Can't apply service-policy to atm int?
Attempted to apply service-policy output MPLS-EGRESS to ATM Int:
class-map match-any GOLD
match mpls experimental topmost 5
match ip precedence 5
class-map match-any BRONZE
match mpls experimental topmost 3
match ip precedence 3
class-map match-any SILVER
match mpls experimental topmost 4
match ip precedence 4
policy-map MPLS-EGRESS
class GOLD
priority percent 5
set mpls experimental topmost 5
class SILVER
bandwidth percent 10
random-detect
set mpls experimental topmost 4
class BRONZE
bandwidth percent 20
random-detect
set mpls experimental topmost 3
class class-default
set mpls experimental topmost 0
fair-queue
random-detect
interface ATM4/0.102 point-to-point
description TRUNK LINK TO PE_B
bandwidth 16000
ip address xxx.xxx.xxx.xxx 255.255.255.252
no ip redirects
no ip proxy-arp
ip ospf message-digest-key xxx
no snmp trap link-status
mpls ip
pvc PE_B 10/102
tx-ring-limit 3
oam-pvc manage
encapsulation aal5snap
service-policy output MPLS-EGRESS
And it *appears* to apply without error, but logs show:
Jul 28 09:34:32.550 aest: %SCHED-3-SEMLOCKED: Virtual Exec attempted to lock a semaphore, already locked by itself -Traceback= 0x61317864 0x62658A88 0x620F0A4C 0x60DD3668 0x60DD5648 0x6135ABD8 0x61379744 0x62644508 0x626444EC
Jul 28 09:34:33.870 aest: I/f ATM4/0.102 VC 10/102 class GOLD requested bandwidth 0 (kbps), available only 0 (kbps)
And ATM4/0.102 does not include the service-policy output MPLS-EGRESS when I do a show run nor when I do a sho policy-map interface?
Resolved my own issue - I needed:
vbr-nrt 32000 16000
under the atm sub int...
Similar Messages
-
I am not able to have Service-Policy... " commands enabled in my Router that is working as a PE in the lab.
The router info is as follows:
Cisco Internetwork Operating System Software
IOS (tm) 3600 Software (C3640-JS-M), Version 12.2(21a), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Fri 09-Jan-04 16:23 by kellmill
Image text-base: 0x60008930, data-base: 0x61458000
ROM: System Bootstrap, Version 11.1(20)AA2, EARLY DEPLOYMENT RELEASE SOFTWARE (f
c1)
PE uptime is 5 hours, 12 minutes
System returned to ROM by power-on
System image file is "flash:slot0"
cisco 3640 (R4700) processor (revision 0x00) with 44032K/5120K bytes of memory.
Processor board ID 22105451
R4700 CPU at 100Mhz, Implementation 33, Rev 1.0
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
TN3270 Emulation software.
1 Ethernet/IEEE 802.3 interface(s)
2 FastEthernet/IEEE 802.3 interface(s)
1 Serial network interface(s)
1 Serial network interface(s)
DRAM configuration is 64 bits wide with parity disabled.
125K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102
Can someone help with it.. thx.Hi
Are you trying to bind the service policy under any of the interface or class map or in the control plane config ?
can you post what exactly you are trying to do and the error you are recieving while do so ..
regds -
Applying service policy using radius and VPDN
anyone had any success doing this?
I've been following the suggested config at http://www.cisco.com/en/US/customer/products/ps6566/products_feature_guide09186a0080610dad.html#wp1058626 but not having any success.
sessions terminate on my 7301 via L2TP through another provider - this all works fine.
I have the following AVPair defined in the user RADIUS profile:
Cisco-AVPair = "ip:sub-qos-policy-out=DROP-P2P"
and the matching policy map defined on the 7301 but it does not get applied to the user session.
Debug L2X errors gives the following message:
001867: Oct 30 16:12:50.655 UTC: L2X: Unknown AVP 76 in CM SCCRQ
001868: Oct 30 16:12:50.655 UTC: L2X: Ignoring unknown AVP 76
if I apply the policy map in the virtual-template it does get applied, but obviously to all users on that template which is not what I want.
edit: - btw the 7301 is on 12.4 so this feature should be available.
thanks
Liam.With a router it won't be possible to get different policy for users in a single template. Following link may help you
http://www.cisco.com/en/US/customer/products/ps6566/products_feature_guide09186a0080610dad.html#wp1081783 -
How can I apply group policy but exception some users like administrator?
