36-51
Cisco Catalyst Blade Switch 3120 for HP Software Configuration Guide
OL-12247-01
Chapter 36 Configuring QoS
Configuring Standard QoS
To delete an existing policy map, use the no policy-map policy-map-name global configuration
command. To delete an existing class map, use the
no class
class-map-name policy-map configuration
command. To return to the untrusted state, use the no trust policy-map configuration command. To
remove an assigned DSCP or IP precedence value, use the no set {dscp new-dscp | ip precedence
new-precedence} policy-map configuration command. To remove an existing policer, use the no police
rate-bps burst-byte [exceed-action {drop | policed-dscp-transmit}] policy-map configuration
command. To remove the policy map and port association, use the no service-policy input
policy-map-name interface configuration command.
This example shows how to create a policy map and attach it to an ingress port. In the configuration, the
IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP
value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate of 48000
b/s and a normal burst size of 8000 bytes, its DSCP is marked down (based on the policed-DSCP map)
and sent:
Switch(config)#
access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)#
class-map ipclass1
Switch(config-cmap)#
match access-group 1
Switch(config-cmap)#
exit
Switch(config)#
policy-map flow1t
Switch(config-pmap)#
class ipclass1
Switch(config-pmap-c)#
trust dscp
Switch(config-pmap-c)#
police 1000000 8000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)#
exit
Switch(config-pmap)#
exit
Switch(config)#
interface gigabitethernet2/0/1
Switch(config-if)#
service-policy input flow1t
This example shows how to create a Layer 2 MAC ACL with two permit statements and attach it to an
ingress port. The first permit statement allows traffic from the host with MAC address 0001.0000.0001
destined for the host with MAC address 0002.0000.0001. The second permit statement allows only
Ethertype XNS-IDP traffic from the host with MAC address 0001.0000.0002 destined for the host with
MAC address 0002.0000.0002.
Switch(config)#
mac access-list extended maclist1
Switch(config-ext-mac)#
permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
Switch(config-ext-mac)#
permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
Switch(config-ext-mac)#
exit
Switch(config)#
mac access-list extended maclist2
Switch(config-ext-mac)#
permit 0001.0000.0003 0.0.0 0002.0000.0003 0.0.0
Switch(config-ext-mac)#
permit 0001.0000.0004 0.0.0 0002.0000.0004 0.0.0 aarp
Step 8
exit
Return to policy map configuration mode.
Step 9
exit
Return to global configuration mode.
Step 10
interface interface-id
Specify the port to attach to the policy map, and enter interface
configuration mode.
Valid interfaces include physical ports.
Step 11
service-policy input policy-map-name
Specify the policy-map name, and apply it to an ingress port.
Only one policy map per ingress port is supported.
Step 12
end
Return to privileged EXEC mode.
Step 13
show policy-map [policy-map-name [class
class-map-name]]
Verify your entries.
Step 14
copy running-config startup-config
(Optional) Save your entries in the configuration file.
Command
Purpose
