01-21-2015 10:24 AM - edited 03-05-2019 12:37 AM
I am trying to police backup traffic between data centers on a 3945 router. I want to limit the amount of traffic to 40 Mbps. I have created a policy and applied on input to the Ethernet WAN facing interface of the router.
Configuration looks like this:
class-map match-any commvault
match access-group name commvault
policy-map police
class commvault
police rate 40000000 burst 20000
conform-action set-dscp-transmit af13
exceed-action drop
violate-action drop
interface GigabitEthernet0/1
service-policy input police
Show policy map interface below. The problem is that all packets are being marked as conforming even though the byte rate is well above 40 Mbps. I'm not sure if this is a configuration issue or a bug or something that just isn't supported on this router.
GigabitEthernet0/1
Service-policy input: police
Class-map: commvault (match-any)
2807844 packets, 225300484 bytes
30 second offered rate 1162000 bps, drop rate 0000 bps
Match: access-group name commvault
2807844 packets, 225300484 bytes
30 second rate 1162000 bps
police:
rate 40000000 bps, burst 20000 bytes, peak-burst 20000 bytes
conformed 2807844 packets, 225300484 bytes; actions:
set-dscp-transmit af13
exceeded 0 packets, 0 bytes; actions:
drop
violated 0 packets, 0 bytes; actions:
drop
conformed 1162000 bps, exceeded 0000 bps, violated 0000 bps
Class-map: class-default (match-any)
8824278 packets, 1864242262 bytes
30 second offered rate 14071000 bps, drop rate 0000 bps
Match: any
Solved! Go to Solution.
01-21-2015 12:40 PM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Where do you see the byte rate (for this class) exceed 40 Mbps? You have a snapshot stat of that?
You're policing WAN ingress?
01-21-2015 12:40 PM
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Where do you see the byte rate (for this class) exceed 40 Mbps? You have a snapshot stat of that?
You're policing WAN ingress?
01-21-2015 12:51 PM
I had configured the bandwidth incorrectly, it is working properly.
Thanks for the reply!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide