PurposeCommand or Action
•
0 to 268435456 pps (for Cisco Nexus 9300 and
9500 Series and 3164Q, 31128PQ, 3232C, and
3264Q switches)
•
police [cir] {cir-rate [rate-type]} [bc]
burst-size [burst-size-type]
•
police [cir] {cir-rate [rate-type]]}
conform transmit [violate drop]
•
0 to 80000000000 bps/gbps/kbps/mbps (for Cisco
Nexus 9200 Series switches)
Example:
switch(config-pmap-c)# police cir
52000 bc 1000 packets
Beginning with Cisco NX-OS Release
7.0(3)I4(1), the CIR rate range starts with 0.
In previous releases, the CIR rate range starts
with 1. A value of 0 drops the packet.
Note
The committed burst (BC) range is as follows:
Example:
switch(config-pmap-c)# police cir
3400 kbps bc 200 kbytes
•
1 to 1073741 packets (for Cisco Nexus 9300 and
9500 Series and 3164Q, 31128PQ, 3232C, and
3264Q switches)
•
1 to 512000000 bytes/kbytes/mbytes (for Cisco
Nexus 9200 Series switches)
The conform transmit action transmits the packet.
You can specify the BC and conform action
for the same CIR.
Note
(Optional)
Specifies the threshold value for dropped packets and
generates a syslog if the drop count exceeds the
logging drop threshold [drop-count [level
syslog-level]]
Example:
switch(config-pmap-c)# logging drop
threshold 100
Step 5
configured threshold. The range for the drop-count
argument is from 1 to 8000000000 bytes. The range
for the syslog-level argument is from 1 to 7, and the
default level is 4.
(Optional)
Specifies the 802.1Q class of service (CoS) value. The
range is from 0 to 7. The default value is 0.
set cos cos-value
Example:
switch(config-pmap-c)# set cos 1
Step 6
Exits policy map class configuration mode.exit
Example:
switch(config-pmap-c)# exit
switch(config-pmap)#
Step 7
Exits policy map configuration mode.exit
Example:
switch(config-pmap)# exit
switch(config)#
Step 8
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
130
Configuring Control Plane Policing
Configuring a Control Plane Policy Map