Re: 3560 policing

From: marc edwards <renorider_at_gmail.com>
Date: Thu, 16 Aug 2012 19:58:27 -0700

I hear you. MQC on catalyst is a rough road to travel. I have talked
extensively with many verticals in Cisco about it. I would see what IOS 15
offers. Seems like it is getting better on 6500 , 4500 in that rev. Always
a pleasure working with you Carlos. I have much respect for
your knowledge :)

On Thu, Aug 16, 2012 at 5:55 PM, Carlos G Mendioroz <tron_at_huapi.ba.ar>wrote:

> Yes, right, all the last ones are TxQueue, I missed the RxQueue Drop
> Stats, they are all 0 anyways.
>
> This sounds like buffering also. All of them. And no sign of policers.
> The only policers I see show as being "dormant".
>
> I have also been unable to understand your last idiom :) (Gross out)
> But in any case, your attention to the issue is welcome.
>
> -Carlos
>
> marc edwards @ 16/08/2012 21:35 -0300 dixit:
>
>> Port-asic Port Drop Statistics - Details
>> ==============================**==========
>> RxQueue Drop Statistics Slice0
>> Queue 0 DropThreshold 0 0 DropThreshold 1 0 DropThreshold 2 0
>> Queue 1 DropThreshold 0 0 DropThreshold 1 0 DropThreshold 2 0
>> Queue 2 DropThreshold 0 0 DropThreshold 1 0 DropThreshold 2 0
>> Queue 3 DropThreshold 0 0 DropThreshold 1 0 DropThreshold 2 0
>> RxQueue Drop Statistics Slice1
>>
>> This would be input, correct? What version IOS are you on?
>>
>> Also.. trying to help not gross you out. I will opt out of conversation
>> if you like... just trying to help.
>>
>> Regards,
>>
>> Marc
>>
>> On Thu, Aug 16, 2012 at 5:17 PM, Carlos G Mendioroz <tron_at_huapi.ba.ar
>> <mailto:tron_at_huapi.ba.ar>> wrote:
>>
>> Yuck.
>> This seems to show only output queue drops, and it's all zeroes in
>> the switch at hand.
>>
>> What I'm after is policed drops, which in the case of a 3750 can
>> only be done on input.
>> I played with show platform qos policer et al and no command seems
>> to show any relevant data.
>>
>> -Carlos
>>
>> marc edwards @ 16/08/2012 20:45 -0300 dixit:
>>
>> I am not sure how relevant output would be for confirming
>> policy.... but
>> working with Cisco, I was instructed to do a 'sh platform
>> port-asic stats
>> drop' which is most accurate view of congestion events and
>> amount of frames
>> dropped per port and queue.
>>
>> HTH
>>
>> Marc
>>
>> On Thu, Aug 16, 2012 at 4:12 PM, Carlos G Mendioroz
>> <tron_at_huapi.ba.ar <mailto:tron_at_huapi.ba.ar>>**wrote:
>>
>>
>> Joe Sanchez @ 16/08/2012 19:28 -0300 dixit:
>>
>> Carlos,
>>
>> Can you share a little of your conifguration of a single
>> policed VLAN?
>> Thanks
>>
>>
>> Sure:
>> mls qos
>> ...
>> class-map match-all calabozoin
>> match access-group 121
>> class-map match-all fromEduca71
>> match input-interface GigabitEthernet1/0/24
>> class-map match-all fromEduca72
>> match input-interface GigabitEthernet2/0/24
>>
>> policy-map me-in
>> class calabozoin
>> set ip precedence 1
>> service-policy pol-me-in
>>
>> policy-map pol-me-in
>> class fromEduca71
>> police 1000000 8000 exceed-action drop
>> class fromEduca72
>> police 1000000 8000 exceed-action drop
>> ...
>> interface GigabitEthernet1/0/24
>> description SF08-A (trunk)
>> switchport trunk encapsulation dot1q
>> switchport mode trunk
>> mls qos vlan-based
>> ...
>> interface Vlan7
>> service-policy input me-in
>> ...
>>
>>
>> Joe Sanchez @ 16/08/2012 19:35 -0300 dixit:> This is all
>> that I can think
>> of to view the statistics.
>>
>>
>> show mls qos maps policed-dscp
>>
>> show mls qos interface
>>
>> show mls qos interface interface x/y policers
>>
>> show mls qos interface interface x/y statistics
>>
>>
>> All of them do not show data. Show policers seem to be
>> directed to a
