06-09-2021 10:26 PM
Hello,
I'm trying to apply service-policy on SVI interface to limit connection speed for one of our customers.
Router is pair of C9500-32C in StackWise-virtual running SW version 16.12.4.
Applying service-policy to SVI should be correct according to documentation and don't getting any error message.
Problem is that this configuration part is ignored. It is not written into running-config.
When applied on physical interface, it works.
Tried same configuration on another box (C9500-16X), same behavior. Upgraded it to 17.03.03 but nothing changed.
Found bug CSCvg84445 which is about QOS on C9000 platform, but that should be already fixed on 16.12.4 and isn't exactly what I'm seeing.
This configuration worked on previous C6800.
Did I have missed any change or is it bug?
Thanks
ukb-cp#show runn policy-map PM-Vlan537
Building configuration...
Current configuration : 101 bytes
!
policy-map PM-Vlan537
class class-default
police 100000000
shape average 100000000
!
end
ukb-cp(config)#interface vlan 537
ukb-cp(config-if)#service-policy input PM-Vlan537
ukb-cp(config-if)#service-policy output PM-Vlan537
ukb-cp#show runn interface vlan 537
Building configuration...
Current configuration : 199 bytes
!
interface Vlan537
description CUSTOMER
vrf forwarding CESNET
ip address A.B.C.D 255.255.255.252
load-interval 30
arp timeout 180
end
06-10-2021 01:52 AM
Hello @ms339r001 ,
from the document that you have provided in the Policing section it says:
>> You can only configure policing on a physical port.
So I would say that it is not supported on SVI
Hope to help
Giuseppe
06-10-2021 02:03 PM
Hello Dear
First you need to double check the reference that you post
because there are some restrictions when using QOS when it is applied on SVI read that part.
Second can you need to double check and make some changes based on the guide and configure policer using another way like the following:-
Device(config)# class-map vlan537
Device(config-cmap)# match vlan 537
Device(config-cmap)# exit
Device(config)# policy-map vlan537
Device(config-pmap)# policy-map class vlan537
Device(config-pmap-c)# police Cir. (enter speed ex: 100K,100M,1G,10G) conform-action transmit exceed-action drop
Device(config-pmap-c-police)#end
Enter the interface connected to customer which is access interface
Device(config)# interface y x/x
Device(config-if)# service-policy input vlan537
Hope this is helpfully.
07-09-2021 12:14 AM
Are you able to solve this? I Have the same problem of this. can you explain the work around? Thank you very much
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide