??: RE: [c-nsp] Bandwidth Shaping / QOS

[Church, Chuck]

Joe,
	
	It's tricky on the 6500s.  Are you applying the config to the sup, or just the MSFC?  If you have a service policy using NBAR on an VLAN interface, I believe it'll have all packets go through the MSFC, and the NBAR will work right.  Or maybe you need to put NBAR protocol-discovery on the VLAN interface to force all packets through the MSFC.  Either way, the PFC can't do NBAR, no matter what platform it is.  If you still want a working config for P2P traffic, let me know. 


Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
cchurch at netcogov.com
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D


-----Original Message-----
From: Joe Shen [mailto:sj_hznm at yahoo.com.cn] 
Sent: Thursday, July 14, 2005 9:35 PM
To: Church, Chuck; Paul Stewart; cisco-nsp at puck.nether.net
Subject: ??: RE: [c-nsp] Bandwidth Shaping / QOS

Would you please share your configuration of traffic
shaping.

I always failed with policing BW on a GE etherchannel
on Catalyst6509 (IOS). It seems no matter how I
applied policing configuration ( on link or on
etherchannal), the incoming traffic always could
exceed the uplimt I set.

Joe

--- "Church, Chuck" <cchurch at netcogov.com>写道:

> Paul,
> 
> 	I've used NBAR on many T1-connected sites with 1700
> and 2600
> routers and it's worked fine for P2P traffic. 
> Rarely see CPU over 10%,
> although probably haven't been subjected to a DOS
> either.  I'm guessing
> if the router you've got is 2650XM/3640 grade or
> higher, it'd work fine
> with 10 meg traffic.
> 
> 
> Chuck Church
> Lead Design Engineer
> CCIE #8776, MCNE, MCSE
> Netco Government Services - Design & Implementation
> 1210 N. Parker Rd.
> Greenville, SC 29609
> Home office: 864-335-9473
> Cell: 703-819-3495
> cchurch at netcogov.com
> PGP key:
>
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
> 
> 
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf
> Of Paul Stewart
> Sent: Thursday, July 14, 2005 10:31 AM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] Bandwidth Shaping / QOS
> 
> We have an immediate need to shape some bandwidth
> based on applications
> at a
> remote site.  It's a wireless serving area and it's
> getting saturated
> currently with peer to peer traffic or we presume
> so.
>  
> I've played with NBAR a lot in the past but we've
> never put it into
> production for the purposes for limited Kazaa etc...
> 
>  
> Any thoughts on this?  One of our suppliers is
> pushing Allott
> Netenforcer
> gear and I'm interested in trying some of it out
> versus putting CPU load
> on
> the router at that location..?  Anyone used Allott
> gear and have
> feedback?
> Does Cisco make a standalone product good for this?
>  
> Thanks,
>  
> Paul
>  
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at
> http://puck.nether.net/pipermail/cisco-nsp/
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at
> http://puck.nether.net/pipermail/cisco-nsp/
> 



		
___________________________________________________________ 
雅虎免费G邮箱－No.1的防毒防垃圾超大邮箱 
http://cn.mail.yahoo.com/?id=77072