[c-nsp] QoS - egress policing on SUP720 & 6724-SFP
Tim Stevenson
tstevens at cisco.com
Fri Feb 9 12:40:21 EST 2007
Notice that the egress example on that page is on a *routed* port,
NOT a switchport. Egress policing is only supported on an L3
interface (routed int or SVI).
Tim
At 06:54 PM 2/9/2007 +0200, Tassos Chatzithomaoglou chuntered:
>Hi to everyone....
>
>I'm trying to configure egress policing on a 6500, but i'm getting
>messages that it's not supported.
>
>6500/SUP720-3BXL is running 12.2(18)SXF6
>Module is a WS-X6724-SFP (no DFCs included)
>
>ip access-list extended LIMIT-ACL
> deny ip any x.x.x.x
> deny ip any x.x.x.x
> deny ip any host x.x.x.x
> deny udp any eq domain any
> deny tcp any eq domain any
> deny icmp any any
> permit ip any any
>!
>!
>class-map match-all LIMIT-CLASS
> match access-group name LIMIT-ACL
>!
>!
>policy-map LIMIT-POLICY
> class LIMIT-CLASS
> police cir 100000 bc 3000 be 3000 conform-action transmit
> exceed-action drop violate-action drop
>!
>interface GigabitEthernet1/24
> switchport
> switchport trunk encapsulation dot1q
> switchport mode trunk
> switchport nonegotiate
> mtu 9216
> no ip address
> load-interval 30
> mls qos trust cos
> flowcontrol send off
>end
>
>
>6500(config-if)#service-policy output LIMIT-POLICY
>MQC features are not supported in output direction for this interface
>
>
>According to
>http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a00801c8c4b.shtml#ios
>(4th example) this
>should work, unless i'm missing something here...
>
>PS: ingress policing works fine.
>
>--
>Tassos
>_______________________________________________
>cisco-nsp mailing list cisco-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/
Tim Stevenson, tstevens at cisco.com
Routing & Switching CCIE #5561
Technical Marketing Engineer, Catalyst 6500
Cisco Systems, http://www.cisco.com
IP Phone: 408-526-6759
********************************************************
The contents of this message may be *Cisco Confidential*
and are intended for the specified recipients only.
More information about the cisco-nsp
mailing list