Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a number of servers that I rent out to people and have started growing to a point where I need better management. Specifically I am interested in being able to police bandwidth and block port 25 outgoing totally. All I have right now in my infrastructure is a Catalyst 3500XL. I don't want to break the bank and would love any suggestions on some decent cheap hardware solutions for allowing me to:

  1. Block Port 25
  2. Set a Specific Bandwidth Right 1MB but allow people to use more if available
  3. Set an overall bandwidth CAP
  4. Have SNMP so I can monitor via Cactai what is going on in the network
share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

You need a firewall with traffic shaping capabilities to do what you're asking -- the Catalyst 3500 switches, while quite capable, aren't up to this kind of task.

You can consider building your own firewall using a server and something like pfSense (which is more than adequate for small environments and very budget-friendly), or investing in commercial solutions from Cisco or Juniper Networks.

share|improve this answer
    
To expand upon my answer a bit - you also probably want to consider breaking your environment into vlans if you haven't already (this will let you monitor traffic per-customer relatively easily & apply other network-level restrictions) –  voretaq7 Jan 21 '11 at 18:09
    
Any hardware firewall that I can buy say under $500 that you think will do the job? –  Al Katawazi Jan 21 '11 at 19:04
    
You can certainly buy or build a server with at least 2 NICs for under $500, and pfSense is free... –  voretaq7 Jan 21 '11 at 19:40
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.