Suppose I had a 2621 with dot1q (or isl) connection to a switch with some customer boxes on it (customer per vlan). Now suppose I wanted to do CAR for individual vlans. Could I put a different "rate-limit" statement on each subinterface and have it work? Or am I stuck with a "rate-limit" at the toplevel and a seriously nasty policy acl? Anyone actually having success with this? IOS version? Thanks, ---Rob