Is this too much to ask from a Cisco switch..

Being able to limit traffic on a per IP basis on a single interface.

e.g. = 500kbps = 200kbps

I know traffic policing is available, but it that only a blanket mechanism, affecting everything, or can I split it out on a per IP basis?

Lab switch is Cisco C2960 Ver 12.2(25r)SEE1

But if it's unavailable there, I have access to newer switches... I more just want to know if it can be done on a layer 2 switch.

  • Can you please be specific on which model Cisco switch and which version of its operating system you're running? Also, if you're talking about a switch, it's unaware of IP addresses.
    – Teun Vink
    Nov 9 '18 at 13:21
  • done........... Nov 9 '18 at 13:25
  • 2
    Can't do it on a 2960. You need a pretty beefy L3 switch to do L3 QoS
    – Ron Trunk
    Nov 9 '18 at 13:43
  • I've worked down to a policy map... so it looks like you can do it, but not to the granularity I'm looking for... it's in 1Mb/s steps policing, which is linked to an ACL, which matches IP source and Dest Nov 9 '18 at 13:47
  • 2
    2960s can only do per interface QoS. The 2960s are actually very limited in the QoS they can do, and you have only a few tiny queues for layer-2 QoS. You want to do the policing on a real layer-3 device.
    – Ron Maupin
    Nov 9 '18 at 14:03

You cannot police traffic for individual hosts on the Cisco 2960 Series.

The QoS functions are also very limited on the software version you are running. You would need at least version 15 software train to enable essential features on the Switch.

  • it's allowing me to write a policy map, which matches to an ACL, which matches source to dest traffic and police it to 1Mb/s .... will that just simply not work on it ? Nov 9 '18 at 13:58
  • 1
    You can only police input traffic and the basic 2960 doesn't have enough processing power to do it properly. The queues are also very limited. You can read my post here: networkengineering.stackexchange.com/questions/42660/…
    – user36472
    Nov 9 '18 at 14:05
  • ah OK cool, thanks for the info and I'll have a read over the post Nov 9 '18 at 14:19
  • 1
    @user10021657 yes, on the older models. The 2960X has no impact on performance.
    – user36472
    Nov 9 '18 at 15:39
  • 1
    @user10021657 Remember it's still only ingress (input) policing on the 2960X model.
    – user36472
    Nov 9 '18 at 17:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.