From: Sameh El Tawil (eltawil@free.fr)
Date: Thu Oct 07 2004 - 17:48:49 GMT-3
Bob,
Thanks a for your reply.
If I understand you correctly, you are saying that without a violate-action
if a Be is configured it will be completely disregarded by IOS. They would
have made it much easier if they forced us to put the keyword violate-action
as soon as we put a value for Be, instead of this puzzling <cr> option.
Cheers,
Sameh
----- Original Message -----
From: "Bob Sinclair" <bsin@cox.net>
To: <eltawil@free.fr>; <ccielab@groupstudy.com>
Sent: Thursday, October 07, 2004 7:29 PM
Subject: Re: maximum burst configured but no violate action
> Sameh,
>
>
> I would agree with your interpretation of the docs. If no violate action
is
> specified, then you are using a single-bucket algorithm. The Bc is the
> demarcation point between conforming and not conforming. Traffic that
does
> not conform can fall into one of two classes, exceed or violate. The Be
is
> the demarcation point between exceed and violate. If you do not use
> violate, then all traffic above conforming rate just exceeds. You could
say
> that the default violate action is the exceed action.
>
> Analogy: In one State, you get a regular speeding ticket if you are going
> less than 15 mph over the speed limit (exceed action). But if you are
going
> more than 15 mph over the limit (Be) then you get a reckless driving
> citation (violate action). In other States with no Be, you simply get a
> regular citation no matter how much over the limit you are (only exceed
> action).
>
> HTH,
>
> Bob Sinclair
> CCIE #10427, CISSP, MCSE
> www.netmasterclass.net
>
> ----- Original Message -----
> From: <eltawil@free.fr>
> To: <ccielab@groupstudy.com>
> Sent: Thursday, October 07, 2004 12:45 PM
> Subject: maximum burst configured but no violate action
>
>
> > Hi Group,
> >
> > I need help with a grey area in the usage of the MQC police command:
> > I am studying a configuration in which the MQC police command is being
> > used to
> > color out-of-profile traffic on the outgoing interface.
> >
> > According to the configuration guides, if the optional violate-action
> > keyword
> > is used, the policer will use a two-token-bucket mechanism. Otherwise it
> > will
> > use a single bucket. However, the software allows you to configure a
> > maximum-burst without specifying the violate-action.
> >
> > I am trying to figure out what will happen in this case:
> >
> > - will we be using a single bucket (in this case the maximum burst is
> > neglected)
> > - or will we be using a two-bucket mechanism. If this is the case, what
is
> > the
> > default violate action!!
> >
> > Here is the config [this is a 3600 with 12.2(13)]:
> >
> > policy-map COS-OUT-D2-ATM0/IMA0.1
> > class DSCP-OUT-D2INP
> > police 2704000 338000 338000 conform-action transmit exceed-action
> > set-dscp-transmit 20
> > policy-map COS-OUT-ATM0/IMA0.1
> > class DSCP-OUT-D2
> > bandwidth percent 100
> > random-detect dscp-based
> > random-detect dscp 18 61 122 20
> > random-detect dscp 20 34 68 20
> > service-policy COS-OUT-D2-ATM0/IMA0.1
> >
> > Thanks,
> > Sameh
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:44 GMT-3