police on Catalyst 4507

[devanathan.b]

I have configured a policy map and configured police to limit the traffice to 200 Mb and applied it to the interface through service policy. Even though the show policy-map shows packets being discarded the traffic reaches 206 MB. Is there any other setting to be done to restrict the traffic to 200 mb

policy-map test

class all_traffic

police 200000000 bps 256000 byte conform-action transmit exceed-action drop

class-map match-any all_traffic

match any

interface GigabitEthernet4/5

no switchport

ip address 192.168.1.1 255.255.255.252

service-policy input test

service-policy output test

[didyap]

You configuration seems to be sufficient to rate limit traffic to 200Mb. However instead of Class based policing the only other option you have is to use rate-limit command which does the same function as class based policing as shown in your configuration.

[bsivasub]

didyap,

FYI:

we only support class-based policing..there is no rate-limit aka CAR support on cat4k. Policing is done in hw.

[bsivasub]

Remember there is burst parameter configured and depending on how you measure it, you should expect some variance from the configure rate due to burst and hw accuracy and measured accuracy. We have done internal testing on policing and the maximum deviation from the rate is 1.5% of the rate.

http://www.cisco.com/warp/customer/473/134.html#topic1