We have a 3560 switch that connects to customer CPE over a 1Mb link. Since we don't manage CPE, we want to apply rate limiting for ingress and egress traffic.
I couldn't find specific information on this from cisco documents, but came across different options that is listed below.
1. srr-queue bandwidth limit 90 (Limit the available egress bandwidth to 80% of interface speed)
2. rate-limit input <1024000> <> conform-action transmit exceed-action drop
3. service-policy <> (but this cannot be applied to egress traffic.)
Could anyone please confirm which is the correct method to rate-limit the traffic on 3560.
". . . the parameter allows only 10-90 values, and hence i can set max of 900Kb, but not 1Mb. "
10% of 10 Mbps should be 1 Mbps, although there's the increment factor to consider. Is that how you're getting 900 Kbps?
"Do you have any idea how rate-limit works on 3560?"
I don't see rate-limit command in http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_46_se/command/reference/cli1.html. I also found under show access-lists "Note Though visible in the command-line help strings, the rate-limit keywords are not supported. " (Also similar note under show interfaces.) What IOS version are you running?
You can use the "srr-queue bandwidth limit xx" command to limit the bandwidth but the values are from 10-100 so if you want to limit your bandwidth to 1 meg, you need to configure the speed of the interface to 10 meg.
srr-queue bandwidth limit 10
You will probably have to enable "mls qos" globally to have this feature work, in which case you'll automatically get the default queue configuration. I would be very cautious turning this on without testing because once your traffic goes over 1meg, the switch will then use its default egress queue policy which may not be a policy that works for you. I found the defaults to be less that steller, like dropping tos 7 and 4 before dropping tos 0. Just be aware that there is a default policy even though it doesn't show in the running config.
Check out the qos section of the config guide.