Cisco 4500M Software Manual page 413

Chapter 29 Configuring QoS
Hierarchical policers
You can tie flow policers with the existing policers to create dual policing rates on an interface. For
example, using dual policing, you can limit all incoming traffic rates on a given interface to 50 Mbps
and can limit the rate of each flow that is part of this traffic to 2 Mbps.
You can configure hierarchical policers with the service-policy policy-map config command. A policy
map is termed flow-based if the class map it uses matches any of the flow-based match criteria
(such as match flow ip source-address). Each child policy map inherits all the match access-group
commands of the parent.
Note You can configure only flow-based policy maps as child policy maps. A parent policy map cannot be a
flow-based policy map. Both the child policy map and parent policy map must have match-all in their
class-map configuration.
To configure a flow-based policy map as a child of an individual or aggregate policer, perform this task:
Command
Step 1
Switch(config)# policy-map policy_name
Step 2
Switch(config-pmap)# class class_name
Step 3
Switch(config-flow-cache)# service-policy
service_policy_name
This example shows how to create a hierarchical policy map. A policy map with the name
aggregate-policy has a class map with the name aggregate-class. A flow-based policy map with the name
flow-policy is attached to this policy map as a child policy map.
Switch(config)#
Switch(config)# policy-map aggregate-policy
Switch(config-pmap)# class aggregate-class
Switch(config-pmap-c)# service-policy flow-policy
Switch(config-pmap-c)# end
Switch#
In the following example, traffic in the IP address range of 101.237.0.0 to 101.237.255.255 is policed to
50 Mbps. Flows ranging from 101.237.10.0 to 101.237.10.255 are individually policed to a rate of 2
Mbps. This traffic goes through two policers: the aggregate policer and the other flow-based policer.
OL-6696-01
Class-map: c1 (match-all)
2965072 packets
Match: flow ip destination-address
police: Per-interface
Conform: 6105636 bytes Exceed: 476652528 bytes
Class-map: class-default (match-any)
0 packets
Match: any
0 packets
Purpose
Specifies the individual or aggregate
policy-map name.
Specifies the class-map name of this policy
map.
Specifies the name of the flow-based policy
map.
Software Configuration Guide—Release 12.2(25)EW
Configuring QoS
29-37