Configure the specified access rate and distributed access rate policy. You can use the rate-limit port to configure the command. remove the ratelimit configuration and add no to the original command. command: rate-limit {input | output} [access-group [rate-limit] acl-index] bpsburst-normalburst-maxconform-actionconform-
Configure the specified access rate and distributed access rate policy. You can use the rate-limit port to configure the command. remove the rate limit configuration and add no to the original command. command: rate-limit {input | output} [access-group [rate-limit] acl-index] bps burst-normal burst-max conform-action conform-
Configure the specified access rate and distributed access rate policy. You can use the rate-limit port configuration command to remove the rate limit configuration and add no removal to the original command.
Command:
Rate-limit {input | output} [access-group [rate-limit] acl-index] bps burst-normal burst-max conform-action exceed-action
No rate-limit {input | output} [access-group [rate-limit] acl-index] bps burst-normal burst-max conform-action exceed-action conform- action
Parameter description:
Input-apply an access rate policy to the accepted packets on the portal
Output-apply an access rate policy to the sent packets at the egress
The access-group option applies the access rate policy on the specified access Control List-usually used when the specified ip address and application are limited.
Rate-limit: Optional. This is the rate-limit access control policy.
Acl-index option, Access list number.
Bps average rate (bits/second), a multiple of 8 kbp
Burst-normal maximum rate, The minimum values is bps pided by 2000.
Maximum rate (in bytes) of the burst-max exception)
Action corresponding to conform-action
1. continue -- Evaluates the next rate-limit command.
2. drop to discard the package
3. set-dscp-continue ----- Sets the differentiated services code point (DSCP) (0 to 63) and evaluate the next rate-limit command.
4. set-dscp-transmit------- Sends the DSCP and transmit the packet.
5. set-mpls-exp-transmit--- Sets the MPLS experimental bits (0 to 7) and sends the packet.
6. set-prec-continue---- Sets the IP precedence (0 to 7) and evaluates the next rate-limit command.
7. set-qos-continue---- Sets the QoS group ID (1 to 99) and evaluates the next rate-limit command.
8. transmit---- Sends the packet.
Exceed-action -------- Action to take on packets that exceed the specified rate limit. Specify one of the following keywords:
1. continue -- Evaluates the next rate-limit command.
2. drop -- Drops the packet.
3. set-dscp-continue--- Sets the DSCP (0 to 63) and evaluates the next rate-limit command.
4. set-dscp-transmit--- Sends the DSCP and sends the packet.
5. set-mpls-exp-continue--- Sets the MPLS experimental bits (0 to 7) and evaluates the next rate-limit command.
6. set-mpls-exp-transmit--- Sets the MPLS experimental bits (0 to 7) and sends the packet.
7. set-prec-continue--- Sets the IP precedence (0 to 7) and evaluates the next rate-limit command.
8. set-prec-transmit--- Sets the IP precedence (0 to 7) and sends the packet.
9. set-qos-continue--- Sets the QoS group ID (1 to 99) and evaluates the next rate-limit command.
10. set-qos-transmit--- Sets the QoS group ID (1 to 99) and sends the packet.
11. transmit -- Sends the packet.
By default, the access rate and distributed access rate policies are disabled.
Command mode:
Interface configuration
Command History
Release Modification
11.1 CC This command was introduced.
12.1 (5) T The conform and exceed actions were added for the MPLS experimental field.
Usage Guidelines
Use multiple access rate policies and input them under different interfaces
Distributed access rate policies can only be used in Cisco 7000 series routers with an RSP7000 or Cisco 7500 series routers with VIP2-40 or greater interface processor. A VIP2-50 interface processor is strongly recommended when the aggregate line rate of the port adapters on the VIP is greater than DS3. A VIP2-50 interface processor is required for OC-3 rates.
The access rate and distributed access rate policy can only be used for ip Address Transmission. the access rate and distributed access rate policies do not support Fast EtherChannel, tunnel, or PRI interfaces, and do not support any interfaces on Cisco Fast forward (CEF.
Cisco Express Forwarding must be enabled before configuring the access rate and distributed access rate policies.
Examples
In the following example, the rate is limited by application:
All World Wide Web traffic is sent. however, the MPLS experimental field for web traffic that conforms to the first rate policy is set to 5. for nonconforming traffic, the IP precedence is set to 0 (best effort ). see the following commands in the example:
Rate-limit input rate-limit access-group 101 20000000 24000 conform-action
Set-mpls-exp-transmit 5 exceed-action set-mpls-exp-transmit 0
Access-list 101 permit tcp any eq www
FTP traffic is sent with an MPLS experimental field of 5 if it conforms to the second rate policy. if the FTP traffic exceeds the rate policy, it is dropped. see the following commands in the example:
Rate-limit input access-group 102 10000000 24000
Conform-action set-mpls-exp-transmit 5 exceed-action drop
Access-list 102 permit tcp any eq ftp
Any remaining traffic is limited to 8 Mbps, with a normal burst size of 16,000 bytes and an excess burst size of 24000 bytes. traffic that conforms is sent with an MPLS experimental field of 5. traffic that does not conform is dropped. see the following command in the example:
Rate-limit input 8000000 16000 24000 conform-action set-mpls-exp-transmit 5
Exceed-action drop
Notice that two access lists are created to classify the web and FTP traffic so that they can be handled separately by the CAR feature:
Interface Hssi0/0/0
Des cription 45 Mbps to R2
Rate-limit input rate-limit access-group 101 20000000 24000
Conform-action set-mpls-exp-transmit 5 exceed-action set-mpls-exp-transmit 0
Rate-limit input access-group 102 10000000 24000
Conform-action set-mpls-exp-transmit 5 exceed-action drop
Rate-limit input 8000000 16000 24000 conform-action
Set-mpls-exp-transmit 5 exceed-action drop
Ip address 200.200.14.250 255.255.255.252
!
Access-list 101 permit tcp any eq www
Access-list 102 permit tcp any eq ftp
In the following example, the MPLS experimental field is set and the packet is sent:
Interface FastEtheret1/1/0
Rate-limit input 8000 1000 1000 access-group conform-action
Set mpls-exp-transmit 5 exceed-action set-mpls-exp-transmit 5
Related commands:
Access-list -------- rate-limit Configures an access list for use with CAR policies.
Show access-lists rate-limit -------- Displays information about rate-limit access lists.
Show interfaces rate-limit -------- Displays information about CAR for an interface.
Show ip rsvp installed --------- Displays RSVP-related installed filters and corresponding bandwidth information.
