Cisco ASA Bandwidth Limiting by IP Address

Posted on 2009-04-22
Last Modified: 2013-11-16
My roommate loves to share files and hog all the bandwidth (8MBd/1MBu cable modem). When this happens, the rest of the network is severely slowed down. Is there a way to limit bandwidth by IP address (please don't link the Cisco QoS documents)? Such as, all traffic on IP can only use 512Kb/s max up/down? I cannot go by ports as the file sharing software uses all the ports it can find. I am not a Cisco programmer so any step-by-step explanations would be great.
Question by:MPMPDave
    LVL 29

    Accepted Solution


    Author Comment

    Very cool, I'll try it- but, do you think that this will work with any traffic such as instead of a specific host?
    LVL 1

    Expert Comment

    The policing and priority queuing that you configure in the cisco accepts almost any form of filtering.  You can filter based on ip, port, types of traffic and services.  It also accepts access lists so anything you can put into an access list you can use to restrict bandwitdh for.

    so you will have 3 or more parts to this
    part 1 is the access lists containing the ip addresses you want to apply this to
    part 2 is the class map, where you associate your access list with a class map group
    part 3 is the policy-map, where you associate your class map with what you want to do with the traffic, in this case limit the bandwitdh.
    Then finally you apply the policy-map to an interface (namely your LAN interface) so it knows what port to watch for traffic on.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
    This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now