[c-nsp] service-policy on 2960 doesn't shape

Mack McBride mack.mcbride at viawest.com
Fri Jul 29 12:21:22 EDT 2011


2960s only shape on queues, not on policy maps.
Policy maps are policing not shaping.
They also do not provide reliable counters as noted by the responder.

Mack

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Andriy Bilous
Sent: Friday, July 29, 2011 10:09 AM
To: Nikolay Shopik
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] service-policy on 2960 doesn't shape

'show policy-map interface' just doesn't work on 3560/3750/2960

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_55_se/configuration/guide/swqos.html
(at the very end of the document)

Note Do not use the show policy-map interface privileged EXEC command
to display classification information for incoming traffic. The
control-plane and interface keywords are not supported, and the
statistics shown in the display should be ignored.

And before you try and bind permit ip any any to class-map and police
that - be advised access-list won't show any hits either. You have to
test your config by other means.

On Fri, Jul 29, 2011 at 5:40 PM, Nikolay Shopik <shopik at inblock.ru> wrote:
> I'm trying to configure service policy on interface but it seems not working
> at all. While same config working on old 2950. Here is sample of it. 2960
> running on 12.2(55)SE3. Any ideas?
>
> policy-map 10Mbit
>  class class-default
>  police 10000000 512000 exceed-action drop
>
> interface FastEthernet0/4
>  switchport access vlan 4
>  spanning-tree portfast
>  service-policy input 10Mbit
>
> And output of command show policy-map int.
>
> show policy-map int
>  FastEthernet0/4
>
>  Service-policy input: 10Mbit
>
>    Class-map: class-default (match-any)
>      0 packets, 0 bytes
>      5 minute offered rate 0 bps, drop rate 0 bps
>      Match: any
>        0 packets, 0 bytes
>        5 minute rate 0 bps
>
> Before this config I did tried configure it with access-list with same
> result, so I trying just match anything.
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list