Nexus 5548 rate limit

Hello,
I am trying to setup a rate limit on fex ports (modl is N2K-C2248TP-1GE ) of a 5548UP (non L3)  -  Software version is : version 6.0(2)N2(2)
I have tried the following setup without success  :
ip access-list ACL_CUST
  10 permit ip 10.100.100.1/32 10.100.100.2/32
  20 permit ip 10.100.100.2/32 10.100.100.1/32
class-map type qos match-all CMQOS_CUST
  match access-group name ACL_CUST
policy-map type qos PMQOS_CUST
class CMQOS_CUST
    police cir percent 1 bc 200 ms conform transmit violate drop
interface Ethernet161/1/11 - 12
  service-policy type qos input PMQOS_CUST
And also tried to use this confioguration :
class-map type qos match-all CMQOS_LIMIT_BP_CUST
  match cos 0-7
policy-map type qos PMQOS_LIMIT_BP_CUST
  class CMQOS_LIMIT_BP_CUST
    police cir percent 1 bc 200 ms conform transmit violate drop
interface Ethernet161/1/11 - 12
  service-policy type qos input PMQOS_LIMIT_BP_CUST
The problem is that the bandwith restriction (1 percent of 1Gbit/s shoud be 10Mbit/s) is not working and apparently no restriction is applied
If someone could help me to resolve this issue it would be greatly appreciated
I do have followed this guide
http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/qos/503_n1_1/cisco_nexus_5000_qos_config_gd_503_chapter3.html
Thanks !

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5600/sw/verified_scalability/702N11/b_N5600_Verified_Scalability_702N11/b_N6000_Verified_Scalability_700N11_chapter_01.html
Maximum FEXs per Switch
24
24
Maximum FEXs dual-homed to a vPC Switch Pair
24
24

Similar Messages

  • Urgent help: L3 daughter card for Nexus 5548

    Hi
    We have 2 Nexus 5548 which is in one vPC doamin. All the servers are teamed to these switches
    Requirement
    We have to install New L3 daughter card.(N55-D160L3-V2(=))
    I have gone through the Cisco websites and found that we have to do the following things
    1. software version:
    i Nexus 5548P Daughter Card (N55-D160L3)
    Before installing a Layer 3 daughter card (N55-D160L3) into a Cisco Nexus 5548P switch, you must upgrade to Cisco NX-OS Release 5.0(3)N1(1b) or NX-OS Release 5.0(3)N1(1c) and then install the card into the chassis. 
    http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_0_3_N2_1/Nexus5000_Release_Notes_5_0_3_N2.html
    2. license: 
    Also in order to enable this module following license should present on N5k device:
    LAN_BASE_SERVICES_PKG  - it's free and lifetime.
    https://supportforums.cisco.com/thread/2121574 
    I have 2 questions
    1- In cisco documentation its says that these cards will be installed in the front where I/O module is and after NX OS 5.X they are hot swappable
    Does that mean that no reboot will be required after installing this module (keeping in mind its the first time) so i am confused about the wording ???
    Does license installation requires reboot??? in short if you are installing for the first time do we require a reboot ???? that is my main question
    2- I have heard there is  a known bug which keep rebooting the switch after installation of L3 card
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtl45495
    has that been address in any version of license or NS-OS yet???
    Thanks heaps guys
    If the module is still offline when the requirements are met above, it could be a bug.(CSCtl45495) Try reloading the switch.

    1- In cisco documentation its says that these cards will be installed in the front where I/O module is and after NX OS 5.X they are hot swappable
    Does that mean that no reboot will be required after installing this module (keeping in mind its the first time) so i am confused about the wording ???
    Answer: -- Yes no reboot is required.
    Does license installation requires reboot??? in short if you are installing for the first time do we require a reboot ???? that is my main question
    Answer: As you are installing the license for the first time reboot of the box is not required.
    2- I have heard there is  a known bug which keep rebooting the switch after installation of L3 card
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtl45495
    has that been address in any version of license or NS-OS yet???
    Answer;--No this is not fixed yet.
    HTH
    Regards
    Inayath
    ********Please do not forget to rate the post if this info is helpfull.

