cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2505
Views
0
Helpful
9
Replies

Match named access-list is not supported for this interface when trying to ratelimit by output policy with trunk interface

danielchau
Level 1
Level 1

Hello,

Currently have a cisco 7600 router with IOS 12.2(33)SRE12 and would like to rate limit the udp traffic from a host. Currently have this setup:

 

ip access-list extended LIMIT-UDP-IN
 remark LIMIT-UDP-IN
 permit udp host 1.2.3.4 any

!


ip access-list extended LIMIT-UDP-OUT
 remark LIMIT-UDP-OUT
 permit udp any host 1.2.3.4
!

class-map match-any LIMIT-Traffic-IN
  match access-group name LIMIT-UDP-IN

class-map match-any LIMIT-Traffic-OUT
  match access-group name LIMIT-UDP-OUT


policy-map LIMIT-2Mbps-OUT-UDP
  class LIMIT-Traffic-OUT
  police cir 3600000 bc 8000 be 8000 conform-action transmit exceed-action drop violate-action drop
  shape average 1600000

policy-map LIMIT-2Mbps-IN-UDP
    class LIMIT-Traffic-IN
    police cir 3600000 bc 8000 be 8000 conform-action transmit exceed-action drop violate-action drop
 
There is no problem of apply the input proicy to the interface, but when apply the output policy:

ROUTER(config-if)#service-policy output  LIMIT-2Mbps-OUT-UDP

Match named access-list is not supported for this interface

 

Would you please let me know how can i fix this?

Thanks

 

Daniel

9 Replies 9