use virtual templates for per user rate limits on a lan?

use virtual templates for per user rate limits on a lan?

Post by spec » Tue, 30 May 2006 04:38:16


Hi all, can virtual templates be used to set rate limits per source ip
on an ethenet interface?

ie) no use of pppoe, simply spawing new subinterfaces for all hosts
using an ethernet interface on a cisco router and then applying rate
limits to the subinterfaces?
 
 
 

use virtual templates for per user rate limits on a lan?

Post by Darren Smi » Tue, 30 May 2006 07:53:38

Hi,

This is exactly what i do for users, currently have around 300 users
terminating on a 7206VXR.

Example config is as follows:

Set DHCP Pool for customer (IP addresses are usulally public /30 addresses.)

ip dhcp pool Customer_Name
network 192.168.100.0 255.255.255.252
default-router 192.168.100.2
dns-server 202.92.65.254 202.92.65.252

Create inbound and outbound limits :

policy-map 2Mb_police
class class-default
police rate 2048000 bps

policy-map 2Mb_shape
class class-default
shape average 2000000

Setup Sub-Interface for each client:
interface GigabitEthernet0/1.149
description Customer_Name
encapsulation dot1Q 149
ip vrf forwarding VRF_to_Internet
ip address 192.168.100.1 255.255.255.252
ip verify unicast source reachable-via rx
service-policy input 2Mb_police
service-policy output 2Mb_shape

Regards

Darren