Rate limit high bandwidth application

I have a 10mb line from a site office to my HQ.
there is one user in the HQ office that is running some high bandwidth application, taking up 50% of my total bandwith.
its some video monitoring system.
i am using a C1841 router.
how do i limit the bandwidth the user can occupy ?
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Bytes
Fa0/0 10.200.2.181 Tu1002 10.200.90.158 06 022A CC9F 46M
Fa0/0 10.200.2.181 Tu1002 10.200.90.158 06 022A CCE7 32M
Fa0/0 10.200.2.181 Tu1002 10.200.90.158 06 022A CD01 25M
Fa0/0 10.200.2.181 Tu1002 10.200.90.158 06 022A CC9C 21M
Fa0/0 10.200.2.181 Tu1002 10.200.90.158 06 022A CE2B 9478K

i have enable nbar on the router.
what i can see that all are gre traffic.
FastEthernet0/1
Input Output
Protocol 5min Bit Rate (bps) 5min Bit Rate (bps)
gre 223000 288000
bgp 0 0
ntp 0 0
bittorrent 0 0
citrix 0 0
cuseeme 0 0
custom-01 0 0
custom-02 0 0
custom-03 0 0
custom-04 0 0
unknown 0 0
Total 223000 288000

Similar Messages

Rate limit: Police bandwidth

Hi friends
I have some questions:
equipment: 7609
IOS: s72033-pk9sv-mz.122-18.SXD7.bin
i need create one police with 4200000000, but the police only support 4000000000.
Router(config-pmap-c)# police ?
<32000-4000000000> Bits per second
aggregate Choose aggregate policer for current class
flow police each flow
how can i limit 4.2 Giga, any idea?
do you know a good reference aboute it?
thanx

Hi there,
It seems a bit trickier than I thought!
I've not got a router near me, but have a go with a 2 rate policer. Here you have CIR and PIR. You can send at the PIR rate - which is higher than the CIR rate. Have a look at this link for some config tips:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t4/ft2rtplc.htm
Next, I would have a go at marking the access-list 125 traffic on ingress with a qos value currently not in use (e.g af11) using shaping for the first 4gig. Then in the 1st map class - match the af11 traffic. Then on the second, match the rest of the traffic that was no marked using the access-list.
Let me know !
LH

Per user bandwidth rate limit.

How to configure per user bandwidth rate limit for wireless guest client, authentication server is ISE 1.2 & wireless controller is 5760.

The Cisco 5760 WLC supports better QoS than other c
ontrollers, allowing prioritization of mission-crit
ical
applications:
●
The Cisco 5760 WLC supports four wireless hardware
queues and priority-based queuing compared to
software-based queuing in existing controllers.
●
The Cisco 5760 WLC follows MQC based commands, allo
wing usage of exact commands for configuring
QoS on different types of network devices.
●
The Cisco 5760 WLC supports QoS policies to be appl
ied in a hierarchical fashion with more granularity
per SSID per radio, while on the current controller
s granularity is per WLAN.
●
The Cisco 5760 WLC supports approximate fair bandwi
dth to make sure of fairness at client, SSID, and
radio levels for Non-Real Time (NRT) traffic. There
fore, if one user consumes excessive bandwidth, we
can
limit the amount of bandwidth that user receives an
d thereby not deprive other users.

QoS bandwidth rate limit don't work

Hello
Buy a router RV120W, and one of the reasons is limit of bandwidth (QoS). I set up a profile of 1-256 kbps limit, and apply it to the only VLAN that is configured, but does not work and can navigate using the full bandwidth of the internet connection. My firmware version is 1.0.2.6
Screenshots attached
thanks
screenshots attached

