Re: maximum burst configured but no violate action

From: Bob Sinclair (bsin@cox.net)
Date: Thu Oct 07 2004 - 14:29:14 GMT-3


Sameh,

I would agree with your interpretation of the docs. If no violate action is
specified, then you are using a single-bucket algorithm. The Bc is the
demarcation point between conforming and not conforming. Traffic that does
not conform can fall into one of two classes, exceed or violate. The Be is
the demarcation point between exceed and violate. If you do not use
violate, then all traffic above conforming rate just exceeds. You could say
that the default violate action is the exceed action.

Analogy: In one State, you get a regular speeding ticket if you are going
less than 15 mph over the speed limit (exceed action). But if you are going
more than 15 mph over the limit (Be) then you get a reckless driving
citation (violate action). In other States with no Be, you simply get a
regular citation no matter how much over the limit you are (only exceed
action).

HTH,

Bob Sinclair
CCIE #10427, CISSP, MCSE
www.netmasterclass.net

----- Original Message -----
From: <eltawil@free.fr>
To: <ccielab@groupstudy.com>
Sent: Thursday, October 07, 2004 12:45 PM
Subject: maximum burst configured but no violate action

> Hi Group,
>
> I need help with a grey area in the usage of the MQC police command:
> I am studying a configuration in which the MQC police command is being
> used to
> color out-of-profile traffic on the outgoing interface.
>
> According to the configuration guides, if the optional violate-action
> keyword
> is used, the policer will use a two-token-bucket mechanism. Otherwise it
> will
> use a single bucket. However, the software allows you to configure a
> maximum-burst without specifying the violate-action.
>
> I am trying to figure out what will happen in this case:
>
> - will we be using a single bucket (in this case the maximum burst is
> neglected)
> - or will we be using a two-bucket mechanism. If this is the case, what is
> the
> default violate action!!
>
> Here is the config [this is a 3600 with 12.2(13)]:
>
> policy-map COS-OUT-D2-ATM0/IMA0.1
> class DSCP-OUT-D2INP
> police 2704000 338000 338000 conform-action transmit exceed-action
> set-dscp-transmit 20
> policy-map COS-OUT-ATM0/IMA0.1
> class DSCP-OUT-D2
> bandwidth percent 100
> random-detect dscp-based
> random-detect dscp 18 61 122 20
> random-detect dscp 20 34 68 20
> service-policy COS-OUT-D2-ATM0/IMA0.1
>
> Thanks,
> Sameh
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:44 GMT-3