what is a "microflow" in 6500 QoS?

[galaer]

Hi all,

We have a 6509 switch, sup2msfc2, 12.1.23E, 128M DRAM (so we cannot upgrade to 12.2SX).

We want limit the download bandwidth of every ip address, I think the "microflow police" will work. in 12.2SX, the "police flow dest-only" command just fit, but we are using 12.1E.

So, if I config like this:

access-list 101 permit ip any 192.168.0.0 0.0.0.255

class-map match-all ip101

match acce 101

policy-map download

class ip101

police 10240000 48000 48000 conform-action transmit exceed-action drop

police flow 512000 16000 16000 conform-action transmit exceed-action drop

the question is, what's the "microflow" mean?

1. the flow between an internet ip to a 192.168.0.x ip.

2. the flow between all internet ip to a 192.168.0.x ip. This is my wish.

if the anwser is 1, so we cannot limit the bandwidth at all. then, is there any other way to do this? build a large list of every ip address is terrible.

thx.

[chris.grammer]

Microflow polices traffic for each applied port or VLAN separately on a per-flow basis

Each policer can be applied to several ports or VLANs. The flow is defined using these parameters:

source IP address

destination IP address

Layer 4 protocol

source port number

destination port number

As an example, if you configure a microflow policer to limit the TFTP traffic to 1 Mbps on VLAN 1 and VLAN 3, then 1 Mbps is allowed for each flow in VLAN 1 and 1 Mbps for each flow in VLAN 3. In other words, if there are three flows in VLAN 1 and four flows in VLAN 3, the microflow policer allows each of these flows 1 Mbps. If you configure an aggregate policer, it limits the TFTP traffic for all flows combined on VLAN 1 and VLAN 3 to 1 Mbps.

If you apply both aggregate and microflow policers, QoS always takes the most severe action specified by the policers. For example, if one policer specifies to drop the packet, but another specifies to mark down the packet, the packet is dropped.

By default, microflow policers work only with routed (Layer 3 [L3]) traffic. To police bridged (Layer 2 [L2]) traffic as well, you need to enable bridged microflow policing. On the Supervisor Engine II, you need to enable bridged microflow policing even for L3 microflow policing.

Hope this Helps,

Chris