Struggling with a similar issue:
the setup: internet adsl <--1mbs--> combined router/modem <--100mbs--> RV 120W
Internet speed is 1mbs. I want to priotize voip calls (via port) and deprioritize one machine (doing downloads). rest of the network should have something in between.
Firmware upgraded to 1.0.3.10
I created the profiles bindings, then in QoS settings, selected Priority, Wan total bandwidth 1mbs, and distributed my profiles onto low/med/high (10/31/61).
When what should be low is downloading, it gets the whole 1mbs and the other are dead slow.
Changed to rate limit, changed the parameters, etc... no more luck.
Can you please shed some light as how to configure this - in my case, the whole bw of wan is being used, and prioriization is not happening,
Rgds

Bandwidth Rate-Limit -w- WWR-Queue

How would one convert a layer-2 port's "switchport rate-limit" bandwidth statement, on a 6509 -w- WS-X6748-SFP ports, to a routed/layer-3 "wrr-queue" bandwidth statement policy? Basically trying to hard-core the port's speed to 20MB. Current/tested layer-2 port bandwidth setting:
rate-limit input 20000000 5000 5000 conform-action transmit exceed-action drop
rate-limit output 20000000 5000 5000 conform-action transmit exceed-action drop
Got lost in how to use/configure all WRR's four queues... just need to limit the port's bandwidth to 20MB. Any suggestions would be appreciated.
Thanks, Kevin

1) Enabled QoS globally...
2960(config)#mls qos
2) Configure an ACL to define the matched traffic...
2960(config)#access-list 111 permit ip any any
3) Configure a class map for the matched traffic...
2960(config)#class-map traffic
2960(config-cmap)#match access 111
4) Configure a policy-map to define action...
2960(config)#policy-map Control
2960(config-pmap)#class traffic
2960(config-pmap-c)#police 10000000 8000 exceed-action drop
5) Attached the policy-map to the interface.
a) Example
-In this case, I'll attach the policy map to port_1....
2960(config)#int fa0/1
2960(config-if)#service-policy input Control
>>>>>> This will rate-limit traffic coming from the PC

Bandwidth Management(Rate Limit) Using QoS Policies

Hello,
I need some advice. We have an ASA 5525 running version 8.6(1)2 and a 10 MG pipe. I have execs that want to limit bandwidth on users for stuff like youtube, stream media, and downloads. I found the article on ‘Bandwidth Management(Rate Limit) Using QoS Policies’ so it appears our firewall can do what we want. I’m not a cisco person. My knowledge is limited when it comes to configuration – that’s why we have SmartNet :). The advice I need is what to ask for, so to speak, when I put a case in. Can bandwidth be limited on end users and/or can they limit the ‘bandwidth rate limit’ to just youtube, steaming media, and downloads? If so, what should the limit be? and I’m assume this would be for ‘incoming’ traffic only? we’re running into some bandwidth hogs – usually youtube and/or streaming media. We have a Barracuda web filter which we’ve used to block and monitor activity but I simply do not have time to babysit this all day. I should also mention we do have critical data running up and down the pipe; such as credit card processing, DB replication between in house DB and hosted website, TPCx and EDI, FTP, and such that we don’t want restricted.
Need input please,
Thanks,
D

Hello,
That's a question that you as the network admin of that organization could answer.
How much traffic for business purposes must travel via HTTP/HTTPS?
How much bandwith are you willing to provide to this 2 protocols?
Those are the kind of answers you need to answer before setting the number
Regards
Remember to rate all of the helpful posts, Just click the 5 stars at the left of each post
Julio

Service-Policy Or Bandwidth Rate Limit for IP

Hii Netpros,
Is this possible to configure the Service Policy(for Bandwidth) or Bandwidth Rate Limit for Single IP. For eg: If we want to configure the Service Policy(for Bandwidth) or Bandwidth Rate Limit of 2Mb for only IP " 10.10.10.3" on network i.e the Host or device which is configured with this IP can access upto 2Mb only.
Actual Network :-   We need this to configure this for wireless customers, Actually we have created one Vlan 2 (IP:- 10.10.10.1/29 @ our end router) , 10.10.10.2 on Basestation wiresss device (Vlan 2 allowed on this wireless device) and this wireless device is working as point to multipoint wireless. i.e 2 or more then 2 wireless customers or last mile will connect to this basestation wireless. Wireless customer-1 is 10.10.10.3 (2Mb bandwidth) and Wireless Customer-2 10.10.10.4 (512Kb).
Hence we require to limit the bandwidth for this 2 wireless customers having different bandwidth. how to acheive & control bandwidth @ our end router for them. please suggest.
Thanks

