07-12-2018 02:44 AM - edited 03-08-2019 03:39 PM
If I have an SVI on VLAN 999 and apply the following policy below under vlan configuration mode for 999 should this police my traffic inbound on that SVI?
I know I am unable to put the policy under the VLAN Interface directly -
ip access-list SW_TRANSIT
20 permit ip any any
policy-map type qos SW_100
class SW_100
police cir 100 mbps bc 200 ms conform transmit violate drop
class-map type qos match-all SW_100
match access-group name SW_TRANSIT
vlan configuration 999
service-policy type qos input SW_100
service-policy type qos output SW_100
This is what I see from the output -
Vlan 999
Service-policy (qos) input: SW_100
SNMP Policy Index: 285216961
Class-map (qos): SW_100 (match-all)
Slot 1
18757728 packets 22432036774 bytes
5 minute offered rate 2902 bps
Slot 2
127505857 packets 70053655982 bytes
5 minute offered rate 59635 bps
Aggregate forwarded :
146263585 packets 91455821800 bytes
Match: access-group SW_TRANSIT
police cir 100 mbps bc 200 ms
conformed 91455821800 bytes, 0 bps action: transmit
violated 1029870956 bytes, 0 bps action: drop
Service-policy (qos) output: SW_100
SNMP Policy Index: 285216965
Class-map (qos): SW_100 (match-all)
Slot 1
166420118 packets 177452685199 bytes
5 minute offered rate 19961 bps
Slot 2
7018939 packets 4952950640 bytes
5 minute offered rate 978 bps
Aggregate forwarded :
173439057 packets 180541292746 bytes
Match: access-group SW_TRANSIT
police cir 100 mbps bc 200 ms
conformed 180541292746 bytes, 0 bps action: transmit
violated 1864343093 bytes, 0 bps action: drop
07-12-2018 05:43 AM
Hello,
which Nexus (e.g. N5K/N7K/N9K) and which OS version are we talking about ?
07-12-2018 05:53 AM
07-12-2018 07:35 AM
Hello,
are you applying the policy in vlan configuration mode ?
N7706#conf t
N7706(config)#vlan configuration 999
N7706(config-vlan-config)#service-policy ?
07-12-2018 07:39 AM
Hi,
I am indeed.
Thanks
07-12-2018 07:48 AM
Hello,
actually, looking at the output, it looks like it is working:
Aggregate forwarded :
146263585 packets 91455821800 bytes
Match: access-group SW_TRANSIT
police cir 100 mbps bc 200 ms
conformed 91455821800 bytes, 0 bps action: transmit
violated 1029870956 bytes, 0 bps action: drop
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide