From: Brian McGahan (bmcgahan@internetworkexpert.com)
Date: Mon May 17 2004 - 16:07:34 GMT-3
Ahmed,
Typically a service-policy will not be applied inbound when
there is a queueing mechanism defined in the policy-map. Queueing
mechanisms such as a bandwidth reservation, the low latency queue, and
traffic shaping all affect the behavior of how traffic moves from the
output queue to the transmit ring of the interface.
The key word in that last sentence is the "output" queue.
Queueing can not be applied inbound, as it is designed to affect the
processing of the output queue. Other MQC mechanisms such as policing
and marking can be applied either inbound or outbound.
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
> -----Original Message-----
> From: Ahmed Mustafa [mailto:ahmed.mustafa@sbcglobal.net]
> Sent: Monday, May 17, 2004 12:40 PM
> To: Brian McGahan
> Cc: ccielab@groupstudy.com
> Subject: Re: IE Lab 15 Task 9.1
>
> Thanks Brian ! I completely agree with you that why service-policy
was
> applied inbound. However the reason I was asking the question that I
have
> noticed that sometimes the command "Service-policy input" will be
accepted
> by the interface, but in "Show Run" it will not appear. That is why
I
> was
> trying to draw a line that is there any rule of thumb when applying
the
> command input vs output.
>
> Regards,
>
> Ahmed
> ----- Original Message -----
> From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
> To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>;
> <ccielab@groupstudy.com>
> Sent: Monday, May 17, 2004 6:48 AM
> Subject: RE: IE Lab 15 Task 9.1
>
>
> Ahmed,
>
> I'm asking these questions because I'm trying to lead you to the
> reasoning behind the answer. Review what you just told me and this
> should explain why the policy is applied in the direction that it is.
>
> HTH,
>
> Brian McGahan, CCIE #8593
> bmcgahan@internetworkexpert.com
>
> Internetwork Expert, Inc.
> http://www.InternetworkExpert.com
> Toll Free: 877-224-8987 x 705
> Outside US: 775-826-4344 x 705
>
>
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> Of
> > Ahmed Mustafa
> > Sent: Sunday, May 16, 2004 11:21 PM
> > To: Brian McGahan; ccielab@groupstudy.com
> > Subject: Re: IE Lab 15 Task 9.1
> >
> > Router 5 and policy is applied on Ethernet 0/0
> > ----- Original Message -----
> > From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
> > To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>; "Brian McGahan"
> > <bmcgahan@internetworkexpert.com>; <ccielab@groupstudy.com>
> > Sent: Sunday, May 16, 2004 8:20 PM
> > Subject: RE: IE Lab 15 Task 9.1
> >
> >
> > Which router is VLAN 5 attached to and which router is the policy
> > applied on?
> >
> > Brian McGahan, CCIE #8593
> > bmcgahan@internetworkexpert.com
> >
> > Internetwork Expert, Inc.
> > http://www.InternetworkExpert.com
> > Toll Free: 877-224-8987 x 705
> > Outside US: 775-826-4344 x 705
> >
> >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
Behalf
> > Of
> > > Ahmed Mustafa
> > > Sent: Sunday, May 16, 2004 9:36 PM
> > > To: Brian McGahan; ccielab@groupstudy.com
> > > Subject: Re: IE Lab 15 Task 9.1
> > >
> > > Brian,
> > >
> > >
> > > The hosts are located on VLAN 5 are sending out 404 byte packets
> > destined
> > > for UDP port 1434.
> > >
> > >
> > > ----- Original Message -----
> > > From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
> > > To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>;
> > > <ccielab@groupstudy.com>
> > > Sent: Sunday, May 16, 2004 6:13 PM
> > > Subject: RE: IE Lab 15 Task 9.1
> > >
> > >
> > > Ahmed,
> > >
> > > Where are the hosts located? When they send traffic, what
> > > direction is the traffic flow from the router's perspective?
> > >
> > > Brian McGahan, CCIE #8593
> > > bmcgahan@internetworkexpert.com
> > >
> > > Internetwork Expert, Inc.
> > > http://www.InternetworkExpert.com
> > > Toll Free: 877-224-8987 x 705
> > > Outside US: 775-826-4344 x 705
> > >
> > >
> > > > -----Original Message-----
> > > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> Behalf
> > > Of
> > > > Ahmed Mustafa
> > > > Sent: Saturday, May 15, 2004 2:24 PM
> > > > To: ccielab@groupstudy.com
> > > > Subject: IE Lab 15 Task 9.1
> > > >
> > > > Regarding Service-Policy commands is it true that the rule of
> thumb
> > > is:
> > > >
> > > > Service-policy output should be used to avoid congestion, and
> > > > Service-policy input should be used to block traffic.
> > > >
> > > >
> > > > I was doing task 9.1 of lab 15, and even the task states,
"Hosts
> > > infected
> > > > with this worm are sending out 404 byte packets destined for UDP
> > port
> > > > 1434" I
> > > > configured the service-policy with output keyword, however the
> > > solution
> > > > guides
> > > > showed "Service-policy input"
> > > >
> > > > Can some shed light on this?
> > > >
> > > > Regards,
> > > >
> > > > Ahmed
> > > >
> > > >
> > >
> >
>
This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:13 GMT-3