I have tried to apply the following to an ATM subinterface under the PVC, but it is not accepted, and does not give any error message when entering the configuration:
access-list 2050 deny tcp any any eq 1494
access-list 2050 deny tcp any any eq 1604
access-list 2050 deny tcp any any eq 80
access-list 2050 deny tcp any any eq 443
access-list 2050 permit ip any any
class-map match-any reb
match access-group 2004
match access-group 2005
match access-group 2006
match access-group 2007
class-map match-all reb_limit
match access-group 2050
police cir 2000000 bc 625000 be 625000
exceed-action set-qos-transmit 1
service-policy input policy1
service-policy output policy1
(ACLs 2004,2005,2006 and 2007 are used to select the customer)
Basically the idea is that a customer called reb, is given a cir of 2000000bps. Of this, we want Citrix, http and secure-http to be able to use upto the cir rate, but anything else will be restricted to 500000bps.
Without having the service-policy reb_limit under the class reb in service-policy policy1, all is ok, but if we try and add the reb_limit service policy to the class, the entry is accepted, but when the config is displayed, the second service-policy is not seen.
Hardware is a 7206VXR with NPE400, running 12.2(8)T1.
Are hierarchical traffic policies not allowed on ATM interfaces?
This is not a bug. If bandwidth needs to be reserved for some classes like reb-limit, the PVC needs to be configured with ATM traffic shaping such as VBR, ABR or CBR. Furthermore, only 75% of the PVC bandwidth can be reserved by default. If you need to reserve more, you will have to use the PVC command: max-reserved-bandwidth.
Have a look to the following URLs for more information:
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...