HOW TO CONTROL REAL BW POLICY IN TE TUNNEL

[jrstuart]

Hi

I did some tests configs of TE MPLS Tunnels (Head-ends). I used mpls TE bandwidth well (I guess), but I understand that the "tunnel mpls traffic-eng bandwidth xx " command is only for signalling.

Now, I wan to know how do you control the Real BW Use inside the Tunnel. (Like a Policy Rate-limit), because if I send more traffic that the bandwidth config , notthing happened. I would like to Drop excess

Rate-limit in TE Tunnel did not work.

Maybe somebody have comments

Thanks

[Harold Ritter]

You need to use rate-limiting or policing on the ingress interface.

Hope this helps,

[jrstuart]

Rate-limit at the ingress is not my option because I will drop traffic that consume BW before drop. It is a solution, I will test, but is not my option.

I want to drop at the output Tunnel, before BW consumption

Thanks

[Harold Ritter]

I think i didn't make myself clear. You need to apply the rate-limiting on the ingress interface on the head-end router. No BW will be unnecessarely consumed since traffic will be dropped at the ingress router.

Hope this helps,

[jrstuart]

You are right

But, if I have many interfaces, policy for each one with destination through the Tunnelinterface (i.e. prefix ACL PBR), does not scale. Also , if I have labeled packets coming over input interfaces , how can I do ?

I tested output rate-limt over Tunnel but did not work. Service-policy also did not work. This behaviour is Ok or Is a software issue ?

thanks in advance

[Harold Ritter]

Unfortunately, outbound rate-limiting is not supported on the tunnel interface since this interface is purely at the control plane level.

As for labeled traffic on the ingress interface, you can either rate-limit purely on BW (no need to rate-limit on IP) or policing with match on label or match any.

Hope this helps,

[jrstuart]

Right, but my interest is Traffic that cross the tunnel. Son , in the other input interfaces I need to specify some criteria to thattraffic and apply reate-limit. If I have 30 Interfaces or more, no way.

So,I think the TE tunnel, only for signalling or label encap purposes , is not real purposes. I mean, what is the real application of TE , if I can not control BW inside tunnel, Latency, packet loss, ...

There must be a way to do that. Or there must be a read reference . There is no information about it

Thanks a lot Mr Hritter.

JRSTUART

[Harold Ritter]

Jesus,

I agree that it would be nice to do egress policing on the tunnel interface. Unfortunately, it is not supported today. I would suggest that you talk to your account team about this. Not that customers haven't asked for it before but one more voice won't hurt.

Hope this helps,