Back to Policing

Unanswered Question
Jan 27th, 2009


I am again studying class-based policing. I am trying to limit the input packets to an interface at 600kbps. I'm trying to hit the loopback interface so it will pass the fast-e interface. I applied the policy on the physical link. Here's my configuration. Using a WAN killer, I'm trying to hit I am generating 700kbps from the WAN killer. Please check the output of show policy-map interface. Does it mean that the interface is receiving 713000bps and dropping 114,000bps of it? Also, will my configuration really work for a 600kbps policing? Will it also work the same for an output policy? Thanks in advance.

policy-map police-traffic

class class-default

police 600000 75000 75000 conform-action transmit exceed-action drop


interface FastEthernet0/0

description $ETH-LAN$

ip address


interface Loopback0

ip address

Router#sh policy-map interface


Service-policy input: police-traffic

Class-map: class-default (match-any)

634319 packets, 190126540 bytes

30 second offered rate 713000 bps, drop rate 114000 bps

Match: any


600000 bps, 75000 limit

conformed 325610 packets, 97547172 bytes; action: transmit

exceeded 308710 packets, 92579668 bytes; action: drop

conformed 600000 bps, exceed 114000 bps


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)


This Discussion