Cisco Nexus 9000 Series Configuration Manual page 75

Configuring Classification
Command or Action
Step 2 ip access-list acl-name
Example:
switch(config)# ip access-list acl-01
switch(config-acl)
Step 3 [ sequence-number ] { permit | deny } protocol {
source-ip-prefix | source-ip-mask } { destination-ip-prefix
| destination-ip-mask } [ dscp dscp-value dscp-mask 0-63
]
Example:
switch(config-acl)# 10 permit ip 10.1.1.1/24
20.1.1.2/24 dscp 33 dscp-mask 33
Step 4
exit
Example:
switch(config-acl)# exit
switch(config)#
Step 5 class-map [type qos] [match-any | match-all] class-name
Example:
switch(config)# class-map type qos match-any
class_dscp_mask
switch(config-cmap-qos)#
Step 6 match access-list acl-name
Example:
switch(config-cmap-qos)# match access-list acl-01
switch(config-cmap-qos)#
Example
In the following example, an ACL looks at traffic that is sent from subnet 10.1.1.0 to subnet 20.1.1.0.
The ACL also checks for traffic with DSCP 33, and any subsequent DSCP values from 33 through
63, with a mask value of 30. The ACL is set to a class map that is matching this ACL for further
QoS operations.
switch# configure terminal
switch(config)# ip access-list acl-01
switch(config-acl)# 10 permit ip 10.1.1.1/24 20.1.1.2/24 dscp 33 dscp-mask 30
switch(config-acl)# exit
switch(config)# class-map type qos match-any class_dscp_mask
switch(config-cmap-qos)# match access-list acl-01
Purpose
Enters the ACL configuration mode and creates an ACL
with the entered name.
Creates an ACL entry that matches or filters traffic that is
based on a DSCP wildcard bit mask.
The sequence-number argument can be a whole number
from 1 through 4294967295.
dscp dscp-value: Match packets with a specific DSCP value.
dscp-mask dscp-mask-value: Configures the DSCP
wildcard mask which matches on any bit in the DSCP value
to filter traffic. Range is from 0 to 0x3F.
Exits ACL configuration mode and enters global
configuration mode.
Creates or accesses the class map that is named by the
class-name variable and enters the class-map mode. The
class-map name can contain alphabetic, hyphen, or
underscore characters, and can be up to 40 characters.
Configures the traffic class by matching packets that are
based on the IP access list.
Cisco Nexus 9000 Series NX-OS Quality of Service Configuration Guide, Release 7.x
Configuring a DSCP Wildcard Mask
61