QoS question

[Andy White]

Hello,

I'cve added a QoS policy to our ASA to stop our Guest network using all our bandwidth, it is work with uploads but not downloads, can the ASA only implement this QoS when the traffic is not being used in that direction?

      policy-map GUEST-NETWORK-POLICY
        class Guest_Network-class
          no police input
          police input 3000000 2000 conform-action transmit exceed-action drop
          no police output
          police output 3000000 2000 conform-action transmit exceed-action drop

[Andy White]

To limit the download and uploads (to 4mbs) to this guest vlan (sub interface off the ASA) I had to use an output policy on the guest interface which fixed the upload speed and an input policy on the outside interface for the downloads speeds.  I had to use an ACL for the subnet of the guest network too, otherwise all traffic woudl get the WoS limit.

ASAs rock.