Policing vlan interface on 6500

Unanswered Question

Hi,

I was wondering how policing works on a 6500 with PFC3/Sup720. I would like to setup policing to 5Mbit in one direction and 10Mbit in the other direction. Can I setup different policing on input and output vlan interface? What’s input and output on a SVI interface?

If I change the policing to just [service-policy input 5mbps] would that be enough to limit the traffic in both directions to 5Mbit?

class-map match-all catch_all

  match access-group 111

!

policy-map 5mbps

  class catch_all

   police cir 5000000 bc 26000 be 26000 conform-action transmit exceed-action drop violate-action drop

policy-map 10mbps

  class catch_all

   police cir 10000000 bc 26000 be 26000 conform-action transmit exceed-action drop violate-action drop

!

interface GigabitEthernet 1/1

switchport mode access

switchport access vlan 100

mls qos vlan-based

!

interface vlan 100

no ip address

service-policy input 5mbps

service-policy output 10mbps

!

mls qos

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Laurent Aubert Mon, 05/10/2010 - 08:13

Hi,

If you apply the policing on the VLAN interface, it's an aggregate policer which apply to any interface belonging to the VLAN. The sum of all the traffic received/send from/to any interface belonging to this VLAN will be policed.

It will also police routed traffic from this VLAN to another one.

HTH

Laurent.

Actions

This Discussion