see comments below

-----Original Message-----
From: Gaz [mailto:[EMAIL PROTECTED]]
Sent: Saturday, January 26, 2002 3:51 PM
To: [EMAIL PROTECTED]
Subject: Limit access to serial link to four users [7:33306]


>Hi all,

>I'm after some ideas if you'd be so kind :-)

>A 2Mb link being used mainly for streaming media has about 15 potential
>users. The task is to limit the number of users at any one time to four, so
>they have half a Mb each (ish).

All 15 @ once may be able to watch this stream. you should run a test to
determine if this is a 300kbps, (DSL cable stream) or a 150Kbps "T-1"
stream. if you go to Abcnews.com or somesites to watch video, they
expect corporate users to choose a T-1 stream, because they run on a 
business line which is not exclusively for the streaming.

What I would do is ask people to choose the lower res stream, and enforce
this with an aggresive car / traffic shaping policy. It would be nice
if this stream uses layer 4 characteristics which will make it easy to 
classify and apply policy to, however assuming it uses a protocol you 
don't wish to delay (like tcp 80, http), you can always use car to limit
per ip bandwidth for your 15 potential users, this would easiest if their
ip's were in a neat little /28 range)


>My initial idea, which I must admit, I dont think is such a good one is to
>set up a NAT pool of four addresses, and drag the translation timeout down
>to about a minute (yet to be tested), so that the first four users to pass
>traffic will be translated and allowed through, but after that, they'll
have
>to wait.

this can work.. however every minute it would get kicked.. not cool if the
stream is long. (you can make sure the potential users are in a specific
range
and then make a route map, keeping the hosts in their own nat pool, unless
your potential users are your only users.

>I'm off to look at something like TACACS to see if I can control network
>authorization by number of users (shot in the dark).

>No equipment in place yet, so we have a clean drawing board.

>Anybody have any neat ideas please!!!!!!


Thanks,

Gaz




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33313&t=33306
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to