Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a 6509 with ~1000 user machines in different vlans, I want to allow 10 servers to send as much as they can/want but to limit all client machines from all subnets to have a sending rate limit of 1Mbps with no receiving limitation.

It is worth noting that all my ip addresses are assigned using a DHCP server and there are 1000 of them so I can not write ACLs for every address seperately.

Can any one provide some kind of help please?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

If each user is on their own port, Google "cisco rate-limit inbound".

Need fancier? Look into microflow policing and user-based rate limiting.

share|improve this answer
    
Dear Paul, No as I said there are 1000 user machines and just 10 active ports. hence, users a department share their uplink to this switch. –  Hosm Feb 22 '11 at 0:32
    
I have already read the links you've provided. both require me to specify all the flows explicitly requiring 1000's of acls to be written. I need something like IntServ to configure the switch to accept 1Mbps from any IP address regardless of port, vlan, etc. –  Hosm Feb 22 '11 at 0:36
    
Dear Hosm, please check again the last example ("Bidirectional UBRL") at bottom of cisco.com/en/US/prod/collateral/switches/ps5718/ps708/… Each student is limited to 1Mb without per-IP ACLs. Only one ACL per direction. You want one direction only, so you will need only one ACL with several permit lines: one for each of your source subnets. If your servers are in the same subnet(s), be sure to deny their host IPs before permitting their subnet(s). I can add an example if you like. –  Paul Feb 22 '11 at 1:12
    
Also, Netflow Data Export can interfere w/microflow policing on the 6500, so you may need to choose between them. See supportforums.cisco.com/docs/DOC-5630 –  Paul Feb 22 '11 at 1:20
    
Thanks Paul, I had not noticed it. Many thanks for your help. –  Hosm Feb 22 '11 at 22:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.