[nsp] IOS Problem with CAR.

From: Vinod Anthony Joseph Cherunni (vac@dsqworld.com)
Date: Fri Feb 16 2001 - 07:22:25 EST


Dear All,

On a router connected to an upstream core ISP, I have configured CAR
limiting all inbound & outbound IP traffic to and from a particular server
only at the rate of 64 Kbps with the following configuration -

interface Ethernet0/0
 description ### Link to local LAN ###
  ip address 1.1.1.1
  ip nat inside
 rate-limit input access-group 101 64000 64000 64000 conform-action
transmit exceed-action drop

interface Serial0/0
 description ### Upstream Link to Core ISP ###
  ip address 2.2.2.2
  ip nat outside
  rate-limit input access-group 102 64000 64000 64000 conform-action
transmit exceed-action drop
  
access-list 101 permit ip host 3.3.3.3 any log
access-list 102 permit ip any host 4.4.4.4 log (Assuming this is the NAT public address)

After applying the following config CAR does not seem to work. The "show
interface s0/0 rate-limit" does not indicate any conformed or dropped
packets at all. But the same command shows some packets as conforming at
the ethernet interface. The IOS version used is 12.0-15. The same worked
when I used IOS ver 12.0(7)T.

Is there any problem with CAR, If the rate-limit policy on the WAN
interface points to a NATTED host.

Kindly help me out.

With warm regards,
Vinod.



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:29 EDT