[c-nsp] Shape traffic on 6500

[Maarten Carels]

I'm trying to limit traffic to certain ports of a 6500 switch.

By reading manuals and posts to this list I came up with:

Global:

access-list 100 permit ip any any
!
class-map m100
  match access-group 100
!
policy-map p100
  class m100
   shape average 32000

This all looks fine. But when I apply this policy to an interface with:

int gi3/1
 service-policy input p100

the switch complains with

shape average command is not supported for this interface
Configuration failed!


When I replace the 'shape' command with a 'police':
   police 32000    conform-action transmit     exceed-action drop

the configuration is accepted

Shaping looks nicer, as it does not drop packets, but delays them, having
TCP better adapt to the bandwith.

Any comments on this? What interfaces have the 'shape average' command
supported?

The manuals are very non-helpful on this, as they say 'This command is
supported in the IOS 12.2SX train. Support in a specific 12.2SX release
depends on your feature set, platform and platform hardware.

No table of what is supported on what...

Used hardware for my test config is:
6509 chassis, sup720 (WS-SUP720-3BXL), interfaces on WS-X6748-GE-TX board
with Distributed Forwarding Card WS-F6700-DFC3A

IOS 12.2(33)SXH2a ADVANCED ENTERPRISE SERVICES
(s72033-advipservicesk9_wan-mz.122-33.SXH2a.bin)


Anyone who can shine some light on this??

--maarten
-- 
---

Maarten Carels
XS4ALL Internet