This topic is probably better suited in another Infrastructure forum, but I suppose it depends on which features are supported by your Cisco hardware and software. This doc discusses a variety of options:
http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfpolsh.html
For example, with the older CAR (committed access rate) approach:
interface FastEthernet5/0
     rate-limit input access-group 101 20000000 [normal burst size] [excess burst size] conform-action transmit exceed-action drop
     rate-limit input access-group 102 5120000 [normal burst size] [excess burst size] conform-action transmit exceed-action drop
access-list 101 permit ip 10.10.10.3 0.0.0.0
access-list 102 permit ip 10.10.10.4 0.0.0.0
You can observe CAR in action with "show interfaces fa5/0 rate-limit" for example.

High cpu - Rate-limit cisco 6500

Hello,
my device is cisco 6509.
Explanation of the case:
Received to interface vlan (L3) 600M traffic (configured with Rate limit - 50 M).
Result :
1. 100 % cpu
2. the traffic was limited to 50M
How can I prevent High Cpu in this situation ?
Thanks.

I would suggest opening a case, or asking in a different forum. This form is for discussion about existing bugs for which a bugid has been identified.

High Bandwidth Voltage Input Isolation

Hello,
I'm using the NI 6025E DAQ board and connect it through the SC2050 conditioning board to an analog I/O board, 5B01. I would like to isolate between the board and an analog signal coming out of of a DUT unit, and I need the isolation unit to be able to handle signals of Mghzs bandwidths.
I realize that I cannot find a 5Bxx unit with such high BW, but what do you recommend I should do instead ?
Michael.

Hello Michael,
I see that you are looking for an isolation module to connect to your 6025E device that has a bandwidth in the MHz range. Unfortunately, I think this type of setup will not work for you since the 6025E has a maximum sampling rate of 200kHz. If you need to be able to sample data in the MHz range you will need to have a device that can sample much faster (i.e. High Speed S-Series or NI-Scope products).
Typically you do not see much signal conditioning for these types of devices since they have such a high bandwidth. For example if you look at our SXCI isolated analog input modules they have a bandwidth of just over 20kHz.
I hope this helps. If you have any additional questions can you please give us a little more information about the signal coming from your DUT (i.e. voltage and frequency range and what type of isolation you are looking for)?
Regards,
Jesse O.
Applications Engineering
NIC
Message Edited by Jesse O on 10-17-2006 10:44 AM
Jesse O. | National Instruments R&D

Configuring rate-limit in switch 6500

Good morning gentlemen
Consider a 6509E (supervisor 720 3B) switch with many interface VLANs configured, one of each related to each customer. Each interface VLAN had configured a rate-limit input and output configured representing the maximum bandwidth permitted for the customer.
I could configured that way using the old IOS s72033-ipservicesk9_wan-mz.122-18.SXF7.
Last weekend I had to upgrade that IOS to s72033-ipservicesk9_wan-mz.122-33.SXJ7. All rate-limits in VLAN interfaces disappeared, probably not supported in this new version.
Now, what's you recommendation to perform the same in this IOS version?...I only found the policy-map/service-policy way.
Follow my questions:
1 - "mls qos" is globally disabled. Should I configure globally or by interface VLAN?... Expected any impact?
I believe that only need "police" for QOS. No need for any other kind of QOS.
2 - Should I enable "mls qos vlan-based" for each physical layer 2 port connected to that switch related to each interface vlan with police?
Expected only one physical port (or port-channel) for each customer (and each VLAN) connected to a switch.
Thank you and regards
Christian

