10-30-2008 12:48 PM - edited 03-06-2019 02:13 AM
Hi,
I have cisco 4948 switch and I want to control in and out bandwidth of individual interface in Cisco 4948. I try to search cisco site and I am out of luck. I tried with class-map configuration and it can only control to only one interface. Once I add another interface the configure bandwidth does not work. Here is my config
class-map match-all Client-pc
match any
class-map match-all Any-traffic
match any
!
!
policy-map 2Mb
class Any-traffic
police 2 mbps 256 kbyte conform-action transmit exceed-action drop
policy-map 1Mb
class Any-traffic
police 1 mbps 128 kbyte conform-action transmit exceed-action drop
policy-map 1Mb_client
class Client-pc
police 1.5 mbps 32 kbyte conform-action transmit exceed-action drop
policy-map 2Mb_client
class Client-pc
police 2 mbps 32 kbyte conform-action transmit exceed-action drop
!
interface GigabitEthernet1/4
description server
switchport access vlan 2
switchport mode access
duplex full
no cdp enable
spanning-tree portfast
spanning-tree bpduguard enable
service-policy input 1Mb
service-policy output 2Mb
end
Solved! Go to Solution.
10-30-2008 12:58 PM
Here's a working config (note this is for a 3550 though).
class-map match-all c_Outbound
match access-group 101
class-map match-all c_MarkDSCP
match access-group 102
class-map match-all c_Inbound
match ip dscp 60
!
!
policy-map p_Outbound
class c_Outbound
police 1528000 8000 exceed-action drop
policy-map p_MarkDSCP
class c_MarkDSCP
set dscp 60
policy-map p_Inbound
class c_Inbound
police 1528000 8000 exceed-action drop
!
interface FastEthernet0/11
switchport access vlan 110
switchport mode access
service-policy input p_MarkDSCP
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 12
switchport mode access
service-policy input p_Outbound
service-policy output p_Inbound
spanning-tree portfast
access-list 101 permit ip host 112.81.61.79 any
access-list 102 permit ip any host 112.81.61.79
10-30-2008 12:58 PM
Here's a working config (note this is for a 3550 though).
class-map match-all c_Outbound
match access-group 101
class-map match-all c_MarkDSCP
match access-group 102
class-map match-all c_Inbound
match ip dscp 60
!
!
policy-map p_Outbound
class c_Outbound
police 1528000 8000 exceed-action drop
policy-map p_MarkDSCP
class c_MarkDSCP
set dscp 60
policy-map p_Inbound
class c_Inbound
police 1528000 8000 exceed-action drop
!
interface FastEthernet0/11
switchport access vlan 110
switchport mode access
service-policy input p_MarkDSCP
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 12
switchport mode access
service-policy input p_Outbound
service-policy output p_Inbound
spanning-tree portfast
access-list 101 permit ip host 112.81.61.79 any
access-list 102 permit ip any host 112.81.61.79
10-30-2008 01:45 PM
Thanks for the prompt reply collin. I will try with access-list and will post the result here.
Cheers
10-30-2008 03:13 PM
I tried with your solution. It can control, but I found that inbound and outbound bandwidth rate with police does not reflect the actual bandwidth going in and out. Is that normal?
Thanks in advance for your help.
Regards,
10-31-2008 07:02 AM
No, it should police the traffic. I don't have a whole lot of experience on the 4948's, their queuing is probably different.
10-31-2008 08:24 AM
Thanks Collin, after I increase the burst rate it reflects the in and out that I control.
Regards,
10-31-2008 08:32 AM
Great, what did you set it too (so I can change my doc)?
10-31-2008 09:09 AM
Hi Collin,
I raise the burst rate to 512KB. Here is my policy setting.
policy-map srv_in
class srv_in
police 4096000 bps 512000 byte conform-action transmit exceed-action drop
policy-map srv_out
class c_in
police 2048000 bps 512000 byte conform-action transmit exceed-action drop
Looks like burst rate setting speaks a lot. I tried with Passmark advance network test. If I use fixed data block size with the above setting I got the bandwidth that I set. But not exact though. Very close. If I use variable data size, the bandwidth result get higher.
Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide