Cisco Catalyst 3560-X Series, Software Configuration Manual

Page: 976 / 1538

1-62
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring QoS
Configuring Standard QoS
To delete an existing policy map, use the no policy-map policy-map-name global configuration
command. To delete an existing class map, use the no class class-map-name policy-map configuration
command. To return to the untrusted state, use the no trust policy-map configuration command. To
remove an assigned DSCP or IP precedence value, use the no set { dscp new-dscp | ip precedence
new-precedence } policy-map configuration command. To remove an existing policer, use the no police
rate-bps burst-byte [ exceed-action { drop | policed-dscp-transmit }] policy-map configuration
command. To remove the policy map and port association, use the no service-policy input
policy-map-name interface configuration command.
This example shows how to create a policy map and attach it to an ingress port. In the configuration, the
IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP
value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate of 48000
b/s and a normal burst size of 8000 bytes, its DSCP is marked down (based on the policed-DSCP map)
and sent:
Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)# class-map ipclass1
Switch(config-cmap)# match access-group 1
Switch(config-cmap)# exit
Switch(config)# policy-map flow1t
Switch(config-pmap)# class ipclass1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 8000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet2/0/1
Switch(config-if)# service-policy input flow1t
This example shows how to create a Layer 2 MAC ACL with two permit statements and attach it to an
ingress port. The first permit statement allows traffic from the host with MAC address 0001.0000.0001
destined for the host with MAC address 0002.0000.0001. The second permit statement allows only
Ethertype XNS-IDP traffic from the host with MAC address 0001.0000.0002 destined for the host with
MAC address 0002.0000.0002.
Switch(config)#
mac access-list extended maclist1
Switch(config-ext-mac)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
Switch(config-ext-mac)#
exit
Switch(config)# mac access-list extended maclist2
Switch(config-ext-mac)# permit 0001.0000.0003 0.0.0 0002.0000.0003 0.0.0
Switch(config-ext-mac)#
permit 0001.0000.0004 0.0.0 0002.0000.0004 0.0.0 aarp
Step 8
exit Return to policy map configuration mode.
Step 9
exit Return to global configuration mode.
Step 10 interface interface-id Specify the port to attach to the policy map, and enter interface
configuration mode.
Valid interfaces include physical ports.
Step 11
service-policy input policy-map-name Specify the policy-map name, and apply it to an ingress port.
Only one policy map per ingress port is supported.
Step 12
end Return to privileged EXEC mode.
Step 13
show policy-map [ policy-map-name [ class
class-map-name ]]
Verify your entries.
Step 14 copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose