QoS Policing on one of interface.

[Jason.Ku]

I want to establish a 600Mb egress rate limit on a specific interface. Is this the correct procedure to implement and enforce the policy? Since I'm new to setting up QoS on Palo Alto devices, I would appreciate some guidance. Additionally, I'm curious if applying this QoS change will cause any service downtime. In Cisco systems, applying a service-policy to an interface immediately affects QoS, so I'm wondering if Palo Alto operates similarly.

Current Condition:

ethernet1/2 physical speed = 1 Gbps

There is no any existing no QoS on ethernet1/2

Future Condition:

Set the egress bandwidth limit to 600 Mbps on Ethernet 1/2 regardless of class type so that the overall bandwidth limit is 600 Mbps.

Here are the steps I am planning to implement.

Step 1.  Create a QoS profile.

2.  Create a QoS interface 

Thank you!

[reaper · Accepted solution]

this should work, but maybe try it like this:

in the profile, set the egress max to 1000 and then create a class4 (default) set to egress max 600

because all traffic is classified as class4 by default, the bw for all will be limited to 600, but it will allow you to easily make exceptions for other classes