Hi guys,
I am hoping you can help me out with some confusion I am having with
policing. I am testing policing at a remote site with a 512kb WAN
connection. What I am trying to achieve is to police virus updates from
our server so that this traffic can only obtain 128Kbps of the remote
sites bandwidth. I am policing in the outbound direction of the serial
WAN interface at the remote site. My question is how does this affect
traffic coming 'in' to the WAN interface from the outside? i.e. will
this configuration only police traffic going outbound rather than
inbound? It seems the policing isn't working as the virus updates are
still choking the link.
class-map match-all virus-traffic
match access-group 181
class-map match-any mission-critical
match access-group 180
!
policy-map mission-critical
class mission-critical
bandwidth 256
class virus-traffic
police cir 128000
conform-action transmit
exceed-action drop
violate-action drop
class class-default
fair-queue
random-detect
!
Interface Serial0/0
ip address x.x.x.x/x
service-policy output mission-critical
I hope this makes sense.
Thanks in advance.
Aaron.
LEGAL DISCLAIMER: This message contains confidential information and is
intended only for the individual named. If you are not the named addressee you
should not disseminate, distribute or copy this e-mail. Please notify the
sender immediately by e-mail if you have received this e-mail by mistake and
delete this e-mail from your system. If you are not the intended recipient you
are notified that disclosing, copying, distributing or taking any action in
reliance on the contents of this information is strictly prohibited.
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
