7609 with 12.2(33)SRD6, ADVENTERPRISEK9. 7600-ES+20G3C in slot 8.
The configuration below works fine in 3945, but not in 7609. Of the two BULK classes, the one that is written first in the policy-map is matched with no consideration to the time-range. The other never gets any matches. The time-range and access-list says "active" or "inactive" at the right times, so it seems fine but doesn't work in the policy-map. Right now for example: #sh time-range OFFICEHOURS time-range entry: OFFICEHOURS (inactive) periodic weekdays 7:00 to 18:00 used in: IP ACL entry used in: IP ACL entry #sh access-lists 111 Extended IP access list 111 10 permit ip host xxx any time-range OFFICEHOURS (inactive) But still: #sh policy-map interface gi8/4.400 Class-map: BULK_OFFICEHOURS (match-all) 131357 packets, 124333424 bytes 5 minute offered rate 93000 bps, drop rate 0000 bps Class-map: BULK (match-all) 0 packets, 0 bytes 5 minute offered rate 0000 bps, drop rate 0000 bps Is this a bug in 7609? Should I do the configuration in another way in 7609? class-map match-all BULK match access-group 112 class-map match-all BULK_OFFICEHOURS match access-group 111 match access-group 112 class-map match-all VOICE match ip dscp ef policy-map CORE-WAN-EDGE_child class VOICE police 5000000 priority class BULK_OFFICEHOURS police 5000000 class BULK police 40000000 class class-default random-detect dscp-based aggregate policy-map CORE-WAN-EDGE_parent_100Mbps class class-default shape average 100000000 service-policy CORE-WAN-EDGE_child policy-map CORE-WAN-EDGE_parent_50Mbps class class-default shape average 50000000 service-policy CORE-WAN-EDGE_child interface GigabitEthernet8/4.400 bandwidth 100000 encapsulation dot1Q 400 ip address 10.40.0.1 255.255.255.0 ip flow ingress service-policy output CORE-WAN-EDGE_parent_100Mbps access-list 111 permit ip any any time-range OFFICEHOURS access-list 112 permit ip host xxx any time-range OFFICEHOURS periodic weekdays 7:00 to 18:00 I also tried these changes to get rid of the dual match in the BULK_OFFICEHOURS class-map, but it had the same problem: class-map match-all BULK match access-group 112 class-map match-all BULK_OFFICEHOURS match access-group 111 access-list 111 permit ip host xxx any time-range OFFICEHOURS access-list 112 permit ip host xxx any time-range OTHER_HOURS time-range OFFICEHOURS periodic weekdays 7:00 to 18:00 time-range OTHER_HOURS periodic weekdays 0:00 to 6:59 periodic weekdays 18:01 to 23:59 periodic weekend 0:00 to 23:59 Thanks! -- Peter Olsson p...@leissner.se _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/