Traffic Shaping - can't get it to work

Hi
I’m attempting to create a basic traffic shaping policy in a lab environment but I can’t seem to get it to limit the download rate?
I can successfully achieve this with policing. I am testing the speed restriction using a broadband speed testing website, policing is clearly impacting the download rate, this is not the case with shaping. Please see below the shaping and policing policies, which I am attaching in turn to the vlan1 interface outbound.
Further I have messed around with the below shaping policy and set a fixed cir as in the policing policy but it still has no impact on the download speed.
Finally class SLOW_PC under PM POLICE matches an ACL matching traffic to and from a particular IP address. The speedlimiter is matching all traffic
Policy Map speedlimiter(Shaping)
    Class class-default
      Average Rate Traffic Shaping
      cir 1%
  Policy Map POLICE
    Class SLOW_PC
     police cir 1048500 bc 32765
       conform-action transmit
       exceed-action drop
any help appreciated

Shaping and policing can both can be used for outbound traffic on an interface, but only policing can be used for inbound traffic. If you're trying to use shaping (which works by managing the queue) on inbound traffic (which has no manageable queue) it will have no effect. Policing is the only option in this case.

Similar Messages

  • Can't get it to work after 3 of them

    I have had 3 of them I have the 3rd one here at my house but still can't get it to work.  not sure what I am doing wrong.  My sister has one and can't under stand why it will not work for me,.  I really need one the service is not really good here.

    Is your broadband Internet connection quality good enough to handle the additional load of a network extender along with your regular Internet traffic?

  • Can't get VLAN to work

    Hello,
    Maybe I'm missing something elementary.. this is my first time trying this out and just can't get it to work.
    I've got an xserve on a netgear smart switch on port 13. The netgear is hooked up to two different networks (204.x.x.x via port 1 and 128.x.x.x via port 2), and I have 2 VLANs setup on the switch (vlan 1 has port 1 and port 13, vlan 2 has port 2 and port 13).
    The xserve's interface that's on port 13 has a 204 IP and works wonderfully on the 204 network. I then tried to setup a VLAN via sys prefs network and that appeared in the network configs list, and gave it a 128 address. However, even with all the right settings, it won't show up at all on the 128 network.
    Is there something basic that I'm missing?

    Oh, thats not exactly what I meant
    Basically:
    The server serves Web and QTSS via 204 to the world via en0.
    Then, there's 5-10 machines or so on 128 (and 1-2 on 204) that sync over 3TB of data to the machine via 128 (this sever is the only one we have on site that has raids hooked up to it, so its the central data storage so to say), so en1 is pretty much completely saturated between 12am and 8am (and during the day when there's a lot of new work going on). Originally we used to do this over the primary web interface and all the web traffic would suffer (and especially qtss... we'd start getting disconnected errors all over the place when we started up massive copies).
    Half of the machines are 204's and the rest are 128's, which is why we want the ability for en1 to be able to talk locally to machines on either 204 or 128, without having to interrupt the main interfact (if that makes any sense). Does that seem like a sensical solution?
    If it also helps visualize a bit:
    I only have access to register 8 machines on the 204, and TONS on the 128, but im not allowed to serve .com traffic on 128. Technically, the 128 does talk to the 204 locally on location, but its done through a nasty switch and we dont see much higher than 10Mbps tops.

