[nsp] Weird Problem - 6509 rate limiting
Jared Mauch
jared at puck.nether.net
Tue Mar 16 15:54:54 EST 2004
On Tue, Mar 16, 2004 at 09:40:20PM +0100, sthaug at nethelp.no wrote:
> > It might be useful to state that Paul is using NativeIOS, so we don't
> > have a choice about where we configure the policing. Check out this
> > error: (Note that this cat has MSFC2/PFC installed)
>
> Well, in that case I think your question can be answered simply: Can't
> be done. That probably won't make you happy - I know it didn't make us
> happy either when we found out about this limitation.
>
> You can either upgrade to a Sup720 (rather expensive), or trunk the
> VLANs through another switch which *can* do the rate limiting (eg. a
> 3550). Or you can waste two extra ports on your 6500, connect them
> with a suitable cable, run the VLANs out and *in* again on the same
> box, and do the rate limiting on input instead. I've seen this
> described on the Cisco web site, but haven't been able to find the
> link lately.
You can also go the even fancier route:
rate-limit on the uplink(s) and the egress interfaces.
this way you can do the rate-limit as necessary. i've seen this
used on quite a number of sup1a's
- Jared
--
Jared Mauch | pgp key available via finger from jared at puck.nether.net
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
More information about the cisco-nsp
mailing list