HIi,
I am trying to design a policing strategy/implementation for circuits we provide as a Service Provider, be it internet circuits or EoMPLS circuits (in the future I will have the requirement to do the same for VPLS and L3 IPVPN circuits).
All of the customer circuits come into ASR 9001's on bundle-ethernet interfaces and I am looking to police on the subinterface (or whatever anyone else can suggest as a better solution, what do other SP's do to throttle customer circuits to the CIR/CDR?).
I have tried to do some tersting using the below policy-map:
policy-map 10mbps-POLICY
class class-default
police rate 10485760 bps burst 104858 bytes peak-burst 209716 bytes
conform-action transmit
exceed-action drop
!
!
end-policy-map
After applying this to a subinterface in the inbound direction I run speedtests (to multiple different servers) and I get around 8.5 - 9 mbps most of the time, on a couple of occasions I got 10 mbps
After applying this same policy-map to the same subinterface in the outbound direction I run speedtests (to multiple different servers) and I get between 20 and 21 mbps.
Can someone please help to explain why this is happening and if this is the right approach?
Thanks a lot in advance.