Interesting that I have just upgraded the IOS to the last version 12 release.
I think that for the reason that we are facing high CPU usage for "IP Input" process, something related to mls/cef is not tunned.
Anyone has any idea regarding the configuration presented?
Regards
Christian

Rate-limit Burst explanation

Hi All - I need your help to understand the Burst value in the Rate-Limit
Example: rate-limit input access-group 101 20000000 24000 32000
I understand the above configuration limit the traffic to 20Mbps. How to calculate the Burst-Normal (as per example above 24000 Bytes) and Burst-Max(as per above example 32000 Bytes). What is the logic for arriving the Burst-Normal & Burst-Max?
Thanks in advance
SAIRAM

Hi Sairam,
below are definitions of few terms which are involved here
CIR : committed information rate, in bits per second, defines the rate defined in the traffic contract.
Tc : Time interval,measured in miliseconds, over which the committed burst (Bc) can be sent.
Bc : Committed burst size,measured in bits. This is the amount of traffic that can be sent over the interval Tc.
Be : Excess burst size, in bits. This is number of bits beyond Bc that can sent after a period of inactivity.
Formula to calculate Bc is
Bc = CIR*Tc
Now to understand Bc and Tc, say suppose you have applied 20mbps rate-limit on a 100mbps fastethernet link. Now link can send data (bits) with clock-rate only which is 100mbps so to achieve 20mbps rate on that link router needs to send traffic for 1/5th of a sec and remain idle for 4/5th of a second. 1/5th of sec is 200 msec. If router will send traffic for 200msec and not sending traffic for next 800msec, it can achieve rate of 20mbps but a packet arrived at 199th sec will need to wait for 800msec and this will add unnecessary latency to the packet. To avoid this, router sends few bits for short duration and then does not send for some duration. For the period it sends traffic is called Tc value. and the number of bytes it can send during that interval is called Bc value. So CIR = Bc/Tc (bits per interval).
Now we dont have option to configure Tc but we can configure CIR and Bc, and Tc will automatically be calculated. If we do not configure Bc then router takes default Tc of 125ms and calculates the Bc.
What value to choose for Bc
If we configure Bc too large then Tc will go high for same CIR and this may cause delay or jitter for delay sensitive traffic. For delay sensitive traffic cisco recommends to have Tc 10ms or less.
If i calculate Tc in the given example, it is coming as 9.6ms which is close to 10ms that is why Bc is set as 24000.
Tc = Bc/CIR
= 24000(bytes)/20000000(bits/sec)
= 192000(bits)/20000(bits/ms)
= 192/20
= 9.6 msec
Now Be is to give extra bandwidth for small interval(Tc) to cater some bursty traffic. Assume there is a bucket which gets filled with Bc amount of token in every Tc interval and router can send traffic if there is sufficient amount of token available in the bucket, equal to the packet size. After forwarding packet router reduces same amount of token from the bucket. Size of bucket is also equal to Bc which means if there is no traffic for Tc interval, bucket can not hold more token. Be is to increase the size of bucket to (Bc + Be). Now in every Tc interval bucket will be filled with Bc token and if there is a period of inactivity then in next interval bucket can be filled with extra Bc amount of token till it reaches to (Bc + Be) and if there is any bursty traffic (more than Bc) same can be adjusted. So for a very small period router may send traffic with more rate (higher than CIR, since sending Bc+Be in Tc interval) but over a period does not cross CIR.
You can also use below "Ask the expert" event for QoS to further queries related to QoS.
https://supportforums.cisco.com/discussion/12259571/ask-expert-quality-service-qos-cisco-ios-routers
Please dont forget to rate post if it has been helpful.
Regards,
Akash

How to rate-limit different IP's entering/leaving an Interface?

