BW Allocation using QoS

[Sreenath]

Hi Team,

I have a requirement where i need to do some QoS based BW allocation.

I have a 500M circuit, which needs to be split into 300M and 200M and routed down to LAN.

How can i achieve this?

!
access-list 100 permit ip <Public IP2> 0.0.0.3 any
access-list 101 permit ip <Public IP1> 0.0.0.3 any
!
class-map PIP1
match access-group 100
!
class-map PIP2
match access-group 101
!
policy-map INTERNET_SPLIT
class PIP1
bandwidth percent 40
class PIP2
bandwidth percent 60
!
policy-map RAW_INTERNET
class class-default
shape average 500000000
service-policy INTERNET_SPLIT
exit
!
policy-map RAW_INTERNET_OUT
class class-default
shape average 500000000
service-policy INTERNET_SPLIT
exit
!

Interface gi0/0/0

desc WAN Circuit from provider

service-policy out RAW_INTERNET_OUT

!

interface gi0/0/1

desc LAN (Trunk link with vlans for PIP1 and PIP2)

service-policy out INTERNET_SPLIT

!

I know something is not correct. I suppose not to apply on WAN link? Am i doing this right?

[Georg Pauwen]

Hello,

where does the traffic come from, the Internet, or other sites ? What do the two public IP addresses represent ? Shaping inbound Internet traffic is usually not a good idea.

[Sreenath]

500M circuit comes from service provider, who has provided Public IP for LAN block. We want to provide Internet access to a sub group who needs internet access. Hence need to split/restrict the BW to 200M

[Joseph W. Doherty]

Assuming your WAN link is physically more than 500 Mbps, but with a 500 Mbps bandwidth cap, what you're are doing for on the LAN trunk would be used for WAN link out policy.

For a WAN ingress policy, you could police the two classes at 300 and 200, but understand, ingress policing will not fully control ingress bandwidth usage, upstream.

[paul driver · Accepted solution]

Hello

As you have 500mb circuit with multiple public addressing, You could Police and tag ingress from you Lan and then traffic shape on your wan link against those tag values.

At present how is this public address being utilized?

res

Paul

[Sreenath]

Sample config.

Router#
ip route 0.0.0.0 0.0.0.0 1.1.1.1 <-Default Route for all traffic to WAN Link 500M circuit

Public IP space :

2.2.2.0/28

int gi 0/0

no shut

!

Int gi0/0.2

encapsulation dot1Q 2

ip address 2.2.2.1 255.255.255.252

!

Int gi0/0.3

encapsulation dot1Q 3

ip address 2.2.2.5 255.255.255.252

!

So the Trunk is connected to core switch through which i have the vendor plug into an access port vlan 2.

I need this link to get BW of 200M and the other vlan ie vlan3 to get 300M.

 From before the access list is to filter these two subnets