[c-nsp] rate-limit problem 7206VXR

[Paul Stewart]

Hi there.

 

We have some 7206VXR's in place for BRAS functions.  They have functioned
very well for a number of years..

 

Recently (past couple of months it seems) we have discovered that
rate-limiting isn't working any longer - suddenly it seems.

 

Example customer (connected to DSLAM via ADSL2+):

 

acs1-con-mb#show interfaces virtual-access 1255 rate-limit

Virtual-Access1255

  Input

    matches: all traffic

      params:  512000 bps, 96000 limit, 192000 extended limit

     conformed 101157 packets, 9467316 bytes; action: transmit

      exceeded 199 packets, 271225 bytes; action: drop

      last packet: 0ms ago, current burst: 134 bytes

      last cleared 00:04:35 ago, conformed 275160 bps, exceeded 7882 bps

 

 

This user should be limited to 512Kb/s pretty much (not including short term
burst etc).  The above output would seem to indicate that they are getting
conformed (with action: transmit) until they hit the exceed limit (with
action:drop).

 

The problem is that this user in this example is able to download at 18Mb/s
with no problems despite the above rate-limit being applied.. I'm trying to
figure this out and it's driving me nuts ;)

 

Radius snippet for this test user (me) looks like this:

 

        Cisco-AVPair = "lcp:interface-config#1=rate-limit input 512000 96000
192000 conform-action transmit exceed-action drop",

        Cisco-AVPair = "lcp:interface-config#2=rate-limit output 512000
96000 192000 conform-action transmit exceed-action drop"

 

7206VXR-NPE1G running 12.2(33)SRD3 . no changes in a couple of years to the
box.

 

Thanks for any input,

 

Paul