Hello all.
How can I set a group policy and apply it to users exception the administrator ?
Cheers.Hello,
please see
http://www.grouppolicy.biz/2015/03/how-to-stop-local-administrators-from-bypassing-group-policy/if you talk about local administrator accounts. In shortyou CAN'T.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter: -
Cannot configure service-policy on SIP-400
I have cisco 7606 with SIP-400 on slot1 , and I try to apply service-policy output on the interface pos1/1/0, after enter the command, the system
generate the error "queue-limit is invalid command w/o other queueing feature".
Why I cannot apply the service-policy?Thanks Marcio.
I have added failover details to the client's tnsnames file (see below), but still i get the '500 - The Network Adapter could not establish the connection' error:
TESTDB =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = lontestdb01-vip)(PORT = 1526))
(ADDRESS = (PROTOCOL = TCP)(HOST = lontestdb02-vip)(PORT = 1526))
(LOAD_BALANCE = TRUE)
(FAILOVER = TRUE)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = ESTDB)
(FAILOVER_MODE =
(BACKUP=lontestdb02-vip)
(TYPE=select)
(METHOD=preconnect)
(RETRIES=180)
(DELAY=5)
Bal - the output of crs_stat -t is as follows (please note the listener on node 1 is intentionally down)
-bash-3.00$ crs_stat -t
Name Type Target State Host
ora....B1.inst application ONLINE ONLINE lonestdb01
ora....B2.inst application ONLINE ONLINE lonestdb02
ora....DB1.srv application ONLINE ONLINE lonestdb01
ora....DB2.srv application ONLINE ONLINE lonestdb02
ora....BOTH.cs application ONLINE ONLINE lonestdb01
ora....DB1.srv application ONLINE ONLINE lonestdb02
ora....LIVE.cs application ONLINE ONLINE lonestdb01
ora....DB2.srv application ONLINE ONLINE lonestdb02
ora....NDBY.cs application ONLINE ONLINE lonestdb02
ora.ESTDB.db application ONLINE ONLINE lonestdb02
ora....01.lsnr application OFFLINE OFFLINE
ora....b01.gsd application ONLINE ONLINE lonestdb01
ora....b01.ons application ONLINE ONLINE lonestdb01
ora....b01.vip application ONLINE ONLINE lonestdb01
ora....02.lsnr application ONLINE ONLINE lonestdb02
ora....b02.gsd application ONLINE ONLINE lonestdb02
ora....b02.ons application ONLINE ONLINE lonestdb02
ora....b02.vip application ONLINE ONLINE lonestdb02
Many thanks to everyone that's helped so far
Rup -
Applying a service policy on an ACE vlan
Hi All
Our ACE is held at a remote site and i just want to apply a Service policy on the client vlan which is also
our mgmt/access vlan.
As i am new to ACE s i thought i would run it past you guyst before i apply it - I am not going to lose
connectivity to my ACE am i -
Heres the Service policy -
policy-map multi-match CLIENT-VIPS
class VIP-150
loadbalance vip inservice
loadbalance policy lb-logic
class-map match-all VIP-150
2 match virtual-address xx.xx.xx.150 any
I was going to apply it on vlan 121
int vlan 121
service-policy input CLIENT-VIPS
Now the way i read it
- it should only affect access to the virtual address specified
Its not going to cut off my access to the ACE by only allowing
that address through is it ?
Could be a career damaging move if so for me
Thanks for your advice
SteveHello Steve,
If you are not modifying the MGMT class or policy, you do not need to worry about, like you mentioned, this LB policy is just intended to allow connections to that VIP, nothing else.
As always it is a good practice to not apply this during production time, as well you can create a test context, where you can test all this without using the production context, so you can play safe and learn at the same time.
Thanks, hope this help. -
Error while applying the Service Policy
Hi,
I am getting the below error while applying the service policy to the Interface.
