Switchport rate limiting on 819 router

[j_poderys]

I am trying to limit the incomming traffic on 819G routers fa0 and fa2 ports to 10 Mbps.

I have the following configuration:

class-map match-all CLASS_SLAP
match any
!
policy-map POLICY_10MBPS
class CLASS_SLAP
police 10000000 10000 conform-action transmit exceed-action drop violate-action drop

interface FastEthernet0
no ip address
speed 100
service-policy input POLICY_10MBPS

interface FastEthernet2
no ip address
speed 100
service-policy input POLICY_10MBPS

However my traffic is not policed in the router and show policy-map int shows that the router does not register any matching packets:

MR1#sh policy-map int
FastEthernet0

Service-policy input: POLICY_10MBPS

Class-map: CLASS_SLAP (match-all)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
police:
cir 10000000 bps, bc 10000 bytes, be 10000 bytes
conformed 0 packets, 0 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
violated 0 packets, 0 bytes; actions:
drop
conformed 0000 bps, exceeded 0000 bps, violated 0000 bps

Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any

Am I missing something in my configuration?

[Mark Malone · Accepted solution]

did you try the vlan interface as those ports are very basic l2 , even though the commands may take it may not understand it , I haven't rate limited on the 800 series l2 ports but the vlan should work as its ip interface too , might be worth a try

[rasmus.elmholt]

The FA ports you have. Are they switchports or routed ports?
If they are switchports I'm not sure the service-policy can be applied. Use a routed port or a vlan interface(SVI) instead.

[Mark Malone]

they can only be l2 on an 800 series not capable of being l3 as soho routers

[Joseph W. Doherty]

As the others have noted, a service-policy won't be effective on a L2 port.

Try defining each port to its own VLAN, then provide a SVI for each VLAN, then apply service-policy to each SVI.