Limit bandwidth per user/computer using Catalyst 3560 switch

Hi -
Can someone help me getting started (if at all possible...) with enabling controll of used bandwidth at a "per-user"-level.
I wonder if it possible to do this dynamicly with respect to the overall demand from other users.
I've searching a lot, but I'm missing the terminology :) 
Sincerly
Nicholas

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
To my knowledge, what you want to accomplish isn't possible on a 3560.
You can police at ingress, and if you use a policy map, you can police different "known" IPs.
What you could do, is police user ports ingress at some nomimal bandwidth, and if exceeded, mark the packets.  Then on egress, you could direct those packets to an different egress queue with a lower bandwidth guarantee than the normal queue.

Similar Messages

  • Limit bandwidth per port switch/VLANs?

    I am using a switch to create multiple VLANs. Each network has a separate VLAN port on my 3550 configured. I want to control the bandwidth that port uses and restrict it. Is is there a simple command to do this or will I need QoS.
    Basically Fast0/1 - max bandwidth out/in (300K/400K)and so on..
    thanks in advance!

    You need to configure Policing that will limit the rate users can use going through a particular port/vlan.
    Policing involves creating a policer that specifies the bandwidth limits for the traffic. Packets that exceed the limits are out of profile or nonconforming. Each policer specifies the action to take for packets that are in or out of profile. These actions, carried out by the marker, include passing through the packet without modification or dropping the packet.
    This example shows how to create a policy map and attach it to an ingress interface. In the configuration, the IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate of 48000 bps and a normal burst size of 8000 bytes, its DSCP is dropped:
    Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
    Switch(config)# class-map ipclass1
    Switch(config-cmap)# match access-group 1
    Switch(config-cmap)# exit
    Switch(config)# policy-map flow1t
    Switch(config-pmap)# class ipclass1
    Switch(config-pmap-c)# trust dscp
    Switch(config-pmap-c)# police 48000 8000 exceed-action drop
    Switch(config-pmap-c)# exit
    Switch(config-pmap)# exit
    Switch(config)# interface gigabitethernet0/1
    Switch(config-if)# service-policy input flow1t
    There is also example on aggregate policing. Here is a link on QoS:
    http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12225see/scg/swqos.htm#wp1044737
    Please rate helpful posts.

  • Limit bandwidth per application

    Hi there,
    I am looking for a way to limit bandwidth per application under Mac OS X Lion ; either with a dedicated app or Terminal command.
    I didnt find any tools with Google or App Store : does that mean "limiting bandwith" is a *bad* idea ?
    The purpose is mainly to limit iTunes !
    Thanks for advise.

    I found a way to do this. It's a bit roundabout but it works. Rather than limit per application, you limit per server. For example I notice adobe creative cloud usually takes over my entire network connection when it's uploading a file to the cloud server, making it a pain to even browse the internet when it's sending a large file. Using little snitch's network monitor I see it's sending data to "creative.adobe.com", I enter that server into a program called speedlimit and set how much data it should send to that server. Fixed.
    little snitch:
    http://www.obdev.at/products/littlesnitch/index.html
    speed limit:
    http://mschrag.github.com/

  • Limit BTC per user

    Hi,
    SAP R3 on my system, I need to limit the amount of work processes BTC per user, because some users launch several processes at the same time causing inconvenience in the whole system.
    Is there any parameter or report that can control this situation?
    Regards
    Marco Sousa

    Hi,
    As per my knowledge, there is no such option where you can limit the usuage of BTC work process as per user. The alternate would be firstly educate users strictly not to run any huge reports in background during the peak time or remove the access of executing in background. Other thing is look at the possibility of increasing the BTC process if bussiness requirement needs them to execute in background. If resources are not sufficient to increase the BTC process then configure the operation modes and convert the dialog process to BTC process.
    Regards,
    Sharath

  • When to set iwtUser-role and other per user schema using custom athentication?

    I have written my own authentication module and would like to set per user schema on login. Can I write iwtUser-role, iwtCalendarProvider-calendarUserPassword, etc from the authentication class?

    Yes you can, after the authentication is complete you get the profile object and then set whatever value you want to set for particular attributes you want to set ..

  • Flex connect with a per user ACL with APs locally switched

    Hi all,
    Does flex connect allow a per user ACL to be downloaded to the session with local switched, central authentication? We are using ISE for the central policy engine and have setup dACL for wired but am about to embark on WLAN. The controller is a 5508 and the. APs are 3700's.
    Second question- if the flex connect APs don't do any form of per user ACL, the other option is to have the units in regular mode where they are both centrally switched and centrally authenticated which I understand to support a per user ACL. Our WAN links are between 10mbps - 30mbps and the most latency would be around 40ms. Will this cause issues at all with the size WAN links and latency?
    Thanks
    Sent from Cisco Technical Support iPad App

    Well you are running v7.6 so FlexConnect per user radius ACL's are supported per this doc since v7.5.
    http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112042-technote-product-00.html#anc9
    As far as WAN latency, 200ms is good, but it depends in your WAN utilization now and how many AP's you plan on installing and the increase in wireless traffic across your WAN. There is a minimum requirement, but it's up to you in the end to make sure you have enough bandwidth or else you will need to QoS the capwap traffic to ensure the APs don't bounce from connected to stand alone.
    Sent from Cisco Technical Support iPhone App