I have set the mpls exp 4 as well as want to limit the bandwidth to 1Mbps
PE#sh policy-map setexp-GBoIP
Policy Map setexp-GBoIP
Class GBoIP-traffic
set mpls experimental imposition 4
police cir 1024000 bc 32000
conform-action transmit
exceed-action drop
PE(config-if)#int vlan 2007
PE(config-if)#service-policy input setexp-GBoIP
QoS-ERROR: Addition/Modification made to policymap setexp-GBoIP and class GBoIP-traffic is not valid, command is rejected
As well as I have created new clas--map with priority and Bandwidth and applied in output direction, I got the belwo error while applying the Service policy in
PE(config-if)#service-policy out TEST
bandwidth command is not supported in output direction for this interface
PE(config-if)#service-policy output TEST
priority command is not supported in output direction for this interface
Any idea why so ?
Thanks in Advance.
Regards,
NileshCheck the current value of IGW_AWARDS_S sequence and make sure the MINVALUE in the patch (i.e. 10000) is not greater than the current one.
OERR: ORA 4007 MINVALUE cannot be made to exceed the current value (Doc ID 19824.1)
You may also log a SR.
Thanks,
Hussein -
Can't apply policy route-map on C3750 stack vlan interface
Hi All.
I've come up with this problem and i could see some people have had the same issue. I've tried to overlook and check other replies but it didn't help me. So I'm hoping someone could spot the problem. Here are the details:
2 x WS-C3750G-24T-E in stack
Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
switch#sh sdm prefe
The current template is "desktop IPv4 and IPv6 routing" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses: 1.5K
number of IPv4 IGMP groups + multicast routes: 1K
number of IPv4 unicast routes: 2.75K
number of directly-connected IPv4 hosts: 1.5K
number of indirect IPv4 routes: 1.25K
number of IPv6 multicast groups: 1.125k
number of directly-connected IPv6 addresses: 1.5K
number of indirect IPv6 unicast routes: 1.25K
number of IPv4 policy based routing aces: 0.25K
number of IPv4/MAC qos aces: 0.5K
number of IPv4/MAC security aces: 0.5K
number of IPv6 policy based routing aces: 0.25K
number of IPv6 qos aces: 0.5K
number of IPv6 security aces: 0.5K
There are 2 ISPs, G1/0/1 and G2/0/1. After creating a route-map i can apply a policy route-map to Vlan5 and it accepts without any errors. But when you do sh run vlan5 the command is not there, it's not applied.
Any help will be appretiated.
Thanks.Hi Jon.
Thanks for your reply. I didn't put those configs as they're basic without use of VRF and WCCP. Also i've checked or tried to find the list of unsupported commands and didn't see them in that list. See config below with some extras:
track 11 rtr 1 reachability
track 22 rtr 2 reachability
ip routing
no ip dhcp use vrf connected
interface GigabitEthernet1/0/1
description ISP1
no switchport
ip address 9.9.9.2 255.255.255.252
no ip proxy-arp
no ip mroute-cache
speed 100
duplex full
ipv6 address 2B01:4B8:0:3::2/64
ipv6 ospf 1 area 0
no mdix auto
no cdp enable
interface GigabitEthernet2/0/1
description ISP2
no switchport
ip address 9.9.9.5 255.255.255.252
ip ospf cost 10000
speed 1000
duplex full
ipv6 address 2B01:4B8:0:7::2/64
ipv6 enable
ipv6 ospf cost 10000
ipv6 ospf 1 area 0
interface Vlan5
description Company Ext Subnet
ip address 9.9.8.1 255.255.255.128
no ip proxy-arp
no ip mroute-cache
ipv6 address 2B01:4B8:1:22::1/64
ipv6 ospf 1 area 15
access-list 111 permit tcp any any eq www
route-map pbr1 permit 10
match ip address 111
set interface GigabitEthernet2/0/1 GigabitEthernet1/0/1
route-map pbr1 permit 20
set interface GigabitEthernet1/0/1 GigabitEthernet2/0/1
route-map pbr2 permit 10
match ip address 111
set ip next-hop verify-availability 9.9.9.6 1 track 11
set ip next-hop 9.9.9.1
route-map pbr2 permit 20
set ip next-hop verify-availability 9.9.9.1 1 track 22
set ip next-hop 9.9.9.6
I've tried to apply both policies pbr1 and pbr2, it allowed to do that without errors but at the end it wasn't there.
