2013年12月10日星期二

Police policy on SVI Cisco 3750

I'm trying to rate limit traffic from a couple of IPs in a VLAN (920). The traffic is incoming from 6 physical trunk ports. The VLAN 920 interface on this WS-C3750X-24P-S  is the default gateway in VLAN 920, the 3750 routes traffic to other VLANs.

I've created the policy as below, but I get this error when I try to apply it to the VLAN interface;
QoS: class(IdentifyPorts) Unsupported classification [Vlan920]
Service Policy attachment failed

添加图片说明
int range gi 1/0/1-3
mls qos vlan-based

int range gi 2/0/1-3
mls qos vlan-based

access-list 102 permit ip host 192.168.143.3 host 192.168.178.8

class-map match-any IdentifyTraffic
match access-group 102

class-map IdentifyPorts
match input gi 1/0/1 - gi 1/0/3
match input gi 2/0/1 - gi 2/0/3

policy-map Port-Policy
class IdentifyPorts
police 8000000 1000000 exceed-action drop

policy-map VLAN-policy
class IdentifyTraffic
set ip precedence 1
service-policy Port-Policy

int vlan 920

service WS-C3750V2-48PS-S-policy input VLAN-policy

没有评论:

发表评论