Cisco PIX 525 and traffic shaping / policy options

Dear Expert,

I am using a Cisco Pix 525 ver 8.0.4 to access the internet from my company.
I need to give priority or to allow an amount of bandwidth to a specific website.

for exemple I have 10Mbits for the internet access, I need to reserve 8MBits for www.cisco.com and 2Mbits for the rest of the traffic.

How can I do this ?

Thx
Jérémy
LVL 1
martineitAsked:
Who is Participating?
 
InteraXConnect With a Mentor Commented:
The below is provided with the following disclaimer: This is a feature I have used very little and cannot guarantee it will not cause problems. Reading the documentation this is correct to my understanding. Proceed at your own risk.

I would just look at setting up the 2Mbps to the rest. Then the website can have 8Mbps or more if available.

1. Create an ACL to identify the traffic you are interested in.
2. Associate that with a class map
3. Create a policy map (you may already have one)
4. Associate the policy with an interface

access-list Non_Web_Trafic extended deny any <website you want to exclude>
access-list Non_Web_Trafic extended permit any any
class-map Limit_Bandwidth
 match access-list Non_Web_Trafic
policy map QoS
 class Limit_Bandwidth
  police output 2097152
  police input 2097152
service-policy QoS interface outside
0
 
InteraXCommented:
What version of the OS are you running. This will require the QoS Modular Policy Framework feature that is only available in v7.0 and above. This will be a hard limit that cannot be expanded on, so you would have 8Mb exclusively for cisco.com and the 2Mb exlusively for everything else. If you want more flexible packet shaping, you will need to look at a packet shaping device.
0
 
InteraXConnect With a Mentor Commented:
Details of the Cisco PIX/ASA feature can be found at http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008084de0c.shtml

An overview of packet shaping devices etc can be found at http://www.processor.com/editorial/article.asp?article=articles%2Fp2816%2F07p16%2F07p16.asp. There is also the bluecoat packet shaper which used to go by the name packeteer. http://www.bluecoat.com/products/packetshaper
0
 
martineitAuthor Commented:
Thanks for the information. I have IOS version 8.0.4.
so the QoS Modular Policy Framework should be available.

Could you give me the piece of code I should put in the configuration in order to allow  8Mbits to Cisco.com and 2 Mbits to the rest ?

Thanks in advance.
J.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.