Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
7175
Views
0
Helpful
26
Replies

policy-map not supported

Go to solution
faamin011
Level 1
Level 1

‎01-04-2013 08:18 PM - edited ‎03-07-2019 10:54 AM

Switch1(config-if)#service-policy input POLICE

%QoS: policy-map with police action at parent level not supported on Tunnel0 int

erface.

Master SVI send all failed for interface Tunnel0, cmd = 39

class-map match-all server

  match access-group name Web

!

policy-map POLICE

class server

  police 8000 8000 exceed-action drop class-map match-all server
  match access-group name Web
!
policy-map POLICE
class server
  police 8000 8000 exceed-action drop

Advice please for error above

Labels:
0 Helpful
26 Replies 26

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎01-21-2013 06:09 AM

sh ip route

C        10.50.50.0/24 is directly connected, Vlan1

L        10.50.50.1/32 is directly connected, Vlan1

C        10.100.100.0/30 is directly connected, GigabitEthernet1/0/24

L        10.100.100.1/32 is directly connected, GigabitEthernet1/0/24

      172.16.0.0/24 is subnetted, 1 subnets

S        172.16.64.0 [1/0] via 10.100.100.2

I refered link you mentioned, but still doing some wrong which not reach desire goal. Advice please

0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎01-22-2013 12:15 AM

please respond

0 Helpful

Go to solution
Abzal
Level 7
Level 7
In response to faamin011

‎01-22-2013 01:00 AM

Hi Fahad,

Note.

1. 3750 only supports traffic policing on ingress direction of interface.

2. Also it supports only traffic Marking and Policing.

Steps:

1. First you need to define interesting traffic. Meaning you need to create ACL with your requirements.

2. Then create a class-map for policy-map matching above ACL.

3. After create a Policy-map and apply it under interface input direction.

Example:

You want to restrict traffic bandwidth for web browsing for LAN (192.168.0.0/24):

ip access-list extended web_traffic

permit tcp 192.168.0.0 0.0.0.255 any eq 80

permit tcp 192.168.0.0 0.0.0.255 any eq 443

class-map web_class_traffic

match access-group name web_traffic

policy-map BW_256Kbps

class web_class_traffic

set dscp cs2

police 256000 8000 exceed-action drop

int g1/0/24

service-policy input BW_256Kbps

http://www.cisco.com/en/US/products/hw/switches/ps5023/products_tech_note09186a0080883f9e.shtml#cg23

Hope it will help.

Best regards,
Abzal

Best regards,
Abzal
0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to Abzal

‎01-22-2013 01:14 AM

thanks let me apply the same and revert you back with results

0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎01-24-2013 07:46 PM

Applied same also refer document but no success, result is same. Even I m not getting hits on ACL, it will take some time but could u pls check in lab. Appreciate efforts

0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎01-30-2013 08:20 PM

Waiting for kind response. For testing purpose I have applied same ACL on input interface and getting hit but whenever applied qos on interface level, qos not working.

0 Helpful

Go to solution
Abzal
Level 7
Level 7
In response to faamin011

‎01-30-2013 09:42 PM

Hi Fahad,

There is another thread that close to your problem you may have a look

https://supportforums.cisco.com/message/3842738#3842738

Hope it will help.

Best regards,
Abzal

Best regards,
Abzal
0 Helpful

Go to solution
rmnederpelt
Level 1
Level 1

‎02-01-2013 01:41 PM

Hi Fahad,

Please check you are not running an IP-base image.
Second, check with the "show sdm prefer" command what sdm template is running.
If it's "desktop default" I suggest to change it to a routing sdm template.

Command: sdm prefer routing
Do a write mem and a reload and test again.

You will not see this setting in the config.

Regards,
Ronald

Sent from Cisco Technical Support iPad App

0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to rmnederpelt

‎02-02-2013 12:09 AM

License Level: ipservices

License Type: Permanent

Next reload license Level: ipservices

Further, desktop default is running, let me assign to sdm prefer routing and update the status on forum.. In mean while, please check that configuration has no issue,

0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎02-02-2013 03:37 AM

No success, issues is still there. I have used default class but even then results is not positive. Pls advice further


Switch2#sh sdm prefer
The current template is "desktop routing" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.

  number of unicast mac addresses:                  3K
  number of IPv4 IGMP groups + multicast routes:    1K
  number of IPv4 unicast routes:                    11K
    number of directly-connected IPv4 hosts:        3K
    number of indirect IPv4 routes:                 8K
  number of IPv4 policy based routing aces:         0.5K
  number of IPv4/MAC qos aces:                      0.5K
  number of IPv4/MAC security aces:                 1K


Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

  dscp: incoming
-------------------------------

  0 -  4 :       13754            0            0            0            0
  5 -  9 :           0            0            0            0            0
10 - 14 :           0            0            0            0            0
15 - 19 :           0            0            0            0            0
20 - 24 :           0            0            0            0            0
25 - 29 :           0            0            0            0            0
30 - 34 :           0            0            0            0            0
35 - 39 :           0            0            0            0            0
40 - 44 :           0            0            0            0            0
45 - 49 :           0            0            0         2006            0
50 - 54 :           0            0            0            0            0
55 - 59 :           0            0            0            0            0
60 - 64 :           0            0            0            0
  dscp: outgoing
-------------------------------

  0 -  4 :       13553            0            0            0            0
  5 -  9 :           0            0            0            0            0
10 - 14 :           0            0            0            0            0
15 - 19 :           0            0            0            0            0
20 - 24 :           0            0            0            0            0
25 - 29 :           0            0            0            0            0
30 - 34 :           0            0            0            0            0
35 - 39 :           0            0            0            0            0
40 - 44 :           0            0            0            0            0
45 - 49 :           0            0            0         1702            0
50 - 54 :           0            0            0            0            0
55 - 59 :           0            0            0            0            0
60 - 64 :           0            0            0            0
  cos: incoming
-------------------------------

