Traffic Shaping - can't get it to work
Hi
I’m attempting to create a basic traffic shaping policy in a lab environment but I can’t seem to get it to limit the download rate?
I can successfully achieve this with policing. I am testing the speed restriction using a broadband speed testing website, policing is clearly impacting the download rate, this is not the case with shaping. Please see below the shaping and policing policies, which I am attaching in turn to the vlan1 interface outbound.
Further I have messed around with the below shaping policy and set a fixed cir as in the policing policy but it still has no impact on the download speed.
Finally class SLOW_PC under PM POLICE matches an ACL matching traffic to and from a particular IP address. The speedlimiter is matching all traffic
Policy Map speedlimiter(Shaping)
Class class-default
Average Rate Traffic Shaping
cir 1%
Policy Map POLICE
Class SLOW_PC
police cir 1048500 bc 32765
conform-action transmit
exceed-action drop
any help appreciated
Shaping and policing can both can be used for outbound traffic on an interface, but only policing can be used for inbound traffic. If you're trying to use shaping (which works by managing the queue) on inbound traffic (which has no manageable queue) it will have no effect. Policing is the only option in this case.
Similar Messages
-
Can't get it to work after 3 of them
I have had 3 of them I have the 3rd one here at my house but still can't get it to work. not sure what I am doing wrong. My sister has one and can't under stand why it will not work for me,. I really need one the service is not really good here.
Is your broadband Internet connection quality good enough to handle the additional load of a network extender along with your regular Internet traffic?
-
Hello,
Maybe I'm missing something elementary.. this is my first time trying this out and just can't get it to work.
I've got an xserve on a netgear smart switch on port 13. The netgear is hooked up to two different networks (204.x.x.x via port 1 and 128.x.x.x via port 2), and I have 2 VLANs setup on the switch (vlan 1 has port 1 and port 13, vlan 2 has port 2 and port 13).
The xserve's interface that's on port 13 has a 204 IP and works wonderfully on the 204 network. I then tried to setup a VLAN via sys prefs network and that appeared in the network configs list, and gave it a 128 address. However, even with all the right settings, it won't show up at all on the 128 network.
Is there something basic that I'm missing?Oh, thats not exactly what I meant
Basically:
The server serves Web and QTSS via 204 to the world via en0.
Then, there's 5-10 machines or so on 128 (and 1-2 on 204) that sync over 3TB of data to the machine via 128 (this sever is the only one we have on site that has raids hooked up to it, so its the central data storage so to say), so en1 is pretty much completely saturated between 12am and 8am (and during the day when there's a lot of new work going on). Originally we used to do this over the primary web interface and all the web traffic would suffer (and especially qtss... we'd start getting disconnected errors all over the place when we started up massive copies).
Half of the machines are 204's and the rest are 128's, which is why we want the ability for en1 to be able to talk locally to machines on either 204 or 128, without having to interrupt the main interfact (if that makes any sense). Does that seem like a sensical solution?
If it also helps visualize a bit:
I only have access to register 8 machines on the 204, and TONS on the 128, but im not allowed to serve .com traffic on 128. Technically, the 128 does talk to the 204 locally on location, but its done through a nasty switch and we dont see much higher than 10Mbps tops. -
Can't get VPN to work on RV220W
I am a home office user who bought a RV220W router for the speed advertised on smallnetbuilder. I am trying to set up the VPN but can't get it to work with the Quick VPN client. I am using dyndns to manage the dynamic IP and have entered that into the setup noted below. I can access the router remotely (remote administration) when enabled using the dyndns address so I know that is working.
