Hi I seem to have an issue where I have a policy-map that has several class-maps that are matching certain ip subnets.
However when I apply the policy-map to the vlan interface it looks like its only matching the 1st class-map and not following down to the other classes to see if they match. ( see below ) although the default-class also doesn’t show any matched traffic I know that whatever is not matched on the 1st class is going through and customers are getting traffic to their subnets.
On using MLS aggr with the config below on a 6500.
Not sure what im doing wrong as the config seems to be ok.
Thanks for the help, paul
interface Vlan105
description to MBB/MBW
ip address x.x.x.x 255.255.255.192 secondary
ip address x.x.x.x 255.255.255.192 secondary
ip address x.x.x.x 255.255.255.192 secondary
ip address 10.10.10.1 255.255.255.0
no ip redirects
service-policy output wireless_multi_pl
end
Class Map match-any EYA_classmap (id 7)
Match access-group name EYA
Class Map match-any Hatch_classmap (id 6)
Match access-group name Hatch
Class Map match-any peopleinc_classmap (id 8)
Match access-group name people_inc
Class Map match-any class-default (id 0)
Match any
These classes above basically match an ACL the matches from/to traffic to a certain subnet
--
Service-policy output: wireless_multi_pl
class-map: Hatch_classmap (match-any)
Match: access-group name Hatch
police aggregate Hatch_mls_policer :
6000000 bps 75000 limit 75000 extended limit
Earl in slot 6 :
25031774 bytes
5 minute offered rate 457176 bps
aggregate-forwarded 22297547 bytes action: transmit
exceeded 2734227 bytes action: drop
aggregate-forward 1087120 bps exceed 115432 bps
** classes below don’t seem to be working. Although traffic is getting through which I confirmed with the customers of who’s classes don’t seem to work ***
class-map: EYA_classmap (match-any)
Match: access-group name EYA
police aggregate EYA_mls_policer :
3000000 bps 37500 limit 37500 extended limit
Earl in slot 6 :
0 bytes
5 minute offered rate 0 bps
aggregate-forwarded 0 bytes action: transmit
exceeded 0 bytes action: drop
aggregate-forward 0 bps exceed 0 bps
class-map: peopleinc_classmap (match-any)
Match: access-group name people_inc
police aggregate peopleinc_mls_policer :
1000000 bps 12500 limit 12500 extended limit
Earl in slot 6 :
0 bytes
5 minute offered rate 0 bps
aggregate-forwarded 0 bytes action: transmit
exceeded 0 bytes action: drop
aggregate-forward 0 bps exceed 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
