at a layer 3 interface you can rate-limit it to the certain value...
interface FastEthernet0
rate-limit input access-group 111 64000 8000 8000 conform-action transmit
exceed-action drop
or most modern MQoS, where you can match a certain class of traffic and
police to the desired Cir Once it is entering the interface.
Or you can Match all traffic and police it too.
policy-map POLICE
class class-default
police cir 64000
exceed-action drop
interface FastEthernet0
service policy input POLICE
2008/3/7, Chamara Peris <dimsyboy@xxxxxxxxx>:
>
> Thanks Guys,
>
> I want to allow traffic to a certian figure then if it exceeds drop.
>
>
> Cheers,
> CP
>
> On Sat, Mar 8, 2008 at 12:03 AM, Eric Leung <eric.lwc@xxxxxxxxx> wrote:
>
> > Hi Chamara,
> >
> > You can try shaping the traffic to a certain value. Please take a look
> on
> > Class-based Shaping and Protocol Discovery in IOS.
> >
> > Cheers,
> > Eric.
> >
> > 2008/3/7, Chamara Peris <dimsyboy@xxxxxxxxx>:
> >
> > > Hi Guys,
> > >
> > > What's the best way to limit incomming traffic to a certian port
> > > (HTTP,SMTP). Is it using policy shaping?
> > >
> > >
> > >
> > > Internet -----><--------> FA0/0 101.10.10.10 [Router] FA0/1
> > > 66.11.11.11------> Web/Email server
> > > 66.11.11.12
> > >
> > > Regards
> > > Dimsy
> > >
> > >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
