Hello, I'm having problems to configure QoS in Cisco861 with IOS 15.0M. What I want is quite simple, I want to configure two VLAN with different traffic shaping/policing policitics towards Internet: VLAN 1 - 2/1 Mbps VLAN 2 - 8/1 Mbps WAN Interface is 10/2 Mbps FIRST. I tried to configure traffic policing/shaping in the WAN Interface (Fa4). But it worked only for the outbound traffic and not for the inbound traffic, I suspect that is due to source NAT (Am I wrong?). The download test give me 3Mbps (class-default), bad behaivour, and the upload test is done well 1Mbps. ip access-list extended wired-users permit ip 192.168.1.0 0.0.0.255 any permit ip any 192.168.1.0 0.0.0.255 class-map match-any wired-users match access-group name wired-users policy-map wan-output class wired-users    police cir 1000000      conform-action transmit      exceed-action drop      violate-action drop class class-default    police cir 3000000      conform-action transmit      exceed-action drop      violate-action drop interface FastEthernet4 description Internet ip address 172.16.4.22 255.255.255.0 ip nat outside ip virtual-reassembly zone-member security internet duplex auto speed auto service-policy input wan-output service-policy output wan-output end SECOND, due to the limitation discovered I configure police/shape in the switch port fa0. I remark that this is a switchport and not a routeport. I disable the service-policy of the wan interface and enable the service policy only in the fa0 interface. The results are even worse. None direction is limited, download test gave me 25Mbps and the upload test 5,5 Mbps. ip access-list extended wired-users permit ip 192.168.1.0 0.0.0.255 any permit ip any 192.168.1.0 0.0.0.255 class-map match-any wired-users match access-group name wired-users policy-map wan-output class wired-users    police cir 1000000      conform-action transmit      exceed-action drop      violate-action drop class class-default    police cir 3000000      conform-action transmit      exceed-action drop      violate-action drop interface FastEthernet0 description Puerto Usuarios Cableada service-policy input wan-output service-policy output wan-output end interface Vlan1 description Red Usuarios Cableada ip address 192.168.1.1 255.255.255.0 ip nat inside ip virtual-reassembly zone-member security wired end THIRD, I also tried to configure the service policy in the SVI interface (vlan1) but it means that it not possible to configure a service-policy in a SVI interface. Could you give me some advice about how to configure shaping/policing to get what I want? It's the first time I try to configure QoS in Cisco as it's obvious Thanks! Christian ... View more

Hello, I'm unable to apply a policing limit in a switchport of the CISCO861 router. This is my configuration: interface FastEthernet0 service-policy input wired-input service-policy output wired-output end policy-map wired-input class class-default    police cir 1000000 bc 187500 be 250000      conform-action transmit      exceed-action transmit      violate-action drop policy-map wired-output class class-default    police cir 2000000 bc 375000 be 500000      conform-action transmit      exceed-action transmit      violate-action drop The switchport uses more than 2/1 Mbps and I don't know why. This port is routed through the WAN interface (Fa4). I must be doing somethig bad... Thanks in advance, Christian ... View more

Hello, I would like to know if it's save to remove ip virtual-reassembly, "no ip virtual-reassembly", in my router interfaces although I have enabled NAT and ACL enabled on these interfaces. I ask this because I'm receiving a lot of log warnings about reached the maximum number of fragmented packets and I'm more interested in performance than in security. Thanks in advance! Christian ... View more

I have a small SG300-8 switch to connect 1Gbps Internet Connection to a router and a server console. Today we have suffered a network outage and I don't know the reason and if it has been related with the switch model. Since this afternoon I have a great number of packet losses between the ISP and our switch. So many losses that I couldn't connect to any device (switch, router, service console) from Internet and we have completely lost internet connection. The ISP have told me that he was receiving a great number of input errors (mainly CRC errors) in his network interface. But suddenly it has begun working again. I have only these logs from the switch and I'm very worried about this problem. The logs of the switch: 5-Jun-2012 03:23:01 :%STP-W-PORTSTATUS: gi2: STP status Forwarding 15-Jun-2012 03:22:57 :%LINK-I-Up:  gi2 15-Jun-2012 03:17:41 :%LINK-W-Down:  gi2, aggregated (1) 15-Jun-2012 03:13:09 :%STP-W-PORTSTATUS: gi2: STP status Forwarding 15-Jun-2012 03:13:05 :%LINK-I-Up:  gi2 15-Jun-2012 03:13:02 :%LINK-W-Down:  gi2 15-Jun-2012 03:10:10 :%STP-W-PORTSTATUS: gi1: STP status Forwarding 15-Jun-2012 03:10:06 :%LINK-I-Up:  gi1 15-Jun-2012 03:00:23 :%STP-W-PORTSTATUS: gi2: STP status Forwarding 15-Jun-2012 03:00:18 :%LINK-I-Up:  gi2 15-Jun-2012 03:00:16 :%LINK-W-Down:  gi2 15-Jun-2012 02:59:32 :%LINK-W-Down:  gi1 14-Jun-2012 22:13:02 :%STP-W-PORTSTATUS: gi1: STP status Forwarding 14-Jun-2012 22:12:58 :%LINK-I-Up:  gi1 14-Jun-2012 21:55:08 :%STP-W-PORTSTATUS: gi2: STP status Forwarding The only thing that I don't understand is the meaning of "agregated". The port gi2 is where ISP was connected. I would appriciate any comment, any! Thanks is advance, I would try to sleep... Christian    ... View more

Hello, I need to find a SMB Router with support for bandwidth limit. I have used the RV120W but it only supports to limit the upload bandwith but not the download bandwidth. Could you recommend me another model? Thanks, Christian ... View more