[nsp] 6509 Help - Please! :)

[Paul Stewart]

You have been told several times that the MSFC2/PFC2 hardware *cannot* do
output policing. Maybe you're looking at the wrong tool for the job?

Yes, and I'm sorry to everyone in the list if I'm being a little too
stubborn on this...:)

Having said that,

1. MSFC2/PFC2 hardware certainly can do input policing, both on a physical
port and on a VLAN basis. The traffic that's going out one physical port
certainly has to come in on one or more other physical ports, which means
that you may be able to convert policing on output to policing on the
corresponding input ports/VLANs. Look into aggregate policers to do this.

Unfortunately we only have one public facing port to work with...

2. The idea of running the traffic out one port and in on another port on
the same box has already been offered - this has worked for us in the past
(but we don't have it in production any more).

Yes, but the customer doesn't want to lose prescious ethernet ports... We
tried that and it works perfectly...

3. You *may* be able to do some rate limiting in software on the MSFC2 with
hybrid - I believe it was said explicitly from Cisco people on this list
that it didn't work with native IOS. Note that using software for this will
of course greatly lower the capacity you can offer/police to your customers
- the MSFC2 has a 300 Mhz MIPS CPU and in this respect should be comparable
to a 7200 with NPE-300 or thereabouts.

Tried to run various "policing" and rate-limiting and come across same
problems...going to try route-map idea from previous posting using native
ios at this point...

To the list:  thank you to everyone for all your help... I appreciate that
sometimes it can get frustrating to say the same thing over and over to
someone on the list who is trying to learn this stuff... I did not mean to
create any issues in creating a very long thread... Appreciate everyone's
patience. 

Sincerely,

Paul Stewart