[c-nsp] sup720 CoPP/ratelimiters

Saku Ytti saku+cisco-nsp at ytti.fi
Mon Jan 30 12:54:12 EST 2006


On (2006-01-30 19:19 +0200), Saku Ytti wrote:

> > I've confirmed with packet analyzers that when you enable RSVP, the  
> > When I didn't have this rule, IS-IS didn't come up, when I added this  
> > rule, it did.
> > 
> > I'm very sure that these rules *do work*.
> 
> Well they should not.

Just tested in VXR running 12.2(25)S5 and 7609/SUP720-3BXL running
12.2(18)SXF2.

class-map match-any FOO
  match access-group name protocol124
!
policy-map FOO
  class FOO
   police cir 32000 bc 1500 be 1500 conform-action drop exceed-action drop
violate-action drop
  class class-default
   police cir 2000000 bc 62500 be 62500 conform-action transmit
exceed-action drop
!
ip access-list extended protocol124
 permit 124 any any
!
control-plane
!
service-policy input FOO


 This in 7600 or VXR does absolutely nothing, IS-IS stays up, hold-timer
is refreshed.
 7600 does not accept 'match protoocol clns' in class-map, VXR does
accept and hold-timer stops refreshing. However it's still not
supported and TAC was surprised to hear it works.

-- 
  ++ytti


More information about the cisco-nsp mailing list