Hi all,
I have two Cisco 3850 switches connected by a trunk interface and I have layer 2 traffic that I need to limit. I have the need to limit it per vlan.
I tried to use something like this:
class-map match-any CMAP-client1
match vlan 4044
class-map match-any CMAP-client2
match vlan 4045
policy-map policy_2Mbps
class class-default
police 2000000 375000 conform-action transmit exceed-action drop
policy-map policy_10Mbps
class class-default
police 10000000 1875000 conform-action transmit exceed-action drop
policy-map PM-test-traffic-policy
class CMAP-client1
service-policy policy_2Mbps
class CMAP-client2
service-policy policy_10Mbps
So after some iperf tests, I applied this configuration in a Trunk port:
interface GigabitEthernet1/0/1
description -= Trunk to 3850 =-
switchport trunk allowed vlan 4044,4045
switchport mode trunk
service-policy input PM-test-traffic-policy
service-policy output PM-test-traffic-policy
end
The policy appear to be applied in HW on this interface:
SWI#sho platform qos policy hw_state target gigabitEthernet 1/0/1
Input policy :PM-test-traffic-policy
H/W programming State:INSTALLED IN HW
Output policy :PM-test-traffic-policy
H/W programming State:INSTALLED IN HW
The policy has counters on input and output. Some time ago the traffic on one of this vlans started to appear limited on a wrong policy, i.e:the VLAN 4045 only reach 2Mbps of traffic.
Now when I try to reply this configuration in lab i get this error:
Service policy installation failed
%QOS-6-POLICY_INST_FAILED:
So we cant reply the situation.
We checked the document: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/qos/configuration_guide/b_qos_3se_3850_cg/b_qos_3se_3850_cg_chapter_011.html but appear to be poor and I couldn't find any similar cases in google.
My questions are:
- Is the configuration right?
- The Vlan-based only works in the input direction?
- What is the best practice to implement this configuration?
- What about the message %QOS-6-POLICY_INST_FAILED?
Thank you in advance.