  • Link Error Nexus 5548

    Hi All,
    I have issues with Nexus 5548 ports 1000Gb ports. They go down after sometime with the error " Link not connected " while the links are connected. When i move the connections to other ports they work but after a while the go down again with the same error. I can confirm that is currently down was working and its currently connected. Has anyone seen the error before?
    Kindly see the output from the interface thats currently down below:
    VNX_NEXUS# sho interface eth1/11
    Ethernet1/11 is down (Link not connected)
      Hardware: 1000/10000 Ethernet, address: 002a.6a71.1f92 (bia 002a.6a71.1f92)
      Description: Link_to_EMC_RPA3
      MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec
      reliability 255/255, txload 1/255, rxload 1/255
      Encapsulation ARPA
      Port mode is access
      auto-duplex, 1000 Mb/s, media type is 10G
      Beacon is turned off
      Input flow-control is off, output flow-control is off
      Rate mode is dedicated
      Switchport monitor is off
      EtherType is 0x8100
      Last link flapped 2d23h
      Last clearing of "show interface" counters 5w6d
      30 seconds input rate 0 bits/sec, 0 packets/sec
      30 seconds output rate 0 bits/sec, 0 packets/sec
      Load-Interval #2: 5 minute (300 seconds)
        input rate 0 bps, 0 pps; output rate 0 bps, 0 pps
      RX
        43384443 unicast packets  30 multicast packets  1496 broadcast packets
        43385969 input packets  7837558138 bytes
        0 jumbo packets  0 storm suppression bytes
        0 runts  0 giants  0 CRC  0 no buffer
        0 input error  0 short frame  0 overrun   0 underrun  0 ignored
        0 watchdog  0 bad etype drop  0 bad proto drop  0 if down drop
        0 input with dribble  0 input discard
        0 Rx pause
      TX
        56587244 unicast packets  3937125 multicast packets  1487058 broadcast packets
        62011427 output packets  14141808286 bytes
        0 jumbo packets
        0 output errors  0 collision  0 deferred  0 late collision
        0 lost carrier  0 no carrier  0 babble 0 output discard
        0 Tx pause
      18 interface resets

    Hi Leo,
    What confuses me is that the connection was working. I used the correct cable and the port type as well. How do i resolve this?

  • UCS FI 6248 to Nexus 5548 San port-channel - not working

    Hi all,
    I'm sure I am missing something fairly obvious and stupid but I need several sets of eyes and help.
    Here is the scenario:
    I want to be able to create san port-channels between the FI and Nexus.  I don't need to trunk yet as I can't even get the channel to come up.
    UCS FI 6248:
    Interfaces fc1/31-32
    Nexus 5548
    interfaces fc2/15-16
    FI is in end-host mode and Nexus is running NPIV mode with fport-channel-trunk feature enabled.
    I'm going to output the relevants configurations below.
    Nexus 5548:
    NX5KA(config)# show feature | include enabled
    fcoe                  1         enabled
    fex                   1         enabled
    fport-channel-trunk   1         enabled
    hsrp_engine           1         enabled
    interface-vlan        1         enabled
    lacp                  1         enabled
    lldp                  1         enabled
    npiv                  1         enabled
    sshServer             1         enabled
    vpc                   1         enabled
    interface san-port-channel 133
      channel mode active
      no switchport trunk allowed  vsan all
      switchport trunk mode off
    interface fc2/15
      switchport trunk mode off
      channel-group 133 force
    no shutdown
    interface fc2/16
      switchport trunk mode off
      channel-group 133 force
    no shutdown
    NX5KA# show vsan membership
    vsan 1 interfaces:
        fc2/13            fc2/14          
    vsan 133 interfaces:
        fc2/15            fc2/16            san-port-channel 133
    vsan 4079(evfp_isolated_vsan) interfaces:
    vsan 4094(isolated_vsan) interfaces:
    NX5KA# show san-port-channel summary
    U-Up D-Down B-Hot-standby S-Suspended I-Individual link
    summary header
    Group  Port-      Type    Protocol               Member Ports
           Channel
    133    San-po133  FC      PCP      (D)  FC       fc2/15(D)    fc2/16(D)   
    UCS Fabric Interconnect outputs:
    UCS-FI-A-A(nxos)# show san-port-channel summary
    U-Up D-Down B-Hot-standby S-Suspended I-Individual link
    summary header
    Group  Port-      Type    Protocol               Member Ports
           Channel
    133    San-po133  FC      PCP      (D)  FC       fc1/31(D)    fc1/32(D)   
    UCS-FI-A-A(nxos)#
    UCS-FI-A-A(nxos)# show run int fc1/31-32
    !Command: show running-config interface fc1/31-32
    !Time: Fri Dec 20 22:58:51 2013
    version 5.2(3)N2(2.21b)
    interface fc1/31
      switchport mode NP
      channel-group 133 force
      no shutdown
    interface fc1/32
      switchport mode NP
      channel-group 133 force
      no shutdown
    UCS-FI-A-A(nxos)#
    UCS-FI-A-A(nxos)# show run int san-port-channel 133
    !Command: show running-config interface san-port-channel 133
    !Time: Fri Dec 20 22:59:09 2013
    version 5.2(3)N2(2.21b)
    interface san-port-channel 133
      channel mode active
      switchport mode NP

