[c-nsp] Limit port usage on a cisco 3550

[Yuri Selivanov]

		Hi Mohammad!

> Hi all
> 
> i have the same request , i want ti police outbound traffic on a Layer 2 port
> i have Cisco ME3750 with c3750me-i5-mz.122-35.SE5 IOS image

	You tried to apply egress policy to a regular (non-ES) interface
which is not supported:

  http://tinyurl.com/3yctyjn

	AFAIR, ME3750's regular ports behave identically to 3750/3560 in
terms of qos.

> when i apply the same configuration to the interface , first i cannot find it when i make show run interface
> and i have monitored the rate and it didnt drop the packets
> and when i no the service policy under the interface , i get prompted that no service policy is attached to the interface
> 
> i issued the command sh policy-map interface fastEthernet 1/0/6 and output results
> mls qos
> class-map match-all MSSK
>   match ip dscp cs1 
> !
> !
> policy-map MSSK-Policy
>   class MSSK
>     police 200000 8000 exceed-action drop
> 
> interface FastEthernet1/0/6
> service-policy output MSSK-Policy
> 
> Any ideas ?
> 
> Thanks
> 
> > Date: Wed, 2 Jun 2010 09:19:53 +0700
> > From: uri at tomsknet.ru
> > To: cisco-nsp at puck.nether.net
> > Subject: Re: [c-nsp] Limit port usage on a cisco 3550
> > 
> > 		Hi there!
> > 
> > > The 3550 Switch doesn't support egress policing or shaping at less then line
> > > rate.
> > 
> > 	There's only one case when you can *DO* egress policing on
> > cat3550 platform but you're restricted to use *ONLY*:
> > 
> >  --  class-map w/ "match ip dscp"
> >  --  action = "police"
> >   
> >   http://tinyurl.com/2a94rx4  --> Step #14
> > 
> > !
> > !
> > mls qos
> > !
> > class-map match-all SCAVENGER
> >   match ip dscp cs1 
> > !
> > policy-map EGRESS
> >   class SCAVENGER
> >     police 8000 8000 exceed-action drop
> > !
> > interface FastEthernet0/1
> >  service-policy output EGRESS
> >  mls qos trust dscp
> >  mls qos monitor dscp 8
> >  mls qos monitor packets
> > !
> > 
> > dut-3550#sh mls qos interface fastEthernet 0/1 statistics | b Egress
> > Egress
> >   dscp: incoming   no_change  classified policed    dropped (in pkts)
> >     8 : 1000          n/a       n/a      0          52        
> > Others: 88            n/a       n/a      0          0         
> > 
> > dut-3550#sh ver | i IOS
> > Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(25)SEE4, RELEASE SOFTWARE (fc1)
> > 
> > 	HTH!
> > 
> > [snip]
> > 
> > -- 
> > Best Regards,
> > Yuri Selivanov
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>  		 	   		  
> _________________________________________________________________
> Hotmail: Free, trusted and rich email service.
> https://signup.live.com/signup.aspx?id=60969
-- 
Best Regards,
Yuri Selivanov