04-16-2009 12:56 AM - edited 03-04-2019 04:23 AM
Hi
I would like to cap a physical GE interface to 100mbps whist running vlans through it on a GSR i.e.
interface GigabitEthernet0/0/6
no ip address
no ip directed-broadcast
rate-limit input 100032000 12504000 12504000 conform-action transmit exceed-action drop
rate-limit output 100032000 12504000 12504000 conform-action transmit exceed-action drop
no negotiation auto
!
interface GigabitEthernet0/0/6.2
encapsulation dot1Q 2
ip vrf forwarding test
ip address 10.1.1.5 255.255.255.252
no ip directed-broadcast
no cdp enable
!
interface GigabitEthernet0/0/6.3
encapsulation dot1Q 3
ip vrf forwarding test2
ip address 10.1.1.1 255.255.255.252
no ip directed-broadcast
no cdp enable
!
.................etc
However when I apply the rate-limit command on GE0/0/6, I don't see any drop in traffic. Actually I have set up a throughput test through GigabitEthernet0/0/6.2 running at 1Gbps which I can see through sh int GigabitEthernet0/0/6 which does not drop to 100Mbps once the rate-limit is added
I have also tried a vlan policy map with but get the same issue when applying to an interface
policy-map gig-out
class all-vlans
police 64000 4470 4470
policy-map parent-gig-out
class class-default
service-policy gig-out
class-map match-all all-vlans
match vlan 1-4095
(config)#int gigabitEthernet 0/0/6
(config-if)#service-policy output parent-gig-out
% 'match vlan/pseudowire' not supported in gig-out
The GSR cards are 12000-SIP-601 and SPA-10X1GE-V2
Is there a way to cap this aggregate interface?
Regards
Mark
Solved! Go to Solution.
04-20-2009 06:08 PM
Ok, I found this link which I think answer to our question:
http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/aggvlan.html
From this link, the following configuration should be supported:
policy-map Child
class class-default
police 64000 4470 4470
!
policy-map Parent
class all-vlans
service-policy child
class-map match-all all-vlans
match vlan 1-4095
!
Laurent.
04-16-2009 09:34 AM
Hi,
You don't need two levels of service-policy in your case. Try the following one:
policy-map gig-out
class class-default
police cir 100000000 conform-action transmit exceed-action drop
HTH
Laurent.
04-17-2009 01:26 AM
Hi Laurent
I tried what you suggested but I still don't see any drop in traffic. As you can see from the results I applied it bu the aggregate interface is stall taking 875Mbps of traffic
policy-map gig-in1
class class-default
police cir 104000 bc 4470 be 4470 conform-action transmit exceed-action drop
policy-map gig-out1
class class-default
police cir 104000 bc 4470 be 4470 conform-action transmit exceed-action drop
interface GigabitEthernet0/0/7
no ip address
no ip directed-broadcast
no negotiation auto
service-policy input gig-in1
service-policy output gig-out1
!
#sh policy-map interface GigabitEthernet0/0/7
GigabitEthernet0/0/7
Service-policy input: gig-in1 (240)
Class-map: class-default (match-any) (9166881/0)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any (14941378)
police:
128000 bps, 4470 limit, 4470 extended limit
conformed 0 packets, 0 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 0 bps, exceed 0 bps
Service-policy output: gig-out1 (242)
Class-map: class-default (match-any) (9191457/0)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any (5027266)
Class of service queue: 14
Queue-limit: 32768 packets (default) Threshold drop 0 pkts, 0 bytes
Current queue-depth: 0 packets, Maximum queue-depth: 483 packets
Average queue-depth: 0.000 packets
police:
128000 bps, 4470 limit, 4470 extended limit
conformed 0 packets, 0 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 0 bps, exceed 0 bps
sh interface GigabitEthernet0/0/7
GigabitEthernet0/0/7 is up, line protocol is up
Hardware is GigabitEthernet, address is 0021.1c59.e807 (bia 0021.1c59.e807)
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, rely 255/255, load 223/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1000Mbps, link type is force-up, media type is LX
output flow-control is on, input flow-control is on
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:04, output 00:00:04, output hang never
Last clearing of "show interface" counters 01:16:56
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
Available Bandwidth 1000000 kilobits/sec
5 minute input rate 875937000 bits/sec, 399611 packets/sec
5 minute output rate 876365000 bits/sec, 399808 packets/sec
381783166 packets input, 104608586928 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 113 ignored
0 watchdog, 0 multicast, 0 pause input
382965954 packets output, 104932671550 bytes, 0 underruns
Transmitted 0 broadcasts
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
04-17-2009 02:34 PM
I'm not a GSR expert but can you try the following configuration:
class-map match-all all-vlans
match vlan 1-4095
!
policy-map gig-out
class all-vlans
police cir 100000000 conform-action transmit exceed-action drop
!
int gigabitEthernet 0/0/7
service-policy output gig-out
!
Laurent.
04-19-2009 11:43 PM
Hi, I've actually tried that as well however I see no drop in traffic :(
04-20-2009 06:08 PM
Ok, I found this link which I think answer to our question:
http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/aggvlan.html
From this link, the following configuration should be supported:
policy-map Child
class class-default
police 64000 4470 4470
!
policy-map Parent
class all-vlans
service-policy child
class-map match-all all-vlans
match vlan 1-4095
!
Laurent.
04-21-2009 06:02 AM
Hi, that seems to have done the trick.
Thanks
Mark
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: