02-27-2024 05:58 AM
Hi All,
I have "Cisco 6880" Switch where i want to restric Youtube access (10mb) in Vlan using qos .Can any one help me on this .
02-27-2024 06:12 AM
what code running on this Switch ?
check below thread :
https://community.cisco.com/t5/routing/qos-on-cisco-for-limiting-youtube-traffic/td-p/2073343
02-27-2024 06:15 AM - edited 02-27-2024 06:16 AM
Have checked same link already seems commands are not working/accepting the device.
Running version is 15.5(1)SY10
02-27-2024 06:51 AM
Re: not working - 6880 likely doesn't support NBAR and might not accept egress CBWFQ policies.
If forgoing true, should still be possible to restrict YouTube bandwidth, just would require more configuration "work".
Before getting into what might/could be done on a 6880, what devices are upstream, such as the Internet connected router?
02-27-2024 10:37 PM
ISP is directly terminated on my 6800 chassi
02-28-2024 01:52 AM
Hello,
I think @Joseph W. Doherty is right, and the 6880 does not support NBAR. Creating an access list and a QoS policy can be tedious, because YouTube uses a large range of addresses. The ACL below is based on the current IP address ranges, you could give that a try. You might inadvertently limit other services as well, so no guarantees:
ip access-list extended ACL_YOUTUBE_TRAFFIC
permit ip 199.223.232.0 0.0.7.255 any
permit ip 207.223.160.0 0.0.15.255 any
permit ip 208.65.152.0 0.0.3.255 any
permit ip 208.117.224.0 0.0.31.255 any
permit ip 209.85.128.0 0.0.127.255 any
permit ip 216.58.192.0 0.0.31.255 any
permit ip 216.239.32.0 0.0.31.255 any
class-map match-all CM_YOUTUBE_TRAFFIC
match access-group name ACL_YOUTUBE_TRAFFIC
policy-map PM_YOUTUBE_POLICING
class CM_YOUTUBE_TRAFFIC
police 10000000 1562500 conform-action transmit exceed-action drop
interface <interface_name>
service-policy input PM_YOUTUBE_POLICING
02-28-2024 02:09 AM
Yup, like @Georg Pauwen's "tedious", because among other reasons you may need to constantly confirm list of IPs hadn't changed. Unfortunately, if you wish to block YouTube, believe, on a 6880, your pretty much limited to just that.
Other variations might include just limiting YouTube traffic that appears to be video, UDP, etc. Also, the 6880, I believe, also supports micro flow policing which may allow you to restrict YouTube video flows to low def only. (Often a huge bandwidth difference between max def and min def.)
03-20-2024 06:13 AM - edited 03-20-2024 06:15 AM
@Georg Pauwen ,Thank you...That was a useful script.Could you please clarify the below as well.
As i want to apply the "PM_YOUTUBE_POLICING" qos policy on Trunk interface where other traffic also passing via the same link (Eg.lets consider Uplink).Does this policy will block other trafic? or it will restrict only You tube dest mentioned in ACL and other trafic will pass as usual.
03-20-2024 07:15 AM
The posted CBWFQ policy should only block the traffic that matches the ACL.
02-28-2024 02:58 AM
post show version completly and what sup card it has and what license you having.
03-04-2024 02:43 AM
SUP : C6880-X-LE-SUP
Version : 15.5(1)SY10
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide