[nsp] Weird Problem - 6509 rate limiting

Jared Mauch jared at puck.nether.net
Tue Mar 16 15:54:54 EST 2004


On Tue, Mar 16, 2004 at 09:40:20PM +0100, sthaug at nethelp.no wrote:
> > It might be useful to state that Paul is using NativeIOS, so we don't
> > have a choice about where we configure the policing.    Check out this
> > error:  (Note that this cat has MSFC2/PFC installed)
> 
> Well, in that case I think your question can be answered simply: Can't
> be done. That probably won't make you happy - I know it didn't make us
> happy either when we found out about this limitation.
> 
> You can either upgrade to a Sup720 (rather expensive), or trunk the
> VLANs through another switch which *can* do the rate limiting (eg. a
> 3550). Or you can waste two extra ports on your 6500, connect them
> with a suitable cable, run the VLANs out and *in* again on the same
> box, and do the rate limiting on input instead. I've seen this
> described on the Cisco web site, but haven't been able to find the
> link lately.

	You can also go the even fancier route:

	rate-limit on the uplink(s) and the egress interfaces.

	this way you can do the rate-limit as necessary.  i've seen this
used on quite a number of sup1a's

	- Jared

-- 
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


More information about the cisco-nsp mailing list