cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1197
Views
0
Helpful
5
Replies

QOS on Nexus SVI

GRANT3779
Spotlight
Spotlight

If I have an SVI on VLAN 999 and apply the following policy below under vlan configuration mode for 999 should this police my traffic inbound on that SVI?

 

I know I am unable to put the policy under the VLAN Interface directly -

 

ip access-list SW_TRANSIT
20 permit ip any any

 

 

policy-map type qos SW_100
class SW_100
police cir 100 mbps bc 200 ms conform transmit violate drop

 

class-map type qos match-all SW_100
match access-group name SW_TRANSIT


vlan configuration 999

service-policy type qos input SW_100
service-policy type qos output SW_100

 

This is what I see from the output -

 

Vlan 999

Service-policy (qos) input: SW_100
SNMP Policy Index: 285216961

Class-map (qos): SW_100 (match-all)

Slot 1
18757728 packets 22432036774 bytes
5 minute offered rate 2902 bps

Slot 2
127505857 packets 70053655982 bytes
5 minute offered rate 59635 bps

Aggregate forwarded :
146263585 packets 91455821800 bytes
Match: access-group SW_TRANSIT
police cir 100 mbps bc 200 ms
conformed 91455821800 bytes, 0 bps action: transmit
violated 1029870956 bytes, 0 bps action: drop

Service-policy (qos) output: SW_100
SNMP Policy Index: 285216965

Class-map (qos): SW_100 (match-all)

Slot 1
166420118 packets 177452685199 bytes
5 minute offered rate 19961 bps

Slot 2
7018939 packets 4952950640 bytes
5 minute offered rate 978 bps

Aggregate forwarded :
173439057 packets 180541292746 bytes
Match: access-group SW_TRANSIT
police cir 100 mbps bc 200 ms
conformed 180541292746 bytes, 0 bps action: transmit
violated 1864343093 bytes, 0 bps action: drop

5 Replies 5

Hello,

 

which Nexus (e.g. N5K/N7K/N9K) and which OS version are we talking about ?

Hi Georg,

N7706 running 6.2(10)

Hello,

 

are you applying the policy in vlan configuration mode ?

 

N7706#conf t

N7706(config)#vlan configuration 999

N7706(config-vlan-config)#service-policy ?

Hi,

I am indeed.

 

Thanks

Hello,

 

actually, looking at the output, it looks like it is working:

 

Aggregate forwarded :
146263585 packets 91455821800 bytes
Match: access-group SW_TRANSIT
police cir 100 mbps bc 200 ms
conformed 91455821800 bytes, 0 bps action: transmit
violated 1029870956 bytes, 0 bps action: drop