Date created: Tuesday, May 28, 2013 10:27:56 AM. Last modified: Friday, July 4, 2014 11:06:04 AM

6500/7600 100Mbps Police

When policing to 100Mbps on a 1Gbps port on a 6500/7600, you can often hit the buffer limit for max burst bytes (31250000);

 

class-map match-any CM-MATCH-100M
  match access-group name ACL-100M
!
policy-map PM-LIMIT-100M
  class CM-MATCH-100M
    police 100000000 18750000 31250000 conform-action transmit exceed-action drop violate-action drop
!
ip access-list extended ACL-100M
 permit ip 1.1.1.248 0.0.0.7 any
 permit ip any 1.1.1.248 0.0.0.7
!
!
int vlan 123
service-policy input PM-LIMIT-100M
service-policy output PM-LIMIT-100M
!
int gi4/2
 switchport mode access
 switchport access vlan 123

If the client supports it you can always force 100Mbps FD down from 1Gbps FD

int gi4/2
 duplex full
 speed 100