Policing / Shaping

From: Antonio Soares (amsoares@netcabo.pt)
Date: Mon Mar 26 2007 - 14:05:32 ART


Hello GS,

I need to solve a real task in my company: limit trafic to the Internet to
2Mbps inbound/outbound and block all peer-to-peer traffic. My policy is:

!
class-map match-any peer-to-peer
 match protocol edonkey
 match protocol kazaa2 file-transfer "*"
 match protocol fasttrack file-transfer "*"
 match protocol gnutella file-transfer "*"
!
!
policy-map QoS-Out
 class peer-to-peer
   drop
 class class-default
  shape average 2000000
policy-map QoS-In
 class peer-to-peer
   drop
 class class-default
   police 2000000
!

Decided to shape outbound and policy inbound.

Then i applied this to the Interface connected to the Internet. Do you
aggree with my configuration ?

Strange or not it seems edonkey/emule are still able to download/upload. My
policy says drop so what's happening ?

Thanks,
Antonio



This archive was generated by hypermail 2.1.4 : Sun Apr 01 2007 - 06:35:53 ART