>I am not sure how I should word my access-list or the police statements >(bps, normal burst)
I am not sure if I undertood what you are asking. On the access-list you specify the flow that you want to give the bandwidth specified on the policy-map. >interface vlan 90 >service-policy input limit-traffic >I want to limit traffic coming in and going out. With this command you are applying the traffic entering the interface. Maybe CAR would be better if you want to always limit the internal traffic from reaching the Internet. For example, if your internal network is connected to FA 0/0 and you external network is connected to ATM0/0/0, you would apply CAR on you FA0/0 interface If I remember right, with Policy map you are only limiting the traffic when congestion occur; if there is no congestion, the users will use the available bandwidth. What platform are you going to apply this? I am asking because you may be sure that the traffic is going to the interface (not the case when using MLS). "Naomi James" @groupstudy.com em 11/03/2003 15:09:51 Favor responder a "Naomi James" Enviado Por: [EMAIL PROTECTED] Para: [EMAIL PROTECTED] cc: Assunto: Modular QoS CLI [7:65074] I am trying to limit the traffic from two of my subnet using modular QoS CLI. I created a traffic class for my two subnets. class-map match-all res-traffic match access-group 101 class-map match-all wire-traffic match access-group 102 I defined a service policy name. policy-map limit-traffic class res-traffic police "bps" "normal burst" exceed-action drop policy-map limit-traffic class wire-traffic police "bps" "normal burst" exceed-action drop I am going to apply this service policy to my interface connecting to the Internet. interface vlan 90 service-policy input limit-traffic I am not sure how I should word my access-list or the police statements (bps, normal burst) so that I can stop these two subnets from saturating our bandwidth (6 MB) to the Internet. I want to limit traffic coming in and going out. ???????????????????????????????????? access-list 101 deny ip "ip address" any access-list 101 permit ip any any access-list 102 deny ip "ip address" any access-list 102 permit ip any any ???????????????????????????????????? Thanks for your help. Naomi James Computer Services and Information Technology Savannah State University 912-356-2509 [GroupStudy removed an attachment of type image/gif which had a name of Mabelt.gif] [GroupStudy removed an attachment of type image/gif which had a name of Mabelb.gif] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65160&t=65074 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]