  • SRW224G4P uplink to catalyst 3560 switch trunk

    I have many SRW224g4p switchs,and I use a catalyst 3560  for a core switch.
    The SRW224g4p uplink to 3560 switch
    What can I config the port of the 3560 to SRW224g4p(Their are many of vlans in my network)
    and config the port of SRW224g4p to 3560's port
    ps:config trunk port problem

    Hi Wei,
         Are you working on the Linksys SRW224G4P or the replacement Cisco (300 Series) SRW224G4P-K9-NA? Can you attach your 3560 Truk Port Configuration along with the VLAN Configuration?
    Thanks,
    Kevin

  • Using Catalyst 3550 Switch with Linksys Home Router and Cable Internet

    I've about pulled what little hair I have out of my head on this one, and need some configuration help.
    I have a Cisco Catalyst 3550 switch with five Windows 7 desktops, an Avaya PBX and five Avaya IP phones attached.  All of these devices are on a 192.168.0.0/24 subnet, and are communicating properly.  I will refer to this as network # 1. I also have SEPARATE network, we'll call network # 2, using AT&T ADSL service and a Netgear 4-port/wireless router/ADSL modem combo device, which is functioning properly with a couple of other Windows 7 desktops over its own wired Ethernet network, using DHCP, and also on a 192.168.0.0/24 subnet.  I thought it would be a simple integration, just plugging one of the 3550's ports to one of the DSL router's ports, in order to give the five Windows 7 desktop computers on network # 1 internet access via the DSL modem. Guess I was wrong.  When I connect the two switches together, although I get a good connectivity (green lights on both ports) and am able to ping the DSL router's gateway address (192.168.0.252) from network # 1's computers, the computers on network # 1 cannot access the internet. Also, the working computers on network # 2 lose their internet access as long as the two switches are connected together. I am not a Cisco guru, but there's got to be a way to make this scenario work.  Can someone provide me with a 3550 configuration that will allow me to extend my internet service from network # 2 on the DSL router to my 3550 switch and their computers?  Here's what I am looking for:
    INTERNET ---> ADSL MODEM ---> NETGEAR ROUTER ---> CISCO 3550 SWITCH ---> NETWORK DEVICES WITH INTERNET ACCESS

    The Netgear router is probably what's doing the natting. Is the 3550 configured for routing or is it straight L2? If you have the 3550 configured as L3, then it's going to be easy to do what you want. Just add a static route on the Netgear to point the subnet that it doesn't know about to the 3550. For example, if the Netgear is addressed at 192.168.1.1 and the Cisco 3550 is addressed at 192.168.1.2, but it also knows about the 192.168.0.0/24 (separate vlan), then you would put a static route on your Netgear for 192.168.0.0/24 to go to 192.168.1.2.
    The way that I would do it is to create a separate vlan on the 3550 and assign an address to it. Once you do that, make the port that the other switch connects to an access port of that vlan. (It would need to be on the same subnet as the existing equipment.) All of your devices would use it as a default gateway and then you would do the rest as above. You could also use RIP between the Netgear and Cisco if you can't do static routing.
    HTH,
    John

  • Documentation About catalyst 3560 switches

    Hi,
    Any one have documentation about 3560 switches, that includes features & configuration cababiities,
    thanks,

    Hi,
    There is lot of documents available in Product support. One link is,
    http://www.cisco.com/en/US/products/hw/switches/ps5528/tsd_products_support_series_home.html
    Rate if it does,
    Rgs

  • Limit bandwidth for users or S650

    Is there a way to limit the bandwidth for all the users or the entire appliance.For example lets say you have a 9mb pipe however you dont want the appliance or all of the users combined to use say more than 6mb.Is this something that can be done now?If not is it a planned feature upgrade.
    thanks

    Charles,
    Currently, there is no way to do access based bandwidth throttling or system wide bandwidth throttling.
    Both of these features are filed under theses enhancement requests:
    35364: Bandwidth limit for authentication group or ip range
    39720: Bandwidth throttling (QoS) to maintain a solid client experience
    Please contact your sales representative and inform them of the importance and priority of these features to you.

  • Limit login per user

    HI All
    i want to limit the number of login pre user
    if userA will connect to the web site from location 1
    and he try to connect again (with the same user name) from location 2 he will get message that he already connected
    to the web site and the old connection will kill
    (the same as the console screen as web sphere )
    any idea
    thanks

    Using the HttpSession is nonsensicial. The HttpSession is different for every session. So if the user starts a new session, either at the same PC or at a different PC, then he can still login once more.
    Just maintain a Set of all logged in users in the ServletContext. On login check the Set and add the user. On logout or on destroy of the session (you can use HttpSessionListener for that), remove the user from the Set.

  • Limit bandwidth per IP with Speedtouch 780WL

    I want to limit the bandwidth to certain IPs in my network. However, I have no idea how to do this. My router is Speedtouch 780WL. Are there some telnet options for this?

