Questions tagged [policing]
For questions about policing in a computer network, where policing is limiting the bitrate of a connection and if it exceeds its capacity the traffic is dropped. For instance, you are setting up Quality of Service in your network and need help with policing.
23 questions
1
vote
1
answer
320
views
Cisco ASR1006 QoS on pppoe session: Police percent not supported - no bandwidth for percent calculation
I want to perform QoS on specific (or all the) L2TP sessions that establish on ASR1006 router (LNS).
What I have managed already is to set a police at a specific rate for a class that matches access-...
- 11
3
votes
1
answer
470
views
Juniper MX L2 policer over-policing small frames
Our network is currently going through a certification, and we're seeing some odd issues with the policer.
We have 2 MX240 routers set up with MPLS/RSVP/IS-IS with a Martini-Draft l2circuit configured ...
- 76
0
votes
1
answer
3k
views
Understanding the Burst Size against policer for 1G/10G interfaces in Juniper MX
We are facing one confusion with regards to burst size value against rate limit or policer in Juniper MX. Need to understand two things :-
(1) Is the burst size limit defined in firewall policer ...
- 1,162
1
vote
0
answers
91
views
HTTPS QOS and policing [closed]
In our office, everything runs on HTTPS. We have softphones and web-based clients which are high priority. We also have Google search, maps and other low priority websites that should work on best-...
- 113
0
votes
0
answers
248
views
I'm unable to see packet drops after configuration of QoS policy
I aim to send iperf traffic from Endpoint1(Client) to Endpoint2 (Server) with the following SR path = {R1, R2, R3, R4, R3, R2, R1, R2, and R3}.
First of all, the traffic generated by iperf from ...
- 145
5
votes
1
answer
312
views
Cisco ISR - Police & burst
We have a Cisco C2900 ISR here, with the following configured:
policy-map XX_4M _IN
police rate 4000000 burst 400000
conform-action transmit
exceed-action drop
The policy-map is applied on an ...
- 319
1
vote
1
answer
426
views
What is Class-based WFQ and LLQ?
Can someone please explain those 2 concepts and rely them to marking, policing and shaping.
It is very confusing for me to rely these concepts with each other.
1
vote
1
answer
207
views
Block all inbound traffic except for a defined IP
Thanks in advance to anyone who will take time to provide a possible solution.
This is my actual situation:
___________________ ________________
INTERNET --------...
3
votes
3
answers
1k
views
Juniper Dynamic Subscriber Management Traffic Policing
I've managed to get QinQ subscriber management working. Now I want to shape / police both VLAN connections. As a test I have configured this:
DYNINTF-STACKED-KANTOOR-TEST {
interfaces {
"$...
- 275
2
votes
1
answer
1k
views
mac access management with fortigate 90d
I'm not very familiar with firewalls. I have a "fortigate 90d". I must simply prohibit access to the internet (via wired network) to a group of about twenty pc. This ban must be made by mac address of ...
- 35
1
vote
2
answers
910
views
ASA's traffic policy(QoS) for ipsec VPN tunnels
i have ipsec l2l VPN over internet, I wander if there is default policy in ASA for making ipsec traffic with higher priority?
My question basically is, if one of packet from two packets must be ...
- 92
2
votes
0
answers
3k
views
why token bucket algorithm is better than leak bucket algorithm? [closed]
I am trying to clear up concept here. This is regarding shaper using Token bucket algorithm.
Let’s assume that the bucket depth is 1500 bytes. And assume that the data rate is 2Bps (very slow one). ...
- 325
3
votes
0
answers
114
views
JunOS: match "to community" to set destination-class in policy-statement? [duplicate]
Let's say I want:
routing-options {
forwarding-table {
export SORTER
}
}
policy-options {
policy-statement SORTER {
term by-Comm {
to community Comm-list;
then {
...
- 131
2
votes
1
answer
3k
views
IOS-XR - How to get bandwidth policed on an interface
How can I get in a straight-forward way the bandwidth policed on a certain interface on IOS-XR.
In IOS, I execute
show policy-map interface Gi1/1.1000
And I get clearly the BW policed on ...
- 2,008
2
votes
2
answers
6k
views
SonicWALL - VPN no LAN conneciton
Hey guys I have a Problem.
I have no idea why but when I'm connected via VPN I'm not albe to connect to the LAN Servers in our Network. I can surf through the internet with the VPN but I'm not even ...
- 23
2
votes
0
answers
306
views
Policing vs Shaping implementation difference on hardware/PFE?
In general, both are implemented through token bucket algorithm. I am wondering how they are really implemented on hardware, i.e. ASIC or NPU chips.
Based on an online article I found from Cisco, ...
- 203
5
votes
1
answer
3k
views
How do I implement Traffic Policing between two ASAs for IPSec traffic?
Due to the fact we've gotten a tremendous internet upgrade, I have attempted to setup a traffic policing rule at our local ASA. Currently one of our offices has a 1GB internet uplink which saturates ...
- 705
5
votes
2
answers
3k
views
Minimum Bandwidth Guarantee 3750-X
I am about to implement a network at a remote office that will also be providing some bandwidth to a sub tenant. We have a 50 Mbps connection terminating to a VLAN on a 3750-X. Each company has an L2 ...
- 51
6
votes
2
answers
3k
views
Traffic policing on 3750-x Lan base
I am trying to split the bandwidth between 2 parties using a C3750-X. It has the Lan base licence and is running on the 12.2 train.
The following is my config on an otherwise blank switch:
ip access-...
- 61
10
votes
2
answers
2k
views
Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port
Cisco 7604 + RSP720 3CXL + WS-X6704-10GE increasing the error counters on the port, but there is no loss through the port:
#sh interfaces Te3/4
TenGigabitEthernet3/4 is up, line protocol is up (...
- 173
8
votes
3
answers
4k
views
Traffic Policing
I know traffic policing isn't something that you normally find in a LAN environment, and I wish I wouldn't be finding it in mine. That being said... I have no choice.
The device is a 3750X. The ...
- 325
14
votes
4
answers
4k
views
Enabling MLS QoS on a production 7600
I am looking at a 7609-S with a RSP720-3CXL running 12.2(33)SRE3.
I have been asked to help with rate limiting some servers attached to a couple of ports running as L2 ports (switchport mode access), ...
- 5,310
8
votes
1
answer
916
views
Aggregate Family Rate Limits on Juniper EX
Trying to figure out how to perform rate limits on Juniper EX for both inet and inet6 families. Ideally I'd like a packet rate limiter to be applied before the ip type is ever looked at. Basically, ...
- 81