Cisco Support Community
Community Member

rate-limit command issue

i applied rate-limit input cmd on a 2 Mbps Serial Interface so as to restrict the customer traffic to 128 Kbps.attached is the int config and the ping response when i tried to ping the other end of this serial int.i got a lot of drops.i tried all the possible options of bc and be value in rate-limit cmd but still get packet drops/intermitent RTO's.without applying rate-limit i am not getting even a single packet drop but that way i am not able to restrict the customer traffic to 128 Kbps.can anybody suggest what could be the problem and is there any other way around to limit this traffic to 128 Kbps.


Re: rate-limit command issue

Because you are restricting traffic to a specific rate, you see drops when traffic exceeds beyond the configured rate. So whats the problem. its behaving the way you want.

Community Member

Re: rate-limit command issue

Even if i put a normal ping with a repeat count of 1000 without increasing byte size , still i see a lot of packet drops.load on the link that time is hardly 20 kbps whereas i have restricted it to 128 kbps, so it should not show any packet drops.see the newly attached sh int command output in file.

Re: rate-limit command issue

yoy could try to shape traffic, which is not as aggresive as policing with regards to drops, but slightly more CPU demanding.

with shaping you will buffer before dropping.

but as per previous poster replied, this is the expected behaviour of policing or rate limiting.

Pls rate all helpful posts


Super Bronze

Re: rate-limit command issue

Agree with prior posters. Policer likely working as it should; shaper likely would be better.

The primary reason the shaper would be better, they usually seem to implement FQ (WFQ?), so when there's congestion, low volume traffic less likely to be dropped, such as your test pings.

One issue moving to a shaper, I see you're doing inbound policing, and I think a shaper might only work outbound.

Re: rate-limit command issue

Hi sushil,

Let me explain you how this thing works.

1st You want to limit total 128 K on that interface considering it i have provided the config.

rate-limit input 128000 16000 16000 conform-action transmit exceed-action drop

The first bps is calculated in Average rate in bits per second.

The 2nd and the 3rd vlaue is calualted in bytes.

So its Bits and then Bytes and bytes.

The above config will let you 128 K bandwidth input rate. and will burt to 128 and will drop if goes above 128.

I would suggest to apply a output rate also with this configuration.

as per your config it should have been this way.

rate-limit input 128000 8000 8000 conform-action transmit exceed-action drop

I have gone through what you have.

Let us know if this helps

Re: rate-limit command issue

have you tried this one.

rate-limit input 128000 16000 16000 conform-action transmit exceed-action drop

in which the the link can burts up to 128 K your burst is up to 64 K. The last option says if above 128 K drop the packet.

This is one of the option.

I work on rate limit by creating subinterface and providing rate limit to a specfic ip adddress range.

It works fine for me.

CreatePlease to create content