You have a router. It has 2 fastethernet interfaces. The administrators who configured it to you, in order to save interfaces and physical bandwidth, configured it rather strangely:
- On each interface there are 2 subinterfaces (vlan 10,100 at f0 / 0 and vlan 20,200 at f0 / 1)
- Vlan 10 and 20 are looking at providers (networks 192.168.10.1/24, 192.168.20.1/24)
- Vlan 100 and 200 are looking at local networks (10.100.100.1/24 and 10.200.200.1/24)

There was a task: to limit the total speed from the local networks to the providers (for the test, limit the transfer via ICMP protocol to 56kbit / s). In order not to overload the router processor, the task must be solved without using additional interfaces. Additionally, it is necessary to allow router management only over ssh and only administrators connecting from an interface serving VLAN 100. It is desirable to make an administrative restriction with a minimum of commands.
')
The solution to this problem is quite simple. She was decided at Cisco Expo in 15 minutes and earned a super prize from FastLane and ciscotrain
I will not even remind you where you can answer if the habr is readonly :)