# QoS Traffic Policing Explained

**URL:** https://forum.networklessons.com/t/qos-traffic-policing-explained/995
**Category:** Lessons Discussion
**Created:** [December 26, 2016, 5:48pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995 "2016-12-26T17:48:04Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 26, 2016, 5:48pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/1 "2016-12-26T17:48:04Z")

</div>

This topic is to discuss the following lesson:

> **[QoS Traffic Policing Explained](https://networklessons.com/quality-of-service/qos-traffic-policing-explained)**
>
> In this lesson, we'll explain single rate, two-color, dual token bucket with single/dual rates policing, CIR vs PIR and more.

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [October 22, 2013, 12:10pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/2 "2013-10-22T12:10:03Z")

</div>

Very Nice lesson. Appreciate it!

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [February 18, 2014, 1:30am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/3 "2014-02-18T01:30:27Z")

</div>

how about hierarchical tocken bucket (HTB)? how many bucket that we use in HTB, and how the policier take the token from the bucket

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [April 2, 2014, 2:01am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/4 "2014-04-02T02:01:21Z")

</div>

Hi Rene,  
Nice explanation. I have one query though.  
With the single rate tri colour policing, if we don’t mention the bc and be values in the cli command, then they both are same. If we have a single burst which is exceeding bc value, then what will happen? Since be is also same as bc will the packet be dropped ( considering that this has violated ) or will the packet pass through if the number of tokens in bc+be is more than the burst arriving?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [May 1, 2014, 1:42pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/5 "2014-05-01T13:42:09Z")

</div>

Hi SP,

When you use single rate three colour policing and don’t specify the bc/be values then you will have two buckets that have the same size. When there are not enough tokens in the bc bucket, it will be empty and we will get some extra tokens from the be bucket…you are now exceeding.

If you send a burst and there are not enough tokens in the bc+be buckets combined, that’s when you are violating and your packet will be dropped.

---

<div class="post-metadata">

### Author: ![fpongrac1](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/f/e79b87/32.png) [@fpongrac1](https://forum.networklessons.com/u/fpongrac1)
#### Post date: [November 7, 2014, 3:47pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/6 "2014-11-07T15:47:46Z")

</div>

Hi Rene,

This lesson and your website in general is awesome! Just one thing, am I missing something or there is no lesson with configuration of this stuff? You mentioned “I will explain to you how to configure it on a Cisco router.”, but I can’t find it?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [November 8, 2014, 4:25pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/7 "2014-11-08T16:25:26Z")

</div>

Hi Franjo,

Glad to hear you like it! It seems I never did create the configuration tutorial for policing…I’ll create it tomorrow or monday 🙂

Rene

---

<div class="post-metadata">

### Author: ![wojgrz](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/8dc957/32.png) [@wojgrz](https://forum.networklessons.com/u/wojgrz)
#### Post date: [November 26, 2014, 12:55pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/8 "2014-11-26T12:55:13Z")

</div>

Hi Rene,

I look forward to configuaration tutorial mentioned by You. I hope it will happen soon 😉

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [November 26, 2014, 1:13pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/9 "2014-11-26T13:13:31Z")

</div>

Hi Wojciech,

It’s right here:

> **[QoS Policing Configuration Example](https://networklessons.com/quality-of-service/policing-configuration-example)**
>
> This lesson explains how to configure single rate two-color / three-color and dual rate three color policing on Cisco IOS routers.

Enjoy 🙂

---

<div class="post-metadata">

### Author: ![mmayamba](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/m/7cd45c/32.png) [@mmayamba](https://forum.networklessons.com/u/mmayamba)
#### Post date: [May 1, 2015, 6:49pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/10 "2015-05-01T18:49:49Z")

</div>

Very clear lesson, keep up the good work.

---

<div class="post-metadata">

### Author: ![wuchester](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/3be4f8/32.png) [@wuchester](https://forum.networklessons.com/u/wuchester)
#### Post date: [October 13, 2015, 12:12am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/11 "2015-10-13T00:12:15Z")

</div>

Nice lesson, and good explanation.

---

<div class="post-metadata">

### Author: ![xdelaranx](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/x/8dc957/32.png) [@xdelaranx](https://forum.networklessons.com/u/xdelaranx)
#### Post date: [December 21, 2015, 5:45pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/12 "2015-12-21T17:45:14Z")

</div>

I’ve been having trouble visualizing the different policing/bucket methods and this helped a lot. Great lesson!

