6506 Rate limiting VLANs

[Morini]

I have a Cisco 6506 with MSFC; runs CatOS and IOS. I want to be able to rate-limit vlans. 'sh int vlan' counters in IOS appear to be useless; I assume thats because it must only count the first few packets of a given flow. I'm not using Multilayer switching. I can't seem to switch to a different switching method (won't let me turn off cef), so although I can set up access lists and try to rate-limit that way, it has no effect, as the access list only sees the first few packets.

Am I approaching this the wrong way? I'd prefer to use access lists instead of class-maps etc, as for the moment I find them easier to understand.

Any help greatly appreciated!

Thanks.

 

[ADB100]

You need to implement the policies via CatOS. As far as I can remember you can't do this on a VLAN basis either, rate limiting must be done on a physical port.

Have a look on CCO at policers:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_8_4/confg_gd/qos.htm

Good luck

Andy

 

[Morini]

Thanks. I'm trying now to implement using qos policers in CatOS, but without success so far. Wonder why the rate-limiting commands are there, if IOS can't do it?

 

[vipergg]

If you are trying to look at counters then look at the l2 side where the vlan is applied , there are all sorts of counters there . A "show counters <slot/port>" gives you lots of good info .

 

[Morini]

Just for the record,these are the commands I used to limit traffic from one IP. they are applied to one port (3/29), but it should be possible to apply to a vlan instead. Not exactly a logical syntax, is it? Traffic hovers around 2.5Mbps with the commands in place.

set qos policer aggregate <NAME> rate 2000 policed-dscp erate 2000 drop burst 2000 eburst 2000
set qos acl ip <NAME> dscp 0 aggregate <NAME> ip host xxx.xxx.xxx.100 any
set qos acl map <NAME> 3/29

 

[BuckWeet]

you might want to check to make sure the modules you have support it...