3550 rate-limit by mac address

[brshoemak]

I know I can rate-limit by mac address on the router but I need to be able to rate-limit by mac address on a 3550 switch. I have searched here and on the web with little luck. Does anyone if or how to do it? Thanks.

 

[KiscoKid]

You can classify traffic using aa policy map whilst matching against source and/or destination MAC addresses.

Within this policy map, you can then deploy policing (very similar concept to rate limiting) to define the bit rate you want to allow for the MAC addresses previously identified.

Check out the following CCO link that explains this in greater detail:

http://www.cisco.com/en/US/products..._guide_chapter09186a008031ffed.html#wp1032145

 

[brshoemak]

Can't believe I didn't think about policy-mapping, I guess I didn't see the forest for the trees. Thanks.

 

[Jsteve]

mac access-list extended maclist
permit host 001c.aaaa.aaaa any
permit host 001c.bbbb.bbbb any
!
class-map macclass
match access-group name maclist
!
Policy-map macpol
class macclass
police 10000000 10000 exceed-action drop
!
int f0/1
service-policy input macpol