есть c3560 c c3560-advipservicesk9-mz.122-44.SE2.binнужно ограничить скорость на SVI, делаю через Hierarchical Policy Maps.
Вопрос в том, что не знаю как проверить, что конструкция работает средствами коммутатора.
Судя по iperf policy работает, но
switch# sh policy-map interface vl51
Vlan51
Service-policy input: pol-v50
Class-map: cm-traffic (match-all)
1 packets, 98 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: access-group 101
Service-policy : pol-p17
Class-map: PORT17 (match-all)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: input-interface GigabitEthernet0/17
Class-map: class-default (match-any)
1 packets, 98 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
1 packets, 98 bytes
5 minute rate 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
Счетчики практически не растут.
тестовый стенд
(host1)---vlan50----g0/17(c3560)g0/17----vlan51---(host2)
mls qos
policy-map pol-p17
class PORT17
police 10000000 1000000 exceed-action drop
policy-map pol-v50
class cm-traffic
set precedence 0
service-policy pol-p17
class-map match-all PORT17
match input-interface GigabitEthernet0/17
class-map match-all cm-traffic
match access-group 101
access-list 101 permit ip any any
interface GigabitEthernet0/17
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan ...,50-51,...
switchport mode trunk
switchport nonegotiate
mls qos vlan-based
interface Vlan51
description *** SVI policing test ***
ip address 10.51.51.254 255.255.255.0
service-policy input pol-v50
interface Vlan50
description *** SVI policing test ***
ip address 10.50.50.254 255.255.255.0
проверяю:
------------------------------------------------------------
Client connecting to 10.50.50.1, TCP port 5001
TCP window size: 22.9 KByte (default)
------------------------------------------------------------
[ 3] local 10.51.51.1 port 47373 connected with 10.50.50.1 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-60.3 sec 69.5 MBytes 9.68 Mbits/sec
судя по результату работает.
По крайней мере если сделать:
no mls qos
то скорость поднимается до гигабита.
Коллеги, какими sh можно воспользоваться?