/0
Service-policy input: testpolicy
Class-map: testclass (match-all)
14 packets, 1605 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: access-group 150
police:
cir 8000 bps, bc 1000 bytes, be 1000 bytes
conformed 1 packets, 243 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
violated 0 packets, 0 bytes; actions:
drop
conformed 0 bps, exceed 0 bps, violate 0 bps
Class-map: class-default (match-any)
315852 packets, 461648032 bytes
30 second offered rate 2000 bps, drop rate 0 bps
Match: any
Router-C#show int
Router-C#show interfaces fas
Router-C#show interfaces fastEthernet 0/0
FastEthernet0/0 is up, line protocol is up
Hardware is MV96340 Ethernet, address is 001d.a16c.9b70 (bia 001d.a16c.9b70)
Internet address is 10.1.3.1/24
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:27, output 00:00:03, output hang never
Last clearing of "show interface" counters 00:16:00
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
30 second input rate 0 bits/sec, 0 packets/sec
30 second output rate 0 bits/sec, 0 packets/sec
315916 packets input, 461657577 bytes
Received 461 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
167296 packets output, 11153399 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
