Re: Hierarchical policy on the SVI interface of 3560

From: Ali Mousawi (mousawi.ali@gmail.com)
Date: Mon Oct 06 2008 - 22:34:30 ART


Sorry didnt notice "service-policy input checking"

still good to know ;)

On Mon, Oct 6, 2008 at 6:32 PM, Ali Mousawi <mousawi.ali@gmail.com> wrote:

> *Hey,*
>
> *Police traffic stream, based on DSCP value solely*. No other
> classification option exists for egress policers.
>
> this is from Petr Post
> http://blog.internetworkexpert.com/2008/02/23/catalyst-qos-3550-explained/
>
> HTH
>
> On Mon, Oct 6, 2008 at 4:42 AM, Bogdan Sass <bogdan.sass@catc.ro> wrote:
>
>> Suryakant P wrote:
>> > Hi All,
>> >
>> > I have the following configuration on the 3560 switch.
>> >
>> > Extended IP access list 100
>> > 10 permit ip any any
>> >
>> > Class Map match-any int
>> > Match input-interface FastEthernet0/13
>> > Match input-interface FastEthernet0/14
>> >
>> > Class Map match-all traffic
>> > Match access-group 100
>> >
>> > Policy Map police2
>> > Class int
>> > police 64000 8000 exceed-action drop
>> >
>> > Policy Map checking
>> > Class traffic
>> > set precedence 5
>> > service-policy police2
>> > When I try to apply the policy on the VLAN interface,I get the following
>> > error
>> >
>> > *SW2(config)#int vlan201
>> > SW2(config-if)#service-policy input checking
>> > Service Policy attachment failed
>> > SW2(config-if)#
>> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
>> in
>> > classmap int
>> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
>> in
>> > classmap int
>> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
>> in
>> > classmap int
>> > 01:37:10: %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported
>> in
>> > classmap int
>> > *
>> > Is it known limitation ? Is is caused becaused of having multiple match
>> > statements in the "int" class ?
>> >
>> Yep. See here:
>>
>> http://forum.internetworkexpert.com/ubbthreads.php/ubb/showflat/Number/15205/page/1
>>
>> %QOSMGR-4-CLASS_NOT_SUPPORTED: Classification is not supported in
>> classmap [chars].
>> This message means that an unsupported match class-map configuration
>> command was configured in a policy map and attached to an egress
>> interface or that more than one match class-map command was configured.
>> *This is a hardware limitation*. [chars] is the class-map name.
>> Recommended Action: Reconfigure the class map or the policy map. Use
>> only the match ip dscp dscp-list class-map configuration command in a
>> policy map that is attached to an egress interface. *Only one match per
>> class map is supported*.
>>
>> --
>> Bogdan Sass
>> CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS)
>> Information Systems Security Professional
>> "Nothing in life is to be feared, it is only to be understood"
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:19 ARST