Rate Limit FTP and File Copying 445 Port

[imranraheel]

I want to implement a policy so the specifed two protocols cant use more than 50 % of my WAN bandwidth ,

What policy should i implement.

[paul driver]

Hello
You can class based policing for these protocols depending on the device you want apply this to.

can you post the details.of the switch/router also protocols involved and interface bw rates

res
paul

Can


Sent from Cisco Technical Support Android App

[rizwanr74]

Hello Imran,

Please check this thread below, a solution has been been given with an example easy to follow and you can customize it per two specific porotocols as per your need.

http://supportforums.cisco.com/message/3931108#3931108

Thanks

Rizwan Rafeek

Pls rate helpful posts.

[Bilal Nawaz]

Hello,

You can police inbound and outbound depending on if your platform supports it.

Lets say i wanted to limit to 50% up and down for port 445 AND FTP - you can do this, For anything using port 445 and FTP (in this example):

### To match the traffic

ip access-list extended ACL_HALF

permit tcp any any eq 445

permit tcp any any eq FTP

!

### Class the traffic

class-map Link_HALF

match access-group ACL_HALF

!

### Apply policy against the class (type of traffic specified by your class-map)

policy-map Policy_HALF

class Link_HALF

   police rate percent 50

     conform-action transmit

     exceed-action drop

!

interface gigabitethernet1/0

### Applies the policies inbound and outbound, both directions

service-policy input Policy_HALF

service-policy output Policy_HALF

Where the ACL is you can specify source and destination or just source or source and port depending on how you configure your ACL. You can also specify a burst rate.

Hope this helps.

Link for your reference:

http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfpoli_ps1835_TSD_Products_Configuration_Guide_Chapter.html#wp1006389

Please rate useful posts and remember to mark any solved questions as answered. Thank you.

[paul driver]

Hello
I would suggest to created two class map statements and police on each of the class's - Having the default match-all for the class map - meaning for a match to be true , a match on both protocols is required and if this isn't made on both of these then the Class will not be processed.

Also use the police /police cir commands (data plane) would be an more optimal choice - As the police rate statement is for cpp ( control plane policing)


Res
Paul




Sent from Cisco Technical Support iPad App