Cisco Systems 4500 Configuring User-Based Rate-Limiting

37-37
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 37 Configuring Quality of Service Configuring QoS on Supervisor Engines II-Plus, II+10GE, IV, V, V-10GE, 4924, 4948, and 4948-10GE
Class Map match-any c4
Match cos 4
Class Map match-any c5
Match cos 5
Class Map match-any c6
Match cos 6
Class Map match-any c7
Match cos 7
Policy Map cos_mutation
Class c0
set dscp default
Class c1
set dscp cs1
Class c2
set dscp cs2
Class c3
set dscp cs3
Class c4
set dscp cs4
Class c5
set dscp cs5
Class c6
set dscp cs6
Class c7
set dscp cs7
interface GigabitEthernet5/1
switchport access vlan 100
switchport mode dot1q-tunnel
service-policy input cos_mutation
Configuring User-Based Rate-Limiting
User-Based Rate-Limiting (UBRL) adopts microflow policing capability to dynamically learn traffic
flows and rate-limit each unique flow to an individual rate. UBRL is available on Supervisor Engine
V-10GE with the built-in NetFlow support. UBRL can be applied to ingress traffic on routed interfaces
with source or destination flow masks. It can support up to 85,000 individual flows and 511 rates. UBRL
is typically used in environments where a per-user, granular rate-limiting mechanism is required; for
example, the per-user outbound traffic rate could differ from the per-user inbound traffic rate.
Note By default, UBRL polices only routed IP traffic. You can use the ip flow ingress layer2-switched global
command to police switched IP traffic. However, UBRL configuration must remain on a Layer 3
interface. With the UBRL configurations and the ip flow ingress layer2-switched global command, you
will also be able to police intra-VLAN flows. You do not need to enter the ip flow ingress command.