Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

QOS for Policing Ethernet Traffic on Catalyst 3750

Unanswered Question
Sep 13th, 2006
User Badges:


I am running a Cisco Catalyst 3750 with IOS c3750-ipbase-mz.122-25.SEB4.bin

Since we've deployed these switched on our Metro Ethernet network, we are now needing the capability to police/rate-limit the client's ports.

I've done examples on Cisco's docs about QoS in 3750 but can't seem to get it right.

I have mls qos enabled

QoS is enabled

QoS ip packet dscp rewrite is enabled

I have placed this configurations to try to limit client traffic

class-map match-all ANY

match access-group 1


access-list 1 permit any


policy-map POLICE-TO-2MB

class ANY

police 2000000 375000 exceed-action drop

I then apply this to the client interface

interface GigabitEthernet1/0/5

description Link to Customer

switchport access vlan 12

service-policy input POLICE-TO-2MB


apparently, the client's input traffic, meaning his upload to me is still exceeding 2Mbits, actually it is still at 95Mbits/sec so I am really confused.

Hope you guys could give me some pointers on how to police all type of traffic on this interface.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 2.5 (2 ratings)
tiagocarrijo Wed, 09/13/2006 - 04:26
User Badges:

You can't use input police in normal ports in the 3750.

You need to use de ES ports.

So you can do an VLAN police rate.

sherwinang Wed, 09/13/2006 - 09:09
User Badges:


Pardon me, but what do you mean by ES ports? I hope you could point me to a documentation about this or probably a simple example. Thank you.

shaner Wed, 09/13/2006 - 09:37
User Badges:

apply the service policy to interface vlan 12, not the layer 2 switchport interface GigabitEthernet1/0/5.

This should work.

also to ratelimit egress traffic use the srr-queue bandwidth shape command. You can't do a service policy output on the 3550/3750. THere is a hardware limitation.

tiagocarrijo Thu, 09/14/2006 - 03:52
User Badges:

An ES port is found on 3750 Metro switches.

If you have the 3750 standard, you will need to aply in the vlan.


This Discussion