Have you tried using QOS to acheive this. The config below will prevent packets being dropped. They will instead be put into a lower priority Q. This is a bit more friendly.
hostname RATELIMIT_SWITCH
!
ip subnet-zero
ip routing
!
mls qos map policed-dscp 48 to 16
Modifies the policed DSCP QoS map, so the
traffic is marked down from IP precedence 6 to 2.
mls qos
Globally enables QoS.
!
class-map match-all ALL
match access-group 101
Defines the ACL to select traffic.
!
policy-map RATELIMIT
class ALL
set ip precedence 6
Marks all the class traffic with the IP precedence 6.
police 1000000 8000 exceed-action policed-dscp-transmit
Polices down to 1 Mbps and marks down according to the QoS map defined earlier
!
interface FastEthernet0/1
description ***** LINK TO SDP *****
no switchport
ip address 20.0.0.2 255.0.0.0
!
interface FastEthernet0/2
description ***** LINK TO 1Mbit LIMITED SITE *****
no switchport
ip address 40.0.0.2 255.0.0.0
mls qos monitor dscp 8 16 24 32
Turns on DSCP statistics for monitoring.
service-policy input RATELIMIT
Applies the QoS policy to an interface.
!
access-list 101 permit ip any any
Defines the traffic class.
!
