Cisco Systems 0L-11350-01 CLI Command

5-40
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-11350-01
Chapter5 Administering the Access PointW ireless Device Access
Configuring Multiple VLAN and Rate Limiting for Point-to-Multipoint Bridging
In a typical scenario, multiple VLAN support permits users to set up point-to-multipoint bridge links
with remote sites, with each remote site on a separate VLAN. This configuration provides the user to
separate and control traffic to each site. Rate limiting ensures that no remote site consumes more than a
specified amount of the entire link band width. Only uplink traffic can be controlled using the
FastEthernet ingress ports of non-root bridges.
Using the class-based policing feature, you can specify the rate limit and apply it to ingress of the
Ethernet interface of a non-root bridge. Applying the rate at the ingress of the Ethernet interface ensures
that all incoming Ethernet packets conform to the configured rate.
The following configuration shows how to define a traffic class using the class-map command and
associate the criteria from the traffic class with the traffic policing configuration, which is configured in
the service policy using the policy-map command. In this example, traffic policing is configured with
an average rate of 8000 bits per second and a normal burst size of 1000 bytes for all incoming packets
on the FastEthernet 0 interface.
AP enable
AP#config terminal
AP(config)#class-map sample_class
AP(config-cmap)#match any
AP(config-cmap)#exit
AP(config)#policy-map police setting
AP(config-pmap)#class sample_class
AP(config-pmap)#police 8000 1000 conform-action transmit exceed-action drop
AP(config-pmap-c)#exit
AP(config-pmap)#exit
AP(config)#interface fa0
AP(config-if)#service-policy input police-setting
Note There are many options available under the class-map policy command, however only the match any
option is supported by this release.
CLI Command
Use the bridge non-root client vlan <vlan id> command to add the 802.11Q tag to all incoming Ethernet
packets. This command can only be applied to non-root bridges.