Cheers, -
How can I apply a single Rights Management Policy to multiple documents in a folder at the same time instead of applying it to each document individually?
I don't know of a method with Acrobat, why not set up a watch folder and just drop all the files in that folder to have rights applied. You might want to look at the workbench help if you've not done this before.
-
How can OWB apply information access control policy?
Hi friends,
My question is "how can OWB apply information access control policy in DW?"
RegardsHi,
what exactly do you mean by "information access control policy"?
What you cannot do in owb is define grants or virtual private database (vpd) constraints.
What you can do is restrict the developer's access to owb objects in the repository.
Regards,
Carsten. -
Can I apply any application patch when all application services are down?
Hello All,
Can I apply any application patch when all application services are down?
Reg
Chirag PatelDefinitely you can. On some operating system (like Windows), if relinking is part of the patch then you cannot apply patches unless Application services are down.
Whenever we apply a patch, we enable maintenance mode through adadmin, this would stop users from accessing the application during patch installation. However, you still can use "adpatch options=hotpatch" to apply a patch without enabling maintenance mode. -
ISE Feed Service can not update EndPoint Policy
I've started to get "Failed to apply feed policy" messages. The OUI updates are working fine. Just the Updates to EndPointPolicy are failing. Looking at the log in ISE, it appears to be a permissions issue. Feedservice is the username for updates but I do not see that username account anywhere in ISE.
Fault text(email msg): "Failed to apply feed policies : Unable to update EndpointPolicy. Unable to create/update EndpointPolicy. Unable to create identity group. Identity group "Android" already exists."
I do not see any failures in the feedservice audit report. I'm using ISE version 1.3.0.876
Has anyone else had this issue before?Does this help?
http://www.gearsoftware.com/support/forum/viewtopic.php?p=3452 -
Service-policy output voice-only
Hi, when i enter "service-policy output voice-only" in int BVI1 on a Cisco 878 (G.SHDSL), it throws an error saying, "Class Based Weighted Fair Queueing not supported"
Can i put this line in int ATM0 ?Hi,
It should be done as follows:
Remove BVI and "bridge irb". Configure an ATM subinterface point-to-point with the IP address, "atm route-bridging" and PVC. Under PVC apply the service policy.
please rate post if it helps! -
Service policy counters not working..
I have a service policy on a 6509 interface so I can see what the packets per second of a video stream coming out of a DVR (digital video recorder) is. This DVR has 16 security cameras attached and I'm concerned that when someone views all 16 cameras the video stream is going to be huge.
So I create a service policy to match an access list for all IP from the DVR. But no counters increment unless I add in some other match statement. I added in a match protocol telnet and the service policy counters started to work. I removed the match on telnet and the counters stopped. Telnet has nothing to do with the DVR. Here is the config of the class map, policy map and show commands: (By the way video is streaming through this interface continually during this excercise)
MATCHING ACCESS LIST ONLY:
class-map match-any DVR
match access-group 130
policy-map DVR-test
class DVR
ROC-6509-DU-A#sh access-list 130
Extended IP access list 130
10 permit ip host 164.72.2.125 any
ROC-6509-DU-A#sh policy-map int
GigabitEthernet2/5
Service-policy output: DVR-test
Class-map: DVR (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps
Match: access-group 130
0 packets, 0 bytes
30 second rate 0 bps
Class-map: class-default (match-any)
0 packets, 0 bytes
30 second offered rate 0 bps, drop rate 0 bps
Match: any
ADDING IN TELNET:
class-map match-any DVR
match access-group 130
match protocol telnet
policy-map DVR-test
class DVR
ROC-6509-DU-A#sh policy-map int
GigabitEthernet2/5
Service-policy output: DVR-test
Class-map: DVR (match-any)
524025 packets, 70724866 bytes
30 second offered rate 3991000 bps
Match: access-group 130
523896 packets, 70689220 bytes
30 second rate 3991000 bps
Match: protocol telnet
129 packets, 35646 bytes
30 second rate 0 bps
Class-map: class-default (match-any)
18696 packets, 11180265 bytes
30 second offered rate 129000 bps, drop rate 0 bps
Match: any
If I remove the 'match protocol telnet' and clear the counters, no longer do the counters for the access-list 130 increment - put back in match telnet and they start to increment.
