Cisco ISE Software Configuration Guide - Page 96

Examples, Related Commands, Command, Description, policy-map, service-policy, show policy-map

Get Cisco ISE - Line Card ISE PDF manuals and user guides
UPC - 746320730097
View all Cisco ISE manuals
Add to My Manuals
Save this manual to your list of manuals

Page 96 highlights

police rate Software Configuration of ATM ISE Line Cards for Cisco 12000 Series Routers • Tokens are updated in the conform bucket. If the previous arrival of the packet was at T1 and the current arrival of the packet is at T, the bucket is updated with T -T1 worth of bits based on the token arrival rate. The refill tokens are placed in the conform bucket. If the tokens overflow the conform bucket, the overflow tokens are placed in the exceed bucket. The token arrival rate is calculated as follows: (time between packets * policer rate)/8 bytes • If the number of bytes in the conform bucket B is greater than or equal to 0, the packet conforms and the conform action is taken on the packet. If the packet conforms, B bytes are removed from the conform bucket and the conform action is taken. The exceed bucket is unaffected in this scenario. • If the number of bytes in the conform bucket B is less than 0, the excess token bucket is checked for bytes by the packet. If the number of bytes in the exceed bucket B is greater than or equal to 0, the exceed action is taken and B bytes are removed from the exceed token bucket. No bytes are removed from the conform bucket. • If the number of bytes in the exceed bucket B is fewer than 0, the packet violates the rate and the violate action is taken. The action is complete for the packet. Examples The following example drops traffic that does not conform to the specified rate: Router(config-pmap-c)# police rate 64000000 conform-action transmit exceed-action drop Related Commands Command policy-map service-policy show policy-map show policy-map interface Description Creates or modifies a policy map that can be attached to one or more interfaces to specify a service policy. Specifies the name of the service policy to be attached to the interface. Displays the configuration of all classes for a specified service policy map or all classes for all existing policy maps. Displays the configuration of all classes configured for all service policies on the specified interface, or displays the classes for the service policy for a specific PVC on the interface. Cisco IOS Release 12.0(27)S 96

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
Software Configuration of ATM ISE Line Cards for Cisco 12000 Series Routers
police rate
96
Cisco IOS Release 12.0(27)S
•
Tokens are updated in the conform bucket. If the previous arrival of the packet was at T1 and the
current arrival of the packet is at T, the bucket is updated with T -T1 worth of bits based on the token
arrival rate. The refill tokens are placed in the conform bucket. If the tokens overflow the conform
bucket, the overflow tokens are placed in the exceed bucket.
The token arrival rate is calculated as follows:
(time between packets <which is equal to T-T1> * policer rate)/8 bytes
•
If the number of bytes in the conform bucket B is greater than or equal to 0, the packet conforms
and the conform action is taken on the packet. If the packet conforms, B bytes are removed from the
conform bucket and the conform action is taken. The exceed bucket is unaffected in this scenario.
•
If the number of bytes in the conform bucket B is less than 0, the excess token bucket is checked for
bytes by the packet. If the number of bytes in the exceed bucket B is greater than or equal to 0, the
exceed action is taken and B bytes are removed from the exceed token bucket. No bytes are removed
from the conform bucket.
•
If the number of bytes in the exceed bucket B is fewer than 0, the packet violates the rate and the
violate action is taken. The action is complete for the packet.
Examples
The following example drops traffic that does not conform to the specified rate:
Router(config-pmap-c)# police rate 64000000 conform-action transmit exceed-action drop
Related Commands
Command
Description
policy-map
Creates or modifies a policy map that can be attached to one or more
interfaces to specify a service policy.
service-policy
Specifies the name of the service policy to be attached to the interface.
show policy-map
Displays the configuration of all classes for a specified service policy map
or all classes for all existing policy maps.
show policy-map
interface
Displays the configuration of all classes configured for all service policies
on the specified interface, or displays the classes for the service policy for a
specific PVC on the interface.