  0 -  4 :       15971            0            0            0            0
  5 -  7 :           0            0            0
  cos: outgoing
-------------------------------

  0 -  4 :       13557            0            0            0            0
  5 -  7 :           0         1702          202
  output queues enqueued:
queue:    threshold1   threshold2   threshold3
-----------------------------------------------
queue 0:           2           0           0
queue 1:        2677       10884        1904
queue 2:           0           0           0
queue 3:           0           0           0

  output queues dropped:
queue:    threshold1   threshold2   threshold3
-----------------------------------------------
queue 0:           0           0           0
queue 1:           0           0           0
queue 2:           0           0           0
queue 3:           0           0           0

Policer: Inprofile:        14965 OutofProfile:            1

Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

  dscp: incoming
-------------------------------

  0 -  4 :       13779            0            0            0            0
  5 -  9 :           0            0            0            0            0
10 - 14 :           0            0            0            0            0
15 - 19 :           0            0            0            0            0
20 - 24 :           0            0            0            0            0
25 - 29 :           0            0            0            0            0
30 - 34 :           0            0            0            0            0
35 - 39 :           0            0            0            0            0
40 - 44 :           0            0            0            0            0
45 - 49 :           0            0            0         2020            0
50 - 54 :           0            0            0            0            0
55 - 59 :           0            0            0            0            0
60 - 64 :           0            0            0            0
  dscp: outgoing
-------------------------------

  0 -  4 :       13578            0            0            0            0
  5 -  9 :           0            0            0            0            0
10 - 14 :           0            0            0            0            0
15 - 19 :           0            0            0            0            0
20 - 24 :           0            0            0            0            0
25 - 29 :           0            0            0            0            0
30 - 34 :           0            0            0            0            0
35 - 39 :           0            0            0            0            0
40 - 44 :           0            0            0            0            0
45 - 49 :           0            0            0         1717            0
50 - 54 :           0            0            0            0            0
55 - 59 :           0            0            0            0            0
60 - 64 :           0            0            0            0
  cos: incoming
-------------------------------

  0 -  4 :       16010            0            0            0            0
  5 -  7 :           0            0            0
  cos: outgoing
-------------------------------

  0 -  4 :       13582            0            0            0            0
  5 -  7 :           0         1717          202
  output queues enqueued:
queue:    threshold1   threshold2   threshold3
-----------------------------------------------
queue 0:           2           0           0
queue 1:        2702       10884        1919
queue 2:           0           0           0
queue 3:           0           0           0

  output queues dropped:
queue:    threshold1   threshold2   threshold3
-----------------------------------------------
queue 0:           0           0           0
queue 1:           0           0           0
queue 2:           0           0           0
queue 3:           0           0           0

Policer: Inprofile:        15004 OutofProfile:            1


Switch2#sh mls qos interface gigabitEthernet 1/0/24
GigabitEthernet1/0/24
Attached policy-map for Ingress: test
trust state: not trusted
trust mode: not trusted
trust enabled flag: ena
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: none
qos mode: port-based


policy-map test
class class-default
  police 256000 8000 exceed-action drop


0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎02-06-2013 03:32 AM

any one who can provide solution

0 Helpful

Go to solution
faamin011
Level 1
Level 1
In response to faamin011

‎02-10-2013 04:52 AM

used default class and applied on switch port where server connected.. afterwards i have seen packet drops in output profile... see below for comments

policy-map test

class class-default

police 256000 8000 exceed-action drop

interface GigabitEthernet1/0/23

switchport access vlan 29

switchport mode access

spanning-tree portfast

service-policy input test

Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 19649 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7136 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 18853 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7567 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 29868 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------

0 - 4 : 18862 0 0 0 0
5 - 7 : 0 7567 3068
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 2 0 0
queue 1: 17892 985 10635
queue 2: 0 0 0
queue 3: 0 0 0

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 1338 OutofProfile: 258

Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 19654 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7151 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 18858 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7585 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 29888 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------

0 - 4 : 18867 0 0 0 0
5 - 7 : 0 7585 3068
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 2 0 0
queue 1: 17897 985 10653
queue 2: 0 0 0
queue 3: 0 0 0

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 1358 OutofProfile: 258

Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 19654 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7151 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 18858 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7585 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 29888 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------

0 - 4 : 18867 0 0 0 0
5 - 7 : 0 7585 3068
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 2 0 0
queue 1: 17897 985 10653
queue 2: 0 0 0
queue 3: 0 0 0

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 1358 OutofProfile: 258

C:\Users\fahadamin>ping 10.95.95.3 -l 2024 -t

Pinging 10.95.95.3 with 2024 bytes of data:
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Request timed out.
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126
Request timed out.
Reply from 10.95.95.3: bytes=2024 time=3ms TTL=126

Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 19731 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7185 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 18935 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7621 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 30002 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------

0 - 4 : 18944 0 0 0 0
5 - 7 : 0 7621 3070
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 2 0 0
queue 1: 17974 985 10691
queue 2: 0 0 0
queue 3: 0 0 0

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 1472 OutofProfile: 258

Switch2#sh mls qos interface gigabitEthernet 1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 19735 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7200 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 18937 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 7639 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 30021 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------

0 - 4 : 18946 0 0 0 0
5 - 7 : 0 7639 3071
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 2 0 0
queue 1: 17976 985 10710
queue 2: 0 0 0
queue 3: 0 0 0

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 1490 OutofProfile: 259

0 Helpful
Customers Also Viewed These Support Documents