[c-nsp] 7600 SVI (vlan interface) Policing

[Phil Mayers]

On 12/03/2011 06:52 AM, ar wrote:
> Hi.
>
> Based on this article:
> http://www.scribd.com/doc/36278538/Cisco-QoS-6500-7600-Indepth-Design
> (see notes below),
>
> ingress policing can be applied on vlan interfaces and L2 switch
> ports, routed ports.
>
> But based on my testing, it seems only egress policing is working on
> vlan interfaces. It's not policing the ingress traffic.

You need:

int Gi1/1
   mls qos vlan-based
   switchport ... vlan 123
int Vlan123
   service-policy BLAH in

You should read up on PFC QoS, and in particular be aware that policers 
are not synced between forwarding engines, so if you are using DFCs, the 
rate will be the aggregate of each DFC ingressing the traffic.