Rate limit VLAN on Cisco 3560

perpaal · ‎06-30-2009

Hello

I`m trying to rate limit some specific traffic passing through a 3560 switch on some VLANs.

What I have done is create an access list:

access-list 101 permit icmp any any echo

access-list 101 permit icmp any any echo-reply

Then I set a rate limit on the VLAN interface:

rate-limit input access-group 101 128000 8000 8000 conform-action transmit exceed-action drop

rate-limit output access-group 101 128000 8000 8000 conform-action transmit exceed-action drop

CEF is enabled.

But this does not rate limit the traffic like it should, what am I missing here?

Joseph W. Doherty · ‎07-01-2009

From latest 3560 configuration guide:

Unsupported Interface Configuration Commands

rate-limit

cisco_lad2004 · ‎07-01-2009

I recall having same issues on this platform. I used following workaround:

1-I know 3560 can police inbound, so I used a service policy on physical port. referring to a class map & ACLs.

2-for outbound, I used the upstream port ad policed its traffic inbound.

HTH

Sam

perpaal · ‎07-02-2009

Thank you for quick reply.

I have done some VLAN filter, bot nothing like in the linked article.

How would I do this config for desired results?

Joseph W. Doherty · ‎07-02-2009

"How would I do this config for desired results?"

Have you found this section?

lordsporkton · ‎07-02-2009

I am a little fuzzy but I believe you have to turn on "mls qos" have you done this?