Cisco help - ingress policing on a 2950t

CoXeY · 9th February 2007

Hi all,

Firstly let me say that I am well out of my depth with all things Cisco, so when I say that I need to setup ingress policing on a Cisco 2950t Catalyst switch, it is a very daunting task indeed!

None the less, the show must go on and as such this is what must be done! (this is where you guys come in

)

So...

I have a brand new Cisco 2950t switch sitting in front of me here with what looks like version 12.1 of IOS installed. My preliminary research into the subject has revealed that i need to use the Enhanced Image version of IOS in order to get the job done which brings me neatly to my first question - how do i determine if i have the EI IOS installed and enabled?

Thanks
Dan.

JamieBeeston · 9th February 2007

You ask yourself, did you pay £4-500 for £x000 for the switch..

J

CoXeY · 9th February 2007

So the chances are that IE is not installed, but does this mean i cannot use ingress policing to throttle bandwidth?

JamieBeeston · 9th February 2007

Indeed,

You can limit the ports to 10/100/1000 and that's it at the switch level without the enhanced IOS!

10 months to get round to Port Limiting eh CoXeY, after all the work v-Spec put in too

Good luck with it.

J

PaulC · 9th February 2007

To determine if you have the Base (IP) image or the Enhanced you can run the "sh version" command, it will list which version it is.

The 2950-24T's do rate limiting, not very granular but they will do it in 1Mbps increments, I've tried this but never put it into production so I'm not sure on the performance impact.

http://inconcepts.biz/cr/iosratelimit.html

othellotech · 10th February 2007

Quote:

Originally Posted by PaulC

The 2950-24T's do rate limiting, not very granular but they will do it in 1Mbps increments, I've tried this but never put it into production so I'm not sure on the performance impact.

It doesnt seem to work properly on the 295x series, but is ok on the 297x and the 365x units.

alex_xifos · 9th December 2007

I tried it about a year ago on a 2950T. I could get it to work on the two GigE ports but not on the 10/100's without a big performance hit.

Seems to work alright on the newer Cisco 2960's though.

On the 2950's it seems to destroy the processor which causes non-fundamental processes to stop. ie SNMP and others.

gump · 10th December 2007

The 2950T-24 should have EMI IOS as standard, however IIIRC the 2950T-48 is SMI only.

From my testing the 2950's did not behave as expected while the 2960 and 3560 were fine, the 3560/3750 also allow for more granularity than the 1mbps on 2950.