Bandwidth throttling configuration

[jrkillam]

Currently I have an internal 2621 router set as the default gateway for the network. I have a PIX515E with the internet connection directly connected to it. What I want to do is limit the bandwidth going across the internet connection to 2 megs max. I know that the PIX can't do bandwidth throttling so is there a way to do that using the 2621 or do I need another router to sit between the PIX and the internet connection?

[Georg Pauwen]

Hello,

a simple way to accomplish this would be to use the rate-limit command on the interface connecting to the PIX, it would look something like this:

rate-limit output access-group 101 20000000 20000 20000 conform-action transmit exceed-action drop

access-list 101 permit ip any any eq www

HTH,

GP

[jdilley · Accepted solution]

You can setup some QoS measures called traffic policing, here is a sample config:

class-map bandwidthlimit

match any

exit

policy-map policetraffic

class bandwidthlimit

police 8192 2048 4096 conform-action transmit exceed-action drop violate-action drop

exit

exit

interface fastethernet (LAN interface on 2621)

service-policy input policetraffic

This policy will limit the bandwidth to around 2MB.

[jrkillam]

Thank you for the responses. Will either of these configurations work if the router does not have a direct connection to the PIX? Currently they both share the same network segment, but don't have an interface to interface connection to each other.

[jeremy.gresh]

I was just wandering why you would want to limit the bandwidth going across the internet connection. Im an Intern and College student, so I was just interested into hearing why you would limit Internet bandwidth? I just didnt understand why this would need to be done and what conditions you would do this in.

[jrkillam]

Our site uses an ISP that offers burst rate service. So I want to limit what the max bandwidth will burst to. We have found that if the traffic exceeds the 2 meg burst at a sustained rate we start having slow downs and a chain of collapsing connections because we are basically performing an internal DoS attack on our ISP connection.