05-21-2014 03:03 AM - edited 03-04-2019 11:00 PM
hi all,
i have 16 mb internet line from the ISP.
i have different VLANs created in the switch 3750-x and default route pointed to cisco 2921 router.
i have 2 vlan for guest for that particular subnet i need to allocate only 3mb internet from total 16 mb and rest i need to use for my other office subnets
how i can acheive this using qos on cisco 2921
thanks
cyril
05-21-2014 06:41 AM
Do you have 2 differnet vlan as ingress interface or just one on 2921?. Do you want the accumulated traffic from both vlan not exceed 3 mb or each vlan not to exceed 3 mb?.
Accordingly you can configure ingress with policing or egress with shapng/policing.
-Nagendra
05-21-2014 06:50 AM
hi Nage,
i am using 2921 as a transit network ,
it doesnt have multiple sub interface for VLAN , all VLAN's are created in switch.
2921 has one interface IP in the one of the VLAN range
yes both vlan not exceed 3mb
05-21-2014 07:06 AM
You can configure a class-map to match the traffic originated from both the source as below,
ip access-list extended GUEST
permit ip <vlan1-network> <mask> any
permit ip <vlan2-network> <mask> any
class-map GUEST
match ip address GUEST
Now configure a policy-map with this class-map and police it to 3 mb. The remaining traffic will go via class default while the traffic from guest vlans will be limited to 3 mb.
Apply this policy-map in ingress direction.
BTW, this is under assumption that the traffic from guest vlan is only towards internet.
-Nagendra
05-21-2014 07:23 AM
this is what i confiured,
class-map match-all Guest
match access-group name HA-Guest
!
!
policy-map Guest
class Guest
police 25165500 conform-action transmit exceed-action drop
class class-default
interface GigabitEthernet0/1
description ========LAN Connected to Switch======
ip address 10.31.100.1 255.255.255.0
no ip redirects
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
duplex auto
speed auto
service-policy output Guest
ip access-list extended HA-Guest
permit ip 192.168.151.0 0.0.0.255 any
permit ip 192.168.152.0 0.0.0.255 any
this is what i confiured , guest will access only internet nothing else.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide