Need help on CAR

[pham_at]

I have a router cisco 2600 to connect to internet.

Because I only have 128 Kbps for internet access so I want to controll bandwidth for users on the LAN for example, user1 - 64 kbps, user 2 -24 kbps ...). Following is summary about my router configuration:

ip cef

!

interface Ethernet0/0

ip address 192.168.10.1 255.255.255.0

rate-limit input access-group 12 64000 8000 8000 conform-action transmit exceed-action drop

rate-limit output access-group 12 64000 8000 8000 conform-action transmit exceed-action drop

rate-limit output access-group 11 24000 8000 8000 conform-action transmit exceed-action drop

rate-limit output access-group 11 24000 8000 8000 conform-action transmit exceed-action drop

access-list 11 permit 192.168.10.11

access-list 11 permit 192.168.10.12

access-list 12 permit 192.168.10.111

Butwhen I do the test, users can download above the speed I have setup for them !!!

Please help me to fix this problem !!! If CAR can not resolve this problem, pls give me another solution !!!

Thanks

[ssymonds]

Hello Mat,

the problem is most likely due to the fact that you are using a standard-access-list 1-99 i.e this checks the 'source' ip address, therefore when transmitting out of the e0/0 interface, the source addresses specified in the access-list 12 would not satisfy the car statement, as the source address would not match.

Instead, configure extended access-lists to match your traffic

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/np1_r/1rprt2/1rip.htm#xtocid217152

i.e for traffic to and from host 192.168.10.111 :

ip cef

!

interface Ethernet0/0

ip address 192.168.10.1 255.255.255.0

rate-limit input access-group 100 64000 8000 8000 conform-action transmit exceed-action drop

rate-limit output access-group 101 64000 8000 8000 conform-action transmit exceed-action drop

!

access-list 100 permit ip host 192.168.10.111 any

access-list 101 permit ip any host 192.168.10.111

Then check traffic to-from this host.

Please let us know results.

rgds

stvee

[pham_at]

It have fixed my problem.

Thanks a lot