---

<div class="post-metadata">

### Author: ![wdavis84](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/7ba0ec/32.png) [@wdavis84](https://forum.networklessons.com/u/wdavis84)
#### Post date: [January 15, 2016, 8:26am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/13 "2016-01-15T08:26:21Z")

</div>

Hi Rene,

In term of bandwidth control, shape will be better than policer? As Shape will buffer the exceeded traffic but policer will be drop once exceeded.

Davis

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [January 16, 2016, 2:52pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/14 "2016-01-16T14:52:59Z")

</div>

Hi Davis,

It depends what you want to achieve.

For example, the ISP will probably use policing since they don’t want to waste resources to buffer customer packets exceeding traffic.

The customer however probably doesn’t want packet drops so they will configure shaping to match the rate that the ISP polices at.

Also keep in mind that shaping adds delay so it’s not a good idea to use this for realtime traffic like VoIP.

Rene

---

<div class="post-metadata">

### Author: ![wdavis84](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/7ba0ec/32.png) [@wdavis84](https://forum.networklessons.com/u/wdavis84)
#### Post date: [January 18, 2016, 3:28am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/15 "2016-01-18T03:28:37Z")

</div>

Hi Rene,

Got it. Thanks!

Davis

---

<div class="post-metadata">

### Author: ![mjamil](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/m/a698b9/32.png) [@mjamil](https://forum.networklessons.com/u/mjamil)
#### Post date: [March 27, 2016, 9:46am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/16 "2016-03-27T09:46:18Z")

</div>

Hi Rene

Thanks for the clear explaination.  
However, can you explain the best practice which policer is use for which applications?

Example: single rate two Colour for voice traffic?

When will i use singe rate 3 color and when to use dual rate 3 Color?

Thanks

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [March 28, 2016, 12:33pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/17 "2016-03-28T12:33:45Z")

</div>

Hi Muhammad,

Policing is typically implemented by ISPs to limit the traffic of their customers so it will depend on the traffic contract that they sell you.

The single rate two color policer might be a bit unfair since it doesn’t allow bursting. With a CIR of 128kbps then you’ll only be able to reach 128kbps if you keep sending traffic non-stop.

The single rate three color policer allows bursting. Since data traffic is “bursty” by nature, this is probably a bit more fair to use. When your connection is idle, you can accumulate up to the Be and spend your Bc+Be when required.

The Dual rate three-color policer is useful when the ISP is selling more bandwidth than they actually can offer. It’s very unlikely that all customers are sending at maximum capacity all the time so they can offer you a “dual rate” contract. You might pay for a CIR of 128kbps and go up to 256kbps when the network is underutilized.

Rene

---

<div class="post-metadata">

### Author: ![wdavis84](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/7ba0ec/32.png) [@wdavis84](https://forum.networklessons.com/u/wdavis84)
#### Post date: [May 19, 2016, 3:27am UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/18 "2016-05-19T03:27:24Z")

</div>

Hi Rene,

How actually we calculate the BC and BE base on the CIR. What is the standard we should set?

Is the calculation below correct?

```
CAR (Police) formula:
Bc = CIR / 8 * Tc (Default Tc = 1.5 seconds)
Be = 2 * Bc

```

Davis

---

<div class="post-metadata">

### Author: ![andrew](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/andrew/32/645_2.png) [@andrew](https://forum.networklessons.com/u/andrew)
#### Post date: [May 19, 2016, 11:28pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/19 "2016-05-19T23:28:10Z")

</div>

Hi Davis,  
How Be is calculated depends on what type of policer is being used.

```auto
Single Rate, Two Color Policer
Bc = CIR/32
Be = 0

```

```auto
Single Rate, Three Color Policer
Bc = CIR/32
Be = Bc

```

```auto
Two Rate, Three Color Policer
Bc = CIR/32
Be = PIR/32 (Peak Information Rate)

```

---

<div class="post-metadata">

### Author: ![wdavis84](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/7ba0ec/32.png) [@wdavis84](https://forum.networklessons.com/u/wdavis84)
#### Post date: [May 23, 2016, 6:06pm UTC](https://forum.networklessons.com/t/qos-traffic-policing-explained/995/20 "2016-05-23T18:06:03Z")

</div>

Hi Andrew,

Will there any different for the result if we set CIR/32 vs CIR/8 for the BE for the Single Rate, Three color policer?

Davis

[Next page](https://forum.networklessons.com/t/qos-traffic-policing-explained/995.md?page=2)
