Shaping outbound traffic per device for large group of devices

[mark.tegg]

Hi folks, I am fairly new to the world of QoS. Although I have a basic understanding of what it is, I don't have any real experience in implementing it in production network in anger. I have a new requirement for a guest network service. The users will be using this as outbound internet access service. I would like to limit the bandwidth per user to a specified rate. Searches have returned results that are appear suitable for the task.

The issue I have is that I want to offer each user equal bandwidth, but there are potentially >36000 unique IP addresses (mostly contiguous blocks) and I am wondering if there are an equivalent of a range statement usable to define the policy (save every IP needing to exist in policy) 

I'm wondering if anyone can shine some light as to how I can configure my routers to achieve this requirement with the minimal configuration required.

I am assuming I need to use ACLs to do the QoS/Policing/Shaping?

[paul driver]

Hello

---

@mark.tegg wrote:

 I would like to limit the bandwidth per user to a specified rate. Searches have returned results that are appear suitable for the task.

The issue I have is that I want to offer each user equal bandwidth, but there are potentially >36000 unique IP addresses (mostly contiguous blocks) the minimal configuration required.

---

Qos is required when you possibly expect to have over utilization of your network bandwidth resulting in packet loss or delay meaning when congestion isnt incurred QOS really isn't required.

Given the amount of users you are stating it would be more viable to allocate a pre-defined guest BW value for all guest users and then police or share that BW between the various subnets of your guest users.

Can you elaborate on your current network topology and what type of hardware (router/fw/switch/access-points etc..) you are ruining?

[Georg Pauwen]

Hello,

I think your best option is to look for a third party management tool. Putting a service policy on your router matching an access list of 36,000 individual lines and host entries is probably not a good idea.

Have a look at WebHTB (link below), it allows to set bandwidth limitations for individual IP addresses. Even the paid version only costs 100 dollars...(I am not a WebHTB rep, but compared to what you pay for a Cisco solution, this sounds very cheap).

https://www.webhtb.ro/features/

[Joseph W. Doherty]

To best meet your requirement, you'll likely need to resort to using some 3rd party appliance, as suggested by Georg.

The closest you might come to meeting your requirements, some Cisco hardware supports microflow policers.

Some Cisco hardware also supports policers per (user) edge port. (At least such interface policies could be applied with a range statement.)