2-189
Catalyst 2350 Switch Command Reference
OL-19055-01
Chapter 2 Catalyst 2350 Switch Cisco IOS Commands
policy-map
Only one policy map per ingress port or SVI is supported. You can apply the same policy map to multiple
physical ports or SVIs.
You can apply a nonhierarchical policy maps to physical ports or to SVIs. However, you can only apply
a hierarchical policy map to SVIs.
A hierarchical policy map has two levels. The first level, the VLAN level, specifies the actions to be
taken against a traffic flow on an SVI. The second level, the interface level, specifies the actions to be
taken against the traffic on the physical ports that belong to the SVI and are specified in the
interface-level policy map.
In a primary VLAN-level policy map, you can only configure the trust state or set a new DSCP or IP
precedence value in the packet. In a secondary interface-level policy map, you can only configure
individual policers on physical ports that belong to the SVI.
After the hierarchical policy map is attached to an SVI, an interface-level policy map cannot be modified
or removed from the hierarchical policy map. A new interface-level policy map also cannot be added to
the hierarchical policy map. If you want these changes to occur, the hierarchical policy map must first
be removed from the SVI.
For more information about hierarchical policy maps, see the “Policing on SVIs” section in the
“Configuring QoS” chapter of the software configuration guide for this release.
Examples
This example shows how to create a policy map called
policy1
. When attached to the ingress port, it
matches all the incoming traffic defined in
class1
, sets the IP DSCP to 10, and polices the traffic at an
average rate of 1 Mb/s and bursts at 20 KB. Traffic exceeding the profile is marked down to a DSCP
value gotten from the policed-DSCP map and then sent.
Switch(config)#
policy-map policy1
Switch(config-pmap)#
class class1
Switch(config-pmap-c)#
set dscp 10
Switch(config-pmap-c)#
police 1000000 20000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)#
exit
This example shows how to configure multiple classes in a policy map called
policymap2
:
Switch(config)#
policy-map policymap2
Switch(config-pmap)#
class class1
Switch(config-pmap-c)#
set dscp 10
Switch(config-pmap-c)#
police 100000 20000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)#
exit
Switch(config-pmap)#
class class2
Switch(config-pmap-c)#
trust dscp
Switch(config-pmap-c)#
police 100000 20000 exceed-action drop
Switch(config-pmap-c)#
exit
Switch(config-pmap)#
class class3
Switch(config-pmap-c)#
set dscp 0 (no policer)
Switch(config-pmap-c)#
exit
This example shows how to create a hierarchical policy map and attach it to an SVI:
Switch(config)#
class-map cm-non-int
Switch(config-cmap)#
match access-group 101
Switch(config-cmap)#
exit
Switch(config)#
class-map cm-non-int-2
Switch(config-cmap)#
match access-group 102
Switch(config-cmap)#
exit
Switch(config)#
class-map cm-test-int
Switch(config-cmap)#
match input-interface gigabitethernet0/2 - gigabitethernet0/3
Switch(config-cmap)#
exit
Switch(config)#
policy-map pm-test-int
