Cisco 3750 Catalyst Switch Rate-Limit problem

[orkhan.rustamli.96]

Hi everyone. Our company is running metro-Ethernet service that is connecting customers to edge switch at several locations. In most of them we are using 3750 switch and for internet connection for clients we want to rate-limit. 

One sample interface configuration:

 
interface GigabitEthernet1/0/10

description Klinika_Inet
 power inline never
 no switchport
 ip address 85.***.***.*** 255.255.255.240
 rate-limit input access-group 110 61440000 7680000 15360000 conform-action transmit exceed-action drop
 rate-limit output access-group 110 61440000 7680000 15360000 conform-action transmit exceed-action drop
 load-interval 30
 storm-control broadcast level 50.00
 storm-control multicast level 50.00
 storm-control action shutdown
 spanning-tree bpdufilter enable
 spanning-tree bpduguard enable
end

access-list 110 permit ip 85.***.***.*** 0.0.0.15 any
access-list 110 permit ip any 85.***.***.*** 0.0.0.15

However, it is not working. I monitor in PRTG that their traffic is free for use and reach sometimes beyond 100Mbps. I checked show access-list and don`t see even a match.

What can be a reason?

[Georg Pauwen]

Hello,

I looked around for configuration examples and found one where actually two classes have been defined, one matching the access list, and the other matching the inteface(s). The entire thing would look like this:

access-list 110 permit ip 85.***.***.*** 0.0.0.15 any
access-list 110 permit ip any 85.***.***.*** 0.0.0.15

class-map match-all LIMIT_ISP_CLASS_1
 match input-interface FastEthernet0/0
class-map match-all LIMIT_ISP_CLASS_2
 match access-group 101
policy-map CHILD_LIMIT_ISP_POLICY
 class LIMIT_ISP_CLASS_1
  police 61440000 768000 exceed-action drop
policy-map PARENT_LIMIT_ISP_POLICY
 class LIMIT_ISP_CLASS_2
  set ip precedence 1
 service-policy CHILD_LIMIT_ISP_POLICY

interface Vlan20
 service-policy input PARENT_LIMIT_ISP_POLICY

Can you give that a try ?