Rate Limit does not work !

[salam.ahmad1]

hi everybody,

I have a case that I cannot understand it, it get me mad!

I have router connected with Switch using trunking mode (Dot1Q encrypted ).

My Problem is that I have a network is configured on subinterface  with Real IP/30 and I've set rate limit  on it to be 160 Mbps.

But I have received a high upload from customer side and that exceeded the 160 Mbps, and it reaches 320 Mbps and thats full capacuty of connection. it reachs the bottleneck 

how can I deal with that ?

please check the picture on attachment.

[Philip D'Ath]

Could you share the related config, and the type of device the config is applied to?

[salam.ahmad1]

Router is Cisco 7206VXR and the switch is cisco WS-C3750G-48TS

here is the configuration on Router :

interface GigabitEthernet0/3.4002
encapsulation dot1Q 4002
ip address x.x.x.x 255.255.255.252
rate-limit input 163840000 30720000 61440000 conform-action continue exceed-action drop
rate-limit output 163840000 30720000 61440000 conform-action continue exceed-action drop
ip tcp adjust-mss 1448
ip ospf 200 area 0

******

Switch Configuration :

interface GigabitEthernet1/0/20
switchport access vlan 4002
switchport mode access
storm-control broadcast level 16.00 1.00
spanning-tree portfast
end

Thanks in Advance

[Philip D'Ath · Accepted solution]

Bit of a long shot, but rate-limit needs CEF to be enabled.  Is CEF definitely turned on?

Which interface was the graph of?

Another option; on the 3750 you can limit the bandwidth going out that port with the below.  If the port speed is Gigabit, a percentage of 16 would limit it to 160 Mb/s.

srr-queue bandwidth limit <percentage>