cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
484
Views
0
Helpful
2
Replies

Police Limit bandwidth not accurate on PFC QoS

fly
Level 2
Level 2

7609 rsp720 pfc3cxl 6748 lan card

and I config ingress egress police same time on interface SVI
i config on two interface which in different vlan,and config ingress/egress qos police to 20m,but i found can’t work 
I can’t find hit in show policy-map interface

and download and upload speed is almost as same as before I config ingress egress police on the two interface vlan
 
please see config
 
class-map match-all test
description for rate_limit
match access-group 100
policy-map 20M
class test
police cir 20480000 bc 2560000 be 2560000 conform-action transmit exceed-action drop violate-action drop
 
interface GigabitEthernet1/3
switchport
switchport access vlan 4043
switchport mode access
!
interface GigabitEthernet1/4
switchport
switchport access vlan 4044
switchport mode access
!
interface Vlan4043
ip address 182.178.83.1 255.255.255.252
service-policy input 20M
service-policy output 20M
!
interface Vlan4044
ip address 56.243.9.1 255.255.255.252
service-policy input 20M
service-policy output 20M

sh policy-map interface vlan 4044

Vlan4044
Service-policy input: 20M
class-map: speed (match-all)
Match: access-group 100
police :
20480000 bps 2560000 limit 2560000 extended limit
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
Service-policy output: 20M
class-map: speed (match-all)
Match: access-group 100
police :
20480000 bps 2560000 limit 2560000 extended limit
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
 

2 Replies 2

fly
Level 2
Level 2

Two test computer connect to same slot 1 6748 line card

and I made another test

i connect client computer to slot 1 6748 card and put port in vlan4043

and download file from internet which connected to slot 7 es+ card

and I config ingree egress police limit bandwidth to interface vlan4043

i found when I configure police cir to 20m,but download speed can up to 60m

i config police cir to 1m,but download speed can up to 30m

this is weird

is there any problem on 6748 line card pfc qos?

I found problem ,here.

aggregate police has been config out of resource, so new police can't work

show platform hardware capacity qos
QoS Policer Resources
Aggregate policers: Module Total Used %Used
3 1024 1024 100%
6 1024 1024 100%
8 1024 1024 100%
9 1024 1024 100%
Microflow policer configurations: Module Total Used %Used
3 64 1 1%
6 64 1 1%
8 64 1 1%
9 64 1 1%

although we config egress/ingress police on intreface vlan , but show mls qos ip vlan can‘t find it worked only 1023 aggregate police supported.

7609#show mls qos ip vlan 4043
[In] Policy map is 1M [Out] Policy map is 1M
QoS Summary [IPv4]: (* - shared aggregates, Mod - switch module)

Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By
Id Id
-------------------------------------------------------------------------------
7609#show mls qos ip vlan 4044
[In] Policy map is 1M [Out] Policy map is 1M
QoS Summary [IPv4]: (* - shared aggregates, Mod - switch module)

Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By
Id Id

another question:but why just config egress police on slot 1 card, interface vlan 1000 (there is no port in vlan 1000 on other card)and we found  ingress/egress police on slot 3? according cisco doc egress police implement on ingress card, but why we found egress police on slot 3?

7609#show mls qos ip
QoS Summary [IPv4]: (* - shared aggregates, Mod - switch module)

Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By
Id Id
-------------------------------------------------------------------------------
Vl1000 3 In speed 0 401 dscp 0 0 0
    Vl1000  3 Out      speed    0  402     --  0          12482              0