Dear all,
I am trying to implement policing on some ports on a 3560 to limit the amount of bandwidth (e.g. 2M; 8M or 16M) a connected device can send into our network.
My problem is that the policy map doesn't police properly. The configured bandwidth has no influence on the throughput.
Ive tried implementing this in a number of different ways:
* aggregate policers
* policy map using a class
* policy map using class-default
Unfortunately srr-queue is not suitable for my deployment as it is not as granular as I need it to be.
And I do have "mls qos" enabled, tried rebooting the switch after enabling this command, tried ipbase and ipservices images, but nothing.
Hereby some examples of configurations I tested so far:
- - - - - - - - - #1
class-map match-any any-any
match access-group name ip-any-any
!
policy-map police-8mbit-in
class any-any
police 8000000 8000 exceed-action drop
!
interface GigabitEthernet0/1
service-policy input police-8mbit-in
!
ip access-list extended ip-any-any
permit ip any any
!
- - - - - - - - - #2
class-map match-any any-any
match access-group 99
!
policy-map police-8mbit-in
class any-any
police 8000000 8000 exceed-action drop
!
interface GigabitEthernet0/1
service-policy input police-8mbit-in
!
access-list 99 permit ip any
!
- - - - - - - - - #3
policy-map police-8mbit-in
class class-default
police 8000000 8000 exceed-action drop
!
interface GigabitEthernet0/1
service-policy input police-8mbit-in
!
- - - - - - - - - #4
mls qos aggregate-policer 8mbit 8000000 8000 exceed-action drop
!
policy-map police-8mbit-in
class class-default
police aggregate 8mbit
!
interface GigabitEthernet0/1
service-policy input police-8mbit-in
!
... and so on.
Everything I have tried just doesnt seem to work. The maximum transfer rate stays at 0.12 Mbit/s. Without any policy I could create up to 94 Mbit/s.
I already tried to change the burst value, but it seems that this have no infulence on my transfer rate.
Can someone tell me what Im doing wrong? Im pulling my hair out over this. :-)
Thanks,
Johannes
