We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [policing]

For questions about policing in a computer network, where policing is limiting the bitrate of a connection and if it exceeds its capacity the traffic is dropped. For instance, you are setting up Quality of Service in your network and need help with policing.

Filter by
Sorted by
Tagged with
1
vote
0answers
60 views

HTTPS QOS and policing

In our office, everything runs on HTTPS. We have softphones and web-based clients which are high priority. We also have Google search, maps and other low priority websites that should work on best-...
0
votes
0answers
66 views

I'm unable to see packet drops after configuration of QoS policy

I aim to send iperf traffic from Endpoint1(Client) to Endpoint2 (Server) with the following SR path = {R1, R2, R3, R4, R3, R2, R1, R2, and R3}. First of all, the traffic generated by iperf from ...
0
votes
0answers
35 views

What is the difference between Custom Queuing and Weighted Fair Queuing?

I understand that both mechanisms send traffic in a round-robin fashion, and the traffic is sent proportionally to their weight based on the ToS of the traffic. However, I don't understand the ...
5
votes
1answer
105 views

Cisco ISR - Police & burst

We have a Cisco C2900 ISR here, with the following configured: policy-map XX_4M _IN police rate 4000000 burst 400000 conform-action transmit exceed-action drop The policy-map is applied on an ...
1
vote
1answer
161 views

What is Class-based WFQ and LLQ?

Can someone please explain those 2 concepts and rely them to marking, policing and shaping. It is very confusing for me to rely these concepts with each other.
1
vote
1answer
147 views

Block all inbound traffic except for a defined IP

Thanks in advance to anyone who will take time to provide a possible solution. This is my actual situation: ___________________ ________________ INTERNET --------...
3
votes
3answers
403 views

Juniper Dynamic Subscriber Management Traffic Policing

I've managed to get QinQ subscriber management working. Now I want to shape / police both VLAN connections. As a test I have configured this: DYNINTF-STACKED-KANTOOR-TEST { interfaces { "$...
2
votes
1answer
993 views

mac access management with fortigate 90d

I'm not very familiar with firewalls. I have a "fortigate 90d". I must simply prohibit access to the internet (via wired network) to a group of about twenty pc. This ban must be made by mac address of ...
1
vote
2answers
595 views

ASA's traffic policy(QoS) for ipsec VPN tunnels

i have ipsec l2l VPN over internet, I wander if there is default policy in ASA for making ipsec traffic with higher priority? My question basically is, if one of packet from two packets must be ...
2
votes
0answers
2k views

why token bucket algorithm is better than leak bucket algorithm?

I am trying to clear up concept here. This is regarding shaper using Token bucket algorithm. Let’s assume that the bucket depth is 1500 bytes. And assume that the data rate is 2Bps (very slow one). ...
3
votes
0answers
65 views

JunOS: match “to community” to set destination-class in policy-statement? [duplicate]

Let's say I want: routing-options { forwarding-table { export SORTER } } policy-options { policy-statement SORTER { term by-Comm { to community Comm-list; then { ...
2
votes
1answer
1k views

IOS-XR - How to get bandwidth policed on an interface

How can I get in a straight-forward way the bandwidth policed on a certain interface on IOS-XR. In IOS, I execute show policy-map interface Gi1/1.1000 And I get clearly the BW policed on ...
2
votes
2answers
5k views

SonicWALL - VPN no LAN conneciton

Hey guys I have a Problem. I have no idea why but when I'm connected via VPN I'm not albe to connect to the LAN Servers in our Network. I can surf through the internet with the VPN but I'm not even ...
1
vote
0answers
275 views

Policing vs Shaping implementation difference on hardware/PFE?

In general, both are implemented through token bucket algorithm. I am wondering how they are really implemented on hardware, i.e. ASIC or NPU chips. Based on an online article I found from Cisco, ...
5
votes
1answer
2k views

How do I implement Traffic Policing between two ASAs for IPSec traffic?

Due to the fact we've gotten a tremendous internet upgrade, I have attempted to setup a traffic policing rule at our local ASA. Currently one of our offices has a 1GB internet uplink which saturates ...
5
votes
2answers
3k views

Minimum Bandwidth Guarantee 3750-X

I am about to implement a network at a remote office that will also be providing some bandwidth to a sub tenant. We have a 50 Mbps connection terminating to a VLAN on a 3750-X. Each company has an L2 ...
6
votes
2answers
3k views

Traffic policing on 3750-x Lan base

I am trying to split the bandwidth between 2 parties using a C3750-X. It has the Lan base licence and is running on the 12.2 train. The following is my config on an otherwise blank switch: ip access-...
10
votes
2answers
2k views

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port

Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port: #sh interfaces Te3/4 TenGigabitEthernet3/4 is up, line protocol is up (...
8
votes
3answers
4k views

Traffic Policing

I know traffic policing isn't something that you normally find in a LAN environment, and I wish I wouldn't be finding it in mine. That being said... I have no choice. The device is a 3750X. The ...
14
votes
4answers
4k views

Enabling MLS QoS on a production 7600

I am looking at a 7609-S with a RSP720-3CXL running 12.2(33)SRE3. I have been asked to help with rate limiting some servers attached to a couple of ports running as L2 ports (switchport mode access), ...
8
votes
1answer
830 views

Aggregate Family Rate Limits on Juniper EX

Trying to figure out how to perform rate limits on Juniper EX for both inet and inet6 families. Ideally I'd like a packet rate limiter to be applied before the ip type is ever looked at. Basically, ...