Bandwith Split

[mohammedfawzi488792852]

Hi everyone

I have 10Mbs bandwidth for a company branch, I want to use 5Mbs for VPN to connect it to the main branch, and 5Mbs for internet for the users, how can I do that??

[Georg Pauwen]

Hello,

what kind of VPN do you have implemented (e.g. AnyConnect), and what do the VPNs terminate on (ASA, IOS Router) ?

[mohammedfawzi488792852]

im using Gre over IPsec and terminates on the Router

[Georg Pauwen]

Hello,

post the full running configuration of your router...maybe we can come up with something...

[Joseph W. Doherty]

Depending on your Cisco device(s), you may be able to proportion bandwidth, as you desire, for egress to Internet, but generally cannot do that for traffic ingressing from the Internet. Because of the latter, I normally recommend VPN crossing the Internet to not share Internet connection links with your "general" Internet traffic. (BTW, since you can often manage bandwidth to the Internet, it's sometimes possible to use something like an ADSL link for "general" Internet ingress traffic and use your "high-bandwidth" [Internet] link, for both "general" Internet and VPN Internet traffic going to the Internet.)

[mohammedfawzi488792852]

so it cant be done that way?

[Joseph W. Doherty]

"so it cant be done that way?"

Depends on the device.

Cisco routers, generally, can do a good job managing egress. Cisco switches, often much less so. Cannot say regarding other Cisco device.

Cisco routers and switches (again, cannot really say for all other Cisco devices), generally, cannot well manage ingress traffic.

However, there are 3rd party traffic management appliances that can somewhat manage ingress traffic. How well they can perform depends much on the protocols being used by the traffic. For example, they can fairly well manage ingress TCP by spoofing receiving host's RWIN and/or pacing out the return ACKs.