Restrictions For Wired Application Visibility And Control - Cisco Catalyst 9500 Manual

Configuring Application Visibility and Control in a Wired Network
AVC Policy Format
Multiple set and police including
default
Hierarchical police
Hierarchical set and police

Restrictions for Wired Application Visibility and Control

• AVC and Encrypted Traffic Analytics (ETA) cannot be configured together at the same time on the same
• NBAR and transmit (Tx) Switched Port Analyzer (SPAN) is not supported on the same interface.
• Only one of the NBAR based QoS mechanisms are allowed to be attached to any port at the same time,
• The legacy WDAVC QoS limitations are still applicable:
interface.
either protocol based or attributes based. Only the following two attributes are supported:
• traffic-class
• business-relevance
• Only marking and policing are supported.
• Only physical interfaces are supported.
System Management Configuration Guide, Cisco IOS XE Fuji 16.8.x (Catalyst 9500 Switches)
Restrictions for Wired Application Visibility and Control
AVC Policy Example
policy-map webex-policy
class webex-class
set dscp af31
police 4000000
class class-webex-category
set dscp ef
police 6000000
class class-default
set dscp <>
policy-map webex-policy
class webex-class
police 5000000
service-policy client-in-police-only
policy-map client-in-police-only
class webex-class
police 100000
class class-webex-category
set dscp ef
police 200000
policy-map webex-policy
class class-default
police 1500000
service policy client-up-child
policy-map client-up-child
class webex-class
police 100000
set dscp ef
class class-webex-category
police 200000
set dscp af31
Direction
Ingress and egress
Ingress and egress
109