Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Rate-limit CIR/bc/be Confusion

Hi, I have to limit WWW Syn packet to 500Kbs. I am confused by CIR, be & be has been choosen like following --

access-list 192 permit tcp any any eq www sync

int f0/1

rate-limit output access-group 192 496000 4000 4000 conform-action permit exceed-action drop

5 REPLIES

Re: Rate-limit CIR/bc/be Confusion

The recommended be values are 2 x the CIR - otherwise you run the risk of global sync.

HTH>

Re: Rate-limit CIR/bc/be Confusion

Hi Rupesh,

Don't forget the following:

496000 means cir in bits per second (bps).

4000 means bc and be in BYTES.

For rate limiting the recommended values for bc and be are the following:

bc = (1.5 x cir)/8

be = 2 x bc

This would mean the following recommended configuration for the rate limit command:

rate-limit output access-group 192 496000 93000 186000 conform-action permit exceed-action drop

Cheers:

Istvan

New Member

Re: Rate-limit CIR/bc/be Confusion

1. At first, I have requested for 500kbs, they why CIR is 496kbs ?

2. Bc will CIRx125ms, which is not 93000 ?

3. Why be = 2x bc

Re: Rate-limit CIR/bc/be Confusion

Hi Rupesh,

The following link will give some more explanations on rate-limiting and the recommended settings for bc and be.

http://www.cisco.com/en/US/docs/ios/12_2/qos/configuration/guide/qcfpolsh.html#wp1000920

Cheers:

Istvan

Super Bronze

Re: Rate-limit CIR/bc/be Confusion

BTW, I wonder whether your requirement might be better provided by something like the "TCP Intercept" feature.

4328
Views
0
Helpful
5
Replies
CreatePlease login to create content