<div dir="ltr">Sorry to derail off topic, though I appreciate the feedback. Trying to get this to work through a Cisco ASA. If not, I probably have an old 2900 series router somewhere. <br><br>Thank you again.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, May 9, 2016 at 2:33 PM, Yuri Voinov <span dir="ltr"><<a href="mailto:yvoinov@gmail.com" target="_blank">yvoinov@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span class="">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br></span>
I mean this, for example:<br>
<br>
haribda(config)#policy-map Net_Limit<br>
haribda(config-pmap)#class alternate<br>
haribda(config-pmap-c)#?<br>
Policy-map class configuration commands:<br>
admit Admit the request for<br>
bandwidth Bandwidth<br>
compression Activate Compression<br>
drop Drop all packets<br>
exit Exit from class action configuration mode<br>
fair-queue Enable Flow-based Fair Queuing in this Class<br>
flow Flow subcommands<br>
log Log IPv4 and ARP packets<br>
measure Measure<br>
netflow-sampler NetFlow action<br>
no Negate or set default values of a command<br>
police Police<br>
priority Strict Scheduling Priority for this Class<br>
queue-limit Queue Max Threshold for Tail Drop<br>
random-detect Enable Random Early Detection as drop policy<br>
service-policy Configure QoS Service Policy<br>
set Set QoS values<br>
shape Traffic Shaping<br>
<br>
haribda(config-pmap-c)#bandwidth ?<br>
<1-2000000> Kilo Bits per second<br>
percent % of total Bandwidth<br>
remaining percent/ratio of the remaining bandwidth<br>
<br>
This is 2901, ISR G-2.<span class=""><br>
<br>
10.05.16 3:15, J Green пишет:<br>
</span><span style="white-space:pre-wrap"><span class="">> Here, re 'upload and download
sizes', I meant the later 'dumb traffic limits'.<br>
><br>
> We do have a Cisco firewall in place, and I have setup
'traffic policing'. However, the results are inconsistent.
Sometimes it seems to work, other times it blocks everything, or
it blocks nothing.<br>
><br>
> Appreciate all the feedback, thank you all for your time.<br>
><br></span><span class="">
> On Mon, May 9, 2016 at 12:27 PM, Yuri Voinov
<<a href="mailto:yvoinov@gmail.com" target="_blank">yvoinov@gmail.com</a> <a href="mailto:yvoinov@gmail.com" target="_blank"><mailto:yvoinov@gmail.com></a>> wrote:<br>
><br>
><br>
> For such task enough put Cisco router with TCP traffic
policies .....<br>
><br>
> And please - any protocol, any speed limits, any ACL's, any
SLA .....<br>
><br>
><br>
> 10.05.16 1:15, Alex Rousskov пишет:<br>
> > On 05/09/2016 12:53 PM, Yuri Voinov wrote:<br>
><br>
> >> Just to clarify. For proxying anything (protocol or
service), the proxy<br>
> >> server must be at the same time also act as the
client of a protocol or<br>
> >> service - and as a server.<br>
><br>
><br>
> > It all depends on the definition of "upload and download
sizes" in the<br>
> > OP question. If the intent is to understand and restrict
individual<br>
> > protocol messages, then you are right. If the intent is
just to limit<br>
> > the aggregate number of TCP bytes transferred, then
protocol<br>
> > understanding (in a "transparent" setup) is not
required.<br>
><br>
> > Needless to say, Squid is unlikely to be the best
solution for the<br>
> > latter "dumb traffic limits" problem, but if an
"all-in-one executable"<br>
> > is a critical requirement, one can make modern Squids to
limit tunneled<br>
> > TCP traffic that it does not understand.<br>
><br>
> > Alex.<br>
><br>
><br>
> >> J Green:<br>
> >>>> Would like to limit maximum upload and
download sizes for<br>
> >>>> other TCP protocols: SMB, NFS, FTP,
and RDP.<br>
> > _______________________________________________<br>
> > squid-users mailing list<br></span>
> > <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank"><mailto:squid-users@lists.squid-cache.org></a><br>
> > <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank"><mailto:squid-users@lists.squid-cache.org></a><br>
> <a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
></span><span class=""><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br></span>
iQEcBAEBCAAGBQJXMQIjAAoJENNXIZxhPexGC9YIAIXbLAOqQMTNmawXVrSpK2rP
<br>
zwW4RmwsmDOZzqFgldMlEJRkSH+H3UXiF6Zw994Ys3pYliB5o55qN3DYB2fGlu4H
<br>
Me3bq71PoZo+qes15l9ePpWq+0jK9B06fMGgWdBeSuVjRwC72hq0k2cPCpg9Hcd3
<br>
KqytNCaM6kb7CFfxhm8g5w0lSHwQkoKM8XDbtVzrKjT0VbFcYRXR6SP5tzRwDW9D
<br>
ZHFQ8hX19RBof8JqWQo6UbhXZBZGtDjoOaGQ/EBMLjzl6guUdKt9Xi8pF+rkBgSk
<br>
S0Y2JZypIxAeMuj9STfRs54ZCId9NtZfA76o5M7PH0OrCfz1oXA+m0kzCQfEZtY=
<br>
=tSMD
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</div>
</blockquote></div><br></div>