cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
568
Views
0
Helpful
1
Replies

Service policy input not working 6509 VSS

regibbons
Level 1
Level 1

interface Vlan24

description Internal Wireless Internet

ip address 10.x.0.1 255.255.254.0

ip helper-address x.x.x.x

ip helper-address x.x.x.x

ip pim sparse-mode

service-policy input LIMIT_INTERNET

service-policy output LIMIT_INTERNET

!

policy-map LIMIT_INTERNET

  class MATCH_ALL

   police 6500000 3248    conform-action transmit     exceed-action drop     violate-action drop

!

ip access-list extended MATCH_ALL

permit ip any any

!

class-map match-any MATCH_ALL

  match access-group name MATCH_ALL

So, I am trying to limit the bandwidth used by this vlan. The service-policy output statement works, the service-policy input statement does not. My test is to get on that vlan and go to speedtest.net. My download speeds are about 3.5Mb/s, my upload speeds are about 20Mb/s.

I cannot help but think it has something to do with this:

sh mls qos ip

QoS Summary [IPv4]:  (* - shared aggregates, Mod - switch module Sid - Switch Id)

          Int  Sid Mod Dir  Class-map DSCP  Agg  Trust Fl   AgForward-By   AgPoliced-By

                                            Id         Id

-----------------------------------------------------------------------------------

          Vl24   1  3  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   1  3 Out  MATCH_ALL    0    2     --  0              0              0

          Vl24   1  4  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   1  4 Out  MATCH_ALL    0    2     --  0        6837613         970005

          Vl24   1  5  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   1  5 Out  MATCH_ALL    0    2     --  0          23652              0

          Vl24   1  9  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   1  9 Out  MATCH_ALL    0    2     --  0              0              0

          Vl24   2  3  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   2  3 Out  MATCH_ALL    0    2     --  0              0              0

          Vl24   2  4  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   2  4 Out  MATCH_ALL    0    2     --  0       10939319        1834403

          Vl24   2  5  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   2  5 Out  MATCH_ALL    0    2     --  0          68045              0

          Vl24   2  9  In  MATCH_ALL    0    1   dscp  0              0              0

          Vl24   2  9 Out  MATCH_ALL    0    2     --  0        1297810         145085

Is there some incongruity with service-policies on a 6509?

Thanks

1 Reply 1

regibbons
Level 1
Level 1

It is amazing what one can do when ones questions go unanswered

The WLCs connect directly to the 6509 in question, so I went into each of the physical Gb ports and added

mls qos vlan-based

to each of them, and it now polices properly

Review Cisco Networking for a $25 gift card