L2 ingress policing on NCS5500/NCS540

[Thomas Fritz]

Hi folks!

I want to do ingress policing on a L2 interface on NCS5500/NCS540 platforms like that:

!
policy-map 500M
 class class-default
  police rate 500 mbps
   conform-action transmit
   exceed-action drop
  !
 !
 end-policy-map
!
interface GigabitEthernet0/0/0/1
 l2transport
 !

But when I want to apply the policy-map to the L2 interface:

(config)#int gigabitEthernet 0/0/0/1
(config-if)#service-policy input 500M
(config-if)#commit

% Failed to commit one or more configuration items during a pseudo-atomic operation. All changes made have been reverted. Please issue 'show configuration failed [inheritance]' from this session to view the errors
(config)#sh configuration failed

!! SEMANTIC ERRORS: This configuration was rejected by
!! the system due to semantic errors. The individual
!! errors with each failed configuration command can be
!! found below.

interface GigabitEthernet0/0/0/1
 service-policy input 500M
!!% Subinterface or Layer 2 configuration conflicts with existing configuration, or configuration in this commit: L3 configuration is not allowed under a L2 interface
!
end

How can I configure L2 ingress policing properly?

Thanks in advance,

Thomas

[Santosh Sharma · Accepted solution]

For L2 interface, the pmap configuration can be done in l2transport mode. Following will work:

int <>

l2transport

service-policy input <>

[Thomas Fritz]

That does make sense.

Must have missed that in the documentation...

Thanks a lot!

BR,

Thomas