Policing and Shaping on multi-vrf/MPLS customer subinterface

Hi All

CE_CUST12_A-----1gige---PE1----MPLS Cloud----PE2---1gige-----CE_CUST12_B

on one physical interface at PE1 and PE2 I have two different vrf gige
sub-interface for 2 different customers

THis is a 1 gige interface and we would like to provide customer 1 100 Meg VPN
and customer 2 10 Meg VPN.

For that reason on PE1 and PE2 we decided to apply the following:
- For vrf customer 1 policing on ingress for 100 Meg and shaping on egress for
100 Meg
- for vrf customer 2 policing on interface for 10 Meg and shaping on egress
for 10 Meg

So we are applying a qos on the PE1 and PE2 which are two GSR routers with
IOS.

Decision Reason for H-QoS:
- If I apply no Hierarchical only flat qos. I have tried to do policing per
sub-interface this had worked but when apply shaping per sub-interface it
reject it and ask me to apply Hierarchical QOS. Hardware limitation I guess
!!!
- So looking at Hierarchical QOS , I have decided to apply the following H-QOS
L3/nc/mD policy per vlan.
so I have done one with Shaping and one for Policing and i attached both
below

Questions :
1- I am applying the policing and shaping on the PEs of the network , do you
think it's better to apply on CEs or PEs? What are the pros and cons knowing
that CES will be 3750 and PEs will be GSRs
2- Is the policy below should be ok ? what will be more suitable L3/nc/nD or
L3/nc/mD ?

Thanks so much
Bert

Hierarchy Policing L3/nc/mD

class-map match-any c1vlan200
match vlan 200
class-map match-any c2vlan201
match vlan 201
-
policy-map Customer12_Policing_Parent
class c1vlan200
service-policy Customer1_Policing_100M

class c2vlan201
service-policy Customer2_Policing_10M
-
policy-map Customer2_Policing_10M
  class class-default
   police 10000000 5000 5000 conform-action transmit exceed-action drop

policy-map Customer1_Policing_100M
  class class-default
   police 100000000 50000 50000 conform-action transmit exceed-action drop

interface gige x [main-interface]
service-policy input Customer12_Policing_Parent

---
Hierarchy Shaping L3/nc/md
class-map match-any c1vlan200
match vlan 200
class-map match-any c2vlan201
match vlan 201
-
policy-map Customer12_shaping_Parent
class c1vlan200
service-policy Customer1_Shaping_100M
class c2vlan201
service-policy Customer2_Shaping_10M
policy-map Customer1_Shaping_100M
  class class-default
    shape average 100000000
policy-map Customer2_Shaping_10M
  class class-default
    shape average 10000000
interface gige x [main-interface]
service-policy output Customer12_shaping_Parent
Thanks so much
Bert
Blogs and organic groups at http://www.ccie.net