[c-nsp] QoS - egress policing on SUP720 & 6724-SFP

Tassos Chatzithomaoglou achatz at forthnet.gr
Fri Feb 9 11:54:08 EST 2007


Hi to everyone....

I'm trying to configure egress policing on a 6500, but i'm getting messages that it's not supported.

6500/SUP720-3BXL is running 12.2(18)SXF6
Module is a WS-X6724-SFP (no DFCs included)

ip access-list extended LIMIT-ACL
  deny   ip any x.x.x.x
  deny   ip any x.x.x.x
  deny   ip any host x.x.x.x
  deny   udp any eq domain any
  deny   tcp any eq domain any
  deny   icmp any any
  permit ip any any
!
!
class-map match-all LIMIT-CLASS
   match access-group name LIMIT-ACL
!
!
policy-map LIMIT-POLICY
   class LIMIT-CLASS
    police cir 100000 bc 3000 be 3000 conform-action transmit exceed-action drop violate-action drop
!
interface GigabitEthernet1/24
  switchport
  switchport trunk encapsulation dot1q
  switchport mode trunk
  switchport nonegotiate
  mtu 9216
  no ip address
  load-interval 30
  mls qos trust cos
  flowcontrol send off
end


6500(config-if)#service-policy output LIMIT-POLICY
MQC features are not supported in output direction for this interface


According to http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a00801c8c4b.shtml#ios (4th example) this 
should work, unless i'm missing something here...

PS: ingress policing works fine.

-- 
Tassos


More information about the cisco-nsp mailing list