[nsp] 1Mbps rate-limit - syntax help

[Stephen J. Wilcox]

On Mon, 1 Mar 2004, matthew zeier wrote:

> Ignoring that 1,000,000 isn't 1Mbps, is this syntax correct for a 1Mbps
> "cap" ?
> 
>  rate-limit input 1000000 1500 2000 conform-action transmit exceed-action drop
>  rate-limit output 1000000 1500 2000 conform-action transmit exceed-action drop

Yes is the right format, as to how many packets are exceeded and the measured 
rate that entirely depends on the interval involved.. ok so you have 1Mb and a 
burst bytes of 1500B = 12Kb so thats about 1/83 sec... about the right length. 
So IP traffic tends to be very bursty which means you may often get for periods 
of less than 1/83sec more bytes than you allow for and hence you will exceed and 
drop.

Play with the burst bytes value (eg try bigger values.. 100000) and see if you 
get the sort of results youre looking for.

Steve

> 
> 
> The conformed rate is much lower than the input/output rate, yet I'm still
> seeing a lot of exceeded matches.  'sh int' also showsa bit rate that's far
> under the 1Mbps.
> 
> #sh in fa2/1 rate-limit
> 
> FastEthernet2/1   Input
>     matches: all traffic
>       params:  1000000 bps, 1500 limit, 2000 extended limit
>       conformed 397 packets, 331656 bytes; action: transmit
>       exceeded 35 packets, 46296 bytes; action: drop
>       last packet: 16ms ago, current burst: 1434 bytes
>       last cleared 00:00:05 ago, conformed 478000 bps, exceeded 66000 bps
>   Output
>     matches: all traffic
>       params:  1000000 bps, 1500 limit, 2000 extended limit
>       conformed 331 packets, 118316 bytes; action: transmit
>       exceeded 15 packets, 20814 bytes; action: drop
>       last packet: 20ms ago, current burst: 0 bytes
>       last cleared 00:00:05 ago, conformed 170000 bps, exceeded 30000 bps
> 
> 
> --
> matthew zeier                        | "Nothing in life is to be feared.
> InteleNet Communications, Inc.       |  It is only to be understood."
> (949) 784-7904                       |       - Marie Curie
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>