[f-nsp] bandwidth limit on fesx424

[Raoul Bhatia [IPAX]]

hi,

i would like to enforce a 100mbit (as sharp as possible) bandwidth limit
on a fesx 424 running firmware 04.2.00cT3e3.
(upgrading the firmware is an option but i would like to avoid the
additional work if possible).

setup:
1 vlan with 1 untagged port:
> PORT-VLAN 163, Name k000639, Priority level0, Spanning tree Off
>  Untagged Ports:   4 
>    Tagged Ports: None
>    Uplink Ports: None
>  DualMode Ports: None

port 4 is a cisco compatible mm sfp: 1G M-SX(SFP)/CISCO-FINISAR

there is one ve associated with this vlan:

> interface ve 163
>  ip address 93.189.29.25/29
>  ip ospf area 0.0.0.0
>  ip ospf passive
> !

i want to enforce a sharp 100mbit bandwidth limit for this port
on both in- and egress.

i tried both using the "rate-limit" option ad interface level
as well as a traffic policy:

> # traffic-policy 100mbit rate-limit fixed 100000 exceed-action drop count
> # access-list 101 permit ip any any traffic-policy 100mbit 

> # interface ve 163
> # ip access-group 101 in


but somehow, i fail to find the correct settings in correctly applying
the limit. does anyone of you have a working rate-limiting setup and
can help me out on this?

thanks,
raoul
-- 
____________________________________________________________________
DI (FH) Raoul Bhatia M.Sc.          email.          r.bhatia at ipax.at
Technischer Leiter

IPAX - Aloy Bhatia Hava OG          web.          http://www.ipax.at
Barawitzkagasse 10/2/2/11           email.            office at ipax.at
1190 Wien                           tel.               +43 1 3670030
FN 277995t HG Wien                  fax.            +43 1 3670030 15
____________________________________________________________________