  • Can't get VPN to work on RV220W

    I am a home office user who bought a RV220W router for the speed advertised on smallnetbuilder.  I am trying to set up the VPN but can't get it to work with the Quick VPN client.  I am using dyndns to manage the dynamic IP and have entered that into the setup noted below.  I can access the router remotely (remote administration) when enabled using the dyndns address so I know that is working.
    IKE Policy Table
    General
    Policy Name:                 krafty001vpn    
    Direction / Type             Responder    
    Exchange Mode:           Aggresive    
    Enable XAUTH Client:    None    
    Local Identification
    Identifier Type:               FQDN    
    FQDN:                          krafty001.dyndns.org    
    Peer IKE Identification
    Identifier Type:               Remote Wan IP    
    FQDN:                          krafty001.dyndns.org    
    IKE SA Parameters
    Encryption Algorithm:     3DES    
    Authentication Algorithm:          SHA-1    
    Authentication Method:          Pre-Shared Key    
    Pre-Shared Key:          xxxxxxxxx    
    Diffie-Hellman (DH) Group:          Group 2 (1024bit )    
    SA-Lifetime:          28800 Seconds
    VPN Policy Table
    Add / Edit VPN Policy Configuration
    Policy Name:
    krafty001vpn
    Policy Type:
    Auto Policy
    Remote Endpoint:
    FQDN
    krafty001.dyndns.org
    NETBIOS:
    Enable
    Local Traffic Selection
    Local IP:
    ANY
    Start Address:
    End Address:
    Subnet Mask:
    Remote Traffic Selection
    Remote IP:
    ANY
    Start Address:
    End Address:
    Subnet Mask:
    Split DNS
    Split DNS:
    Enable
    Domain Name Server 1:
    Domain Name Server 2:
    (Optional)
    Domain Name 1:
    Domain Name 2:
    (Optional)
    Manual Policy Parameters
    SPI-Incoming:
    SPI-Outgoing:
    Encryption Algorithm:
                                 3DES                             None                             DES                             AES-128                             AES-192                             AES-256                             AES-CCM                             AES-GCM                            
    Key-In:
    Key-Out:
    Integrity Algorithm:
                                 SHA-1                             SHA2-256                             SHA2-384                             SHA2-512                             MD5                            
    Key-In:
    Key-Out:
    Auto Policy Parameters
    SA-Lifetime:
    3600
                                 Seconds                             KBytes                            
    Encryption Algorithm:
                                 3DES                             None                             DES                             AES-128                             AES-192                             AES-256                             AES-CCM                             AES-GCM                                                       
    Integrity Algorithm:
                                 SHA-1                             SHA2-256                             SHA2-384                             SHA2-512                             MD5                            
    PFS Key Group:
    Enable
                                 DH-Group 1 (768 bit)                             DH-Group 2 (1024 bit)                             DH-Group 5 (1536 bit)                            
    Select IKE Policy:
                                                              krafty001vpn                                                                                     
    Quick VPN Setip
    User Profile: homevpn
    User Name krafty001vpn
    Password: xxxxx
    Server Address:  krafty001.dyndns.org
    Port for QuickVPN:   Auto
    Any help in identifying what setup component I have configured incorrectly would be appreciated
    Thanks

    I am not sure this will help but make sure the following is set correctly:
    Currently VPN is somewhat broken on all versions of firmware of the RV220W including beta where VPN will ONLY negotiate on 443. If you are port forwarding 443 to a server or something else it will fail. You must allow the VPN to authenticate on 443. The router SHOULD be able to connect on 60443 as indicated on the QUICKVPN software however it doesn't this has been confirmed by a CISCO engineeer I have been speaking with regarding my VPN woes. Currently there is NO ETA on this fix.
    But since you didn't mention if your 443 ports were being routed elsewhere I figured i would lay out that information here incase you where. Also I strongly recommend contacting Cisco Support for the beta firmware it makes the RV220W much better.
    Also the reason for the update to the beta firmware it resolves the hair pinning problem which could also lead to VPN issues.

  • I can't get iTunes to work properly on Windows 8

    I can't get iTunes to work properly on Windows 8. I tried everything and iTunes is NOT compatible with Windows 8. There is either an iTunes issue or a Microsoft issue.

    I finally got it to work right. Some files and folders (iTunes video files, etc) were referenced to my iTunes account, I copied from my backup (external) Hard Drive to my system Hard Drive. The only thing that can keep me from accessing my wish list for some time is a very heavy Internet traffic via iTunes players to iTunes Store. So everything is now NORMAL.

  • Have entrourage and want to use Mail. Can't get it to work.

    I had a macbook and purchased the Microsoft office for Mac which included Entrourage.
    I have now purchased a new macbook Pro and want to begin to use Mail rather than Entrourage. 
    I have Entrourage on my new computer but i can't get it to transfer my information to the the Mail program
    I am on Charter.net at my office and sbcglobal.net at home.
    How can i get this to work.  I can receive on Mail, but i can't send.

    check your outgoing port settings and make sure it's using a specific port and not the default port, also you might want to check to see if it is using SSL, TLS or any other encryption.  Verify the setting from your old machine setup.

  • Got my password wrong twice and my mini is disable. I connected to iTunes, but can't get it to work. Can some one guide my through?

    got my password wrong twice and my mini is disable. I connected to iTunes, but can't get it to work. Can some one guide my through?

    If it's showing the red disabled screen due to incorrect passcodes then you may need to put the iPad into recovery mode : http://support.apple.com/kb/ht1808 - you should then be able to reset the iPad via your computer's iTunes and restore/resync your content to it

  • HT1151 i have a new apple external dvd drive, and i can't get it to work with my iMac?

    I have a new apple dvd drive, I was told it will work with my imac,  but when i plug it in ...nothing... iv been for update... still nothing. How can i get it to work???

    If it is this drive, note that it is for MBA's and Mini's only:
    http://store.apple.com/us/product/MC684ZM/A
    Ciao.