>> policer attached to the whole interface. Show stats also
>> show that as a
>> last line. It seems there's no way to find out what's going
>> on, which is
>> troubling. They are working for sure, but who knows how...
>>
>> Thanks for paying attention,
>> -Carlos
>>
>> On Thu, Aug 16, 2012 at 4:36 AM, Carlos G Mendioroz
>> <tron_at_huapi.ba.ar <mailto:tron_at_huapi.ba.ar>
>>
>> <mailto:tron_at_huapi.ba.ar <mailto:tron_at_huapi.ba.ar>>>
>> wrote:
>>
>> Hi,
>> I have been trying to use a 3750 to do per port
>> per vlan policing.
>> These small headed switches can do hardware
>> policing, and support
>> some CBMQC configurations.
>> To do policing on a per port per vlan you need a 2
>> level policy with
>> class and some action on parent and incoming
>> interface selection +
>> police on child applied on SVI, and mls qos vlan
>> based on IF, AFAIK.
>>
>> This seems to work, but the problem is that I have
>> not found any
>> command that actually shows that, i.e., how many
>> conforming and
>> dropped packets are there.
>>
>> Any hints ?
>> Show mls qos interface policers and stats do not
>> show info :(
>>
>> TIA,
>> -Carlos
>> --
>> Carlos G Mendioroz <tron_at_huapi.ba.ar
>> <mailto:tron_at_huapi.ba.ar> <mailto:tron_at_huapi.ba.ar
>>
>> <mailto:tron_at_huapi.ba.ar>>>
>> LW7 EQI Argentina
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>> <http://www.ccie.net/
>>
>>
>>
>>
>> ______________________________**
>> __**__________________________**______**
>>
>>
>> _______________
>>
>> Subscription information may be found at:
>> http://www.groupstudy.com/__****__list/CCIELab.html<http://www.groupstudy.com/__**__list/CCIELab.html>
>> <http://www.groupstudy.com/__****list/CCIELab.html<http://www.groupstudy.com/__**list/CCIELab.html>
>> ><http://**www. <http://www.>__groupstudy.com/__list/**CCIELab.__html<http://groupstudy.com/__list/CCIELab.__html>
>> <http://www.groupstudy.com/__**list/CCIELab.html<http://www.groupstudy.com/__list/CCIELab.html>
>> >>
>> <http://www.groupstudy.com/**_**_list/CCIELab.html<http://www.groupstudy.com/**__list/CCIELab.html>
>> <http://www.groupstudy.com/****list/CCIELab.html<http://www.groupstudy.com/**list/CCIELab.html>
>> ><http://www.**__groupstudy.com/list/CCIELab.**__html<http://groupstudy.com/list/CCIELab.__html>
>>
>> <http://www.groupstudy.com/**list/CCIELab.html<http://www.groupstudy.com/list/CCIELab.html>
>> >>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> --
>> Carlos G Mendioroz <tron_at_huapi.ba.ar
>> <mailto:tron_at_huapi.ba.ar>> LW7 EQI Argentina
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> ______________________________**
>> __**__________________________**______**
>>
>> ___________
>> Subscription information may be found at:
>> http://www.groupstudy.com/**
>> list/CCIELab.html
>> <http://www.groupstudy.com/__**list/CCIELab.html<http://www.groupstudy.com/__list/CCIELab.html>
>>
>> <http://www.groupstudy.com/**list/CCIELab.html<http://www.groupstudy.com/list/CCIELab.html>
>> >>
>>
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> ______________________________**______________________________**
>> _______________
>>
>> Subscription information may be found at:
>> http://www.groupstudy.com/__**list/CCIELab.html<http://www.groupstudy.com/__list/CCIELab.html>
>> <http://www.groupstudy.com/**list/CCIELab.html<http://www.groupstudy.com/list/CCIELab.html>
>> >
>>
>>
>>
>>
>>
>>
>>
>>
>> --
>>
>> Carlos G Mendioroz <tron_at_huapi.ba.ar <mailto:tron_at_huapi.ba.ar>>
>> LW7 EQI Argentina
>>
>>
>>
> --
> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina

Blogs and organic groups at http://www.ccie.net
Received on Thu Aug 16 2012 - 19:58:27 ART

This archive was generated by hypermail 2.2.0 : Sat Sep 01 2012 - 08:41:18 ART