Hi All,
I have an AP with multiple downstream customers, and I want to police
one specific customer (more down the line by adding more classes). When I
try to match based on a MAC ACL it doesn't seem to work at all, so I matched
based on a named IP ACL. With this on an ethernet interface, when I do a "sh
policy-map interface fa0" it seems to work inbound, but not outbound (I get
class matches on both, but the conform traffic, exceed traffic, etc is all
0's on outbound). When I apply the same policy inbound and outbound on a
wireless interface, the "sh policy-map interface" doesn't even show any
matches on the traffic class... is there something with traffic policing on
the 1242's I should be aware of? I don't see anything about class based
policing on univercd for the 1242, but in 12.4(10b)JA3, RELEASE SOFTWARE
(fc1) it seems to allow me to configure it. It is also very possible that
I'm using flawed logic, so I have included the class-map and policy-map
config below, minus the IP addresses:
class-map match-all Job1-Rate-Limit
match access-group name Job1
policy-map Job1-Limit
class Job1-Rate-Limit
police 5242500 conform-action transmit exceed-action drop
violate-action drop
ip access-list extended Job1
permit ip host blah any
permit ip any host blah
permit ip blah2 0.0.0.7 any
permit ip any blah2 0.0.0.7
It is also worth noting that the AP has no IP interfaces other than
management on the BVI, so I'm thinking I have to match based on a MAC ACL,
however I had limited luck with this as well, and there's no useable
documentation for doing class based policing on the 1242 that I can find, so
I'm thinking it's time to get a packeteer or something...
Thanks,
Chris
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
