02-07-2018 12:24 AM - edited 03-05-2019 09:53 AM
Hi everyone. Our company is running metro-Ethernet service that is connecting customers to edge switch at several locations. In most of them we are using 3750 switch and for internet connection for clients we want to rate-limit.
One sample interface configuration:
interface GigabitEthernet1/0/10
description Klinika_Inet
power inline never
no switchport
ip address 85.***.***.*** 255.255.255.240
rate-limit input access-group 110 61440000 7680000 15360000 conform-action transmit exceed-action drop
rate-limit output access-group 110 61440000 7680000 15360000 conform-action transmit exceed-action drop
load-interval 30
storm-control broadcast level 50.00
storm-control multicast level 50.00
storm-control action shutdown
spanning-tree bpdufilter enable
spanning-tree bpduguard enable
end
access-list 110 permit ip 85.***.***.*** 0.0.0.15 any
access-list 110 permit ip any 85.***.***.*** 0.0.0.15
However, it is not working. I monitor in PRTG that their traffic is free for use and reach sometimes beyond 100Mbps. I checked show access-list and don`t see even a match.
What can be a reason?
02-09-2018 05:58 AM
Hello,
I looked around for configuration examples and found one where actually two classes have been defined, one matching the access list, and the other matching the inteface(s). The entire thing would look like this:
access-list 110 permit ip 85.***.***.*** 0.0.0.15 any
access-list 110 permit ip any 85.***.***.*** 0.0.0.15
class-map match-all LIMIT_ISP_CLASS_1
match input-interface FastEthernet0/0
class-map match-all LIMIT_ISP_CLASS_2
match access-group 101
policy-map CHILD_LIMIT_ISP_POLICY
class LIMIT_ISP_CLASS_1
police 61440000 768000 exceed-action drop
policy-map PARENT_LIMIT_ISP_POLICY
class LIMIT_ISP_CLASS_2
set ip precedence 1
service-policy CHILD_LIMIT_ISP_POLICY
interface Vlan20
service-policy input PARENT_LIMIT_ISP_POLICY
Can you give that a try ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide