I’m having a bit of an issue with our setup: 2x Nexus switches in VPC, performing QoS policing. I notice that QoS only applies in one direction, (upload from the clients’ view) and don’t see the reason yet.
Here’s a sample of my config for a client VLAN:
IP access list VLAN109 10 permit ip any any vlan 109 class-map type qos match-all VLAN109 match access-group name VLAN109 policy-map type qos Networkx class VLAN109 police cir 50 mbps bc 200 ms conform transmit violate drop interface port-channel46 switchport mode trunk switchport trunk allowed vlan 1-9,11-19,21-29,31-4094 spanning-tree port type normal mtu 9216 service-policy type qos input Networkx no-stats service-policy type qos output Networkx no-stats vpc 46 hardware access-list tcam region vacl 0 hardware access-list tcam region racl 256 hardware access-list tcam region e-racl 0 hardware access-list tcam region qos 512 hardware access-list tcam region e-qos 256
What am I missing here? I’ve had a similar setup before and both egress and ingress were policed as intended. Looking forward to your feedback!