Cisco IE 4000, Software Configuration Manual

Page: 615 / 1066

611
Configuring QoS
Configuring QoS

On an 802.1Q tunnel port, you can use only an input policy map with Layer 2 classification based on MAC ACLs to
classify traffic. Input policy maps with Layer 3 classification or with Layer 2 classification based on CoS or VLAN ID
are not supported on tunnel ports.

Input policy maps support policing and marking, not scheduling or queuing. You cannot configure bandwidth ,
priority , queue-limit , or shape average in input policy maps.
These sections describe how to configure different types of input policy maps:

Configuring Input Policy Maps with Individual Policing, page 611

Configuring Input Policy Maps with Aggregate Policing, page 617

Configuring Input Policy Maps with Marking, page 622

Configuring Per-Port Per-VLAN QoS with Hierarchical Input Policy Maps, page 623
Configuring Input Policy Maps with Individual Policing
You use the police policy-map class configuration command to configure individual policers to define the committed rate
limitations, committed burst size limitations of the traffic, and the action to take for a class of traffic.
Follow these guidelines when configuring individual policers:

Policing is supported only on input policy maps.

The switch supports a maximum of 229 policers. (228 user-configurable policers and 1 policer reserved for internal
use).

When CPU protection is enabled (the default), you can configure 45 ingress policers per port. If you disable CPU
protection by entering the
no policer cpu uni all global configuration command and reloading the switch, you can
configure a maximum of 63 policers per port (62 on every 4th port) for user-defined classes and one for
class-default. You can enter the
show policer cpu uni-eni { drop | rate } privileged EXEC command to see if CPU
protection is enabled.

When you use a table map for police exceed-action in an input policy map, the protocol type of the map from type
of action must be the same as the protocol type of the associated classification. For example, if the associated class
map represents an IP classification, the
map from type of action that references the table map must be dscp or
precedence . If the associated class map represents a non-IP classification, the map from type of action that
references the table map must be cos .

2-rate, 3-color policing is supported only on input policy maps; 1-rate, 2-color policing is supported on both input
and output policy maps.

The number of policer instances on the switch can be 1024 minus 1 more than the number interfaces. The switch
supports a maximum of 256 policer profiles.

If you do not configure a violate-action, by default the violate class is assigned the same action as the exceed-action.
Beginning in privileged EXEC mode, follow these steps to create an input policy map with individual policing: