===Write your ACL matching the traffic you want shape=== access-list 100 permit tcp host 192.168.3.10 eq www any access-list 101 permit tcp any eq www 192.168.3.0 0.0.0.255 The ACL 100 match outgoing HTTP traffic, the second match incoming HTTP ===Configure the rate limit=== ! interface Ethernet0 rate-limit input access-group 100 conform-action continue exceed-action drop rate-limit output access-group 101 conform-action continue exceed-action drop !