Re: Limit incomming traffic

From: Carlos Alberto Trujillo Jimenez (carlos.trujillo.jimenez@gmail.com)
Date: Fri Mar 07 2008 - 19:12:07 ARST


at a layer 3 interface you can rate-limit it to the certain value...

interface FastEthernet0
  rate-limit input access-group 111 64000 8000 8000 conform-action transmit
exceed-action drop

or most modern MQoS, where you can match a certain class of traffic and
police to the desired Cir Once it is entering the interface.
Or you can Match all traffic and police it too.

policy-map POLICE
 class class-default
  police cir 64000
    exceed-action drop

interface FastEthernet0
  service policy input POLICE

2008/3/7, Chamara Peris <dimsyboy@gmail.com>:
>
> Thanks Guys,
>
> I want to allow traffic to a certian figure then if it exceeds drop.
>
>
> Cheers,
> CP
>
> On Sat, Mar 8, 2008 at 12:03 AM, Eric Leung <eric.lwc@gmail.com> wrote:
>
> > Hi Chamara,
> >
> > You can try shaping the traffic to a certain value. Please take a look
> on
> > Class-based Shaping and Protocol Discovery in IOS.
> >
> > Cheers,
> > Eric.
> >
> > 2008/3/7, Chamara Peris <dimsyboy@gmail.com>:
> >
> > > Hi Guys,
> > >
> > > What's the best way to limit incomming traffic to a certian port
> > > (HTTP,SMTP). Is it using policy shaping?
> > >
> > >
> > >
> > > Internet -----><--------> FA0/0 101.10.10.10 [Router] FA0/1
> > > 66.11.11.11------> Web/Email server
> > > 66.11.11.12
> > >
> > > Regards
> > > Dimsy
> > >
> > >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue Apr 01 2008 - 07:53:52 ART