    !Command: show running-config interface san-port-channel 133
    !Time: Sat May 16 04:59:07 2009
    version 5.1(3)N1(1)
    interface san-port-channel 133
      channel mode active
      switchport mode F
      switchport trunk mode off
    Changed it as you suggested...
    Followed the order of operations for "no shut"
    Nexus FC -> Nexus SAN-PC -> FI FC -> FI SAN-PC.
    Didn't work:
    NX5KA(config-if)# show san-port-channel summary
    U-Up D-Down B-Hot-standby S-Suspended I-Individual link
    summary header
    Group  Port-      Type    Protocol               Member Ports
           Channel
    133    San-po133  FC      PCP      (D)  FC       fc2/15(D)    fc2/16(D)
    NX5KA(config-if)#
    Here is the output as you requested:
    NX5KA(config-if)# show int san-port-channel 133
    san-port-channel 133 is down (No operational members)
        Hardware is Fibre Channel
        Port WWN is 24:85:00:2a:6a:5a:81:00
        Admin port mode is F, trunk mode is off
        snmp link state traps are enabled
        Port vsan is 133
        1 minute input rate 1256 bits/sec, 157 bytes/sec, 0 frames/sec
        1 minute output rate 248 bits/sec, 31 bytes/sec, 0 frames/sec
          3966 frames input, 615568 bytes
            0 discards, 0 errors
            0 CRC,  0 unknown class
            0 too long, 0 too short
          2956 frames output, 143624 bytes
            0 discards, 0 errors
          46 input OLS, 41 LRR, 73 NOS, 0 loop inits
          257 output OLS, 189 LRR, 219 NOS, 0 loop inits
        last clearing of "show interface" counters never
        Member[1] : fc2/15
        Member[2] : fc2/16
    NX5KA(config-if)#
    NX5KA(config-if)# show int brief
    Interface  Vsan   Admin  Admin   Status          SFP    Oper  Oper   Port
                      Mode   Trunk                          Mode  Speed  Channel
                             Mode                                 (Gbps)
    fc2/13     1      auto   on      sfpAbsent        --     --           --
    fc2/14     1      auto   on      sfpAbsent        --     --           --
    fc2/15     133    F      off     init             swl    --           133
    fc2/16     133    F      off     init             swl    --           133

  • Possible to rate limit console input?

    I built a tool that allows us to input device information such as IP, VLAN, etc, etc and this tool builds the entire config file that can be pasted into a switch/router.  The problem is that when I start getting down near the banner and motd sections, the console cannot keep up with the input and it drops lines of input.
    Is there a way to rate limit the input when large configs are pasted into con 0?

    I built a tool that allows us to input device information such as IP, VLAN, etc, etc and this tool builds the entire config file that can be pasted into a switch/router.  The problem is that when I start getting down near the banner and motd sections, the console cannot keep up with the input and it drops lines of input.
    Is there a way to rate limit the input when large configs are pasted into con 0?

  • FCoE with Cisco Nexus 5548 switches and VMware ESXi 4.1

    Can someone share with me what needs to be setup on the Cisco Nexus side to work with VMware in the following scenario?
    Two servers with two cards dual port FCoE cards with two ports connected to two Nexus 5548 switches that are clusterd together.  We want to team the ports together on the VMware side using IP Hash so what should be done on the cisco side for this to work? 
    Thanks...

    Andres,
    The Cisco Road Map for the 5010 and 5020 doesn't include extending the current total (12) FEX capabities.  The 5548 and 5596 will support more (16) per 55xxk, and with the 7K will support upto 32 FEX's.
    Documentation has been spotty on this subject, because the term 5k indicates that all 5000 series switches will support extended FEX's which is not the case only the 55xx will support more than 12 FEX.  Maybe in the future the terminology for the 5k series should be term 5000 series and 5500 series Nexus, there are several differences and advancements between the two series.

