11-06-2003 05:45 PM - edited 03-02-2019 11:32 AM
I am having a problem with policing on a 2950 running 12.1(12c)EA1
I have configured an acl that says
access-list 102 permit ip any any
that acl is used in a class-map as the match for
class-map myClass
match access-group 102
then the policy map is
policy-map myPolicy
class myClass
police 1000000 32768 exceed-action drop
on the interface
interface FastEthernet 0/10
service-policy input myPolicy
I am being told that this is not working. How do I show stats from the switch that will prove that excess traffic is being dropped. The input interface rate on the interface will exceed 1mbs.
Is there a better solution to limit the server on that port to 1 meg ??
Thanks
11-06-2003 10:13 PM
If your requirement is to restrict for 1Mb.
You can try using rate-limit on the interface
interface fa0/10
rate-limit input 1000000 16000 32768 conform-action transmit exceed-action drop
rate-limit output 1000000 16000 32768 conform-action transmit exceed-action drop
This will restrict strictly at 1Mb input and ouput with excess burst upto 32kb.
11-27-2003 09:59 PM
Hi Pred,
I'm having the same problem but its on the cat3550. But becos its IOS based, it does not support rate-limit command. Any other ideas ?
11-28-2003 01:31 AM
Mohandas,
The 3550 uses Policing to provide the same functionality, the police command used to achieve the same functionality is
police [aggregate name] [flow] bits-per-second normal-burst-bytes [ extended-burstbytes]
[pir peak-rate-bps] [conform-action action] [exceed-action action] [violate-
action action]
Here, an action can be one of the following:
dropDrop the packet.
set-dscp-transmit [new-dscp]Set the DSCP value in the packet.
set-prec-transmit [new-precedence]Set the IP Precedence value in the packet.
transmitSend the packet normally.
refer to this link for more information:
Hope that helps
Aslam.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: