Configuring RACL rate limiting

1. In privileged EXEC mode, enter global configuration mode.
   

   device# configure terminal

2. Create a class map.
   

   device(config)# class cp-cmap

3. Create a match statement for the RACL.
   

   device(config-classmap)# match access-group racl-1

4. Access global configuration mode.
   

   device(config-classmap)# exit

5. Create a policy map.
   

   device(config)# policy-map cp-pmap

6. Add the class map to the policy map and access policymap-class configuration mode.
   

   device(config-policymap)#class cp-cmap

7. Define the action on the classified traffic.
   

   device(config-policymap-class)# police cir 121212

   This step specifies the committed information rate of 121,212 bps.
8. Access global configuration mode.
   

   device(config-policymap-class)# exit
   device(config-policymap)# exit
   

9. Access control-plane configuration mode.
   

   device(config)# control-plane

10. Apply the policy map to the CPU control plane.
    

    device(config-control-plane)# service-policy in cp-pmap

11. Access privileged EXEC mode.
    

    device(config-control-plane)# end

12. Verify the configuration.
    

    device# show policy-map control-plane
    Ingress Direction :
    Policy-Map cp-pmap
      Class cp-cmap
       matches 0 packets 0 bytes
       Police cir 121212
        Stats:
          Operational cir:121212 cbs:0 eir:0 ebs:0
          Conform Byte:0 Exceed Byte:0 Violate Byte:0
    

The following example shows the steps in the previous configuration.

device# configure terminal
device(config)# class cp-cmap
device(config-classmap)# match access-group racl-1
device(config-classmap)# exit
device(config)# policy-map cp-pmap
device(config-policymap)# class cp-cmap
device(config-policymap-class)# police cir 121212
device(config-policymap-class)# exit
device(config-policymap)# exit
device(config)# control-plane
device(config-control-plane)# service-policy in cp-pmap
device(config-control-plane)# end
device# show policy-map control-plane