A Nexus 3548 traffic policer howto

In NX OS 6.0  and on a 3548 switch it's a little bit different than cisco-ios and with regards on how to craft a traffic "policer"  for rate-limiting traffic inbound on a interface.

Here's a  few quick methods for rate-limit traffic . It requires applying this under the class-default class or by using a class-map.


1: e.g ( rate limit traffic on a 1gig interfaces eth 1/1 to 1/3  to not exceed 10mbps )


config t
   policy-map type qos 10mbps-RATE_limter
        description rate-limit of 10mbps 
        class class-default
           police cir percent 1 bc 200 ms conform transmit violate drop
  
 
interface Ethernet1/1-3
  description1GIGE access to my server
  switchport access vlan 1001
  spanning-tree port type edge
  spanning-tree bpduguard enable
  speed 1000
  storm-control broadcast level 1.50
  storm-control multicast level 5.00 
  service -policy in  10mbps-RATE_limter
end 

copy running start


Another option could be to match a class-map with the match dscp options



2: e.g ( by defining a class-map and a rate limiter of 50mbps )

class-map type qos match-any  QOS_class

  match dscp 0-7

policy-map type qos SOCPUP01

   description  rate-limit of 50mbps

  class QOS_class

    police cir percent 5 bc 200 ms conform transmit violate drop

 For the bc value you need to determine what burst-commit value  you want the time measurement.

Ken Felix
Freelance Network/Security Engineer
kfelix  -----a----t---- socpuppets ---dot---com

   ^    ^
=( # # )=
     @
     /  \