Configuring RACL rate limiting

Before you begin

Before configuring rate limiting for a RACL, configure an IPv4 or IPv6 ACL.

Procedure

  1. In privileged EXEC mode, enter global configuration mode.
    device# configure terminal
  2. Create a class map.
    device(config)# class cp-cmap
  3. Create a match statement for the RACL.
    device(config-classmap)# match access-group racl-1
  4. Access global configuration mode.
    device(config-classmap)# exit
  5. Create a policy map.
    device(config)# policy-map cp-pmap
  6. Add the class map to the policy map and access policymap-class configuration mode.
    device(config-policymap)#class cp-cmap
  7. Define the action on the classified traffic.
    device(config-policymap-class)# police cir 121212
    This step specifies the committed information rate of 121,212 bps.
  8. Access global configuration mode.
    device(config-policymap-class)# exit
    device(config-policymap)# exit
    
  9. Access control-plane configuration mode.
    device(config)# control-plane
  10. Apply the policy map to the CPU control plane.
    device(config-control-plane)# service-policy in cp-pmap
  11. Access privileged EXEC mode.
    device(config-control-plane)# end
  12. Verify the configuration.
    device# show policy-map control-plane
    Ingress Direction :
    Policy-Map cp-pmap
      Class cp-cmap
       matches 0 packets 0 bytes
       Police cir 121212
        Stats:
          Operational cir:121212 cbs:0 eir:0 ebs:0
          Conform Byte:0 Exceed Byte:0 Violate Byte:0
    

Example

The following example shows the steps in the previous configuration.

device# configure terminal
device(config)# class cp-cmap
device(config-classmap)# match access-group racl-1
device(config-classmap)# exit
device(config)# policy-map cp-pmap
device(config-policymap)# class cp-cmap
device(config-policymap-class)# police cir 121212
device(config-policymap-class)# exit
device(config-policymap)# exit
device(config)# control-plane
device(config-control-plane)# service-policy in cp-pmap
device(config-control-plane)# end
device# show policy-map control-plane