Configuring A Dscp Wildcard Mask - Cisco Nexus 9000 Series Configuration Manual

Configuring a DSCP Wildcard Mask

• D1
• E1
Configuring a DSCP Wildcard Mask
Use the DSCP wildcard mask feature to classify multiple DSCP values from a set of IP flows recognized by
an ACL and the DSCP value. Classification of IP information and DSCP values occurs in a more granular
way by using multiple parameters. With this granularity, you can treat these flows by policing them to protest
the rest of the traffic, or assign them to a qos-group for further QoS operations.
Note
Only Cisco Nexus 9504 switches with the Cisco Nexus 9464PX or 9464TX line card support the DSCP
wildcard mask feature.
SUMMARY STEPS
1. configure terminal
2. ip access-list acl-name
3. [ sequence-number ] { permit | deny } protocol { source-ip-prefix | source-ip-mask } { destination-ip-prefix
| destination-ip-mask } [ dscp dscp-value dscp-mask 0-63 ]
4. exit
5. class-map [type qos] [match-any | match-all] class-name
6. match access-list acl-name
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Cisco Nexus 9000 Series NX-OS Quality of Service Configuration Guide, Release 7.x
60
ip access-list extended D1
permit ip 10.1.0.0 0.0.255.255 any
permit ip 172.16.128.0 0.0.1.255 any
permit ip 192.168.17.0 0.0.0.255 any
deny ip 0.0.0.0 255.255.255.255 any
Note The last line in the example effectively becomes a PERMIT ALL statement and
results in the QoS ACL to permit all packets.
ip access-list extended E1
permit ip 0.0.0.0 255.255.255.255 any
/* deny is interpreted as a permit */
Purpose
Enters global configuration mode.
Configuring Classification