[c-nsp] PFC3B policing again

Michael Ulitskiy mulitskiy at acedsl.com
Mon Oct 19 17:54:22 EDT 2009


I wonder if anyone can comment on the following:

CORE1#sh policy-map int vlan 21


  Service-policy output: POLICE-DSL

    class-map: FROM-ACE-VOIP (match-all)
      Match: access-group name FROM-ACE-VOIP
      police aggregate OC3-VOIP-OUT :
        1000000 bps 180000 limit 180000 extended limit
      Earl in slot 5 :
        1775926349 bytes
        5 minute offered rate 1933504 bps
        aggregate-forwarded 1775926349 bytes action: transmit
        exceeded 0 bytes action: transmit
        aggregate-forward 1632704 bps exceed 0 bps

As you can see traffic matching works just fine and the rates it's showing is reasonable, but there's no
traffic counted as exceeded even though both "aggregate-forward bps" and "5 minute offered rate" exceeds 
a configured rate of 1M. 
Is it a bug? Is aggregate policing supported on SVI in outbound direction? From the docs it looks like it is, but
it doesn't seem to work for me.

Equipment: 6509, SUP32, PFC3B.
IOS: 12.2(33)SXH4


mls qos aggregate-policer OC3-VOIP-OUT 1000000 180000 180000 conform-action transmit exceed-action transmit
class-map FROM-ACE-VOIP
 match access-group name FROM-ACE-VOIP
policy-map POLICE-DSL
  police aggregate OC3-VOIP-OUT
interface range vlan21,vlan25-29
  service-policy output POLICE-DSL

Any pointers is greatly appreciated,


More information about the cisco-nsp mailing list