Restrict bandwidth per user?

alig.norbert · ‎08-14-2009

Hi all,

I have a customer which provide internet access for about 200 students. They are connected by switchport and wireless.

Now I want to restrict the bandwidth per user (2Mbps). My fist thought is, to to rate-limit on each switchport. How about the accesspoints?

My second idea is to centralized the rate-limit on my core-switch (4503, Superv.2+) an leave the switches/accesspoint untouched.

Here my sample of config (not tested yet):

access-list 101 permit ip host 192.168.1.101

access-list 102 permit ip host 192.168.1.102

access-list 103 permit ip host 192.168.1.103

.....

interface VLAN30

rate-limit input access-group 101 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit input access-group 102 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit input access-group 103 2000000 37500 37500 conform-action transmit exceed-action drop

ip address 192.168.1.1 255.255.255.0

rate-limit output access-group 101 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit output access-group 102 2000000 37500 37500 conform-action transmit exceed-action drop

rate-limit output access-group 103 2000000 37500 37500 conform-action transmit exceed-action drop

....

Here my question:

Is there a better solution to restrict per ip because with this setup, I had to build for each ip an own access-list?

Thanks for a hint.

Greets,

Norbert

Edison Ortiz · ‎08-17-2009

A better solution would be implementing UBRL

But it's only supported with SupV-10G

__

Edison.

Collin Clark · ‎08-17-2009

BlueCoat's PacketShaper (used to be packeteer) can/could police per user.

alig.norbert · ‎08-17-2009

Thanks for the reply.

@Edison

The SupV-10G is ot of the pay-range for this customer and PBR is (Im not shure) not supported on the SupV-10G

@collin_clark

What is the price-range for this shaper?

Greets,

Norbert

Edison Ortiz · ‎08-17-2009

PBR was not supported on Sup6E up to 12.2(50)SG. All other Supervisors support PBR.

I understand the cost associated to upgrading the Supervisor but these are features that cost money if the customer really needs it.

__

Edison.

Collin Clark · ‎08-17-2009

Norbert-

I'm afraid I don't know, it's been too long to remember and it was pricing from Packeteer not BlueCoat.