WS-C4948 service-policy

[ahmedabdelbaqi]

Hi 

I have WS-C4948-10GE ( cat4500-entservicesk9-mz.150-2.SG4.bin ) and I want to limit the internet download bandwidth that reach to subnet xx.107.50.128/25  , interface TenGigabitEthernet1/49 is the interface from ISP side , but with the below configuration it doesnt work 

ip access-list extended Band-new1
permit ip any xx.107.50.128 0.0.0.127

class-map match-all Band-new1
match access-group name Band-new1

policy-map limit
class Band-new1
police 10000000 bps 1250000 byte conform-action transmit exceed-action drop

interface TenGigabitEthernet1/49

ip address 192.168.45.2 255.255.255.248
service-policy input limit

[Masoud Pourshabanian]

Hello,

Did you activate MLS QOS globally? Do you have any match on your access-list Band-new1? Do you do NAT on the switch?

Masoud

[paul driver]

Hello

This won't have not effect as the traffic has already crossed the wan link as your policing ingress, So to have any effect you would need to mark ingress traffic from you Lan and then police or shape depending on you requirements  on that marked traffic egress on the wan facing interface


However I have not checked  policing of modular qos egress can be done on this type of switch/ ios but if it anything like 3750's switch(s) then you can only police ingress.

Lasty your commited burst doesnt seem correct - The value you have set looks to high, Can try using 312500   = 10000000 / 32

police 10000000 312500 exceed-action drop

res

paul

[soldieroftheword]

Hey Paul,

Are you able some command syntax examples of what you're describing with marking ingress/egress on interfaces? I have a feeling that's the part that's hanging me up with trying to get this nailed down.

Cheers,

Caleb