Control downloads inbound from the internet

[hilferns]

Hi

We had a problem today, where a user initiated a large download from the internet that consumed most of our 50Mbps internet link. Consequently this affected some of our outbound traffic. What is the best way to restrict these downloads on a Cisco 2951 router? Is policing on the ingress the right way?

Thanks

Hilary

[e.ciollaro]

As far as I know discarding packet will reduce the TCP window and so reduce the bandwidth consumption but I think that could be hard to tune the policing parameter to obtain your goal.  

[hilferns]

Thank You. The question I have therefore is do I:

1. Police inbound on the WAN interface of the router? or

2. Police inbound on the LAN interface of the router or

3. Shape outbound on the WAN interface of the router or

4. Shape outbound on the LAN interface of the router

[e.ciollaro]

I would police inbound on the WAN interface of the router.  If the excessive bandwidth consumption is just in download you don't need to police or share in upstream (I mean form site to Internet) but if it's required I would apply policing inbound on the LAN interface.