4 Command Line Interface

police

This command defines an policer for classified traffic. Use the no form to remove a policer.

Syntax

[no] police rate-kbpsburst-byte[exceed-action {drop set}]

rate-kbps- Rate in kilobits per second. (Range: 1-100000 kbps or maximum port speed, whichever is lower)

burst-byte- Burst in bytes. (Range: 64-1522 bytes)

drop - Drop packet when specified rate or burst are exceeded.

set - Set DSCP service to the specified value. (Range: 0-63)

Default Setting

Drop out-of-profile packets.

Command Mode

Policy Map Class Configuration

Command Usage

You can configure up to 64 policers (i.e., meters or class maps) for each of the following access list types: MAC ACL, IP ACL (including Standard ACL and Extended ACL).

Policing is based on a token bucket, where bucket depth (i.e., the maximum burst before the bucket overflows) is by specified the burst-bytefield, and the average rate tokens are removed from the bucket is by specified by the rate-bpsoption.

Example

This example creates a policy called “rd_policy,” uses the class command to specify the previously defined “rd_class,” uses the set command to classify the service that incoming packets will receive, and then uses the police command to limit the average bandwidth to 100,000 Kbps, the burst rate to 1522 bytes, and configure the response to drop any violating packets.

Console(config)#policy-map rd_policy Console(config-pmap)#class rd_class Console(config-pmap-c)#set ip dscp 3 Console(config-pmap-c)#police 100000 1522 exceed-action drop Console(config-pmap-c)#

4-198

Page 440
Image 440
SMC Networks SMC8150L2 Police, Syntax No police rate-kbpsburst-byteexceed-action drop set, Drop out-of-profile packets