10-09-2016 01:21 PM - edited 03-05-2019 07:14 AM
As per my requirement, I have to Police traffic coming from my Branch Network to the DMVPN HUB device. My DMVPN Hub is connected to Core.
I am trying to implement Policing in Egress direction. When I am putting the required configs then I can see traffic on interface but MQC Policy Map is not showing any increase counters on running "show policy-map interface g1/1" command.
I have gone through few documents which are showing the support of SUP32 (PFC3 Daughter Card) egress policing. I would appreciate if someone can help on this.
|------------------- | |-------------------------|
| Core-Switch | -----------| 6506-E (SUP32) |-----------< MPLS Cloud> ------------ | Branches|
|------------------- | |-------------------------|
policy-map POLICY_TEST
class CLASS_TEST
police cir 3000000
class class-default
!
class-map match-all CLASS_TEST
match access-group name ACL_TEST
class CLASS_TEST
police cir 3000000
DR-MPLS-ETSLT-A#show ip access-lists ACL_TEST
Extended IP access list ACL_TEST
10 permit ip 10.124.211.0 0.0.0.255 host 10.129.13.70
interface GigabitEthernet1/1
description *** Connected with DR-CORE-A Gi1/4***
ip address 10.231.0.34 255.255.255.252
service-policy input AV-SCCM-SERVER-LIMIT-POLICY
service-policy output POLICY_TEST
end
show policy-map interface g1/1 output
GigabitEthernet1/1
Service-policy output: POLICY_TEST
class-map: CLASS_TEST (match-all)
Match: access-group name ACL_TEST
police :
3000000 bps 93750 limit 93750 extended limit
Earl in slot 5 :
0 bytes
5 minute offered rate 0 bps
aggregate-forwarded 0 bytes action: transmit
exceeded 0 bytes action: drop
aggregate-forward 0 bps exceed 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
10-10-2016 10:01 AM
Correction in Class-map configs as it was mistakenly arrived during copy.
Extended IP access list ACL_TEST
10 permit ip 10.124.211.0 0.0.0.255 host 10.129.13.70
class-map match-all CLASS_TEST
match access-group name ACL_TEST
policy-map POLICY_TEST
class CLASS_TEST
police cir 3000000
class class-default
interface GigabitEthernet1/1
ip address 10.2.10.134 255.255.255.252
service-policy input AV-SCCM-SERVER-LIMIT-POLICY
service-policy output POLICY_TEST
end
show policy-map interface g1/1 output
GigabitEthernet1/1
Service-policy output: POLICY_TEST
class-map: CLASS_TEST (match-all)
Match: access-group name ACL_TEST
police :
3000000 bps 93750 limit 93750 extended limit
Earl in slot 5 :
0 bytes
5 minute offered rate 0 bps
aggregate-forwarded 0 bytes action: transmit
exceeded 0 bytes action: drop
aggregate-forward 0 bps exceed 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide