[c-nsp] One or two policy and class maps?
Frank Bulk
frnkblk at iname.com
Thu Oct 18 22:36:04 EDT 2007
I have a 7609-S with the RSP720 and PFC3C, which supports in and outbound
QoS flows.
Should I be using one or two policy and class maps? The first method, if I
understand this correctly, has a single service policy in configuration that
is moot because there will never be matches one direction. The second one,
while more complex, eliminates checking flow ACL matches that will never
exist.
This:
class-map match-any test-networks
match access-group name test-policer-inbound
match access-group name test-policer-outbound
policy-map test-policer
class test-networks
police cir 2000000 pir 2000000 conform-action transmit
exceed-action drop
interface Vlan203
ip address 167.a.b.c 255.255.255.252
service-policy input test-policer
service-policy output test-policer
end
or this:
class-map match-any test-inbound-networks
match access-group name test-policer-inbound
class-map match-any test-outbound-networks
match access-group name test-policer-outbound
policy-map test-inbound-policer
class test-inbound-networks
police cir 2000000 pir 2000000 conform-action transmit
exceed-action drop
policy-map test-outbound-policer
class test-outbound-networks
police cir 2000000 pir 2000000 conform-action transmit
exceed-action drop
interface Vlan203
ip address 167.a.b.c 255.255.255.252
service-policy input test-inbound-policer
service-policy output test-outbound-policer
end
The rest of the config can be found below.
Regards,
Frank
=====================================================
vlan 203
name Test
interface GigabitEthernet1/5
description Test
switchport
switchport access vlan 203
speed 100
duplex full
ip access-list extended test-policer_inbound
permit ip any d.e.f.0 0.0.0.255
ip access-list extended test-policer_outbound
permit ip d.e.f.0 0.0.0.255 any
More information about the cisco-nsp
mailing list