Bandwidth Rate Limits on Cisco 2950 limiting to 256K 1

[genurich]

Hey all,
I work for a small telecom. We have sla's for speeds as low as 256K ingress/egress. I started here recently and realized that gamers etc. paying for 256K down are causing us to upgrade systems due to excessive bandwidth usage... I've found that using service policies/policing I can limit to 1M with 8K burst. Is there any other way to knock the guaranteed speed down lower?.. I'm using a 2950T w/ the Enhanced Image... Applying service policies to the customer outgoing port helps with the uploads and mac filtering will help with downloads... But is there a better way? How can I get this down to our SLA also, what should I do to guarantee customers paying for 2M get preferred bandwidth?.. I'm still testing, but speeds are reaching 756K easy.

Please advise...
genurich

 

[ADB100]

The 2950T only support ingress service policies so you will be limited to restriciting what each user can transmit. The uplink from this switch is likely to be supporting multiple users so applying an ingress policer here is not really an option. I suggest you upgrade the switch for one that supports egress policers. The 3550 does but the 2960, 2970, 3560 & 3750's don't. The bigger switches do - 4500's with SupII+ or above as well as the 6500's.

HTH

Andy

 

[genurich]

Tell me what you think... I've applied a service policy input to f0/21 when uploading speeds become very slow while downloads are fast.... I then applied input on f0/17 which is coming from a router. When applied, download speeds are slow and upload speeds are normal/fast. If I could accomplish this at 256K as opposed to 1M, it would be great. I have a 3550. If you think it's better, great. It doesn' allow a policy ingress and egress. So I'd still have to apply policies on separate interfaces. I appreciate your response.

 

[ADB100]

The 3550 does allow both ingress & egress service policies to be applied and you can get very granular.
The 290 only allows policing in 1MB increments and only on the ingress; this is good for limiting what users transmit but other than that...

HTH

Andy

 

[genurich]

Thanks a lot. I'm going to try this on the 3550 instead. Do you have a specific example of how to get less that 1M?

Please advise.

Rich

 

[genurich]

ADB100... why didn't I see this? Thanks so much. The policer is more granular--obviously. Does the bandwidth option work the way it implies. I'll be researching this by the way.

 

[ADB100]

Example of how to police all egress and ingress IP traffic to 256K:

ip access-list All-IP
permit ip any any
!
class-map match-all All-IP-Class
match access-group All-IP
!
policy-map Restrict-to-256Mbps
class All-IP-Class
set dscp default
police 256000 8000 exceed-action drop
!
interface FastEthernet0/1
service-policy output Restrict-to-256Mbps
service-policy input Restrict-to-256Mbps
!

It is a shame Cisco removed the egress service policy capability from the newer 3560 & 3750's since this as a nice feature. The 3550 is EoS unfortunatley.

HTH

Andy

 

[genurich]

I've tried... the policies (though limited) work on the 2950... I can't seem to get an applied policy to work on the Cisco 3550... This is beyond me--stressful.

Please chime in

 

[ADB100]

What is not happening? I have policies attached to the ingress of my 3550's for Voice & Data and they work perfectly well.

Andy

 

[genurich]

After I apply the policies... nothing happens. Traffic and data transfers of over 8G happen at the same rate. I even applied it just the way you have it... I realize that my 3550 is not running the latest IOS. I will upgrade and see if my applied policy works.... Also -- Where are you applying these policies. Is it to each interface or the uplink?

 

[ADB100]

The policies need applying to each access port where you want to apply the restrictions.

HTH

Andy