The type of policer
created by the device is based on a combination of the
police command
arguments described in the following Arguments to the police Command table.
Note
|
You must specify
the identical value for
pir and
cir to
configure 1-rate 3-color policing.
|
Note
|
A 1-rate 2-color
policer with the violate markdown action is not supported.
|
Note
|
If the same policer
enabled QoS policy is applied across multiple ingress interfaces on Cisco Nexus
3000 Series switches, the
qos qos-policies statistics command should be
enabled. Otherwise, the policer entry is shared between the interfaces that
results in aggregate policing. The command,
qos qos-policies statistics enables separate
policer entries for each ingress interface and also enables policer statistics.
|
Table 1. Arguments to the
police Command
Argument
|
Description
|
cir
|
Committed information rate, or desired bandwidth, specified as a bit rate or a percentage of the link rate. Although a value
for cir is required, the argument itself is optional. The range of values is from 1 to 80000000000. The range of policing
values is from 8000 to 80 Gbps.
|
percent
|
Rate as a percentage of the interface rate. The range of values is from 1 to 100 percent.
|
bc
|
Indication of how much the cir can be exceeded, either as a bit rate or an amount of time at cir. The default is 200 milliseconds
of traffic at the configured rate. The default data rate units are bytes.
|
pir
|
Peak information rate, specified as a PIR bit rate or a percentage of the link rate. There is no default. The range of values
is from 1 to 80000000000; the range of policing values is from 8000 bps to 480 Gbps. The range of percentage values is from
1 to 100 percent.
|
be
|
Indication of how much the pir can be exceeded, either as a bit rate or an amount of time at pir. When the bc value is not
specified, the default is 200 milliseconds of traffic at the configured rate. The default data rate units are bytes.
Note
|
You must specify a value for pir before the device displays this argument.
|
|
conform
|
Single action to take if the traffic data rate is within bounds. The basic actions are transmit or one of the set commands
listed in the following Policer Actions for Conform table. The default is transmit.
|
exceed
|
Single action to take if the traffic data rate is exceeded. The basic actions are drop or markdown. The default is drop.
|
violate
|
Single action to take if the traffic data rate violates the configured rate values. The basic actions are drop or markdown.
The default is drop.
|
Although all the
arguments in the above Arguments to the police Command table are optional, you
must specify a value for
cir . In this
section,
cir indicates
its value but not necessarily the keyword itself. The combination of these
arguments and the resulting policer types and actions are shown in the
following Policer Types and Actions from Police Arguments Present table.
Table 2. Policer Types
and Actions from Police Arguments Present
Police
Arguments Present
|
Policer Type
|
Policer
Action
|
cir, but not
pir,
be, or
violate
|
1-rate,
2-color
|
<=
cir,
conform; else
violate
|
cir and
pir
|
2-rate,
3-color
|
<=
cir, conform; <=
pir, exceed; else
violate
|
The policer
actions that you can specify are described in the following Policer Actions for
Exceed or Violate table and the following Policer Actions for Conform table.
Table 3. Policer
Actions for Exceed or Violate
Action
|
Description
|
drop
|
Drops the
packet. This action is available only when the packet exceeds or violates the
parameters.
|
set-cos-transmit
|
Sets CoS
and transmits the packet.
|
set-dscp-transmit
|
Sets DSCP
and transmits the packet.
|
set-prec-transmit
|
Sets
precedence and transmits the packet.
|
set-qos-transmit
|
Sets
qos-group and transmits the packet.
|
Table 4. Policer
Actions for Conform
Action
|
Description
|
transmit
|
Transmits
the packet. This action is available only when the packet conforms to the
parameters.
|
set-prec-transmit
|
Sets the
IP precedence field to a specified value and transmits the packet. This action
is available only when the packet conforms to the parameters.
|
set-dscp-transmit
|
Sets the
differentiated service code point (DSCP) field to a specified value and
transmits the packet. This action is available only when the packet conforms to
the parameters.
|
set-cos-transmit
|
Sets the
class of service (CoS) field to a specified value and transmits the packet.
This action is available only when the packet conforms to the parameters.
|
set-qos-transmit
|
Sets the
QoS group internal label to a specified value and transmits the packet. This
action can be used only in input policies and is available only when the packet
conforms to the parameters.
|
Note
|
The policer can
only drop or mark down packets that exceed or violate the specified parameters.
For information on marking down packets, see the Configuring Marking section.
|
The data rates
used in the
police
command are described in the following Data Rates for the police Command table.
Table 5. Data Rates for
the police Command
Rate
|
Description
|
bps
|
Bits per
second (default)
|
kbps
|
1,000 bits
per seconds
|
mbps
|
1,000,000
bits per second
|
gbps
|
1,000,000,000 bits per second
|
Burst sizes used
in the
police
command are described in the following Burst Sizes for the police Command
table.
Table 6. Burst Sizes
for the police Command
Speed
|
Description
|
bytes
|
bytes
|
kbytes
|
1,000
bytes
|
mbytes
|
1,000,000
bytes
|
ms
|
milliseconds
|
us
|
microseconds
|
.