Hi,

I am again studying class-based policing. I am trying to limit the input packets to an interface at 600kbps. I'm trying to hit the loopback interface so it will pass the fast-e interface. I applied the policy on the physical link. Here's my configuration. Using a WAN killer, I'm trying to hit 192.168.0.110. I am generating 700kbps from the WAN killer. Please check the output of show policy-map interface. Does it mean that the interface is receiving 713000bps and dropping 114,000bps of it? Also, will my configuration really work for a 600kbps policing? Will it also work the same for an output policy? Thanks in advance.

policy-map police-traffic

class class-default

police 600000 75000 75000 conform-action transmit exceed-action drop

!

interface FastEthernet0/0

description $ETH-LAN$

ip address 10.196.0.110 255.255.255.0

!

interface Loopback0

ip address 192.168.0.110 255.255.255.255

Router#sh policy-map interface

FastEthernet0/0

Service-policy input: police-traffic

Class-map: class-default (match-any)

634319 packets, 190126540 bytes

30 second offered rate 713000 bps, drop rate 114000 bps

Match: any

police:

600000 bps, 75000 limit

conformed 325610 packets, 97547172 bytes; action: transmit

exceeded 308710 packets, 92579668 bytes; action: drop

conformed 600000 bps, exceed 114000 bps

John