2-355
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
police cir percent
Command Modes
Policy-map class configuration
Command History
Usage Guidelines
Use the
police cir
percent
policy-map class configuration command only in a hierarchical policy map
attached to an ES port. This command is valid in policy maps at any level of the hierarchy.
You can create a three-level (nested) hierarchy: a primary (or
parent
) level in the physical-level policy
map, a secondary (or
child
) level in the VLAN-level policy map, and a third child level in the class-level
policy map. Note that the VLAN-level configuration is the parent of the class-level configuration.
The switch calculates the CIR and PIR based on a percentage of the maximum amount of bandwidth
assigned to the parent class. The maximum bandwidth is controlled by the
shape
policy-map class
configuration command if it is configured. Otherwise, the maximum bandwidth is the physical port
bandwidth (1 Gbps).
When you specify the CIR and PIR rates as a percentage in a class-level child policy, the switch uses the
maximum bandwidth amount that is specified in the next higher-level policy (in this case, the parent’s
maximum bandwidth at the VLAN level) to calculate the rates in bps. If the VLAN-level policy does not
specify a maximum bandwidth, the switch uses the maximum bandwidth of the parent’s parent (the
physical-level policy). If the physical-level policy does not specify a maximum bandwidth, the switch
uses the bandwidth of the physical port to calculate the rates in bps. The
police cir percent
command
always refers to the next higher level for the maximum bandwidth reference point. For more information,
see the “Examples” section.
The calculated CIR and PIR bps rates must be in the range of 8000 and 2000000000 bps. If the rates are
outside this range, the switch does not attach the policy map to the port. If the port bandwidth changes
(for example, more is added), the switch recalculates the bps values of the CIR and the PIR based on the
revised amount of bandwidth. If the CIR and PIR percentages are changed after the policy map is
attached to the port, the switch recalculates the bps values of the CIR and PIR.
Setting the burst sizes too low can result in more traffic than expected, and setting them too high can
result in less traffic than expected. Both of these conditions can violate the policer checks.
If you want the policer to be calculated as a percentage, specify the conform burst size and the peak burst
size in ms.
If you configure the
conform-action
,
exceed-action
,
violate-action
in a two-rate ingress policer and set
the CoS, DSCP, or IP precedence values of the packet by using the
set-cos-transmit
new-cos
,
set-dscp-transmit
new-dscp
, or the
set-prec-transmit
new-prec
options, the switch automatically
applies the port trust state to all traffic received on the ES port, including traffic that does not match the
traffic class with the two-rate policer.
You cannot combine Layer 2 (
set-cos-transmit
new-cos
) and Layer 3 (
set-dscp-transmit
new-dscp
, or
the
set-prec-transmit
new-prec
) actions in a two-rate ingress policer because the port can trust only one
value in the inbound packet (CoS, DSCP, or IP precedence). For example, you cannot configure the
police cir percent 10 conform-action set-cos-transmit 3 exceed-action set dscp-transmit af22
command. The
conform-action
sets the CoS value to 3 while the
exceed-action
sets the DSCP value to
af22.
Release
Modification
12.1(14)AX
This command was introduced.
12.2(25)EY
Hierarchical service policies can be attached to inbound traffic received on
an ES port.