  • Bandwidth Rate-Limit -w- WWR-Queue

    How would one convert a layer-2 port's "switchport rate-limit" bandwidth statement, on a 6509 -w- WS-X6748-SFP ports, to a routed/layer-3 "wrr-queue" bandwidth statement policy? Basically trying to hard-core the port's speed to 20MB.  Current/tested layer-2 port bandwidth setting:
    rate-limit input 20000000 5000 5000 conform-action transmit exceed-action drop
    rate-limit output 20000000 5000 5000 conform-action transmit exceed-action drop
    Got lost in how to use/configure all WRR's four queues... just need to limit the port's bandwidth to 20MB.  Any suggestions would be appreciated.
    Thanks, Kevin

    1) Enabled QoS globally...
    2960(config)#mls qos
    2) Configure an ACL to define the matched traffic...
    2960(config)#access-list 111 permit ip any any
    3) Configure a class map for the matched traffic...
    2960(config)#class-map traffic
    2960(config-cmap)#match access 111
    4) Configure a policy-map to define action...
    2960(config)#policy-map Control
    2960(config-pmap)#class traffic
    2960(config-pmap-c)#police 10000000 8000 exceed-action drop
    5) Attached the policy-map to the interface.
    a) Example
    -In this case, I'll attach the policy map to port_1....
    2960(config)#int fa0/1
    2960(config-if)#service-policy input Control
    >>>>>> This will rate-limit traffic coming from the PC

  • How to rate-limit different IP's entering/leaving an Interface?

    Hi There,
    We are an ISP and have an interconnect with say Provider A. Customers of ours use Provider A for layer 2 and us for Layer 3 (IP/Internet).
    Customer #1 to #100 --- (10Mb) --> Provider A ---> ISP ---> Internet
    We'd like to rate limit some customers to 2mb/sec (in/out) on our end because at present they have a 10mb/sec connection coming from Provider A.
    The config we use to peer with Provider A is this:
    interface GigabitEthernet0/1.120
    description Interconnect with Provider A
    bandwidth 400000
    encapsulation dot1Q 120
    ip address A.B.C.1 255.255.255.252
    Customers of ours are simply routed out through this interface like so:
    Customer #1:
    ip route W.X.Y.Z. 255.255.255.255 A.B.C.2
    Customer #2:
    ip route J.K.L.M 255.255.255.255 A.B.C.2
    Is there a way to rate limit both these customers without needing to create a separate class map for each like so:
    class-map match-all CUSTOMER-1-2MB
    match access-group name ACL-CUSTOMER-1
    class-map match-all CUSTOMER-2-2MB
    match access-group name ACL-CUSTOMER-2
    policy-map POLICY-RATE-LIMIT
    class CUSTOMER-1-2MB
    police 2000000 375000 750000
    class CUSTOMER-2-2MB
    police 2000000 375000 750000
    interface GigabitEthernet0/1.120
    service-policy input POLICY-RATE-LIMIT
    service-policy output POLICY-RATE-LIMIT
    I've done this in the lab and I know it works, so Customer #1 ends up with 2mb/sec and Customer #2 gets 2mb/sec too.
    But in production, I'm talking about 100's of customers which we simply route out of this interface. I can't imagine having to configure 100's of class maps and policy maps for each customer to rate limit them to 2mb/sec like in the config above.
    Is there a better way to do this on the router???
    Thanks.
    Andy

