3560 Limit rate port
in [Cisco]
|
Prev: Failover problem with Firewall Service Modul (FWSM) Catalyst 6500
Next: Vista Smart Security virus (fake program)
From: terrydoc on 22 Apr 2010 11:16 Can any describe a simple method to rate limit a fastethernet on a 3560 - I have seen and tried Police , srr queue commands but I have only been anle to achieve the desired rate limit on the inside of the port - it appears to still use the full bandwidth on its egress side. ! ! policy-map POLICY_5Mb class CLASS_5Mb police 5000000 100000 exceed-action drop ! ! interface FastEthernet0/1 bandwidth 5000 srr-queue bandwidth limit 90 service-policy input POLICY_5Mb ! service-policy output POLICY_5Mb police command is not supported for this interface The interface does not support the specified policy configuration and/ or parameter values. Warning: Assigning a policy map to the output side of an interface not supported I am sharing Internet bandwidth between different people ...thanks
From: Doug McIntyre on 22 Apr 2010 15:34 "terrydoc(a)o2.ie" <terrydoc(a)o2.ie> writes: >Can any describe a simple method to rate limit a fastethernet on a >3560 - I have seen and tried Police , srr queue commands but I have >only been anle to achieve the desired rate limit on the inside of the >port - it appears to still use the full bandwidth on its egress side. No simple way like you are trying, but it is possible, detailed here.. http://blog.ine.com/2008/03/03/bridging-the-gap-between-3550-and-3560-qos-part-i/ http://blog.ine.com/2008/03/26/bridging-the-gap-between-3550-and-3560-qos-part-ii/ http://blog.ine.com/2008/06/26/quick-notes-on-the-3560-egress-queuing/
From: terrydoc on 23 Apr 2010 11:13 On Apr 22, 8:34 pm, Doug McIntyre <mer...(a)geeks.org> wrote: > "terry...(a)o2.ie" <terry...(a)o2.ie> writes: > >Can any describe a simple method to rate limit a fastethernet on a > >3560 - I have seen and tried Police , srr queue commands but I have > >only been anle to achieve the desired rate limit on the inside of the > >port - it appears to still use the full bandwidth on its egress side. > > No simple way like you are trying, but it is possible, detailed here.. > > http://blog.ine.com/2008/03/03/bridging-the-gap-between-3550-and-3560...http://blog.ine.com/2008/03/26/bridging-the-gap-between-3550-and-3560...http://blog.ine.com/2008/06/26/quick-notes-on-the-3560-egress-queuing/ Thanks for the reply, I have made some progress: ! interface FastEthernet0/1 srr-queue bandwidth limit 10 service-policy input POLICY_5Mb ! - gives download 6.1Mbs upload 3.2 Mbs When I try to setup a "10Mb" policy I appear to have a problem... ! interface FastEthernet0/2 srr-queue bandwidth limit 10 spanning-tree portfast service-policy input POLICY_10Mb ! - gives download 6.1Mbs upload 67Mbs the config details are: ! class-map match-all CLASS_5Mb match access-group name ACL_5Mb class-map match-any CLASS_10mb match any class-map match-any CLASS_5mb match any class-map match-all CLASS_10Mb match access-group name ACL_10Mb ! ! policy-map POLICY_5Mb class CLASS_5Mb police 5000000 100000 exceed-action drop policy-map POLICY_10Mb class CLASS_10Mb police 10000000 100000 exceed-action drop ! Any apparent problem here? Thanks...
From: Doug McIntyre on 23 Apr 2010 13:39 "terrydoc(a)o2.ie" <terrydoc(a)o2.ie> writes: >On Apr 22, 8:34=A0pm, Doug McIntyre <mer...(a)geeks.org> wrote: >> "terry...(a)o2.ie" <terry...(a)o2.ie> writes: >> >Can any describe a simple method to rate limit a fastethernet on a >> >3560 - I have seen and tried Police , srr queue commands but I have >> >only been anle to achieve the desired rate limit on the inside of the >> >port - it appears to still use the full bandwidth on its egress side. >> >> No simple way like you are trying, but it is possible, detailed here.. >> >> http://blog.ine.com/2008/03/03/bridging-the-gap-between-3550-and-3560...h= >ttp://blog.ine.com/2008/03/26/bridging-the-gap-between-3550-and-3560...http= >://blog.ine.com/2008/06/26/quick-notes-on-the-3560-egress-queuing/ >Thanks for the reply, I have made some progress: >! >interface FastEthernet0/1 > srr-queue bandwidth limit 10 > service-policy input POLICY_5Mb >! >- gives download 6.1Mbs upload 3.2 Mbs >When I try to setup a "10Mb" policy I appear to have a problem... >interface FastEthernet0/2 > srr-queue bandwidth limit 10 > spanning-tree portfast > service-policy input POLICY_10Mb .... >policy-map POLICY_10Mb > class CLASS_10Mb > police 10000000 100000 exceed-action drop > gives download 6.1Mbs upload 67Mbs I've found that in real life, you have to adjust your burst size according to your traffic mix, and tweak things up and down based on actually measuring the traffic throughput. Running through the theory is all grand, but to dial it in, you have to do some experimentation back and forth to get it to register the way you like.. I've also found the 4500/SupIVs or Vs to be much more forgiving for doing what you are trying to do.