IKE Policy Table
General
Policy Name: krafty001vpn
Direction / Type Responder
Exchange Mode: Aggresive
Enable XAUTH Client: None
Local Identification
Identifier Type: FQDN
FQDN: krafty001.dyndns.org
Peer IKE Identification
Identifier Type: Remote Wan IP
FQDN: krafty001.dyndns.org
IKE SA Parameters
Encryption Algorithm: 3DES
Authentication Algorithm: SHA-1
Authentication Method: Pre-Shared Key
Pre-Shared Key: xxxxxxxxx
Diffie-Hellman (DH) Group: Group 2 (1024bit )
SA-Lifetime: 28800 Seconds
VPN Policy Table
Add / Edit VPN Policy Configuration
Policy Name:
krafty001vpn
Policy Type:
Auto Policy
Remote Endpoint:
FQDN
krafty001.dyndns.org
NETBIOS:
Enable
Local Traffic Selection
Local IP:
ANY
Start Address:
End Address:
Subnet Mask:
Remote Traffic Selection
Remote IP:
ANY
Start Address:
End Address:
Subnet Mask:
Split DNS
Split DNS:
Enable
Domain Name Server 1:
Domain Name Server 2:
(Optional)
Domain Name 1:
Domain Name 2:
(Optional)
Manual Policy Parameters
SPI-Incoming:
SPI-Outgoing:
Encryption Algorithm:
3DES None DES AES-128 AES-192 AES-256 AES-CCM AES-GCM
Key-In:
Key-Out:
Integrity Algorithm:
SHA-1 SHA2-256 SHA2-384 SHA2-512 MD5
Key-In:
Key-Out:
Auto Policy Parameters
SA-Lifetime:
3600
Seconds KBytes
Encryption Algorithm:
3DES None DES AES-128 AES-192 AES-256 AES-CCM AES-GCM
Integrity Algorithm:
SHA-1 SHA2-256 SHA2-384 SHA2-512 MD5
PFS Key Group:
Enable
DH-Group 1 (768 bit) DH-Group 2 (1024 bit) DH-Group 5 (1536 bit)
Select IKE Policy:
krafty001vpn
Quick VPN Setip
User Profile: homevpn
User Name krafty001vpn
Password: xxxxx
Server Address: krafty001.dyndns.org
Port for QuickVPN: Auto
Any help in identifying what setup component I have configured incorrectly would be appreciated
ThanksI am not sure this will help but make sure the following is set correctly:
Currently VPN is somewhat broken on all versions of firmware of the RV220W including beta where VPN will ONLY negotiate on 443. If you are port forwarding 443 to a server or something else it will fail. You must allow the VPN to authenticate on 443. The router SHOULD be able to connect on 60443 as indicated on the QUICKVPN software however it doesn't this has been confirmed by a CISCO engineeer I have been speaking with regarding my VPN woes. Currently there is NO ETA on this fix.
But since you didn't mention if your 443 ports were being routed elsewhere I figured i would lay out that information here incase you where. Also I strongly recommend contacting Cisco Support for the beta firmware it makes the RV220W much better.
Also the reason for the update to the beta firmware it resolves the hair pinning problem which could also lead to VPN issues. -
I can't get iTunes to work properly on Windows 8
I can't get iTunes to work properly on Windows 8. I tried everything and iTunes is NOT compatible with Windows 8. There is either an iTunes issue or a Microsoft issue.
I finally got it to work right. Some files and folders (iTunes video files, etc) were referenced to my iTunes account, I copied from my backup (external) Hard Drive to my system Hard Drive. The only thing that can keep me from accessing my wish list for some time is a very heavy Internet traffic via iTunes players to iTunes Store. So everything is now NORMAL.
-
Have entrourage and want to use Mail. Can't get it to work.
I had a macbook and purchased the Microsoft office for Mac which included Entrourage.
I have now purchased a new macbook Pro and want to begin to use Mail rather than Entrourage.
I have Entrourage on my new computer but i can't get it to transfer my information to the the Mail program
I am on Charter.net at my office and sbcglobal.net at home.
How can i get this to work. I can receive on Mail, but i can't send.check your outgoing port settings and make sure it's using a specific port and not the default port, also you might want to check to see if it is using SSL, TLS or any other encryption. Verify the setting from your old machine setup.
-
got my password wrong twice and my mini is disable. I connected to iTunes, but can't get it to work. Can some one guide my through?
If it's showing the red disabled screen due to incorrect passcodes then you may need to put the iPad into recovery mode : http://support.apple.com/kb/ht1808 - you should then be able to reset the iPad via your computer's iTunes and restore/resync your content to it
-
HT1151 i have a new apple external dvd drive, and i can't get it to work with my iMac?
I have a new apple dvd drive, I was told it will work with my imac, but when i plug it in ...nothing... iv been for update... still nothing. How can i get it to work???
