[nsp] 6509 + MFSC2 + CAR ?

Wed Feb 4 15:52:53 EST 2004

IC> #2 Sup2 only supports input policing. Configure this feature though the
IC> modular qos cli (MQC) like this:

On physical interface? And on SVI too?

br
--
Konstantin Barinov
INFONET AS, Tallinn, Estonia

Wednesday, February 4, 2004, 9:36:40 PM, you wrote:

IC> Definitive Answer:

IC> #1 Don't use "rate-limit" command it only effects traffic that is switched
IC> by the MSFC, and for Sup2 and Sup720 that should be
IC> just about nothing. In latter release it has finally been removed to stop
IC> confusion. It works if you make your traffic get switched by the MSFC and
IC> that it not a something you want to do.

IC> class a1
IC>    match access-group 100
IC> policy-map test
IC>    class a1
IC>       police 10000000 312500 312500 conform-action transmit exceed-action drop

IC> int fast 3/1
IC>    service-poicy input test

IC> #3 Sup720 supports input policing and output policing per vlan or per
IC> logical / physical interface

IC> #4 Shaping is only supported upon the WAN modules. FlexWAN and Enhanced
IC> FlexWAN supports shaping, OSM modules support Shaping on the interfaces
IC> that are connected to the PXF processors. All QoS for the WAN interfaces
IC> must be configured by the MQC (aka using class and policy maps).

IC> Ian

IC> At 11:11 AM 2/4/2004 -0800, Richard J. Sears wrote:
>>Yes - I did read that - however there is a difference of opinion in
>>relation to if any of it works at all.
>>
>>On one hand, I have people telling me that the 6509 does not support any
>>type of shaping/rate limiting/etc, and then I have people telling me
>>that it does.
>>
>>What I am asking for is an example of a working config - thats all.
>>
>>I have yet to see one that actually works leading me to believe that the
>>folks who have told me it simply does not work are correct.
>>
>>Thanks
>>
>>On Wed, 4 Feb 2004 13:43:33 -0500
>>Jason Lixfeld <jason at lixfeld.ca> wrote:
>>
>> > There was a thread about this yesterday.  From that thread:
>> >
>> > 6500 does not do any *shaping*, it does policing/rate limiting. In other
>> > words, we won't "smooth out a bursty flow" by buffering traffic, we
>> > basically put a hard cap on usage.
>> >
>> > Both sup1 & sup2 support *ingress* policing only, and you need to make
>> > sure you are using the right combination of CLI commands to accomplish
>> > this, otherwise it won't work or won't work as expected. There should be
>> > some example configs on cisco.com in the support area, or use the config
>> > guide (which admittedly can be a bit hard to follow).
>> >
>> > Sup720 supports ingress & egress policing, but do note on egress that it
>> > is aggregate policing only and only on a per-routed (L3) interface or
>> > per VLAN basis only, *not* on a per-Layer 2 switch port basis.
>> >
>> >
>> > On Feb 4, 2004, at 1:28 PM, Richard J. Sears wrote:
>> >
>> > > Hello Everyone,
>> > >
>> > > I have spent a bunch of time reading all the entries I could find
>> > > pertaining
>> > > to 6509's and CAR. Several people have claimed to
>> > > get it working:
>> > >
>> > > ***snip***
>> > >
>> > > ...but I know a number of people who use 6500s+MSFCs solely for the
>> > > purpose of utilizing CAR to traffic-shape their customers
>> > > and they're all quite pleased.
>> > >
>> > > ***snip***
>> > >
>> > > and yet other claim Cisco told them it would not work at all due to
>> > > the PFC.
>> > >
>> > > I am looking for someone who can tell me if CAR will work on 6509's
>> > > and if they have it working, exactly how they got it to work. I see
>> > > some references to policers on the PFC as a work around, and would
>> > > like more information on that if someone has it.
>> > >
>> > > Here is my config that I am trying to make work:
>> > >
>> > > (CEF is enabled on the port and on the switch)
>> > >
>> > >
>> > > interface FastEthernet3/5
>> > >  description Connection to Chris's Office Linux Box
>> > >  ip address 10.10.50.1 255.255.255.252
>> > >  rate-limit input 1000000 50000 50000 conform-action transmit
>> > > exceed-action drop
>> > >  rate-limit output 1000000 50000 50000 conform-action transmit
>> > > exceed-action drop
>> > >  load-interval 30
>> > >  no cdp enable
>> > >
>> > > Hence to say, that I can merrily download via ftp from that box at 10
>> > > to 15mbps all day long and a sh int rate-limit does not show any hits.
>> > >
>> > > My goal is to rate-limit colo customers attached to our 6509 switches,
>> > > and any help would be greatly appreciated.
>> > >
>> > > Our 6509's are configured with Sup1A w/MFSC2s and 256MB RAM each. We
>> > > are
>> > > running IOS only on the 6509's (no Cat Code).
>> > >
>> > > My goal is to rate limit my colo customers both inbound and outbound so
>> > > they cannot use more bandwidth then they want and hence not get a huge
>> > > bill.
>> > >
>> > >
>> > >
>> > > Any help would be greatly appreciated.
>> > >
>> > > Thanks
>> > >
>> > >
>> > > ******************************************
>> > > Richard J. Sears
>> > > Vice President
>> > > American Digital Network
>> > > ----------------------------------------------------
>> > > rsears at adnc.com
>> > > http://www.adnc.com
>> > > ----------------------------------------------------
>> > > 858.576.4272 - Phone
>> > > 858.427.2401 - Fax
>> > > ----------------------------------------------------
>> > >
>> > > I fly because it releases my mind
>> > > from the tyranny of petty things . .
>> > >
>> > >
>> > > "Work like you don't need the money, love like you've
>> > > never been hurt and dance like you do when nobody's
>> > > watching."
>> > >
>> > >
>> > > _______________________________________________
>> > > cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> > > https://puck.nether.net/mailman/listinfo/cisco-nsp
>> > > archive at http://puck.nether.net/pipermail/cisco-nsp/
>> >
>> > _______________________________________________
>> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> > https://puck.nether.net/mailman/listinfo/cisco-nsp
>> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>>
>>******************************************
>>Richard J. Sears
>>Vice President
>>American Digital Network
>>----------------------------------------------------
>>rsears at adnc.com
>>http://www.adnc.com
>>----------------------------------------------------
>>858.576.4272 - Phone
>>858.427.2401 - Fax
>>----------------------------------------------------
>>
>>I fly because it releases my mind
>>from the tyranny of petty things . .
>>
>>
>>"Work like you don't need the money, love like you've
>>never been hurt and dance like you do when nobody's
>>watching."
>>
>>_______________________________________________
>>cisco-nsp mailing list  cisco-nsp at puck.nether.net
>>https://puck.nether.net/mailman/listinfo/cisco-nsp
>>archive at http://puck.nether.net/pipermail/cisco-nsp/

IC> _______________________________________________
IC> cisco-nsp mailing list  cisco-nsp at puck.nether.net
IC> https://puck.nether.net/mailman/listinfo/cisco-nsp
IC> archive at http://puck.nether.net/pipermail/cisco-nsp/