From: terrydoc on 26 Apr 2010 10:50
On Apr 23, 6:39 pm, Doug McIntyre <mer...(a)geeks.org> wrote: > "terry...(a)o2.ie" <terry...(a)o2.ie> writes: > >On Apr 22, 8:34=A0pm, Doug McIntyre <mer...(a)geeks.org> wrote: > >> "terry...(a)o2.ie" <terry...(a)o2.ie> writes: > >> >Can any describe a simple method to rate limit a fastethernet on a > >> >3560 - I have seen and tried Police , srr queue commands but I have > >> >only been anle to achieve the desired rate limit on the inside of the > >> >port - it appears to still use the full bandwidth on its egress side. > > >> No simple way like you are trying, but it is possible, detailed here.. > > >>http://blog.ine.com/2008/03/03/bridging-the-gap-between-3550-and-3560.... > >ttp://blog.ine.com/2008/03/26/bridging-the-gap-between-3550-and-3560...http= > >://blog.ine.com/2008/06/26/quick-notes-on-the-3560-egress-queuing/ > >Thanks for the reply, I have made some progress: > >! > >interface FastEthernet0/1 > > srr-queue bandwidth limit 10 > > service-policy input POLICY_5Mb > >! > >- gives download 6.1Mbs upload 3.2 Mbs > >When I try to setup a "10Mb" policy I appear to have a problem... > >interface FastEthernet0/2 > > srr-queue bandwidth limit 10 > > spanning-tree portfast > > service-policy input POLICY_10Mb > ... > >policy-map POLICY_10Mb > > class CLASS_10Mb > > police 10000000 100000 exceed-action drop > > gives download 6.1Mbs upload 67Mbs > > I've found that in real life, you have to adjust your burst size > according to your traffic mix, and tweak things up and down based on > actually measuring the traffic throughput. > > Running through the theory is all grand, but to dial it in, you have > to do some experimentation back and forth to get it to register the > way you like.. > > I've also found the 4500/SupIVs or Vs to be much more forgiving for > doing what you are trying to do. ____________________ I have spent a long time now trying various combinations of values to get my traffic shaping ploicies working but cannot crack it. To recap - I want to slice up Internet Bandwidth between different ports on my switch; my first policy is: policy-map POLICY_5Mb class CLASS_5Mb police 5000000 100000 exceed-action drop - I have this working on ! interface FastEthernet0/1 speed 10 srr-queue bandwidth limit 50 spanning-tree portfast service-policy input POLICY_5Mb ! and I get it working with upload speed of 3.2Mbs and download of 6.1Mbs - this is good and what I was looking for. However when I try to create a policy for 10Mb policy-map POLICY_10Mb class CLASS_10Mb police 8000 8000 exceed-action drop ! ! interface FastEthernet0/2 speed 100 srr-queue bandwidth limit 10 spanning-tree portfast service-policy input POLICY_10Mb ! I get upload of 6Mbs but download of 61Mbs - so it appears to be using ALL the bandwidth. I have tried various settings for the "police command" ...... 8000 8000 to 10000000 10000000 - but theses never appear to impact the upload download rates achieved - am I missing something vital ? ! ! class-map match-all CLASS_5Mb match access-group name ACL_5Mb class-map match-all CLASS_10Mb match access-group name ACL_10Mb ! ! policy-map POLICY_5Mb class CLASS_5Mb police 5000000 100000 exceed-action drop policy-map POLICY_10Mb class CLASS_10Mb police 8000 8000 exceed-action drop ! ! interface FastEthernet0/1 speed 10 srr-queue bandwidth limit 50 spanning-tree portfast service-policy input POLICY_5Mb ! interface FastEthernet0/2 speed 100 srr-queue bandwidth limit 10 spanning-tree portfast service-policy input POLICY_10Mb ! |