Hi,
I would like to limit the bandwith on my SF300 switch based on IP address. The situation is that I have to limit the speed for the whole network overall, not on a single port. What I would like to achieve is that the communication between one of my server and the client computers on my another premises be limited to a few mbits and let the rest be used for other network communications. They are on the same VLAN, the only way I can identify this network traffic is IP based.
What I have found out so far is that I have to use the advanced QOS settings, but I could not reach my goal. When I set limits, the whole network traffic is limited, not just the communication between my server and the client computer. I was following the steps in this article:
Now my config looks like this:
qos advanced ports-trusted
ip access-list extended teszt
permit ip 10.12.1.117 0.0.0.0 any ace-priority 1 log-input
exit
ip access-list extended minden
permit ip any any ace-priority 2
exit
priority-queue out num-of-queues 2
class-map teszt match-any
match access-group teszt
exit
class-map minden match-any
match access-group minden
exit
policy-map pol1
class teszt
set queue 1
police 100 3000 exceed-action drop
exit
class minden
set queue 2
exit
exit
wrr-queue bandwidth 1 99
qos statistics queues 1 1 all fastethernet4
![ace_minden.png ace_minden.png](https://community.cisco.com/t5/image/serverpage/image-id/162464iE0ABACFB2CB753B8/image-size/large?v=v2&px=999)
![ace_teszt.png ace_teszt.png](https://community.cisco.com/t5/image/serverpage/image-id/162463iFACEDB33CDE95EE9/image-size/large?v=v2&px=999)
![acl.png acl.png](https://community.cisco.com/t5/image/serverpage/image-id/162462iD382F9AE3DA379AB/image-size/large?v=v2&px=999)
![bindings.png bindings.png](https://community.cisco.com/t5/image/serverpage/image-id/162466i5D079F00CFF146BF/image-size/large?v=v2&px=999)
![classmapping.png classmapping.png](https://community.cisco.com/t5/image/serverpage/image-id/162467i8518F38E4B279E97/image-size/large?v=v2&px=999)
![policy.png policy.png](https://community.cisco.com/t5/image/serverpage/image-id/162468iA9F7391C92C51D66/image-size/large?v=v2&px=999)
![policyclassmaps.png policyclassmaps.png](https://community.cisco.com/t5/image/serverpage/image-id/162469iA01A3D73F38A1AEF/image-size/large?v=v2&px=999)
![qos.png qos.png](https://community.cisco.com/t5/image/serverpage/image-id/162470i1E2F9AA9D6FB007D/image-size/large?v=v2&px=999)
![qosglobal.png qosglobal.png](https://community.cisco.com/t5/image/serverpage/image-id/162471i79E58CB812F04B93/image-size/large?v=v2&px=999)
![queue.png queue.png](https://community.cisco.com/t5/image/serverpage/image-id/162472i832F6A4751475801/image-size/large?v=v2&px=999)
With these settings the speed is not limited at all. If I set the "Egress Shaping Per Queue" for the port I test, it limits all the traffic, not just for my selected IP address.
My firmware is the latest version 1.4.11.5.
Please help me which settings should I change to reach my goal?