Jon, Do you want to police the traffic on the physical port or on the vlan? If on the physical port, apply the policy on the port itself...
There is a good chance that in that old IOS there would be a problem with VLAN counters... Arie -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jon Lewis Sent: Monday, August 02, 2010 20:39 To: [email protected] Subject: [c-nsp] 6500 policing I'm having some trouble with policing on a 6500 (sup720-3bxl) on a WS-X6416-GBIC port. The port is supposed to be rate-limited to 40mbit/s. The physical port is configured as a layer 2 port tied to a single vlan (switchport access vlan ...). Egress policing is applied to the SVI port interface Vlan2006 service-policy output 40mbit The policy-map is simply class-map match-any all match ip dscp default policy-map 40mbit class all police 40000000 4000000 4000000 conform-action transmit exceed-action drop The interface counters really don't make much sense. show int g... shows the physical port is doing 20-25mbit/s in each direction. show int vl2006 claims there's no input and 10mbit/s output traffic. I can live with the vlan interface counters being bogus, but what I'm seeing is at 20-25mbit/s output traffic on the gig port, output packets are being dropped and sh mls qos ip g... shows policed packets incrementing at a pretty good rate. I'm tempted to reconfigure the physical ports as layer 3 ports to see if that makes any difference. I'm doing similar policing on other interfaces and can't recall ever seeing this behavior. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
