PBR a hog???

[djmlmco]

OK, so I would like to mark COS bits on some specific data so I setup PBR. The policy goes through 4 access lists of which each has one statement in it looking for a different TCP or UDP port to assign to a given precedence. When I enable this on my fast Ethernet controller (this is one of the integrated FA ports on my 3745) the CPU skyrockets. Averaging around 60-70% now with spikes in the 90's. Now, I know there isn't a lot of traffic going on. From the documentation fast-switched PBR should be able to handle 1000 to 10,000 packets per second and I am well under this - more like 300-800pps. That and I am using th CEF-switched PBR.

What gives? Is there a better way to prioritize by ports???

Regards in advance.

[asd_asd_22]

you can use Network-Based Application Recognition (NBAR) to match against more complex or dynamic fields. you have to use this command inside class map:

switch(config)#class-map [class-name]

switch(config-cmap)#match protocol [protocol-name]

and enter the protocl name that you want.

and then implement policy-map, and assign it to interface.