If it is this drive, note that it is for MBA's and Mini's only:
http://store.apple.com/us/product/MC684ZM/A
Ciao. -
Is there a way to reset my messages account, I can't get iMessage to work on IPad nor Mac osx. Help please this is really frustrating.
Hi,
Is there an iPhone involved ?
If not, what happens if you remove the Apple ID on the iPad and then set it in Airplane Mode (allow a couple of minutes at this point) followed by re-adding the Apple ID ?
What, if any error messages are appearing on the Mac when you try to launch the App or Login to the iMessages server ?
Is the Apple ID linked to an iCloud account ?
In Messages 7 (Mountain Lion) this did not seem to be important but it seems it is in Mavericks/Messages 8
9:14 pm Friday; April 11, 2014
iMac 2.5Ghz i5 2011 (Mavericks 10.9)
G4/1GhzDual MDD (Leopard 10.5.8)
MacBookPro 2Gb (Snow Leopard 10.6.8)
Mac OS X (10.6.8),
Couple of iPhones and an iPad -
I bought an IR receiver and an Apple Remote, and I can't get it to work. What am I doing wrong? The receiver is a Lenovo eHome OVU430006/01 USB IR Receiver.
Hello,
You would need to pair the Apple Remote with the receiver. So I would use the generic Mac/PC receiver and follow these instructions:
http://support.apple.com/kb/HT1619
If that doesn't work then check in System Profiler to see if the IR receiver has been recognized by the PowerBook's hardware. You may require the install of drivers for this device to be recognized.
Best of luck -
I have a go daddy email account and I can't get it to work on my iPad
I have a go daddy email account and I can't get it to work on my iPad
Try turning the email account off and then turn it on again. Settings>Mail, Contacts, Calendars>select your gmail account>Off. Go to the mail app and then come back to the account in the settings and turn it on again.
If you can't find any other way for the iPad to accept the password, delete the email account and then add it back onto the iPad. -
I have a Mac Mini and I can't get it to work with my Ricoh Aficio MP 161. Any ideas?
I have a Mac Mini and I can't get it to work with my Ricoh Aficio MP 161. Any ideas?
The latest Apple driver support begins with the MP 171.
Here is Ricoh's official driver download page specifically for the Afico MP 161. Note that new drivers for this device were released on Aug 2, and include Lion and Mountain Lion.
Hopefully, this will solve your device issues. -
Iphone 5 went black. Tried pushing on/off and circle at the same time. Worked yesterday and then did it again today. Can't get it to work.
You need to hold those button longer until you see the apple logo, then release, then wait for the phone to boot back up.
-
I just bought a new computer and had files transferred along with itunes to the new computer. I can't get it to work. It doesn't recognize the extensions for itunes. I also tried downloading Quicktime and couldn't get it to download.
iOS: Device not recognized in iTunes for Windows
I would start with:
Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7 -
I bought a DATAPILOT to transfer pictures to my macbook and can't get it to work. Any suggestions please?
Best if you try and explain what you are trying to acheive.
Iphoto is a different paradigm than you're used to. I don't understand why you are trying to transfer your edited photos back to an external disk.
There are tutorials here
http://www.apple.com/findouthow/photos/
Regards
TD
Maybe you are looking for
-
I have an older iMac (3.06 GHz Intel Core i3). I currently have 3 external firewire 400 drives daisy-chained to it. I use a 800 to 400 adapter on the back of the iMac to convert from 800 down for my drives. I was just looking at OWC and considering a
-
Help ?
-
Can you collect emails on iweb
I am looking to set up on the website a page that people can subscribe their email to. I want to be able to add them to our company data base. Does anyone know how to do this? Thx
-
Hi, I have transferred the report from the APPS server in Binary mode to my local machine, when I open the report and add any columns even a dummy column the report no longer compiles I get a no plsql translation for the bindtype given for this bindv
-
"The Directory Service is Busy." Error Message When Trying to Rename PCs on AD 2012 R2 Domain
As the title says, I'm trying to rename some existing PCs on a Windows 2012 R2 Active Directory domain, but I keep getting the error: The Directory Service is Busy. The command I am using is: netdom renamecomputer <OLD_NAME> /newname:<NEW_NAME> /ud:D