Corecess R1-SW24L2B, Руководство пользователя

Страница: 231 / 300

Configuring Security
10-21
Creating a Policy Map
To create a policy map and define the actions that you want the system to take for the particular
class of traffic, enter the following commands in the global configuration mode:
Table 10-9 Creating a policy map for packet filtering
Command Task
qos
1. Enter the QoS configuration mode.
policy-map
<policy-map-name>
2. Create a policy map and enter the policy-map configuration mode.
y
<policy-map-name>
: Name of a policy map to define.
class <class-name>
3. Specify the class to which the policy map applies and enter the
policy-map-class configuration mode.
y
<class-name>
: Class map name.
filter { deny | permit }
4. Specify whether to filter the traffic class or not.
y
deny
: Discards the class of traffic belonging to a policy map.
y
permit
:
Permits the class of traffic belonging to a policy map.
end
5. Return to the Privileged mode.
show policymap
[<policy-map-name>]
6. Verify the QoS policy.
y
<policy-map-name>
: Name of a policy map to verify.
qos
7. Save the configuration changes.
The following example shows how to define QoS policy that you want the system to filter that
particular class of traffic:
(config)# qos
(config-qos)# policy-map filter-policy
(config-pmap)# class class101
(config-pmap-c)# filter deny
(config-pmap-c)# end
# show policymap filter-policy
PolicyMap
--------------------------------------------------
Name : filter-policy
Linked ClassMap : class101
Action : Deny
# write memory
Building Configuration...
[OK]