Cisco Catalyst 3750 Software Configuration Manual page 532

Configuring Standard QoS
This example shows how to create a Layer 2 MAC ACL with two permit statements. The first statement
allows traffic from the host with MAC address 0001.0000.0001 to the host with MAC
address 0002.0000.0001. The second statement allows only Ethertype XNS-IDP traffic from the host
with MAC address 0001.0000.0002 to the host with MAC address 0002.0000.0002.
Switch(config)# mac access-list extended maclist1
Switch(config-ext-macl)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
Switch(config-ext-macl)# permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
! (Note: all other access implicitly denied)
Classifying Ingress Traffic by Using Class Maps
You use the class-map global configuration command to create a class map for matching packets to the
class whose name you specify. The class map isolates a specific ingress traffic flow (class) from all other
traffic by defining the criteria to use to match against a specific flow. A match criterion is defined with
a match statement entered within the class-map configuration mode. Packets are checked against the
match criteria configured for a class map. If a packet matches the specified criteria, the packet is
considered a member of the class and is forwarded according to the QoS specifications set in the traffic
policy.
You cannot use ACL matches in service policies attached to ES ports.
Note
For information on how to classify egress traffic on an ES port, see the
Using Class Maps" section on page
Beginning in privileged EXEC mode, follow these steps to create a class map and to define the match
criterion to classify inbound traffic:
Command
Step 1
configure terminal
Step 2 access-list access-list-number {deny |
permit} source [source-wildcard]
or
access-list access-list-number {deny |
permit} protocol source [source-wildcard]
destination [destination-wildcard]
or
mac access-list extended name
{permit | deny} {host src-MAC-addr mask
| any | host dst-MAC-addr | dst-MAC-addr
mask} [type mask]
Catalyst 3750 Metro Switch Software Configuration Guide
26-52
26-78.
Purpose
Enter global configuration mode.
Create an IP standard or extended ACL for IP traffic or a Layer 2 MAC
ACL for non-IP traffic, repeating the command as many times as
necessary.
For more information, see the
ACLs" section on page 26-49.
Note When creating an access list, remember that, by default, the
end of the access list contains an implicit deny statement for
everything if it did not find a match before reaching the end.
Chapter 26
"Classifying Egress Traffic by
"Classifying Ingress Traffic by Using
Configuring QoS
78-15870-01