(this from my usenet post on kazaa) apply source/dest ip when making traffic shaping decisions!)
the problem is the response from the user in your org to the internet is not going back over port 1214.. usually it will hit 1214 and go back like 2000 to 4000 tcp (assuming windoze boxes) your best best is using "ranges" of a subnet or one whole subnet for just users.. then use traffic shaping to slow down bw upload... see (say users are .129 to .254 in 10.0.1.0/24 access-list 102 permit ip 10.0.1.128 0.0.0.127 any int s0/0 traffic-shape group 102 64000 8000 8000 1000 Just make sure to remember traffic shaping effect data going OUT of an Interface... also check order of operation, find out if nat comes before or after traffic shaping (i think after) then you would need to match THE IP the users nat to on your OUTSIDE interface.. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=70588&t=70559 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]