Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, I have the configuration below on an old Router IOS 12.x and I want to migrate it to an IOS 17.x, but the
drop
action at the end is not accepted as a command on this IOS. I have seen that I can use the
police cir 8000 bc 1500 be 1500 conform-a...
Yes, it is working on the CAT8K, if you want I can share the show version and show license as well.My customer made a test with SSH and that connection was dropped as expected and the ISAKMP, IPSEC and other services were not affected.
Hello, I tested this solution on my customer's Router and worked well. They tested some kind of things that they needed to drop and everything was ok. Thank you very much for your help!!!
Ok, great. Just a question, is there any reason to use 8000 or it's just because that is the lowest rate?I will test it tomorrow on my customers Router and as soon I check it I will let you know the result.
I do not have the low or none rate option
R1(config-pmap-c)#police ?<8000-2000000000> Target Bit Rate (bIts per second) (postfix k, m, goptional; decimal point allocir Committed information raterate Specify police rate, PCR for hierarchical policies ...
I do not know if this is what you want. I deleted the policy and then I started to create it again:
R1(config-pmap-c)#policy-map NBAR2R1(config-pmap)#class DROPR1(config-pmap-c)#?Policy-map class configuration commands:bandwidth Bandwidthexit Exit fr...
