use virtual templates for per user rate limits on a lan?

May 28, 2006 1 Replies

Hi all, can virtual templates be used to set rate limits per source ip on an ethenet interface?



ie) no use of pppoe, simply spawing new subinterfaces for all hosts using an ethernet interface on a cisco router and then applying rate limits to the subinterfaces?



Hi,

This is exactly what i do for users, currently have around 300 users terminating on a 7206VXR.

Example config is as follows:

Set DHCP Pool for customer (IP addresses are usulally public /30 addresses.)

ip dhcp pool Customer_Name network 192.168.100.0 255.255.255.252 default-router 192.168.100.2 dns-server 202.92.65.254 202.92.65.252

Create inbound and outbound limits :

policy-map 2Mb_police class class-default police rate 2048000 bps

policy-map 2Mb_shape class class-default shape average 2000000

Setup Sub-Interface for each client: interface GigabitEthernet0/1.149 description Customer_Name encapsulation dot1Q 149 ip vrf forwarding VRF_to_Internet ip address 192.168.100.1 255.255.255.252 ip verify unicast source reachable-via rx service-policy input 2Mb_police service-policy output 2Mb_shape

Regards

Darren

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required