611
Configuring QoS
Configuring QoS
On an 802.1Q tunnel port, you can use only an input policy map with Layer 2 classification based on MAC ACLs to
classify traffic. Input policy maps with Layer 3 classification or with Layer 2 classification based on CoS or VLAN ID
are not supported on tunnel ports.
Input policy maps support policing and marking, not scheduling or queuing. You cannot configure
bandwidth
,
priority
,
queue-limit
, or
shape average
in input policy maps.
These sections describe how to configure different types of input policy maps:
Configuring Input Policy Maps with Individual Policing, page 611
Configuring Input Policy Maps with Aggregate Policing, page 617
Configuring Input Policy Maps with Marking, page 622
Configuring Per-Port Per-VLAN QoS with Hierarchical Input Policy Maps, page 623
Configuring Input Policy Maps with Individual Policing
You use the
police
policy-map class configuration command to configure individual policers to define the committed rate
limitations, committed burst size limitations of the traffic, and the action to take for a class of traffic.
Follow these guidelines when configuring individual policers:
Policing is supported only on input policy maps.
The switch supports a maximum of 229 policers. (228 user-configurable policers and 1 policer reserved for internal
use).
When CPU protection is enabled (the default), you can configure 45 ingress policers per port. If you disable CPU
protection by entering the
no policer cpu uni all
global configuration command and reloading the switch, you can
configure a maximum of 63 policers per port (62 on every 4th port) for user-defined classes and one for
class-default. You can enter the
show policer cpu
uni-eni
{
drop
|
rate
} privileged EXEC command to see if CPU
protection is enabled.
When you use a table map for police exceed-action in an input policy map, the protocol type of the
map from
type
of action must be the same as the protocol type of the associated classification. For example, if the associated class
map represents an IP classification, the
map from
type of action that references the table map must be
dscp
or
precedence
. If the associated class map represents a non-IP classification, the
map from
type of action that
references the table map must be
cos
.
2-rate, 3-color policing is supported only on input policy maps; 1-rate, 2-color policing is supported on both input
and output policy maps.
The number of policer instances on the switch can be 1024 minus 1 more than the number interfaces. The switch
supports a maximum of 256 policer profiles.
If you do not configure a violate-action, by default the violate class is assigned the same action as the exceed-action.
Beginning in privileged EXEC mode, follow these steps to create an input policy map with individual policing:
Содержание IE 4000
Страница 12: ...8 Configuration Overview Default Settings After Initial Switch Configuration ...
Страница 52: ...48 Configuring Interfaces Monitoring and Maintaining the Interfaces ...
Страница 108: ...104 Configuring Switch Clusters Additional References ...
Страница 128: ...124 Performing Switch Administration Additional References ...
Страница 130: ...126 Configuring PTP ...
Страница 140: ...136 Configuring CIP Additional References ...
Страница 146: ...142 Configuring SDM Templates Configuration Examples for Configuring SDM Templates ...
Страница 192: ...188 Configuring Switch Based Authentication Additional References ...
Страница 244: ...240 Configuring IEEE 802 1x Port Based Authentication Additional References ...
Страница 274: ...270 Configuring SGT Exchange Protocol over TCP SXP and Layer 3 Transport Configuring Cisco TrustSec Caching ...
Страница 298: ...294 Configuring VLANs Additional References ...
Страница 336: ...332 Configuring STP Additional References ...
Страница 408: ...404 Configuring DHCP Additional References ...
Страница 450: ...446 Configuring IGMP Snooping and MVR Additional References ...
Страница 490: ...486 Configuring SPAN and RSPAN Additional References ...
Страница 502: ...498 Configuring Layer 2 NAT ...
Страница 559: ...555 Configuring Network Security with ACLs How to Configure Network Security with ACLs Creating a Numbered Extended ACL ...
Страница 770: ...766 Configuring IPv6 MLD Snooping Related Documents ...
Страница 930: ...926 Configuring IP Unicast Routing Related Documents ...
Страница 956: ...952 Configuring IPv6 Unicast Routing Configuring IPv6 network 2010 AB8 2 48 network 2010 AB8 3 48 exit address family ...
Страница 976: ...972 Configuring Cisco IOS IP SLAs Operations Additional References ...
Страница 978: ...974 Dying Gasp ...
Страница 990: ...986 Configuring Enhanced Object Tracking Monitoring Enhanced Object Tracking ...
Страница 994: ...990 Configuring MODBUS TCP Displaying MODBUS TCP Information ...
Страница 996: ...992 Ethernet CFM ...
Страница 1030: ...1026 Working with the Cisco IOS File System Configuration Files and Software Images Working with Software Images ...
Страница 1066: ...1062 Using an SD Card SD Card Alarms ...