Hi There,
We are an ISP and have an interconnect with say Provider A. Customers of ours use Provider A for layer 2 and us for Layer 3 (IP/Internet).
Customer #1 to #100 --- (10Mb) --> Provider A ---> ISP ---> Internet
We'd like to rate limit some customers to 2mb/sec (in/out) on our end because at present they have a 10mb/sec connection coming from Provider A.
The config we use to peer with Provider A is this:
interface GigabitEthernet0/1.120
description Interconnect with Provider A
bandwidth 400000
encapsulation dot1Q 120
ip address A.B.C.1 255.255.255.252
Customers of ours are simply routed out through this interface like so:
Customer #1:
ip route W.X.Y.Z. 255.255.255.255 A.B.C.2
Customer #2:
ip route J.K.L.M 255.255.255.255 A.B.C.2
Is there a way to rate limit both these customers without needing to create a separate class map for each like so:
class-map match-all CUSTOMER-1-2MB
match access-group name ACL-CUSTOMER-1
class-map match-all CUSTOMER-2-2MB
match access-group name ACL-CUSTOMER-2
policy-map POLICY-RATE-LIMIT
class CUSTOMER-1-2MB
police 2000000 375000 750000
class CUSTOMER-2-2MB
police 2000000 375000 750000
interface GigabitEthernet0/1.120
service-policy input POLICY-RATE-LIMIT
service-policy output POLICY-RATE-LIMIT
I've done this in the lab and I know it works, so Customer #1 ends up with 2mb/sec and Customer #2 gets 2mb/sec too.
But in production, I'm talking about 100's of customers which we simply route out of this interface. I can't imagine having to configure 100's of class maps and policy maps for each customer to rate limit them to 2mb/sec like in the config above.
Is there a better way to do this on the router???
Thanks.
Andy

Hi All,
Doing what Laurent suggested works great. We are able to rate-limit the desired customers by having a separate class-map for each customer that needs to be rate limited under the single policy-map.
But now we're finding that the CPU utilization has increased by 20% because of this.
We're pushing about 400M through this interface and rate limiting 7 customers on it.
Given the large traffic flow through this interface (400M), is it common to see an increase in CPU utilisation by 20%???
When we take the service-policy off the interface, sure enough the CPU drops by 20%.
Here's the MQC applied:
interface GigabitEthernet0/1.120
bandwidth 400000
encapsulation dot1Q 120
ip address 203.17.x.x 255.255.255.252
ip flow ingress
service-policy input RATE-LIMIT
service-policy output RATE-LIMIT
class-map match-all CLASS-TCS-200338
description Customer #1 rate limited to 4mb/sec
match access-group name ACL-TCS-200338
class-map match-all CLASS-TCS-200208
description Customer #2 rate limited to 2mb/sec
match access-group name ACL-TCS-200208
class-map match-all CLASS-TCS-205593
description Customer #3 rate limited to 3mb/sec
match access-group name ACL-TCS-205593
class-map match-all CLASS-TCS-205679
description Customer #4 rate limited to 4mb/sec
match access-group name ACL-TCS-205679
class-map match-all CLASS-TCS-200441
description Customer #5 rate limited to 4mb/sec
match access-group name ACL-TCS-200441
class-map match-all CLASS-TCS-200005
description Customer #6 rate limited to 2mb/sec
match access-group name ACL-TCS-200005
class-map match-all CLASS-TCS-205560
description Customer #7 rate limited to 4mb/sec
match access-group name ACL-TCS-205560
policy-map RATE-LIMIT
class CLASS-TCS-200005
police 2000000 375000 750000 conform-action transmit exceed-action transmit violate-action drop
class CLASS-TCS-200208
police 2000000 375000 750000 conform-action transmit exceed-action transmit violate-action drop
class CLASS-TCS-200441
police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
class CLASS-TCS-200338
police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
class CLASS-TCS-205679
police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
class CLASS-TCS-205560
police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
class CLASS-TCS-205593
police 3000000 562500 1125000 conform-action transmit exceed-action transmit violate-action drop
Is this the correct behaviour of applying the service-policy to the interface whereby the CPU increases by 20% or can the MQC be fine tuned to have less of an impact on the CPU?
Is the router just overloaded, taking into account it's only pushing about 400M? Should it be able to do more than this??
Thanks.
Andy

WLC 5508 and Anchor/GuestNet rate limit traffic?