  • Is there a way to reset my messages account, I can't get iMessage to work on IPad nor Mac osx. Help please this is really frustrating.

    Is there a way to reset my messages account, I can't get iMessage to work on IPad nor Mac osx. Help please this is really frustrating.

    Hi,
    Is there an iPhone involved ?
    If not, what happens  if you remove the Apple ID on the iPad and then set it in Airplane Mode (allow a couple of minutes at this point) followed by re-adding the Apple ID ?
    What, if any error messages are appearing on the Mac when you try to launch the App or Login to the iMessages server ?
    Is the Apple ID linked to an iCloud account ?
    In Messages 7 (Mountain Lion) this did not seem to be important but it seems it is in Mavericks/Messages 8
    9:14 pm      Friday; April 11, 2014
    ​  iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

  • I bought an IR receiver and an Apple Remote, and I can't get it to work. What am I doing wrong?

    I bought an IR receiver and an Apple Remote, and I can't get it to work. What am I doing wrong? The receiver is a Lenovo eHome OVU430006/01 USB IR Receiver.

    Hello,
    You would need to pair the Apple Remote with the receiver. So I would use the generic Mac/PC receiver and follow these instructions:
    http://support.apple.com/kb/HT1619
    If that doesn't work then check in System Profiler to see if the IR receiver has been recognized by the PowerBook's hardware. You may require the install of drivers for this device to be recognized.
    Best of luck

  • I have a go daddy email account and I can't get it to work on my iPad

    I have a go daddy email account and I can't get it to work on my iPad

    Try turning the email account off and then turn it on again. Settings>Mail, Contacts, Calendars>select your gmail account>Off. Go to the mail app and then come back to the account in the settings and turn it on again.
    If you can't find any other way for the iPad to accept the password, delete the email account and then add it back onto the iPad.

  • I have a Mac Mini and I can't get it to work with my Ricoh Aficio MP 161.  Any ideas?

    I have a Mac Mini and I can't get it to work with my Ricoh Aficio MP 161.  Any ideas?

    The latest Apple driver support begins with the MP 171.
    Here is Ricoh's official driver download page specifically for the Afico MP 161. Note that new drivers for this device were released on Aug 2, and include Lion and Mountain Lion.
    Hopefully, this will solve your device issues.

  • My iPhone 5 went black. I tried pushing the on/off button and the circle button at the same time.  It worked once and then it happened again and I can't get it to work.

    Iphone 5 went black.  Tried pushing on/off and circle at the same time.  Worked yesterday and then did it again today.  Can't get it to work.

    You need to hold those button longer until you see the apple logo, then release, then wait for the phone to boot back up.

  • I just got a new computer with Windows 7 and all my songs were transferred to my new computer along with itunes.  But I can't get it to work.  I also tried downloading Quicktime and couldn't get it to download.

    I just bought a new computer and had files transferred along with itunes to the new computer.  I can't get it to work.  It doesn't recognize the extensions for itunes.  I also tried downloading Quicktime and couldn't get it to download.

    iOS: Device not recognized in iTunes for Windows
    I would start with:
    Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7

  • I bought a DataPilot to transfer my pictures from my phone to my macbook, and I can't get it to work

    I bought a DATAPILOT to transfer pictures to my macbook and can't get it to work.  Any suggestions please?

    Best if you try and explain what you are trying to acheive.
    Iphoto is a different paradigm than you're used to. I don't understand why you are trying to transfer your edited photos back to an external disk.
    There are tutorials here
    http://www.apple.com/findouthow/photos/
    Regards
    TD

Maybe you are looking for

  • Mixing firewire 800 and 400

    I have an older iMac (3.06 GHz Intel Core i3). I currently have 3 external firewire 400 drives daisy-chained to it. I use a 800 to 400 adapter on the back of the iMac to convert from 800 down for my drives. I was just looking at OWC and considering a

  • .pdf's do not upload

    Help ?

  • Can you collect emails on iweb

    I am looking to set up on the website a page that people can subscribe their email to. I want to be able to add them to our company data base. Does anyone know how to do this? Thx

  • APPS Reports

    Hi, I have transferred the report from the APPS server in Binary mode to my local machine, when I open the report and add any columns even a dummy column the report no longer compiles I get a no plsql translation for the bindtype given for this bindv

  • "The Directory Service is Busy." Error Message When Trying to Rename PCs on AD 2012 R2 Domain

    As the title says, I'm trying to rename some existing PCs on a Windows 2012 R2 Active Directory domain, but I keep getting the error: The Directory Service is Busy. The command I am using is: netdom renamecomputer <OLD_NAME> /newname:<NEW_NAME> /ud:D