Configuring a policer on a supervisior

[Remko.vangilst]

Dear all,

We created a policy-map to rate limit traffic on a RSP720-3C-10GE card.

Traffic must rate-limited to 5Gbit, but when we test it with 9Gbit all the traffic is allowed.

(we see the 9G leaving the router on an outgoing interface)

Can it be the case that rate-limiting traffic only is allowed on line cards?

https://www.cisco.com/en/US/docs/routers/7600/install_config/ES40_config_guide/es40_chap7.html#wp1374297

I found some usefull information in the link above, but could not find anything about this.

Kind regards,

Remko van Gilst

[Remko.vangilst]

interface TenGigabitEthernet6/4

switchport

switchport access vlan 323

switchport trunk encapsulation dot1q

switchport mode dot1q-tunnel

load-interval 30

mls qos vlan-based

mls qos trust dscp

storm-control broadcast level 5.00

storm-control multicast level 5.00

l2protocol-tunnel cdp

l2protocol-tunnel stp

l2protocol-tunnel vtp

no cdp enable

spanning-tree bpdufilter enable

service-policy input 5000Mbps-Premium

end

I tested it with a basic configuration:

#sh policy-map 5000Mbps_temp

  Policy Map 5000Mbps_temp

    Class class-default

     police cir 5000000000 bc 156250000

       conform-action transmit

       exceed-action drop

I apllied the policy to the SVI, not working

I aplied the policy to the fysical interface, not working

I tried to match traffic with an access-list, not working (at first I matched without ACL)

The same policer works fine on a line card.

Please advise