Running WLCs 5508s 7.0.116.0 with GuestNet and Anchor setup, how can I limit the bandwidth on the GuestNet SSDI to 2 Mbps, etc?
The DMZ WLC (Anchor) runs thru a ASA 5508 7x, can I rate limit traffic via ASA?

That's really a matter of preference. This document describes things to keep in mind when altering these QoS profile configurations, FYI.
http://www.cisco.com/en/US/partner/docs/wireless/controller/7.0MR1/configuration/guide/cg_controller_setting.html#wp1254532
It really depends on how many guests, what type of traffic, etc, to make a judgement call as to where you should set these. I'm sorry but I don't have any examples from existing configurations, but hopefully the document explains how to best alter these settings.

WLC user rate limit on guest ssid anchor controller

Hi,
I have been looking through the forums & some cisco documents but not found a good example similar to what I am seeking to do so now I am turning to the expertise of my peers.
We have been deploying 3502 APs remotely to locations with full T1s that backhaul to where I sit at HQ.
Both the foreign and anchor controller are here at my location.
I am seeking to rate limit per user the bandwidth each client will get on the guest internet ssid.
As you know this traffic is encapsulated in capwap between the AP and the controller so I cant use a standard ACL on the switch or router.
We are trying to keep the guest internet access usage in check on the T1 at any given site so the other ssid's & local lan traffic is not overly competing for the bandwidth.
I found the place to edit the default profiles in the controller but the documentation really isnt clear on best practices.
So I put it to you my fellow wireless engineers to suggest how you are implementing bandwidth management on your wireless guest internet.
Thanks guys!
Oh and here is my hardware & software levels.
5508wlc - forgeign
4402wlc - anchor
Software Version
7.0.230.0

Amjad,
Thank you for taking the time to respond as well as the document link.
It was pretty clear on the steps and what it would impact.
Two things that push me for a different solution (assuming their is one).
Note The values that you configure for the per-user bandwidth contracts affect only the amount of bandwidth going downstream (from the access point to the wireless client). They do not affect the bandwidth for upstream traffic (from the client to the access point).
As you can see from the above note taken out of the linked document the roll based rate limit doesnt really rate limit the T1 traffic any guest user consumes it only limits usage from the AP down to the client.
#1 I am looking for a solution that limits the users up & down streams (if possible) & also before it leaves the AP for the T1.
The idea is to limit WAN utilization.
#2 I read in the forums here others asking about the "user role" and saw some comments saying it is not considered "best practice" to use user roles.
Let me clarify that our guest ssid's are using the http webpage pass through for authentication and it is really only the tic mark to indicate they understand the terms and conditions of using our internet as a guest service. No actual user accounts are used on the guest ssid's.
***One last question about this and any other changes***
Will any change I make be on the "Foreign, Anchor" or both Controllers?

Rate-limit command 3560 does it exist?

I have just come across a command in my router IOS which might be useful too me. I was wondering if the following command is available on a 3560 Switch. I don't see it on my 3550 but the IOS is quite old. I don't have a 3560 avaiable currently to check.
Config t > int vlan x > rate-limit input/output
does this exist on the 3560? I am also interest if it does in the Bits per second range and if available input/output.
Thanks for any help

Hello,
what kind of feature are you looking for?
CAR?
http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_command_reference_chapter09186a0080087f26.html#wp1037428
For command list check the following link:
Catalyst 3560 Switch Command Reference, Rel. 12.2(25)SEE
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/cr/index.htm
For QOS configs:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/scg/swqos.htm
If you need to rate limit traffic on an interface check:
Limiting the Bandwidth on an Egress Interface
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/scg/swqos.htm#wp1253412
Hope this help a bit,
if it does, please rate this post.
Vlad

Rate limit high bandwidth application

Similar Messages

Maybe you are looking for