Traffic Shaping on Cisco 1900 series router

[duahimanshu816]

Hello,

Hello,

I have Cisco 1900 series router. I have configure the trunk port Gig0/0 with sub interface vlan10, 20, 30, 40, 50. 

for your reference i have attached the design. 

We have 10 MBPS link from ISP, the issue is:- internet is working very slow because the users are consuming loads of bandwidth for downloading the files from torrent and all unwanted things.

I want to distribute the Bandwidth between this vlan. Like vlan10 3MBPS and  vlan20 2MBPS  vlan30 1MBPS  and vlan40 3 MBPS and vlan50 1 MBPS. is it possible on this router if yes please tell the commands.

And, I also want to block torrent and some unwanted sites please suggest me any firewall or any other open source software.  

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

If you issues is ingress ISP congestion, shaping to your different VLANs may help very little.  It also can restrict your users from taking advantage of available bandwidth.

Ideally, you want to manage your bandwidth on your ISP's egress (toward you).  Unfortunately, most won't support/allow that but they often can sell you more bandwidth.

Assuming you don't want to purchase more ISP bandwidth, you can police you ingress traffic, but like your proposed shaping, it may not help much.

What you might want to investigate are 3rd party traffic shaping devices; those that can support spoofing TCP RWINs and managing output TCP ACKs, etc.  They are also more likely to "recognize" torrent traffic, in its many variations.

[duahimanshu816]

Hello,

thnx for the reply..

please i have done some configuration but i m not sure is it correct or not or will it help me or not.

like i have given 3 mpbs to Md_area, 3mpps to Main_office, 1 Mbps to PDB and 2 mbps to Gis.

please let me knw is fine???

sh policy-map interface gigabitEthernet 0/0
GigabitEthernet0/0

Service-policy input: subnet

Class-map: Md_Area (match-all)
42432 packets, 9660872 bytes
5 minute offered rate 2000 bps, drop rate 0 bps
Match: access-group 101
police:
cir 3000000 bps, bc 93750 bytes
conformed 42101 packets, 9164815 bytes; actions:
transmit
exceeded 331 packets, 496057 bytes; actions:
drop
conformed 2000 bps, exceed 0 bps

Class-map: Main_office (match-all)
382404 packets, 47960607 bytes
5 minute offered rate 100000 bps, drop rate 0 bps
Match: access-group 102
police:
cir 3000000 bps, bc 93750 bytes
conformed 382132 packets, 47553850 bytes; actions:
transmit
exceeded 274 packets, 406905 bytes; actions:
drop
conformed 128000 bps, exceed 0 bps

Class-map: PDB (match-all)
501708 packets, 293245252 bytes
5 minute offered rate 794000 bps, drop rate 37000 bps
Match: access-group 103
police:
cir 1000000 bps, bc 31250 bytes
conformed 494666 packets, 283674754 bytes; actions:
transmit
exceeded 7042 packets, 9570498 bytes; actions:
drop
conformed 732000 bps, exceed 23000 bps

Class-map: GIS (match-all)
6625423 packets, 819498502 bytes
5 minute offered rate 2250000 bps, drop rate 258000 bps
Match: access-group 104
police:
cir 2000000 bps, bc 62500 bytes
conformed 6539845 packets, 744885146 bytes; actions:
transmit
exceeded 85580 packets, 74613484 bytes; actions:
drop
conformed 1988000 bps, exceed 213000 bps

Class-map: class-default (match-any)
19755293 packets, 27587584573 bytes
5 minute offered rate 64864000 bps, drop rate 0 bps
Match: any

Service-policy output: subnet

Class-map: Md_Area (match-all)
1304 packets, 382151 bytes
5 minute offered rate 1000 bps, drop rate 0 bps
Match: access-group 101
police:
cir 3000000 bps, bc 93750 bytes
conformed 1304 packets, 382403 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 1000 bps, exceed 0 bps

Class-map: Main_office (match-all)
116040 packets, 13960129 bytes
5 minute offered rate 19000 bps, drop rate 0 bps
Match: access-group 102
police:
cir 3000000 bps, bc 93750 bytes
conformed 116040 packets, 13962925 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 20000 bps, exceed 0 bps

Class-map: PDB (match-all)
778 packets, 105331 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group 103
police:
cir 1000000 bps, bc 31250 bytes
conformed 778 packets, 126730 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 0 bps, exceed 0 bps

Class-map: GIS (match-all)
4961622 packets, 546652459 bytes
5 minute offered rate 1477000 bps, drop rate 0 bps
Match: access-group 104
police:
cir 2000000 bps, bc 62500 bytes
conformed 4961622 packets, 546665832 bytes; actions:
transmit
exceeded 1 packets, 1518 bytes; actions:
drop
conformed 1245000 bps, exceed 0 bps

Class-map: class-default (match-any)
22114518 packets, 28135414403 bytes
5 minute offered rate 66097000 bps, drop rate 0 bps
Match: any