    Hi All,
    Doing what Laurent suggested works great. We are able to rate-limit the desired customers by having a separate class-map for each customer that needs to be rate limited under the single policy-map.
    But now we're finding that the CPU utilization has increased by 20% because of this.
    We're pushing about 400M through this interface and rate limiting 7 customers on it.
    Given the large traffic flow through this interface (400M), is it common to see an increase in CPU utilisation by 20%???
    When we take the service-policy off the interface, sure enough the CPU drops by 20%.
    Here's the MQC applied:
    interface GigabitEthernet0/1.120
    bandwidth 400000
    encapsulation dot1Q 120
    ip address 203.17.x.x 255.255.255.252
    ip flow ingress
    service-policy input RATE-LIMIT
    service-policy output RATE-LIMIT
    class-map match-all CLASS-TCS-200338
    description Customer #1 rate limited to 4mb/sec
    match access-group name ACL-TCS-200338
    class-map match-all CLASS-TCS-200208
    description Customer #2 rate limited to 2mb/sec
    match access-group name ACL-TCS-200208
    class-map match-all CLASS-TCS-205593
    description Customer #3 rate limited to 3mb/sec
    match access-group name ACL-TCS-205593
    class-map match-all CLASS-TCS-205679
    description Customer #4 rate limited to 4mb/sec
    match access-group name ACL-TCS-205679
    class-map match-all CLASS-TCS-200441
    description Customer #5 rate limited to 4mb/sec
    match access-group name ACL-TCS-200441
    class-map match-all CLASS-TCS-200005
    description Customer #6 rate limited to 2mb/sec
    match access-group name ACL-TCS-200005
    class-map match-all CLASS-TCS-205560
    description Customer #7 rate limited to 4mb/sec
    match access-group name ACL-TCS-205560
    policy-map RATE-LIMIT
    class CLASS-TCS-200005
    police 2000000 375000 750000 conform-action transmit exceed-action transmit violate-action drop
    class CLASS-TCS-200208
    police 2000000 375000 750000 conform-action transmit exceed-action transmit violate-action drop
    class CLASS-TCS-200441
    police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
    class CLASS-TCS-200338
    police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
    class CLASS-TCS-205679
    police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
    class CLASS-TCS-205560
    police 4000000 750000 1500000 conform-action transmit exceed-action transmit violate-action drop
    class CLASS-TCS-205593
    police 3000000 562500 1125000 conform-action transmit exceed-action transmit violate-action drop
    Is this the correct behaviour of applying the service-policy to the interface whereby the CPU increases by 20% or can the MQC be fine tuned to have less of an impact on the CPU?
    Is the router just overloaded, taking into account it's only pushing about 400M? Should it be able to do more than this??
    Thanks.
    Andy

  • Prime Infrastructure 2.0 and Nexus 5548, SSH credentials fail

    Hi,
    I'm having problem getting the Prime Infrastructure 2.0 to login with SSH to a Nexus 5548 to do an inventory. I get "Wrong Telnet/SSH credentials". But when I use the same credentials from another SSH-client it works fine. I also tested to SSH from the console of the Prime-server and that also works fine.
    Any ideas???
    Regards,
    Stefan Lindkvist

    I have PI 2.0 working against Nexus 5k's in two different installations. See below for an example (click to enlarge).
    Have you put in an entry in both the login and enable fields (even though they are not separately required when logging in directly)?

  • Per user bandwidth rate limit.

                       How to configure per user bandwidth rate limit for wireless guest client, authentication server is ISE 1.2 & wireless controller is 5760.

    The Cisco 5760 WLC supports better QoS than other c
    ontrollers, allowing prioritization of mission-crit
    ical
    applications:

    The Cisco 5760 WLC supports four wireless hardware
    queues and priority-based queuing compared to
    software-based queuing in existing controllers.

    The Cisco 5760 WLC follows MQC based commands, allo
    wing usage of exact commands for configuring
    QoS on different types of network devices.

    The Cisco 5760 WLC supports QoS policies to be appl
    ied in a hierarchical fashion with more granularity
    per SSID per radio, while on the current controller
    s granularity is per WLAN.

    The Cisco 5760 WLC supports approximate fair bandwi
    dth to make sure of fairness at client, SSID, and
    radio levels for Non-Real Time (NRT) traffic. There
    fore, if one user consumes excessive bandwidth, we
    can
    limit the amount of bandwidth that user receives an
    d thereby not deprive other users.

  • WLC 5508 and Anchor/GuestNet rate limit traffic?

    Running WLCs 5508s 7.0.116.0 with GuestNet and Anchor setup, how can I limit the bandwidth on the GuestNet SSDI to 2 Mbps, etc?
    The DMZ WLC (Anchor) runs thru a ASA 5508 7x, can I rate limit traffic via ASA?

    That's really a matter of preference.  This document describes things to keep in mind when altering these QoS profile configurations, FYI.
    http://www.cisco.com/en/US/partner/docs/wireless/controller/7.0MR1/configuration/guide/cg_controller_setting.html#wp1254532
    It really depends on how many guests, what type of traffic, etc, to make a judgement call as to where you should set these.  I'm sorry but I don't have any examples from existing configurations, but hopefully the document explains how to best alter these settings.

