Cisco IE 4000, Software Configuration Manual

Page: 622 / 1066

618
Configuring QoS
Configuring QoS

When CPU protection is enabled (the default), you can configure 45 ingress policers per port. If you disable CPU
protection by entering the
no policer cpu uni all global configuration command and reloading the switch, you can
configure a maximum of 63 policers per port (62 on every 4th port) for user-defined classes and one for
class-default. You can enter the
show policer cpu uni-eni { drop | rate } privileged EXEC command to see if CPU
protection is enabled.

The maximum number of configured aggregate policers is 256.

The number of policer instances on the switch can be 1024 minus 1 more than the total number interfaces on the
switch. The switch supports a maximum of 256 policer profiles.

If you do not configure a violate-action, by default the violate class is assigned the same action as the exceed-action.

Only one policy map can use any specific aggregate policer. Aggregate policing cannot be used to aggregate
streams across multiple interfaces. You can use aggregate policing only to aggregate streams across multiple
classes in a policy map attached to an interface and to aggregate traffic streams across VLANs on a port in a
per-port, per-VLAN policy map.

When you use a table map for police exceed-action in an input policy map, the protocol type of the map from type
of action must be the same as the protocol type of the associated classification. For example, if the associated class
map represents an IP classification, the
map from type of action that references the table map must be either dscp
or precedence . If the associated class map represents a non-IP classification, the map from type of action that
references the table map must be cos .

Table maps are not supported for violate-action for aggregate policing unless a table map is configured for
exceed-action and no explicit action is configured for violate-action.
You can configure multiple conform and exceed actions conform, exceed, and violate actions simultaneously for an
aggregate policer as parameters in the
policer aggregate global configuration command, but you must enter the actions
in this order:

conform-action must be followed by drop or transmit or by set actions in this order:
set-qos-transmit
set-dscp-transmit or set-prec-transmit
set-cos-transmit

exceed-action must be followed by drop or transmit or by set actions in this order:
set-qos-transmit
set-dscp-transmit or set-prec-transmit
set-cos-transmit

violate-action must be followed by drop or transmit or by set actions in this order:
set-qos-transmit
set-dscp-transmit or set-prec-transmit
set-cos-transmit
Note: You do not configure aggregate policer conform-action, exceed-action, and violate-action in policy-map class
police configuration mode; you must enter all actions in a string. Consequently, if you enter multiple conform, exceed,
and violate actions, the command can become quite long, in which case it might be truncated and difficult to read.
Beginning in privileged EXEC mode, follow these steps to create an aggregate policer: