Cisco 3020 - Catalyst Blade Switch Configuration Manual page 568

Configuring Standard QoS
Command
Step 8 exit
Step 9 exit
Step 10 interface interface-id
Step 11
service-policy input policy-map-name
Step 12 end
Step 13 show policy-map [policy-map-name [class
class-map-name]]
Step 14
copy running-config startup-config
To delete an existing policy map, use the no policy-map policy-map-name global configuration
command. To delete an existing class map, use the no class class-map-name policy-map configuration
command. To return to the untrusted state, use the no trust policy-map configuration command. To
remove an assigned DSCP or IP precedence value, use the no set {dscp new-dscp | ip precedence
new-precedence} policy-map configuration command. To remove an existing policer, use the no police
rate-bps burst-byte [exceed-action {drop | policed-dscp-transmit}] policy-map configuration
command. To remove the policy map and port association, use the no service-policy input
policy-map-name interface configuration command.
This example shows how to create a policy map and attach it to an ingress port. In the configuration, the
IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP
value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate of 48000
bps and a normal burst size of 8000 bytes, its DSCP is marked down (based on the policed-DSCP map)
and sent:
Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)# class-map ipclass1
Switch(config-cmap)# match access-group 1
Switch(config-cmap)# exit
Switch(config)# policy-map flow1t
Switch(config-pmap)# class ipclass1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 8000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# service-policy input flow1t
This example shows how to create a Layer 2 MAC ACL with two permit statements and attach it to an
ingress port. The first permit statement allows traffic from the host with MAC address 0001.0000.0001
destined for the host with MAC address 0002.0000.0001. The second permit statement allows only
Ethertype XNS-IDP traffic from the host with MAC address 0001.0000.0002 destined for the host with
MAC address 0002.0000.0002.
Switch(config)# mac access-list extended maclist1
Switch(config-ext-mac)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
Switch(config-ext-mac)# exit
Switch(config)# mac access-list extended maclist2
Switch(config-ext-mac)# permit 0001.0000.0003 0.0.0 0002.0000.0003 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0004 0.0.0 0002.0000.0004 0.0.0 aarp
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
27-50
Purpose
Return to policy map configuration mode.
Return to global configuration mode.
Specify the port to attach to the policy map, and enter interface
configuration mode.
Valid interfaces include physical ports.
Specify the policy-map name, and apply it to an ingress port.
Only one policy map per ingress port is supported.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 27 Configuring QoS
OL-8915-01