Hi back,
you can only limit the egress rate of a port with that command.
srr-queue bandwidth limit
Which means the port is, in case of you, putting 10 (as lowest configurable option, so will not be able to limit for example a 100MBit-Port down to 5MBit) after that command, in "pause" mode 90% of its given transmit time ;)
For pushing down the traffic going INTO and EGRESSING from that port you need policing, will look like this:
mls qos
!
ip access-list extended LIMITACL
permit ip any any
!
class-map match-all CLASS_LIMIT20MBIT
match access-group name LIMITACL
!
policy-map LIMIT-20MBIT
class CLASS_LIMIT20MBIT
police 20000000 1000000 exceed-action drop
!
interface FastEthernet0/1
srr-queue bandwidth limit 20
service-policy input LIMIT-20MBIT
But policing will produce taildrops, and so you will have not that nice traffic behaviour due tue the TCP syncing issue. Proper shaping is AFAIK not available on the smaller Catalysts, especially not on a Layer2-Switchport.
