[c-nsp] DSCP markdown with policing / Cat6000 SUP2/MSFC2 native IOS

[Rey Martin]

how about this..?

 policy-map FastEthernet3/5_in
  class FastEthernet3/5_in
   police cir 512000
     conform-action set-dscp-transmit 24
     exceed-action set-dscp-transmit default
   bandwidth 512
   shape average 1024000


----- Original Message ----- 
From: "JC Hall" <jc.hall at cybertrails.net>
To: <cisco-nsp at puck.nether.net>
Sent: Friday, February 04, 2005 12:08 AM
Subject: [c-nsp] DSCP markdown with policing / Cat6000 SUP2/MSFC2 native IOS


> Hello list, I need some help configuring some policing rules on my 6500
> switch with DSCP markdown.
>
> Here is the scenario:
>
> I set the DSCP on customer inbound traffic to 8, 16 or 24 depending on a
> subscribed service level.  Inbound traffic is permitted to burst up to a
> certain cap above a subscription rate.  However, for all bursty traffic,
> I want to mark down the DSCP and apply a policing rule to limit the
> overall throughput to a certain speed.
>
> For example:
> Subscription rate = 512Kbps
> In-profile DSCP = 24
> Out-of-profile DSCP = 0
> Overall cap = 1024Kbps
>
> This is my configuration thus far without implying the cap because I
> haven't yet figured out how to make it work.
>
> !
> !
> !
> mls qos map policed-dscp normal-burst 8 16 24 to 0
> mls qos map policed-dscp max-burst 8 16 24 to 0
> !
> class-map match-any FastEthernet3/5_in
>  match access-group name FastEthernet3/5_in
> !
> policy-map FastEthernet3/5_in
>  class FastEthernet3/5_in
>     police 512000 2000 2000 conform-action set-dscp-transmit 24
> exceed-action policed-dscp-transmit
> !
> interface FastEthernet3/5
> ip address 10.0.0.25 255.255.255.248
> no ip redirects
> no ip unreachables
> ip route-cache flow
> duplex full
> no cdp enable
> service-policy input FastEthernet3/5_in
> !
> ip access-list extended FastEthernet3/5_in
> permit ip 10.0.0.24 0.0.0.7 any
> !
> !
> !
>
> At this point I realize that there is no cap implemented and traffic
> above 512Kbps should just get marked down to DSCP 0.  Where/how do I
> implement the policing rule to drop packets at 1024Kbps?  I've tried
> adding another class-map to my policy-map to match DSCP 0 packets and
> police it there, but I think that was incorrect and of course didn't
> give me the results I needed.
>
> Any help would be appreciated.
>
> TIA!
>
> -JC
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/