123ArticleOnline Logo
Welcome to 123ArticleOnline.com!
ALL >> Web-Design >> View Article

Traffic Policing On 3750 Switch

By Author: Lili router
Total Articles: 4

We have a Cisco 3750 WS-C3750V2-48TS-S WS-C3750V2-48TS-S
switch and an ASA. The ASA has 100Mbps bandwidth from ISP and it has two ports connected to the switch (inside and outside). 100 users are behind this ASA to access internet. What we want to achieve is to throttle the download rate for these 100 users to 70Mbps and retain the rest of the 30Mbps for other services.

Ideally I should do the traffic shaping/policing on the switch for the outside interface outbound direction. But according to Cisco article, 3750 series only allows to do the traffic shaping/policing on the inbound traffic not outbound. My question is:

If I do the traffic shaping/polcing on the switch for inside interface ingress direction, will it also work?

Litterally it shouldn't work because it only restrict the rate between users (LAN) and the ASA inside interface. However, does TCP protocol know how to adjust the rate to avoid too much packets being dropped before it goes to the inside interface? So the rate between ISP and the ASA outside can also be shaped? It's something related to TCP congestion theory I think. Anyone ever tested this in your environment or do you have other suggestions?

My configs:

access-list 101 permit ip any any

class-map match-any RSP_ASA_Class
match access-group 101

policy-map RSP_ASA
class RSP_ASA_Class
police 70000000 1000000 exceed-action drop

interface GigabitEthernet2/0/11
description ASA-INSIDE
service-policy input RSP_ASA

The policy will throttle the traffic by dropping packets that violate it. TCP is designed to account for packet loss though, so it will retransmit. The combination effectively limits speeds when shaping isn't an option. It's standard practice when dealing with incoming traffic.

Shaping is better than policing, but can only be done outbound. It gives the device the option of queuing packets rather than just dropping them like policing does. The ASA can do it, but not selectively.

It doesn't look like shaping WS-C3750V2-24TS-S WS-C3750V2-24TS-S is going to be an option here, so falling back on policing and relying on TCP's retransmission mechanism will work well.

Total Views: 112Word Count: 328See All articles From Author

Web Design Articles

1. Know Why Should You Hire A Dedicated Freelance Php Developer?
Author: John Matthew

2. Benefits Of Professional Web And Android Development For Business
Author: Abdul Khadir

3. How To Create A Successful Campaign With Ppc Services
Author: Steven M. Eddy

4. Seo Packages: Ensure Maximum Traffic To Your Website
Author: Steven M. Eddy

5. Stz Soft Talks About Web Design Strategies To Develop Your Business Rapidly
Author: Aiden Adey

6. Now This Is Why You Need A Professional Web Designer!
Author: Pooja Dagar

7. Web Design Trends For 2019
Author: Mars web

8. Cloud Based Accounting Software In India
Author: Mr Raja Shanmugham

9. Local Seo: Clever Tips To Dominate The Local Search
Author: Surabhi Joshi

10. Logo Design: The Face Of A Company
Author: Aiden Adey

11. Quora Marketing: See How It's Done The Right Way!
Author: Surabhi Joshi

12. Web Design And Development Services – Reclaim Digital
Author: Reclaim Digital

13. Why Website Designs Are The Secret Ingredient
Author: brainwavesindia

14. Stz Soft Thinks That Graphic Design Plays An Essential Role In Today's Modern Technology
Author: Aiden Adey

15. Important Points To Keep In Mind While Using Plugins For Your Website.
Author: Deepak Bhardwaj

Login To Account
Login Email:
Password:
Forgot Password?
New User?
Sign Up Newsletter
Email Address: