Policing 6509

[adamorodrigues]

Hi,

I am trying to police traffic on an SVI on a 6509; below is the config used.  Its working inbound but not out - I'm getting 1mb download and 50mb up:

class-map match-all VLAN_QOS_TEST_CLASS

match any

policy-map VLAN_QOS_TEST

class VLAN_QOS_TEST_CLASS

police cir 1000000 pir 1000000

interface Vlan3527

ip address x.x.x.x

standby version 2

standby 3527 ip x.x.x.1

standby 3527 timers 1 3

standby 3527 priority 105

standby 3527 preempt

service-policy input VLAN_QOS_TEST

service-policy output VLAN_QOS_TEST

I have also tried adding "mls qos vlan-based" to the physical port connecting to the internet circuit; but it didnt make a difference.  Its like incoming traffic isnt being classified; so the policy map is not enforced. 

Any advise would be appreciated - thanks.

[Giuseppe Larosa]

Hello Adamo,

C6500 configuration guide says:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/qos.html#wp1547950

>>Policers can act on ingress traffic per-port or per-VLAN. For egress traffic, the policers can act per-VLAN only.

If the L2 port is the only port in Vlan 3527 you should see policing effective in both directions.

However, I remember of similar limitations reported by other colleagues in the forums

Hope to help

Giuseppe

[adamorodrigues]

Thanks for the reply Giuseppe,

Does that mean you cant police outgoing traffic on a 6509?