Cisco Catalyst 4500 Series, Software Configuration Manual

Page: 1139 / 2086

44-43
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 44 Configuring Quality of Service
Configuring VSS QoS
Example 2.
This example assumes there are multiple users (identified by source IP address) on subnets 192.168.10.*
and 172.20.55.*. The first requirement is to police with a CIR of 500Kbps and a PIR of 650Kbps on any
TCP traffic originating from 192 network to any destination at any given time. The
exceed action
keyword marks down the dscp value to 32. The second requirement is to police per-user traffic
originating from 172 network to CIR of 2Mbps and unconditionally mark the traffic with dscp 10.
Step 1: Define an ACL to match traffic with specified source address.
Switch(config)# ip access-list extended UserGroup1
Switch(config-ext-nacl)# permit ip 19 2.168.10.0 0.0.0.255 any
Switch(config-ext-nacl)# exit
Switch(config)# ip access-list extended UserGroup2
Switch(config-ext-nacl)# permit ip 172.20.55.0 0.0.0.255 any
Switch(config-ext-nacl)# exit
Switch(config)#
Step 2: Define a flow record to create flows with source address as key.
Switch(config)# flow record r1
Switch(config-flow-record)# match ipv4 source address
Switch(config-flow-record)# match ipv4 destination address
Switch(config-flow-record)# match transport tcp source-port
Switch(config-flow-record)# match transport tcp destination-port
Switch(config-flow-record)# exit
Switch(config)# flow record r2
Switch(config-flow-record)# match ipv4 source address
Switch(config-flow-record)# exit
Switch(config)#
Step 3: Configure classmap to match on the UserGroup1 and specify flow record definition for flow
creation.
Switch(config)# class-map match-all c1
Switch(config-cmap)# match access-group name UserGroup1
Switch(config-cmap)# match flow record r1
Switch(config-cmap)# exit
Switch(config)# class-map match-all c2
Switch(config-cmap)# match access-group name UserGroup2
Switch(config-cmap)# match flow record r2
Switch(config-cmap)# exit
Switch(config)#
Step 4: Configure flow based QoS policy-map with microflow policing action for the matching traffic.
Switch(config)# policy-map p1
Switch(config-pmap)# class c1
Switch(config-pmap-c)# police cir 500k pir 650k
Switch(config-pmap-c-police)# conform-action transmit
Switch(config-pmap-c-police)# exceed-action set-dscp-transmit 32
Switch(config-pmap-c-police)# violate-action drop
Switch(config-pmap-c-police)# exit
Switch(config-pmap-c)# exit
Switch(config-pmap)# class c2
Switch(config-pmap-c)# set dscp 10
Switch(config-pmap-c)# police cir 2m
Switch(config-pmap-c-police)# conform-action transmit
Switch(config-pmap-c-police)# exceed-action drop
Switch(config-pmap-c-police)# exit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Step 5: Attach flow QoS policy to the interface.