topic When I used policing it was in Routing and SD-WAN

Policy Map Issue.

azibnaseem — Tue, 05 Mar 2019 15:54:04 GMT

Dear Community Team'

I restrict customer internet bandwidth on Layer 3 Switch using policy maps. Recently I start facing problem that when I gave command that police 1000000 256000 exceed-action drop. It will take the command but it wouldn't applied. I have checked using show policy map command. One thing more that it will take that command is implemented on inward policy-map but couldn't implemented on outward policy-map. screenshot is attached for your review.

Regards'

Azib Naseem.

Hi,

gm2300061 — Tue, 24 Jan 2017 11:47:42 GMT

Hi,

Did you applied it on the correct interface?

Why don you issue: Show policy-map interface and check where is it running on?

@gm2300061 ,

azibnaseem — Wed, 25 Jan 2017 07:30:46 GMT

gm2300061 ,

Yes it is applied on correct interface. I have configured many other classes under the same policy map & all other classes are working pretty well. Only new classes didn't accept the police values.

Regards'

Hello,

Georg Pauwen — Wed, 25 Jan 2017 07:43:49 GMT

Hello,

what device/platform (e.g. 3560) do you have this policy configured on ? Can you post the ouput of 'show version' ?

@Georg Pauwen

azibnaseem — Wed, 25 Jan 2017 10:57:28 GMT

gpauwen

Screen shot of show version is attached.

Regards'

When I used policing it was

gm2300061 — Wed, 25 Jan 2017 11:42:15 GMT

When I used policing it was on IP enabled interfaces. I mean: I wanted to policying all the traffic incoming from my ISP PPPoE connection, so I had to apply the policer on the interface dialer (the int with the IP address), not on the FastEthernet. Depending on the Qos too,l there some particular issues with the interface they are worknig on.

Another way you may do it is changing the point of view? What if you do shapping instead, but for outgoing traffic to your LAN?
Shapping makes a "slow queue" and work with classes as well.
Good luck!

@gm2300061'

azibnaseem — Wed, 25 Jan 2017 12:09:15 GMT

@gm2300061'

all those interfaces are IP enabled on which I have applied policy-map.

regards'

Could you send the ouput of

gm2300061 — Wed, 25 Jan 2017 12:15:47 GMT

Could you send the ouput of the next commands:

sh policy-map

sh class

sh policy-map interface

sh run interface "the interfaces it should be working on"

Hello,

Georg Pauwen — Wed, 25 Jan 2017 12:22:57 GMT

Hello,

there are a couple of restrictions when it comes to applying QoS on interfaces on the 3750, depending on whether it is a physical port or an SVI. The link below lists the restrictions.

If possible, post the entire configuration of the switch...

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_52_se/configuration/guide/3750scg/swqos.html#wp1766950

@gm2300061

azibnaseem — Fri, 27 Jan 2017 08:12:11 GMT

gm2300061

Now classes automatically taking the police values but when I try to apply that policy-map on an interface, it will take the command but didn't applied. I have checked using, show run interface.

Hello,

Georg Pauwen — Fri, 27 Jan 2017 08:17:34 GMT

Hello,

post your full config, you might be missing a small detail...

Hello

paul driver — Fri, 27 Jan 2017 10:22:02 GMT

Hello

couldn't implemented on outward policy-map.

Policing Egress isnt supported on 3750's, shaping is using SRR which you can specify a shape rate

int x/x
speed 100
srr-queue bandwidth shape 100 0 0 0 ( 1/100th of interface bandwidth = 1mb

It will take the command but it wouldn't applied

Is the policy-map (PM) actual matching on any class-map(CM) in the MQC

Can you post class/policy maps configuration?

res
Paul

@Georg Pauwen

azibnaseem — Fri, 27 Jan 2017 10:33:40 GMT

gpauwen

Attached is the config file of my Switch. I have skipped IP details & also access-lists detail due to security reasons.

Kindly review and update.

Regards'

@paul driver '

azibnaseem — Fri, 27 Jan 2017 10:38:54 GMT

pdriver '

I have posted the configuration. Please review and update.

yes this policy-map is matching many of my customers class-maps.

Regards'

@paul driver '

azibnaseem — Fri, 27 Jan 2017 11:22:44 GMT

pdriver '

By mistake I have clicked on correct answer however problem is still persisted.

Regards'

Hello,

Georg Pauwen — Fri, 27 Jan 2017 13:13:07 GMT

Hello,

I think Paul is on the right track. I cannot find any class-map with the name 'arslan-OUT' either. Or 'arslan-IN' if it matters...