Cisco Catalyst 2950G-24 Port EI Software priority rate-limit

[rossiya__]

Hi I have a Cisco 2950EI and while the rate limiting is good in ingress, I wanted to also blend in prioritization in the prority queue. However in the policy map I would like to make bsd10 traffic low priority, while the rest is high. I typed some stuff into the 2950 'policy-map bsd10' but I am not sure how these rules behave:

!

!

class-map match-all match-any

match access-group 1

class-map match-all bsd10only

match access-group name bsd10

class-map match-all bsd10

match access-group name bsd10

!

!

policy-map 8Mbps

class match-any

police 16000000 32768 exceed-action drop

set ip dscp 56

policy-map bsd10

class match-any

police 11000000 32768 exceed-action drop

set ip dscp 8

class bsd10

set ip dscp 8

police 17000000 32768 exceed-action drop

!

[Georg Pauwen]

Hello,

first of all, in your configuration, the same access list (bsd10) is referenced in two class maps (bsd10only and bsd10). From what I can tell from your remarks, you might want to simplify your policy as following:

class-map match-all OTHER_TRAFFIC

match access-group 1

class-map match-all BSD10ONLY

match access-group name bsd10

!

policy-map 8Mbps

class OTHER_TRAFFIC

police 16000000 32768 exceed-action drop

set ip dscp 56

class BSD10ONLY

police 11000000 32768 exceed-action drop

set ip dscp 8

I have renamed the class 'match-any' to 'OTHER_TRAFFIC', since the 'match-any' is identical to the matching statement under the class-map, which could be confusing.

In this example, only traffic referenced in access list bsd10 will have the DSCP set to 8, and will be policed to 11Mbps, all other traffic will have the DSCP set to 56, and will be policed to 16Mbps.

Be aware that you are matching all traffic referenced in the access lists, that is, with the 'match-all' under the class-map, all statements in the access lists will need to be matched, in order for the action in the policy map to be taken. With the 'match-any' under the class-map, any matching statement in the access list will lead to the action referenced in the policy map being taken...

Does that make sense ?

Regards,

GP

[rossiya__]

OK that is a clean command. But I need to limit the TOTAL bandwidth in all ports to 16Mbps, as as to match my prepaid bandwidth to the carrier without overage. Can that be done with a 'match-any' qualifier?

Thanks

Nik

[joyride_us]

Hi,

I would think either you need to police all traffic on each port individually or shape it on the ports where traffic is exiting eith ACL!

[rossiya__]

Then the only solution is to buy another 2950 switch so as to regulate the TOTAL traffic incoming as the 2950 has no global policy? Won't the packet losses be worse when two switches are both regulating traffic, instead of one switch enforcing a total bandwidth prioritization policy?