Uncategorized

Throttling bandwidth in CISCO ASA 5505

This example shows how to throttle the bandwidth to 1 Mbps for a specific user in the outbound direction.

  1. Create access list:
    ciscoasa(config)# access-list WEB-LIMIT permit ip host 192.168.10.1 any
    ciscoasa(config)# class-map Class-Policy
    ciscoasa(config-cmap)# match access-list WEB-LIMIT
    ciscoasa(config-cmap)#exit
  2. Create policy map:
    ciscoasa(config)# policy-map POLICY-WEB
    ciscoasa(config-pmap)# class Class-Policy
    ciscoasa(config-pmap-c)# police output 1000000 conform-action transmit exceed-action drop
    ciscoasa(config-pmap-c)#exit
    ciscoasa(config-pmap)#exit
  3. Enable the policy:
    ciscoasa(config)# service-policy POLICY-WEB interface outside

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.