Cisco ACI Data Plane Policing Statistics

[r.sharafi]

Hi everyone,

I have configured ACI Data Plane Policing and assigned it ingress to an IPG used by a L2 interface. So far so good. Now I need a way or CLI command to view the policing/rate limiting statistics similiar to "show policy-map interface" in NX-OS. With "show dpp policy" I can only see the actual configuration but no interface/packet statistics.

Thank you,

Ramin

[r.heitmann]

what about

show policy-map type data-plane <NAME> stats

according to https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/command-reference/521/Cisco-APIC-NXOS-CLI-Command-Reference-521/m_s_cmds.html#wp4185710220 ?

[r.sharafi]

Hi Ronald, 

Thank you for your response.

The command is an APIC command and unfortunatley does not show any statistics (in ACI version 5.2(7f)).

[r.heitmann · Accepted solution]

that's unfortunately true.

I discovered one [there must be a better way] possibility to monitor ingress dropped packets.

(APIC) Setup

apic1# show run
...
policy-map type data-plane dpp_1K
  set burst 1000
  set cir 1 kilo
  no shutdown
  exit

leaf 201

  interface ethernet 1/48
      service-policy type data-plane input dpp_1K

  interface ethernet 1/48.1720
      vrf member tenant CAR vrf DEFAULT l3out ISR-4K-1
      ip address 172.16.0.201/30

(Leaf) prepare

leaf1# clear counters interface ethernet1/48

(external IOS-Router/L3Out): generate traffic

• 33 Packets of 100 lost

ISR-4K-1# ping vrf MTUTEST 172.16.0.201 repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 172.16.0.201, timeout is 2 seconds:
!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!!.!
!.!!.!!.!!.!!.!!.!!.!!.!.!!.!!
Success rate is 67 percent (67/100), round-trip min/avg/max = 1/1/1 ms

(Leaf-CLI) find 33 Packets "Input Discard Errors" at 1/48

leaf1# show interface ethernet 1/48 counters detailed
Ethernet1/48
  Rx Packets:                                         186
  Rx Unicast Packets:                                 157
  Rx Multicast Packets:                                29
  Rx Bytes:                                         29706
  Tx Packets:                                          96
  Tx Unicast Packets:                                  68
  Tx Multicast Packets:                                28
  Tx Bytes:                                         18914
  Input Discard Errors:                                33

Forum Tips: 1. Paste images inline - don't attach. 2. Always mark helpful and correct answers, it helps others find what they need.

[r.sharafi]

Thank you. Interesting information about the Input Discard Error counter. I will run a test as well when I am back from vacation. Thanks again for your time. Very much appreciated.