Limit Bandwidth per Connection using Cisco ASA 5510

cisco-asa

Cisco ASA 5510

I have a 15Mbps connection. Is it possible to limit the amount of bandwidth used per user either by bit or percentage?

For example, any of these would satisfy my requirements:

(1) User A can only use 500KB/s of my bandwidth (Leaves 1000KB/s for everyone else)

(2) User A can only use 25% of my total bandwidth (Leaves 1125KB/s for everyone else)

Using policing, I've only been able to rate limit the total bandwidth used by everyone on the connection. Thanks.

Best Answer

The latest release of the ASA software (8.4) appears to integrate with Active Directory and allow rules based on users, so if you use Active Directory you might be able to do what you want, although I suspect it isn't all that easy.

Check out the release notes for ASA 8.4 for more info.

Related Solutions

Cisco – Is it possible to do DNS-based ACLs on a Cisco ASA

It is possible to filter the traffic based on URL; however, this does not rely on DNS but on the HTTP Host header sent by your DMZ server. This also assumes that the traffic is cleartext and not sent over SSL.

Cisco provides a description of how to analyze HTTP request headers for filtering.

The ASA does not provide a facility to control traffic based on DNS name as far as I know.

Cisco ASA 5510 – Time of Day Based Policing Configuration

The PIXOS feature you are looking for is called Time Based Access List. It is a two step approach

Create the time-range object
Attach the time-range object to a specific rule

The ASA will then only apply the targeted rule during that time-range. You should be able to get what you want with something like this

hostname(config)#time-range OffHours
hostname(config-time-range)#periodic weekdays 17:00 to 07:00
hostname(config)#access-list Residence line 1 extended permit ip any any time-range OffHours
hostname(config)#access-group Residence in interface inside

Full write-up at Cisco Command Reference

Best Answer

Related Solutions

Cisco – Is it possible to do DNS-based ACLs on a Cisco ASA

Cisco ASA 5510 – Time of Day Based Policing Configuration

Related Topic