how to rate limit traffic

[network770]

I the following setup:

switch1 -->

                  switch3 --> C2800 --> ASA --> Internet

switch2 -->

the switches are C3560's.

I would like to limit some ports on all 3560's to 2MG to the Internet (both ways) and drop all traffic surpassing that limit.

Do I need to configure only the switches? only the router? only the firewall? or all?

how would the configuration look like?

Another thing, if I rate limit a few ports to 2MG, is there a need for queuing on the router?

I would like to simplify the config as much as possible as I am not a qos expert.

[Robert W. Rogier]

Ronni,

    Is there a common theme to the traffic you want to rate  limit?  Ideally, if you can keep all these people into the same subnet,  you can match on that in an ACL and place your rate limit on the  router.  Also, remember if you have deployed VoIP, you'll need to do  queuing across the entire design to allow VoIP to work correctly.  I  would try to put the limits on the router itself.  If you try to put all  the rate limits on router ports, you will just make your life more  miserable.

Regards,

Robert W. Rogier

CSE - TAC UCC