    I suggest using a Linkys WRT54GL with tomato firmware. See also:
    [Tomato] QoS Bandwidth limit for IP-range?
    [Tomato] limiting bandwith on wireless side of wrt54g
    Last edited by Kasumi_Ninja (2010-11-13 16:59:25)

  • Need to limit ram per user +cpu usage % and internet speed

    I go into Windows System Resource Management but I only see limit by process. I need to be able to say limit "greg" to only be able to use a total of 5GB of ram and say 10% of the total available cpu usage. I saw some people suggesting to set up
    proxies for speed limiting but have no idea on how to go about doing that. Or if any1 has any software ideas like I'v tried Net Limiter 3 b4 but it was buggy and stopped other things from working properly on my pc plus don't know if I can use it on server.
    so just to clarify if they are running 1 program they can only uses say the 5GB of ram or if there using 5 differant programs there still limited to only using 5GB of ram.
    Thanks all in advance,
                                        Blue

    Hi,
    You can use the System Resource Manager if you are using the Server 2008R2 or previous edition server, You can set an upper limit on the working set of a matched process,
    but about the RAM limits there have some additional considerations:
    • Do not use memory limits in Windows System Resource Manager to manage applications or processes that modify their own memory limits dynamically. This can interfere with
    the correct operation of Windows System Resource Manager and the managed application.
    •As a best practice, use CPU targets to manage resources. Apply memory limits selectively to applications that exhibit memory consumption issues. Excessively limiting the
    memory that is available to an application can increase the time it takes the application to complete a task, and it can increase disk usage.
    More detail please refer the following related KB:
    Understanding Memory Management in Windows System Resource Manager
    http://technet.microsoft.com/en-us/library/cc753446.aspx
    More information:
    Can a process be limited on how much physical memory it uses?
    http://blogs.technet.com/b/clinth/archive/2012/10/11/can-a-process-be-limited-on-how-much-physical-memory-it-uses.aspx
    Install Windows System Resource Manager
    http://technet.microsoft.com/en-us/library/cc753939.aspx
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Cascade Catalyst 3560 switch for loaded traffic

    I have a layer 3 Catalyst switch 3560 with 24 FE interfaces.
    I need to pump traffic from traffic generator into port 1 and propagate it to other ports; the last port will be connected back to the traffic generator.
    I suppose that I need to cascade some of the switchports but how do I configure the catalyst switch for this setup? Is it making use of routed port and static routing?

    Hi Ankur,
    Thanks for the reply.
    The traffic generator are layer 3 interfaces which I can assign IP address.
    You mentioned that I do not need any routing, but I require traffic coming from the traffic generator(e.g FE1) going into switchport 1 to traverse through the rest of the switchports before exiting from the last switchport back to the traffic generator(e.g FE2). Therefore, I need advice on how to setup the catalyst switch to achieve this.If I assign ip address for this traffic to end at the traffic generator-FE2, the generated traffic will enter the switch at switchport 1 and directly exit from the last switchport without any traversing done. Btw, do I need to cascade my switch with cross cable in this aspect?
    Thanks in advance for your advice.
    Regards,
    Raymond

  • How to limit bandwidth for guest per connection/user on 2504 WLC?

    We have 2504 Controller with 24 AP's registered in a hotel and we would like to limit bandwidth per connection or per user.
    I went to QOS Profiles > Bronze >
    I do not see Per user Bandwidth Contracts(K)* instead I see WLAN QOS Parameters with below options.

    Hello
    Our WLC model 5508, but there is confusion on difference between Override Per-User Bandwidth Contracts (kbps) vs Override Per-SSID Bandwidth Contracts (kbps)
    Our requirement-
    On Guest SSID  - Each user / session should not exceed bandwidth more than 758kbps upstream/downstream
    Only Guest users cannot login to multiple device with single userID - applicable only to Guest SSID other SSID should not get impacted.
    hope to get some response
    cheers
    ST

Maybe you are looking for

  • Problem with logical database

    Hello experts, i want to mix the data of the two transactions CjI3 CjI5 into one table. Both Transactions or programs use LDB psj. So i want to use one perform for each LDB call. I want to call the LDB with the FM LDB_PROCESS. I want to get the data

  • Why is my latest 27" iMac so slow ?

    Can i know why my latest 27" iMac is so much slower as compared to my 2 generation ago 24" iMac when using FCE4 ? I always have this message "preparing for video playback" and it also cannot handle 3 transitions stack together on top of each other (i

  • Elements 9 Auto-Analyze Causes Crash

    I'm trying a trial version of Photoshop Elements 9.  I've discovered that whenever it tries to do the auto-analyze function, the software crashes.  I had to disable the "Analyze Photos for People Automically" to keep the software from crashing after

  • Re-linking After Effects assets inside Premiere

    I have a premiere project that has a dynamically linked After Effects project. I wanted to rename the folder that all my footage resides in. When I do that I relink all my footage / After Effects files when I open the project. That all works great. H

  • Sending all e-mails out of the draft-folder

    Is it possible so send all e-mails in the draftfolders at once? I know is possible with an AVB but do I have to use it also for outlook 2010. thank u