QoS Policing on one of interface.

Jason.Ku — Sat, 24 Feb 2024 19:09:39 GMT

I want to establish a 600Mb egress rate limit on a specific interface. Is this the correct procedure to implement and enforce the policy? Since I'm new to setting up QoS on Palo Alto devices, I would appreciate some guidance. Additionally, I'm curious if applying this QoS change will cause any service downtime. In Cisco systems, applying a service-policy to an interface immediately affects QoS, so I'm wondering if Palo Alto operates similarly.

Current Condition:

ethernet1/2 physical speed = 1 Gbps

There is no any existing no QoS on ethernet1/2

Future Condition:

Set the egress bandwidth limit to 600 Mbps on Ethernet 1/2 regardless of class type so that the overall bandwidth limit is 600 Mbps.

Here are the steps I am planning to implement.

Step 1. Create a QoS profile.

2. Create a QoS interface

Thank you!

Re: QoS Policing on one of interface.

reaper — Mon, 26 Feb 2024 14:23:13 GMT

this should work, but maybe try it like this:

in the profile, set the egress max to 1000 and then create a class4 (default) set to egress max 600

because all traffic is classified as class4 by default, the bw for all will be limited to 600, but it will allow you to easily make exceptions for other classes

topic Re: QoS Policing on one of interface. in General Topics

QoS Policing on one of interface.

Re: QoS Policing on one of interface.