This is a Sup720 with IOS 12.2(18)SXE3
Is this a bug or do I not have my class map or policy map correct?The hardware ASICs do not support collecting the individual policer information.
Try:
http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/1216ea1/3550scg/swqos.htm#xtocid1990743 -
Why doesn't "show service-policy url-summary" work?
Does any one know -- At Cisco Live this year -- this command was shown as an Option to see the number of
hits on L7 class maps urls.
It's not an option for me: Running A3 (2.5)
Thanks,
From A2 documentation (maybe this command was dropped from A3 -- but that would be unfortunate)
To display the statistics for all policy maps or a specific policy map that is currently in service, use the show service-policy command. This command also allows you to display statistics for a specific class map in a policy or the hit counts for match HTTP URL statements in a Layer 7 HTTP policy map. If you do not enter an option with this command, the ACE displays all enabled policy statistics.
show service-policy [policy_name [class-map class_name]] [detail | summary | url-summary] [|] [>]
Syntax Description
policy_name
(Optional) Identifier of an existing policy map that is currently in service (applied to an interface) as an unquoted text string with a maximum of 64 alphanumeric characters. If you do not enter the name of an existing policy map, the ACE displays information and statistics for all policy maps.
class-map class_name
(Optional) Displays the statistics for the specified class map associated with the policy.
detail
(Optional) Displays a more detailed listing of policy map or class map statistics and status information.
summary
(Optional) Displays a summary of policy map or class map statistics and status information.
url-summary
(Optional) Displays the number of times that a connection is established based on a match HTTP URL statement for a class map in a Layer 7 HTTP policy map.
The URL hit counter is per match statement per load-balancing Layer 7 policy. If you are using the same combination of Layer 7 policy and class maps with URL match statements in different VIPs, the count is combined. If the ACE configuration exceeds 64K URL and load-balancing policy combinations, this counter displays NA.Hi Dan,
The url-summary has only been added to the ACE module code at this time. The A2 code train is only for the module, while the A3 train is only for the appliance. The good news is that later this year, we will have a new software coming out (A4) that will be the exact same image that can be loaded on either the module or the appliance, hence all functionality will be the same for both (except the acceleration and optimization that only the appliance will support.
Hope this helps,
Sean
Maybe you are looking for
-
NULL ARRAY PROBLEM... in DOCUMENT/LITERAL type web service
let method signature is like this, public int ABC(String[] a); i am sending an null array from client side, like ABC(null); but on web service layer i am getting an array with length 1 and element of this array is null. for example, {null} where i sh
-
ECC5 installation on Windows and Oracle
Hi Basis/Netweaver Gurus, i m planning to install a New SAP ECC5 IDES installation. i have few quesions on this.Can anybody give the answers please. Deatails: Central instance host name alfxyz SID is EC5 Database instance hostname alfxyz2 SID is EC6
-
Hey Has anyone here burn a blu - ray dics in Encore CS4 ? And have there been any problems about playing it on a blu -ray player ? Regards Mikael you can contact me here : [email protected] I have burn a blu - ray , but have a problem
-
DreamweaverCtrls.dll Security Error
Hi, I am using Dreamweaver 8, Asp.net and the control "DreamweaverCtrls.dll" to connect and access a mySQL database. Everything goes just fine in my local Web Server (windows 2003, IIS 6), but when I upload the site to my web host then I get the foll
-
About javax.xml.ws.soap.SOAPFaultException
I used NetBeans IDE 5.5 to create a Web Services (JAX-WS).I test many simple services(like add(i,j)),and then create a simple main class to test it,it works find but if I code try { JAXBContext jc=JAXBContext.newInstance("sample.schema"); } catch (JA