cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
870
Views
0
Helpful
1
Replies

Policy MAP Issue on ASA

helpmeplz
Level 1
Level 1

Hi i have configured following  Policy MAp to restrict 12.203 to use 5mb bandwidth.

Issue is that i dont recieve any hits when i apply this on outside interface like that

service-policy PM-RATELIMIT interface outside

But when i add permit ip any any in ACL then i receive hits.

Else This map work fine in inside interface but i want to apply it on outside .

Conf are as follows

access-list vlan10_rate_limit extended permit ip host 192.168.12.203 any

class-map CM-RATELIMIT

match access-list vlan10_rate_limit

policy-map PM-RATELIMIT

class CM-RATELIMIT

  police input 5000000

1 Reply 1

Jennifer Halim
Cisco Employee
Cisco Employee

the ACL that you have configured is sourcing from the internal host to any on the outside. So you would need to apply that on the inside interface.

If you would like to limit the return traffic towards that host, then you would need to configure ACL with source any and destination the NATed ip address of that internal host.

Review Cisco Networking for a $25 gift card