Solved: Throttling Host Bandwidth on Layer 2 Access Switch?

davidhuynh5 · ‎09-22-2010

Is there a way to limit bandwith on an access port? For example based on the configuration below:

interface fastethernet0/1

description Server

switchport mode access

switch acc vlan 10

speed 100

duplex full

spanning-tree portfast

I'm familiar with rate limiting and QoS at the layer 3 level, but would like to do it at the switch port level.

Thanks in advance.

Lei Tian · ‎09-22-2010

Hi,

Check 'Campus QoS Design' section in this doc.

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND/QoSDesign.html

The untrust model configuration has examples of policing.

HTH,

Lei Tian

View solution in original post

Julio Garcia · ‎09-22-2010

hi David,

This is how i do it ...

make a policy

policy-map 10Mbps-LIMIT
class class-default
police cir 10000000 bc 1000000 be 1000000 conform-action transmit exceed-action drop

then on layer 2 switch port..

int x/x

service-policy input 10Mbps-LIMIT

one caveat, i think you can only do in (IN) direction only

im not an expert by any means , but i spent ages trying to find a way that actually works.

try it out and let me kno.

View solution in original post

Lei Tian · ‎09-22-2010

Hi,

Most switches support ingress policing on physical access port; what platform are you using?

Regards,

Lei Tian

davidhuynh5 · ‎09-22-2010

Cat3560, Cat4506, and Cat6506. Sample config wuold be appreciated. Thanks.

Lei Tian · ‎09-22-2010

Hi,

Check 'Campus QoS Design' section in this doc.

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND/QoSDesign.html

The untrust model configuration has examples of policing.

HTH,

Lei Tian

Julio Garcia · ‎09-22-2010

hi David,

This is how i do it ...

make a policy

policy-map 10Mbps-LIMIT
class class-default
police cir 10000000 bc 1000000 be 1000000 conform-action transmit exceed-action drop

then on layer 2 switch port..

int x/x

service-policy input 10Mbps-LIMIT

one caveat, i think you can only do in (IN) direction only

im not an expert by any means , but i spent ages trying to find a way that actually works.

try it out and let me kno.