QoS Police on 3945 router not working

[kirkulees007]

I am trying to police backup traffic between data centers on a 3945 router.  I want to limit the amount of traffic to 40 Mbps.  I have created a policy and applied on input to the Ethernet WAN facing interface of the router.

Configuration looks like this:

class-map match-any commvault
 match access-group name commvault
policy-map police
 class commvault
  police rate 40000000  burst 20000
   conform-action set-dscp-transmit af13
   exceed-action drop
   violate-action drop
 

interface GigabitEthernet0/1

service-policy input police
 

Show policy map interface below.  The problem is that all packets are being marked as conforming even though the byte rate is well above 40 Mbps.  I'm not sure if this is a configuration issue or a bug or something that just isn't supported on this router. 

GigabitEthernet0/1

  Service-policy input: police

    Class-map: commvault (match-any)
      2807844 packets, 225300484 bytes
      30 second offered rate 1162000 bps, drop rate 0000 bps
      Match: access-group name commvault
        2807844 packets, 225300484 bytes
        30 second rate 1162000 bps
      police:
          rate 40000000 bps, burst 20000 bytes, peak-burst 20000 bytes
        conformed 2807844 packets, 225300484 bytes; actions:
          set-dscp-transmit af13
        exceeded 0 packets, 0 bytes; actions:
          drop
        violated 0 packets, 0 bytes; actions:
          drop
        conformed 1162000 bps, exceeded 0000 bps, violated 0000 bps

    Class-map: class-default (match-any)
      8824278 packets, 1864242262 bytes
      30 second offered rate 14071000 bps, drop rate 0000 bps
      Match: any

[Joseph W. Doherty · Accepted solution]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Where do you see the byte rate (for this class) exceed 40 Mbps?  You have a snapshot stat of that?

You're policing WAN ingress?

[kirkulees007]

I had configured the bandwidth incorrectly, it is working properly.

Thanks for the reply!