Cisco Catalyst 4500 Series Configuration Manual page 525

Chapter 2
The following example shows two active flows on the Fast Ethernet interface 6/1 with destination
addresses of 192.168.20.20 and 192.168.20.21. The following example shows how to maintain each flow
to 1 Mbps with an allowed burst value of 9000 bytes:
Switch# configure terminal
Enter configuration commands, one per line.
Switch(config)# class-map c1
Switch(config-cmap)# match flow ip destination-address
Switch(config-cmap)# exit
Switch(config)# policy-map p1
Switch(config-pmap)# class c1
Switch(config-pmap-c)# police 1000000 9000
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface fastethernet6/1
Switch(config-if)# service-policy input p1
Switch(config-if)# end
Switch# write memory
Switch# show policy-map interface
FastEthernet6/1
Service-policy input: p1
Class-map: c1 (match-all)
Class-map: class-default (match-any)
Switch#
Assume there are two active flows as shown below on the Fast Ethernet interface 6/1:
SrcIp
--------------------------------------------------------
192.168.10.10
192.168.10.10
With the following configuration, each flow is policed to a 1000000 bps with an allowed 9000-byte burst
value.
Note If you use the match flow ip source-address|destination-address command, these two flows are
consolidated into one flow because they have the same source and destination address.
Switch# conf terminal
Enter configuration commands, one per line.
Switch(config)# class-map c1
Switch(config-cmap)# match flow ip source-address ip destination-address ip protocol l4
source-port l4 destination-port
Switch(config-cmap)# exit
Switch(config)# policy-map p1
Switch(config-pmap)# class c1
Switch(config-pmap-c)# police 1000000 9000
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface fastEthernet 6/1
2965072 packets
Match: flow ip destination-address
police: Per-interface
Conform: 6105636 bytes Exceed: 476652528 bytes
0 packets
Match: any
0 packets
DstIp
192.168.20.20
192.168.20.20
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
End with CNTL/Z.
IpProt SrcL4Port DstL4Port
20 6789 81
20 6789 21
End with CNTL/Z.
match flow ip
2-485