Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 491
  • Last Modified:

Traffic shaping on internal network for access to the internet

Hello

I have an internal network with about 100 users. They connect to a bunch of dumb switches that connect to a PIX 506E that does NAT for them, and afterwards the PIX connects to a 3mbit MLPPP line connected to a Cisco 1721 router.

I need to limit users internet access speed. i.e. 64kbits / sec. per user. I also need to be able to limit the traffic on an application / port basis when necessary. i.e. give priority to port 80 applications.
How would I do that? Would the PIX box be able to do all of these if I upgrade the OS? Or do I need a different solution?
0
eggster34
Asked:
eggster34
1 Solution
 
Sean64Commented:
It's fairly easy to use Class Based Weighted Fair Queuing to accomplish the priority part.  However most Cisco routers are not capable of the speed limit function you are describing.  It's called User Based Rate Limiting.  You need a much more powerful switch to perform this function.  i.e. 6500 or I believe that 4500s also support this with the proper software revision.
Those devices can cost anywhere from 10k to 100k depending on the features.
0
 
lrmooreCommented:
Given what you've described, I'd say your best bet would be a Proxy. Most proxies will allow you to limit bandwidth by user. The dumb switches, nor the PIX by itself can do this in any way. Not even the latest 7.21 PIX OS will do this.
I recommend a simple appliance like the iPrism http://www.stbernard.com/iPrism
Get a demo unit and you'll be impressed. Inexpensive, hardware is included, super easy set up and very fine grain control over users. Excellent reporting, too.
0
 
knightrider2k2Commented:
ISA and iPrism are great for the job. But if you are looking for something inexpensive, then try MonoWall. It is a linux based firewall and has traffic shaping features.

http://m0n0.ch/wall/
0
 
eggster34Author Commented:
lrmoore , are you sure this iPrism does traffic shaping  as well?
0
 
lrmooreCommented:
Yes, it does. 100% sure based on users, IP's, subnets, etc..

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now