[c-nsp] Functional CIR in 3560

[Mattias Eliasson]

Hi

We use a CIR rateing on our 3560s that does not seem to work well on 
higher bandwidths ie 15Mbit and above.

The problem is that the customer gets a quarter TCP and full UDP of CIR.

These are mainly used on FastEthernet ports but not exclusivly.

Can I put a priority on TCP over UDP so that the dropped packets dont 
strangle TCP?



Example conf

class-map match-all CustomerA
   match access-group name CustomerA
!
policy-map Customers
   class CustomerA
     police 256000 64000 exceed-action drop
     trust dscp

interface FastEthernet0/1
  description uplink
  no switchport
  ip address x.y.z.c 255.255.255.252
  service-policy input Customers
  no mdix auto

ip access-list extended CustomerA
  permit ip any host x.y.z.c
  permit ip host x.y.z.c any


What sollutions are out there for this platform and others?

Best regards

Mattias Eliasson