[c-nsp] QoS - egress policing on SUP720 & 6724-SFP

Sukumar Subburayan sukumars at cisco.com
Fri Feb 9 13:07:22 EST 2007



To add, that page needs to be updated like mentioned in our Configuration 
Guide to say that we support Egress policing only on L3 routed port or 
SVI.

In the 'Egress Policing' section of that doc it says:

"It supports egress policing on a port or L3 routed interface"

which would lead user to believe that even L2 port supports it.

sukumar




On Fri, 9 Feb 2007, Tim Stevenson wrote:

> Notice that the egress example on that page is on a *routed* port,
> NOT a switchport. Egress policing is only supported on an L3
> interface (routed int or SVI).
>
> Tim
>
> At 06:54 PM 2/9/2007 +0200, Tassos Chatzithomaoglou chuntered:
>> Hi to everyone....
>>
>> I'm trying to configure egress policing on a 6500, but i'm getting
>> messages that it's not supported.
>>
>> 6500/SUP720-3BXL is running 12.2(18)SXF6
>> Module is a WS-X6724-SFP (no DFCs included)
>>
>> ip access-list extended LIMIT-ACL
>>   deny   ip any x.x.x.x
>>   deny   ip any x.x.x.x
>>   deny   ip any host x.x.x.x
>>   deny   udp any eq domain any
>>   deny   tcp any eq domain any
>>   deny   icmp any any
>>   permit ip any any
>> !
>> !
>> class-map match-all LIMIT-CLASS
>>    match access-group name LIMIT-ACL
>> !
>> !
>> policy-map LIMIT-POLICY
>>    class LIMIT-CLASS
>>     police cir 100000 bc 3000 be 3000 conform-action transmit
>> exceed-action drop violate-action drop
>> !
>> interface GigabitEthernet1/24
>>   switchport
>>   switchport trunk encapsulation dot1q
>>   switchport mode trunk
>>   switchport nonegotiate
>>   mtu 9216
>>   no ip address
>>   load-interval 30
>>   mls qos trust cos
>>   flowcontrol send off
>> end
>>
>>
>> 6500(config-if)#service-policy output LIMIT-POLICY
>> MQC features are not supported in output direction for this interface
>>
>>
>> According to
>> http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a00801c8c4b.shtml#ios
>> (4th example) this
>> should work, unless i'm missing something here...
>>
>> PS: ingress policing works fine.
>>
>> --
>> Tassos
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>
> Tim Stevenson, tstevens at cisco.com
> Routing & Switching CCIE #5561
> Technical Marketing Engineer, Catalyst 6500
> Cisco Systems, http://www.cisco.com
> IP Phone: 408-526-6759
> ********************************************************
> The contents of this message may be *Cisco Confidential*
> and are intended for the specified recipients only.
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list