October 21, 2009 at 23:39Next task: speed limit
You have a router. It has 2 fastethernet interfaces. The administrators who set it up for you, in order to save interfaces and physical bandwidth, set it up quite strange:
- On each interface there are 2 subinterfaces (vlan 10,100 on f0 / 0 and vlan 20,200 on f0 / 1)
- Vlan 10 and 20 look at providers (networks 192.168.10.1/24, 192.168.20.1/24)
- Vlan 100 and 200 look at local networks (10.100.100.1/24 and 10.200.200.1/24)
The problem arose: to limit the total speed from the local networks to the providers (for the test, limit the transmission via ICMP to 56 kbit / s). In order not to overload the processor of the router, the problem must be solved without using additional interfaces. Additionally, it is necessary to allow management of the router only by ssh and only to administrators connecting from the interface serving the VLAN 100. It is advisable to make an administrative restriction with a minimum of commands.
The solution to this problem is quite simple. It was decided at Cisco Expo in 15 minutes and earned a super prize from FastLane and ciscotrain
I won’t even remind you where I can answer if the hub is readonly :)
- On each interface there are 2 subinterfaces (vlan 10,100 on f0 / 0 and vlan 20,200 on f0 / 1)
- Vlan 10 and 20 look at providers (networks 192.168.10.1/24, 192.168.20.1/24)
- Vlan 100 and 200 look at local networks (10.100.100.1/24 and 10.200.200.1/24)
The problem arose: to limit the total speed from the local networks to the providers (for the test, limit the transmission via ICMP to 56 kbit / s). In order not to overload the processor of the router, the problem must be solved without using additional interfaces. Additionally, it is necessary to allow management of the router only by ssh and only to administrators connecting from the interface serving the VLAN 100. It is advisable to make an administrative restriction with a minimum of commands.
The solution to this problem is quite simple. It was decided at Cisco Expo in 15 minutes and earned a super prize from FastLane and ciscotrain
I won’t even remind you where I can answer if the hub is readonly :)