I have this case:

In my Company we have 2 Internet Access in production R1-A router and R2-B router they are both in separate networks, R2-B have the highest priority which it use to Call Center.

were i Want to focus on R1-A that router is a Cisco Router 829F is currently performing NAT Overload to a Huawei HG8245H (Modem ISP) then the hole company connects to a 24-Port Gigabit Rackmount Switch TL-SG1024 (Non Administrable Switch).

All network infracture in the internal network IP adress is

My internet bandwidth is 10/10 mpbs


Modem--> Router Cisco 829F--> Switch

How do i preform a bandwidth control to specific department or specific host?

What topic or subject i should research? (VLAN,Inter-Vlan Routing)?

What is the best approach or solution?

1 Answer 1


Class-Based Policing. Since you cannot administer the switch, you will likely have to match traffic based on IP access list with can be processor intensive. In any case search cisco.com for class-based policing for additional configuration examples.

    Router(config)# class-map access-match
     Router(config-cmap)# match access-group 1
     Router(config-cmap)# exit
     Router(config)# policy-map police-setting
     Router(config-pmap)# class access-match
     Router(config-pmap-c)# police 8000 1000 conform-action transmit exceed-action drop
     Router(config-pmap-c)# exit
     Router(config-pmap)# exit
     Router(config)# interface fastethernet 0/0
     Router(config-if)# service-policy output police-setting
  • 3
    Policing will give poor performance and wastes bandwidth. Better to use queuing and shaping, so they can use unused bandwidth.
    – Ron Trunk
    May 7, 2015 at 22:53
  • @Ron. Hi, could you please post some links towards shaping/queuing? That is quite a good option to consider.
    – user4565
    May 8, 2015 at 21:07
  • I forgot to tell how do i limit a specific host?
    – Ran Shemer
    May 9, 2015 at 0:22
  • probably the best way is to ensure that hosts MAC address is always given a particular IP address via the DHCP server. Then use an access control list as the classifying means. May 9, 2015 at 1:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.