Re: Hierarchical policy on the SVI interface of 3560

From: Ali Mousawi (mousawi.ali@gmail.com)
Date: Mon Oct 06 2008 - 22:32:45 ART


*Hey,*

*Police traffic stream, based on DSCP value solely*. No other classification
option exists for egress policers.

this is from Petr Post
http://blog.internetworkexpert.com/2008/02/23/catalyst-qos-3550-explained/

HTH

On Mon, Oct 6, 2008 at 4:42 AM, Bogdan Sass <bogdan.sass@catc.ro> wrote:

> Suryakant P wrote:
> > Hi All,
> >
> > I have the following configuration on the 3560 switch.
> >
> > Extended IP access list 100
> > 10 permit ip any any
> >
> > Class Map match-any int
> > Match input-interface FastEthernet0/13
> > Match input-interface FastEthernet0/14
> >
> > Class Map match-all traffic
> > Match access-group 100
> >
> > Policy Map police2
> > Class int
> > police 64000 8000 exceed-action drop
> >
> > Policy Map checking
> > Class traffic
> > set precedence 5
> > service-policy police2
> > When I try to apply the policy on the VLAN interface,I get the following
> > error
> >
> > *SW2(config)#int vlan201
> > SW2(config-if)#service-policy input checking
> > Service Policy attachment failed
> > SW2(config-if)#
> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
> in
> > classmap int
> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
> in
> > classmap int
> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
> in
> > classmap int
> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
> in
> > classmap int
> > *
> > Is it known limitation ? Is is caused becaused of having multiple match
> > statements in the "int" class ?
> >
> Yep. See here:
>
> http://forum.internetworkexpert.com/ubbthreads.php/ubb/showflat/Number/15205/page/1
>
> %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported in
> classmap [chars].
> This message means that an unsupported match class-map configuration
> command was configured in a policy map and attached to an egress
> interface or that more than one match class-map command was configured.
> *This is a hardware limitation*. [chars] is the class-map name.
> Recommended Action: Reconfigure the class map or the policy map. Use
> only the match ip dscp dscp-list class-map configuration command in a
> policy map that is attached to an egress interface. *Only one match per
> class map is supported*.
>
> --
> Bogdan Sass
> CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS)
> Information Systems Security Professional
> "Nothing in life is to be feared, it is only to be understood"
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:19 ARST