  • WLC user rate limit on guest ssid anchor controller

    Hi,
    I have been looking through the forums & some cisco documents but not found a good example similar to what I am seeking to do so now I am turning to the expertise of my peers.
    We have been deploying 3502 APs remotely to locations with full T1s that backhaul to where I sit at HQ.
    Both the foreign and anchor controller are here at my location.
    I am seeking to rate limit per user the bandwidth each client will get on the guest internet ssid.
    As you know this traffic is encapsulated in capwap between the AP and the controller so I cant use a standard ACL on the switch or router.
    We are trying to keep the guest internet access usage in check on the T1 at any given site so the other ssid's & local lan traffic is not overly competing for the bandwidth.
    I found the place to edit the default profiles in the controller but the documentation really isnt clear on best practices.
    So I put it to you my fellow wireless engineers to suggest how you are implementing bandwidth management on your wireless guest internet.
    Thanks guys!           
    Oh and here is my hardware & software levels.
    5508wlc - forgeign
    4402wlc - anchor
    Software Version
    7.0.230.0

    Amjad,
    Thank you for taking the time to respond as well as the document link.
    It was pretty clear on the steps and what it would impact.
    Two things that push me for a different solution (assuming their is one).
    Note The values that you configure for the per-user bandwidth contracts affect only the amount of bandwidth going downstream (from the access point to the wireless client). They do not affect the bandwidth for upstream traffic (from the client to the access point).
    As you can see from the above note taken out of the linked document the roll based rate limit doesnt really rate limit the T1 traffic any guest user consumes it only limits usage from the AP down to the client.
    #1 I am looking for a solution that limits the users up & down streams (if possible) & also before it leaves the AP for the T1.
    The idea is to limit WAN utilization.
    #2 I read in the forums here others asking about the "user role" and saw some comments saying it is not considered "best practice" to use user roles.
    Let me clarify that our guest ssid's are using the http webpage pass through for authentication and it is really only the tic mark to indicate they understand the terms and conditions of using our internet as a guest service. No actual user accounts are used on the guest ssid's.
    ***One last question about this and any other changes***
    Will any change I make be on the "Foreign, Anchor" or both Controllers?

  • Telephony Issues on Nexus 5548

    Dear Viewers,
    I have Nexus 5548 devices in one of my client data centers and i have one 3750 switch to which all of these Avaya voice servers connect.
    The 3750 switch was initially connected through a L2 Link to a 6509 catalyst switch and the telephony applications were working correctly.
    The problem arises when i move this 3750 layer 2 link to a Nexus 5548 (OS version 5.1(3)N1 switch. All telephony calls coming from the outside (External calls) are not working as required but the internal calls work as usual.
    What is odd is that when i migrate this L2 link back to the 6509 switch, all works as usual. This is just a layer 2 connection and i am wondering why this is not possible.
    The vlan is accepted on all relevant trunks. I also deactivated igmp snooping on this voice vlan on the Nexus 5548 thinking it would help but in vain.
    Any ideas and suggestions are welcome.
    regards.
    Alain

    This is my radius config......  on a 5K
    radius-server timeout 7
    radius-server host 10.28.42.20 key 7 "Password" auth-port 1645 acct-port 1646 authentication accounting
    radius-server host 10.28.42.21 key 7 "Password" auth-port 1645 acct-port 1646 authentication accounting
    aaa group server radius Radius-Servers
     server 10.28.42.20
     server 10.28.42.21
    aaa authentication login default group Radius-Servers
    ip radius source-interface Vlan1
    aaa authentication login default fallback error local
    And it is currently working. On the radius server i also had to do this to make the users admins once logged in:
    https://supportforums.cisco.com/document/137181/nexus-integration-admin-access-free-radius

  • Rate-limit command 3560 does it exist?

    I have just come across a command in my router IOS which might be useful too me. I was wondering if the following command is available on a 3560 Switch. I don't see it on my 3550 but the IOS is quite old. I don't have a 3560 avaiable currently to check.
    Config t > int vlan x > rate-limit input/output
    does this exist on the 3560? I am also interest if it does in the Bits per second range and if available input/output.
    Thanks for any help

    Hello,
    what kind of feature are you looking for?
    CAR?
    http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_command_reference_chapter09186a0080087f26.html#wp1037428
    For command list check the following link:
    Catalyst 3560 Switch Command Reference, Rel. 12.2(25)SEE
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/cr/index.htm
    For QOS configs:
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/scg/swqos.htm
    If you need to rate limit traffic on an interface check:
    Limiting the Bandwidth on an Egress Interface
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12225see/scg/swqos.htm#wp1253412
    Hope this help a bit,
    if it does, please rate this post.
    Vlad

  • Setting dynamic rate limit

    I would like to know how to set the dynamic rate limit on the wan and the lan on the spa2102 voip adapter. can anyone help?

    There is no such function on any of the SPA2xxx or SPA3xxx series voice router.

Maybe you are looking for